last executing test programs: 2m51.80171758s ago: executing program 0 (id=4305): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m50.924614394s ago: executing program 3 (id=4308): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80200) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x4, 0x1, 0xfffffffd, 0x683, 0x6}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m50.731529268s ago: executing program 3 (id=4309): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r7, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a264c70c398a54beba73370dff7be7db19f65f369fff79da9e212f29b2c4151605000000e547033712a2529ab4ced3", 0x2f}, {&(0x7f0000000880)="eb6780c30372e6f267cd8342ecb8c93dea63810e0fa4479d0482e031f85148f2830d8fed9f3ea71d7b40e36f998167222a71d0617610d2d7d38f8e90d71326220216f8d0692875f3a8756cff85", 0x4d}], 0x2}, 0x4) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xf, 0x1, '?'}, 0x0, 0x0}) preadv2(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x9, 0x0, 0xc) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01) r10 = open(&(0x7f0000000000)='./file0\x00', 0x101400, 0xf0) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000040)=0x7f, 0x4) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000100)=[0xc, 0x36]) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200c0040) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.677706743s ago: executing program 3 (id=4313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b", @ANYRES16]) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) mmap(&(0x7f0000180000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 2m49.624653053s ago: executing program 0 (id=4314): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x40}}, 0x20000844) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) listen(r6, 0x1004) r8 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r8, &(0x7f0000000000)={0x2020}, 0x96) close(r6) read$FUSE(r8, &(0x7f0000004340)={0x2020}, 0x2020) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r10, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m49.21663257s ago: executing program 0 (id=4315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@multicast, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @private0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, &(0x7f0000000140)={0x1, 0x3, [0xdf8, 0x5a0, 0x633, 0x9]}) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FREEZING\x00', 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000521c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040000) 2m49.073435472s ago: executing program 0 (id=4316): unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 2m48.900709768s ago: executing program 0 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000061e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 2m48.7089062s ago: executing program 3 (id=4319): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x118a, &(0x7f00000000c0)={0x0, 0x5d97, 0x80, 0x0, 0xee, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) read$dsp(r3, &(0x7f0000000040), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) 2m48.609905585s ago: executing program 0 (id=4320): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x1fff, 0x80000, 0x4ddf, 0x1}) 2m44.217047203s ago: executing program 3 (id=4329): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mincore(&(0x7f0000922000/0x2000)=nil, 0x2000, &(0x7f0000000dc0)=""/4096) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000693000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = dup2(r2, r1) syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$cgroup_subtree(r3, 0x0, 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) rename(&(0x7f0000000580)='./file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000019740)="63bd918aa5629eb0adc1521ac725ef20e8dc64744bc3eb", 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000197c0)="3b04", 0x2}], 0x1}}], 0x3, 0x48800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x63}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x58}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m40.784037542s ago: executing program 3 (id=4335): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2800) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r4, r4, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) 2m33.368896675s ago: executing program 32 (id=4320): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x1fff, 0x80000, 0x4ddf, 0x1}) 2m33.357486144s ago: executing program 4 (id=4352): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, 0x0, 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m31.052971273s ago: executing program 4 (id=4357): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "1ec3cc1d1933fabf", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "030006c819f38700"}, 0x28) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x10}}], 0x10, 0x1}, 0x8841) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000540)) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60040880}, 0x40c0080) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4bfe677774db65d2) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) 2m27.709598658s ago: executing program 4 (id=4364): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 2m26.813045732s ago: executing program 4 (id=4365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0xc0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m25.19885025s ago: executing program 33 (id=4335): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2800) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r4, r4, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) 2m23.62429199s ago: executing program 4 (id=4369): socket$inet(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7ffffd, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436", 0x95}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) 2m20.733289219s ago: executing program 4 (id=4376): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r4, r4, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 2m5.21246837s ago: executing program 34 (id=4376): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r4, r4, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 1m51.418308221s ago: executing program 5 (id=4443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) 1m51.149229921s ago: executing program 5 (id=4444): r0 = socket$packet(0x11, 0x2, 0x300) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r2, r3, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_vhci(0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x89e0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000a3635072ff54efd7e32aa2e9e95dbb44db4ad4cc4726dd29dceb1e5c669b4b5c0d72e009000000f1c7744aa4b0136085e740a99eda0e866564240a7fd88dbcaa00948c0a850b5041cde3a75b7074a3b2d9fd72c6e5a897ab7e58063ccbecc348fb2792cc4ad52cf2140054b5448f6cf48aaaff87d1f5fab342ec284f6b7b131ff77d856c7435d16b3e52c96c55a8d586a4f51f5ad8380ff07d59a1d25378e22e88989f43758c18e06ef5b0bcba9bcb48439482331c13ce614cfce90fa6e7ac76deed7d6f684c3d5004b575b527e3872832d1709aef5fcc356b", @ANYRES8, @ANYRES32=r4], 0xfe1a) 1m50.690426092s ago: executing program 5 (id=4445): r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r0, &(0x7f0000005480)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xff97, 0x80}}, {{&(0x7f0000002080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 1m50.2165066s ago: executing program 5 (id=4446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9902) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 1m46.945561942s ago: executing program 5 (id=4455): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1e, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) close_range(r3, 0xffffffffffffffff, 0x0) 1m43.219627993s ago: executing program 5 (id=4462): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 1m27.873256788s ago: executing program 35 (id=4462): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 1m16.368752643s ago: executing program 8 (id=4526): r0 = socket(0x2, 0x80802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x31, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7ffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r0, &(0x7f0000005480)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040881}}, {{&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 1m14.635471366s ago: executing program 8 (id=4530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008"], 0x64}}, 0x1000000) 1m14.401176963s ago: executing program 8 (id=4531): syz_open_dev$I2C(0x0, 0x0, 0x402) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0xd, "0a248c0291390e000000005e9c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r3, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x14, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(r4, &(0x7f0000000140)={0x14, &(0x7f0000000280)={0x0, 0xf, 0xc6, {0xc6, 0x5, "28d7b427080985c3eaa970438d4636fb4e73b30cb0d991f00e98fd3e083b7aec1641f532c09fcfc4d94926916640ec7d50d432cd186e03318653619244af7de18b9760aa88360a2fa8a57953a2262d091e44695af13ce707531ec2b12d65a454a7fcc958e9b86dc58abbc2ebce627d83382e6ac2b0322c034a73e89dad817dc8dc0a08a8ca4941f41a4f4a206536b3c339e933478a7d4ba3ded98eefbf0c3063d35a0376aa43a7f656deed6c511049e5804cafd3267c0bcb52190c7093dbe97acd86168f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x40, 0x2, 0x16, "2e8407eeb7331d1c144313fadc8e52b8db4d78a1b3f4"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x2a, {0x28, "4f80dd2a2344c0e083d29fd0280c25f6093a7c7b5ef1802523a891539eab92daded697a30053c4f2"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x1}}) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x102000100000d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) 1m11.010477026s ago: executing program 8 (id=4542): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001, 0x4}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) (fail_nth: 27) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) 1m7.3728739s ago: executing program 8 (id=4545): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x200000, 0x290000) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xa) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0xd) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="3dfe", 0x2}], 0x1}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r11, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r2}) 1m2.123361917s ago: executing program 8 (id=4550): unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x86d, &(0x7f00000000c0)={0x0, 0x4d15, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r6, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x40}}, 0x30) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 46.556390848s ago: executing program 36 (id=4550): unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x86d, &(0x7f00000000c0)={0x0, 0x4d15, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r6, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x40}}, 0x30) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 27.683528948s ago: executing program 6 (id=4613): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x3, 0x4}, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x2, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0xe, 0x3, 0x5ff, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x0, 0xa0, 0xb0, 0x9c, 0xf4}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8982, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0), 0x4) 24.184883457s ago: executing program 6 (id=4618): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0xc0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 22.216704164s ago: executing program 6 (id=4623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) syz_clone(0x12090000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4212, r4, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) r7 = dup(r2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000480)={0x9, 0x3, "6c16f9cdf18aa9e953ff2c42fbab65d261a2f4062cf84e8d1f5451152321e83bc7a601b616d5eb37c3cc8dd0d7a1a062c587f7931708f80ca6d615b1fc12e5c0ffa9818b390f8022ffc6f2e7337a06e2534b3c826e6026e83d3bc6debffe047887db321f635239e142d2c9a1374c8eeeb5ba6d84861cb30083ace5ccd9352a808607e6d726ee10ca4f95ca2d80be0e0730b30bd7b08736a71f416a5d61da5ed2d19fe07bdcff686ba08f957d45a2588fd16a925ead0b556fdf0d09d970a2b27f748b3f3cabb1535bdffaef0719001bdd412dcb026ad0a3ebde4afa6607f10650120ab3978484d0ae903e87e9fcd580aaba371865c0682ebe277350e4af87038d"}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 21.577209779s ago: executing program 6 (id=4626): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000000002100000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 20.941982919s ago: executing program 6 (id=4628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba1400000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2b", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.621839876s ago: executing program 6 (id=4630): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 15.424659176s ago: executing program 7 (id=4640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba1400000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2b", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.214469613s ago: executing program 7 (id=4642): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa140004"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 13.401084839s ago: executing program 7 (id=4647): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x990a269cb2d58133, 0x0, {0x7, 0x1f, 0x23c, 0xffffffffc4100f4c, 0x8006, 0x88, 0x80000001, 0xffeffffc, 0x0, 0x0, 0x10, 0x10ff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r5 = getegid() r6 = getpgrp(0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x7ffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46dba4090000000000002f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9ef1a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f70683fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacc0f71b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2000, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x5, 0x4, 0x8000, 0x6e66, r12, r13, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000c40)=0x5, 0x4) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="0ec79bd5ace8ab265bf3124e68d68453a919e00bee23903496695ef6d4acca159bb817d151ac6b8c2f47f3a521a5d0866ff9b7a3b466c7269862ef6bec5e76756096d113fcac813633b17007a7c3c33b472e491b2b55921821248aac84f81ae0f2bd4083c3f4b3087e4ada9fce59b40d3b45fcdd27fdc86d6dfb9869ef61944c22adff62eac2b909aef471220cc2acf63a6cecd2adbcbcea05e7965fa41d28373658599a6aa63300746813b62f7ddc36c0a563c1f1", 0xb5}, {&(0x7f0000000280)="7e5125bf4eacd6307e928b195adc565128b7552ac0261f74c8954766f735ceedcc41a50b9c54dafa030c11f3231c75a691bbf0b372355b042b3d6b451ad9831f44cba320e769eaca3c736ec8a711a337af44c703f4942e236df2be07a3357c1bc4e24d3f1578d63f977499e89d391e174abde375907b3c00e96db19ec82ea9d0b6bcabf84c303e42949c326b7de295033fb684a60f04995f403cf0768f3c5100853429d008c26e9f1ec4d6", 0xab}, {&(0x7f0000000340)="7c78b642aade7dcacdb7f121889bcfb48c8a55a86bf1f44aa665d56267163419ce3eae08ca385d7a18268f5e7c6fa5770d81ad5eb22ae3f41d00f4daa233ad6fcb37baa254bd7b7eaf9b0d5beee2aacfd1bb02ff01aef43b4c7a53af68757827771d7b149aa0666c811bce60492d10f95150e0cc877628896daede420e6179d8337e9ab918fd465fa6c145987ae03ba19fd2d0b161382af90f9b3785f31ce426b30f41a1c17746a1ec4d49193572936de4e9285b29d8a482dd342728db0a398b65f9160c99d0ac06ada936aaeac46dc054759a7429b675", 0xd7}, {&(0x7f0000000000)="187b9a678ea7d54b6fc5190ed0e74bb1a977791521b71d2630127840e02cb9a727db129c5f3b63adf3978292a78c1618b8fed0c42fd90c13e115397e8b", 0x3d}, {&(0x7f0000000440)="7009f2da473a41bbd1494d8d97c5d0165e8c051b7dfb3f67a19e74b797d3f078bc6072781c26ae40321e6559eda730642f3ef5ce893f88ec5b454fd9b5965fa1594ddeb1d65ed85005dd9ed007a84887c0508c8f734094e418147d8902fbb8a4c9cec234efc9030044", 0x69}, {&(0x7f00000004c0)="38d480a81bca14bc1e35c338653119bc1a6f97dd1a9e33e5866fa1143be36891b50730cf409b47e54692d23160666010241dd26bdfd533904feabe0da17d86eafec3f7a6c96f8ed23f0878323abc1735248601b1b5489d0ee1e366e5308b289cecd1dd3d7a84c0b54112c61a1712e50078bbb2882518402027c4eecd6bf8166dd50f4f269ae5e3b5d2db56278f41d7980b7dccad", 0x94}, {&(0x7f0000000580)="6dfe4ef056d1c48acafac849c9d621a7bb08f10bf8777c4199bed50865b391f783fd12ff7e1e254483bb313331b5add702b46d2633745cee6e1c5c474e29054a3ea605b73e2f0524cda3834e51c3e2e9ae6662e82df871cf931bad0d1de92767c0a8427e43ede24dda041a214702453e67abfc4ab15ef67bd28855d57483befdc12ce96d7ddbbaee953bc90ba4380980deb5582aa4133c925dcc0182847fa911bf0dbeaf4e46fb07c77ca639a0cb2902438aa03a9fd928f3ae736c72d5e8d8d107ab738612ec53b95e94cb48464a3028d8af80b5379791c35395fb6c15c36ea1a5dcf42107bb", 0xe6}, {&(0x7f00000000c0)="a16508fca25b8ad38e0cad172894d1baf0b343764e75ef1d4037d46d342811839eb92602577817542e52c38b", 0x2c}], 0x8, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, r14}}}], 0x58, 0x10}}, {{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000980)="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", 0xff}, {&(0x7f0000000a80)="43b1e1c20f5bec213e7a5be9d1ece2fe9d9e2e056b8abaa7f45a48ef6679398513652120e304d37235611d4bd2db5c4dd8ed7a89ee08ef8bb15554fd4db62176a0b2bc7f9ca6c50bf5f0c8e62891cfff28afe2def61269ef86e08860ef5b87db83cb10f0a6b7f63a48d3e67ac1206c75afe14c1dff466ad958172a5934fc55e79fe10f169b32a1b7e812887356d1ca7ba3f64263f90dfde568b7eef4b4fe4aea06a1a251235ee9ba9e48123e58164b91e207371200eb803456ddc1e69ef4ea239d7cdae396b8", 0xc6}], 0x2, 0x0, 0x0, 0x4801}}], 0x2, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0xfffffffffffffe55) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) ioctl$KVM_RUN(r15, 0xae80, 0x0) 13.329267818s ago: executing program 9 (id=4648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40002f001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) close(r3) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffd}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x248040, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "22d452f6dd78b596", "9e6150f84b826530afd7631149b17bb0", "a99412be", "45eb9a6f5a7eac2d"}, 0x28) writev(r1, &(0x7f0000000140), 0x10000165) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r7, 0x0, 0xf3a, 0x0) r8 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000680)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b", 0x3b}, {&(0x7f0000000280)="2b98dc815829066e0b71e2981ad0b2cad21d0e6f19a7e0c3ec9018808794040ed5d338b67359b9b45f97679c07a1d11baa96e6a3d3bd30ef72d7ae8dd381f39c8c4b3b725447907cea1f25b34a9bbaba6f9a66e16aba6d0bc0725b70d6f1726284a99d17c4bd4eba2a4b70559c01de6f1759a86ff6f9b887dd45fc2868656347bebf74f76150c0b6255c357e69705dc1360cf4ceafad7a1904e14cf4f711f3a4570ab5c8ea6e91bdd16220723063dd4ccb27fa9d23fd9266d43eb0002391e4d50b3eb7f2f669293e72a9a19c31ee3e00f8f536686a1f070080f9855243a17dceaf8780514d1891afb0", 0xe9}, {&(0x7f0000000040)="1c46ca65024fd2c36cc2bdd1be", 0xd}, {&(0x7f0000000800)="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", 0xbf6}], 0x4}, 0x48081) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9210000000000400140003007665742c527e27176ae9099468315f76000000020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 12.761306176s ago: executing program 7 (id=4650): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0x3}, 0x18) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 11.793764958s ago: executing program 7 (id=4653): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000013c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0xcc000) 11.476383291s ago: executing program 7 (id=4655): r0 = socket$inet(0x2, 0x1, 0x200) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r4], 0x1c}}, 0x20040000) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) lsm_set_self_attr(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="6d00000000000000e50b00000000000020000000000e00"], 0x20, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000200)=0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b80)="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", 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000500)={0xfffffffd, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 10.523834989s ago: executing program 37 (id=4655): r0 = socket$inet(0x2, 0x1, 0x200) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r4], 0x1c}}, 0x20040000) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) lsm_set_self_attr(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="6d00000000000000e50b00000000000020000000000e00"], 0x20, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000200)=0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b80)="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", 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000500)={0xfffffffd, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 10.47154393s ago: executing program 1 (id=4657): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa140004"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 10.182803395s ago: executing program 9 (id=4658): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f00000001c0)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0xcb}, 0x400, "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"}, 0x418, 0x1008}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x1c, 0x404, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000047c0000040042801400018006000600feffffff06000c00800a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0x6f, {0x6f, 0xf, "79db7ecfc4fe58a0da8a3648c87dabaaf8a656de38b42e1982be37a0eb4f20c0543fc4bcdfb5eac8f3683ca57457e2204cd6fb4a6adc88e69203db42d120df009843ff5c81c07b7108946827b6ab2056d5438eaa41719e07bfbcd01bd61b704dbe5acbd2e84a81d538aa7c4f14"}}, &(0x7f0000000640)={0x0, 0x3, 0x85, @string={0x85, 0x3, "b22ebe7c7ac84dbac3e0f616ef1693bb643ccf9a76ce8a56d8d8e1b3bbb8874657c69bc1a7ec89afc1dede0d49d7e2af0342ae9064930ec74dde9b13000917f55e10368d8330624a7913c24f1f6dc5b3afba9add1f2c78fbf7dbd29349177e959f31a7345c5342269dd102703699f5e7b0a837041aa0b0f559bb0f5e6a12118d659238"}}, &(0x7f0000000300)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x5, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0xcd, 0xd0, "fdf87e0a", "5d251718"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x10, 0x69, 0x5, 0x7, 0x6}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000007c0)={0x0, 0x3, 0xe0, "b9851289642f660dc5981117254ed1b165ef2bb1cb3f38be92fd2e1d076f68931f23f7bd514ce6f960ad8cdfb3ac7e4cadcc3095ed50fcdca8aa16a22695519cc235f9f0e6a26bae4b061e262c233c52a840a2d664b1ce12e6242d854d501f52812aaa14e415942b8ab58d6c979d2737522bf4b41d4e3b9bd20529982356e6f1e9de638ebaf4001646fbffb507797d957186a32baf5ec41fdcc2193d4be447d33e1ced80e569e9e9158537d50c58950ecdd065d7cc859d81b27f94a891865405fcfe78e05947156cb9be4bebd7ffc9f453b4d033ddaebebd886e26f7016bff16"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1e0, 0x80}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "08a5"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "14af"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xac}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x9}}) gettid() r7 = gettid() get_robust_list(r7, &(0x7f00000004c0)=&(0x7f0000000340)={&(0x7f0000000280)}, &(0x7f0000000380)=0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0x74) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000140)=@nullb, r8, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7.977316511s ago: executing program 1 (id=4660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x100007, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e1d, 0xfffffffe, @empty, 0x18}, 0x44) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x440c1) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) unshare(0x62040200) syz_usb_connect(0x4, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r7, 0x110, 0x6, 0x0, 0x0) unshare(0x40000400) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200f080000008cca90bc8269a46eaf1f4662a63673f7a4203f1d1f94063f2e9f7140671c4c1a830a0bc4087c841e90ecd5c8c597bd8fc303604102254824bc2673"], 0x0, 0x0}) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket(0xa, 0x3, 0x3a) 7.133591608s ago: executing program 2 (id=4661): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = gettid() r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x800, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r6, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) sendto(r7, &(0x7f0000000240)="cbfd6c81", 0x4, 0x40, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) inotify_add_watch(r8, 0x0, 0x81000123) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r9, &(0x7f0000001600)=""/4103, 0x1007, 0x97) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d6, 0x32}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) sched_setattr(r3, &(0x7f0000000180)={0x38, 0x0, 0x2, 0x0, 0x6, 0x7fff, 0x0, 0x2, 0x4, 0x401}, 0x0) connect$inet(r0, 0x0, 0x0) 7.125175s ago: executing program 9 (id=4662): socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x969, 0x6, 0x96, 0x9}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) unshare(0x22020600) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r2, 0x0, {0x1}, 0xfe}, 0x18) 6.853519925s ago: executing program 9 (id=4663): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1e, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) close_range(r3, 0xffffffffffffffff, 0x0) 5.533402756s ago: executing program 38 (id=4630): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x609cea4e, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2b, @private, 0x0, 0x1, 'wlc\x00', 0x37, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 5.047437253s ago: executing program 9 (id=4665): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0], 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="df2fbc61b38713ff22161b12b37044c6ecc625a08d91a93eb9be51e353b88b451505e7c7fac39e9c08bfcf9bc9fc616dcd5e517bf7d4bbcc7d620ee1089ceb847918f5b67c4aa4b507b7829feb14cae2d23be10872b432b64d278437ed5e0d76cf10700034722e2bbe0282d60b1db9d45d34a0f6c36f818b1a37522ff4f4585a6f8c936a6ec9a592071d83b335eb9d4ef456e86c3b20490f2ddf80ea48e0b47ae836e9ba"}, {&(0x7f0000000300)="7271754202e6ba8c4a061311c803c801f1f794753cd6a713a48c4d183b6e6bf5b9dfc426f463e86494dbfe06981aa0a4fee1d433d687728eeba5725dbc89c46de9c438fa18824f94446761a7c59ecf4d66dfac85d20fecef41215aba7033929fe655ce964721f14f8ebe27d9120f6a5163ada3e5e5c0fcddf59fc49daaed195cd5b937acfda6234beedd9c56e4ba33195dd01fff0317d155b00a834f20b83016a7d637b7f25a99abaf2969472615b04838aba58bca8d9da2f0c76f42f826a4e9da5a21d091336a69374136a5b68f178734d391460092b30e8ce836dc27d30e6565cf59973f343a2dd917cd057661e1f8"}, {&(0x7f0000000440)="bcc399f7465ef0e1c9eb47bb63df3d6ede2384bc5c74bf4ef9a65d5c2f5a478321578c702def5e6b47073408934267dae65354e49eed07625850479a27f5cd0277ccf76caa92a2803a9c8ce92e5c6bcf61c859fa0d90b3e944ade6d37e1c4d76b9f1f2b3eb8f7151d2e92c01bad45541a383b954cd5ab0bf42359f16803fca97667f96805788170952a6ab9334318cd67dfd48c68e83b0410a52791e1e04f4b628515191dd6649969637574d6d11815dd5c957851754af9ca54568c54202b702ca21fe42b5"}]}}], 0x400000000000294, 0x40015) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeaf1dedb252cc35c}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240000d4, &(0x7f0000000280)={0xa, 0x4e22, 0x1000000, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 4.739562298s ago: executing program 2 (id=4666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.957103824s ago: executing program 2 (id=4667): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x5922b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) mprotect(&(0x7f00000f9000/0x2000)=nil, 0x2000, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x7cc, 0x100005}) 3.740909673s ago: executing program 2 (id=4668): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r1], 0x44}}, 0x0) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, 0x0, 0x3b5c00, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r9 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r9, 0x0, 0x1c880) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), &(0x7f00000001c0)='%pS \x00'}, 0x20) 3.092794014s ago: executing program 1 (id=4669): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e9798d4ec856993d53b9038ab44fdb0", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3.045474308s ago: executing program 2 (id=4670): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0xc0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.681248039s ago: executing program 9 (id=4671): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mincore(&(0x7f0000922000/0x2000)=nil, 0x2000, &(0x7f0000000dc0)=""/4096) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000693000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = dup2(r2, r1) syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$cgroup_subtree(r3, 0x0, 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) rename(&(0x7f0000000580)='./file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x48800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x63}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x58}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 677.898148ms ago: executing program 2 (id=4672): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) syz_usb_disconnect(0xffffffffffffffff) close_range(0xffffffffffffffff, r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) syz_clone3(0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r6, 0x0) socket$tipc(0x1e, 0x5, 0x0) 430.457244ms ago: executing program 1 (id=4673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 236.236871ms ago: executing program 1 (id=4674): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 0s ago: executing program 1 (id=4675): openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r1, 0x1342e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18180000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ak_usb 3-1:0.0 can0: sending command failure: -22 [ 1353.454972][T21523] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1353.604169][T21523] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1353.692543][T21952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.714127][T21952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.823317][ T7464] usb 3-1: USB disconnect, device number 90 [ 1355.104822][T21974] QAT: failed to copy from user. [ 1355.302221][T21977] netlink: 'syz.1.4402': attribute type 9 has an invalid length. [ 1355.458706][ T5898] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1355.482179][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.723975][T21981] FAULT_INJECTION: forcing a failure. [ 1355.723975][T21981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.763655][T21981] CPU: 1 UID: 0 PID: 21981 Comm: syz.5.4403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.763691][T21981] Tainted: [L]=SOFTLOCKUP [ 1355.763699][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.763712][T21981] Call Trace: [ 1355.763721][T21981] [ 1355.763731][T21981] dump_stack_lvl+0xe8/0x150 [ 1355.763767][T21981] should_fail_ex+0x412/0x560 [ 1355.763798][T21981] _copy_from_user+0x2d/0xb0 [ 1355.763830][T21981] __copy_msghdr+0x3c5/0x5b0 [ 1355.763865][T21981] ___sys_sendmsg+0x213/0x360 [ 1355.763914][T21981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.763950][T21981] ? kstrtouint+0x6e/0xe0 [ 1355.763998][T21981] ? __fget_files+0x2a/0x420 [ 1355.764027][T21981] ? __fget_files+0x3a0/0x420 [ 1355.764065][T21981] __sys_sendmmsg+0x27c/0x4e0 [ 1355.764103][T21981] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1355.764132][T21981] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1355.764187][T21981] ? ksys_write+0x242/0x270 [ 1355.764211][T21981] ? __pfx_ksys_write+0x10/0x10 [ 1355.764239][T21981] __x64_sys_sendmmsg+0xa0/0xc0 [ 1355.764272][T21981] do_syscall_64+0x14d/0xf80 [ 1355.764291][T21981] ? trace_irq_disable+0x3b/0x150 [ 1355.764320][T21981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.764342][T21981] ? clear_bhb_loop+0x40/0x90 [ 1355.764368][T21981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.764389][T21981] RIP: 0033:0x7f74b0d9c799 [ 1355.764410][T21981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.764428][T21981] RSP: 002b:00007f74b1d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1355.764452][T21981] RAX: ffffffffffffffda RBX: 00007f74b1015fa0 RCX: 00007f74b0d9c799 [ 1355.764468][T21981] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 1355.764482][T21981] RBP: 00007f74b1d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.764496][T21981] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 1355.764510][T21981] R13: 00007f74b1016038 R14: 00007f74b1015fa0 R15: 00007f74b113fa48 [ 1355.764542][T21981] [ 1356.308777][ T5898] usb 6-1: can't set config #7, error -71 [ 1356.344503][ T5898] usb 6-1: USB disconnect, device number 3 [ 1356.944217][T21991] syz_tun: entered promiscuous mode [ 1356.966461][T21991] vlan2: entered promiscuous mode [ 1357.008023][ T7563] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1357.158027][ T7563] usb 6-1: Using ep0 maxpacket: 32 [ 1357.193269][ T7563] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1357.204244][ T7563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.253287][ T7563] usb 6-1: Product: syz [ 1357.260827][ T7563] usb 6-1: Manufacturer: syz [ 1357.306678][ T7563] usb 6-1: SerialNumber: syz [ 1357.419931][ T7563] usb 6-1: config 0 descriptor?? [ 1357.798986][ T7563] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1357.807461][ T7563] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1357.993568][ T7563] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1358.209540][ T7563] usb 6-1: USB disconnect, device number 4 [ 1358.313881][T22006] FAULT_INJECTION: forcing a failure. [ 1358.313881][T22006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.351646][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.2.4411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.351675][T22006] Tainted: [L]=SOFTLOCKUP [ 1358.351681][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1358.351691][T22006] Call Trace: [ 1358.351697][T22006] [ 1358.351704][T22006] dump_stack_lvl+0xe8/0x150 [ 1358.351729][T22006] should_fail_ex+0x412/0x560 [ 1358.351752][T22006] _copy_from_user+0x2d/0xb0 [ 1358.351776][T22006] ___sys_sendmsg+0x1c6/0x360 [ 1358.351803][T22006] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.351850][T22006] ? __fget_files+0x2a/0x420 [ 1358.351872][T22006] ? __fget_files+0x3a0/0x420 [ 1358.351900][T22006] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1358.351926][T22006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1358.351955][T22006] ? __pfx_ksys_write+0x10/0x10 [ 1358.351979][T22006] do_syscall_64+0x14d/0xf80 [ 1358.351993][T22006] ? trace_irq_disable+0x3b/0x150 [ 1358.352015][T22006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.352030][T22006] ? clear_bhb_loop+0x40/0x90 [ 1358.352049][T22006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.352064][T22006] RIP: 0033:0x7f350399c799 [ 1358.352079][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.352091][T22006] RSP: 002b:00007f3504829028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.352108][T22006] RAX: ffffffffffffffda RBX: 00007f3503c15fa0 RCX: 00007f350399c799 [ 1358.352119][T22006] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1358.352129][T22006] RBP: 00007f3504829090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.352139][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.352148][T22006] R13: 00007f3503c16038 R14: 00007f3503c15fa0 R15: 00007f3503d3fa48 [ 1358.352171][T22006] [ 1359.042006][ T7563] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1359.200580][ T7563] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 1359.229198][ T7563] usb 3-1: config 7 has no interface number 0 [ 1359.250177][ T7563] usb 3-1: config 7 interface 252 has no altsetting 0 [ 1360.908666][T22016] netlink: 'syz.5.4414': attribute type 9 has an invalid length. [ 1361.219404][T18025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1361.248351][T18025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1361.257479][T18025] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1361.275739][T18025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1361.287497][T18025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1361.617646][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4417'. [ 1361.691839][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.701581][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.880547][ T7563] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1361.895212][ T7563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.913156][ T7563] usb 3-1: can't set config #7, error -71 [ 1361.926483][ T7563] usb 3-1: USB disconnect, device number 91 [ 1362.067258][ T7464] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1362.119727][ T5999] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.238365][ T7464] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1362.273279][ T7464] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1362.314202][ T7464] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1362.378063][ T7464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1362.639153][ T7464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1362.716315][ T7464] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1362.747502][ T7464] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1362.788449][ T7464] usb 6-1: Product: syz [ 1362.801701][ T7464] usb 6-1: Manufacturer: syz [ 1362.911740][ T7464] cdc_wdm 6-1:1.0: skipping garbage [ 1362.966361][ T7464] cdc_wdm 6-1:1.0: skipping garbage [ 1363.139776][T22023] netlink: 'syz.5.4417': attribute type 2 has an invalid length. [ 1363.147657][T22023] netlink: 119 bytes leftover after parsing attributes in process `syz.5.4417'. [ 1363.339769][T22019] chnl_net:caif_netlink_parms(): no params data found [ 1363.355168][ T7464] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1363.380443][T18025] Bluetooth: hci7: command tx timeout [ 1363.417422][ T7464] cdc_wdm 6-1:1.0: Unknown control protocol [ 1363.963823][T22019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.998138][T22019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.036162][T22019] bridge_slave_0: entered allmulticast mode [ 1364.059711][ T5898] usb 6-1: USB disconnect, device number 5 [ 1364.082356][T22019] bridge_slave_0: entered promiscuous mode [ 1364.123451][T22019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.170053][T22019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.177673][T22019] bridge_slave_1: entered allmulticast mode [ 1364.206492][T22019] bridge_slave_1: entered promiscuous mode [ 1364.360957][T22019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.462318][T22019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.621580][T22019] team0: Port device team_slave_0 added [ 1364.670740][T22019] team0: Port device team_slave_1 added [ 1365.008371][T22019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.048565][T22019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.501093][T18025] Bluetooth: hci7: command tx timeout [ 1365.611527][T22019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.744822][T22019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.788038][T22019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.998117][T22019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.118073][ T7464] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1366.206594][T22019] hsr_slave_0: entered promiscuous mode [ 1366.288235][ T7464] usb 3-1: Using ep0 maxpacket: 32 [ 1366.339288][T22019] hsr_slave_1: entered promiscuous mode [ 1366.353287][ T7464] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1366.368933][T22019] debugfs: 'hsr0' already exists in 'hsr' [ 1366.378271][ T7464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.407013][T22019] Cannot create hsr debugfs directory [ 1366.413335][ T7464] usb 3-1: Product: syz [ 1366.488402][ T7464] usb 3-1: Manufacturer: syz [ 1366.508313][ T7464] usb 3-1: SerialNumber: syz [ 1366.599610][ T7464] usb 3-1: config 0 descriptor?? [ 1366.644648][T22066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1367.175529][T22068] geneve2: entered promiscuous mode [ 1367.228676][T22068] geneve2: entered allmulticast mode [ 1367.251896][T22071] netlink: 'syz.1.4426': attribute type 9 has an invalid length. [ 1367.355199][ T7464] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 1296535471 serial 8F50FE38.CE0FBA1B (2 channels) [ 1367.367186][ T7464] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1367.384774][ T7464] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1367.531124][T18025] Bluetooth: hci7: command tx timeout [ 1367.557430][T22062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.598527][T22062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.652417][ T7464] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1367.740498][ T7464] usb 3-1: USB disconnect, device number 92 [ 1368.279547][T22019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1368.319170][T22019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1368.550344][T22019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1368.617153][T22019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1369.255225][T22019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.463956][T22019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.544468][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.552183][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.608269][T18025] Bluetooth: hci7: command tx timeout [ 1369.627160][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.634600][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.773279][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1369.773301][ T29] audit: type=1326 audit(1772237398.115:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1369.844841][ T29] audit: type=1326 audit(1772237398.115:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.048095][ T29] audit: type=1326 audit(1772237398.225:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.072399][ T29] audit: type=1326 audit(1772237398.225:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.096628][ T29] audit: type=1326 audit(1772237398.225:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.125760][ T29] audit: type=1326 audit(1772237398.225:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.182689][ T29] audit: type=1326 audit(1772237398.225:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.253115][T22019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1370.388061][ T29] audit: type=1326 audit(1772237398.225:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.440561][T22019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.548510][ T29] audit: type=1326 audit(1772237398.225:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.682441][ T29] audit: type=1326 audit(1772237398.225:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1370.895611][T22019] veth0_vlan: entered promiscuous mode [ 1370.993381][T22019] veth1_vlan: entered promiscuous mode [ 1371.215451][T22019] veth0_macvtap: entered promiscuous mode [ 1371.554705][T22019] veth1_macvtap: entered promiscuous mode [ 1371.709594][T22019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.781199][T22019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.940021][ T5999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.978673][ T5999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.987555][ T5999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.135203][T22115] netlink: 'syz.6.4437': attribute type 9 has an invalid length. [ 1372.243308][T22115] netlink: 'syz.6.4437': attribute type 11 has an invalid length. [ 1372.257229][ T5999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.574789][T13816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.634493][T13816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.262396][T22054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.285291][T22054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.873097][T22121] netlink: 'syz.2.4439': attribute type 9 has an invalid length. [ 1376.096494][T22148] netlink: 'syz.5.4446': attribute type 9 has an invalid length. [ 1376.112034][T22148] netlink: 'syz.5.4446': attribute type 11 has an invalid length. [ 1376.188364][ T7461] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1376.346853][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1376.346876][ T29] audit: type=1326 audit(1772237404.655:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1376.361195][ T7461] usb 3-1: Using ep0 maxpacket: 32 [ 1376.519328][ T29] audit: type=1326 audit(1772237404.665:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1376.632460][ T7461] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1376.682904][ T7461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.693190][ T7461] usb 3-1: Product: syz [ 1376.697511][ T7461] usb 3-1: Manufacturer: syz [ 1376.705137][ T7461] usb 3-1: SerialNumber: syz [ 1376.723350][ T7461] usb 3-1: config 0 descriptor?? [ 1376.880123][ T29] audit: type=1326 audit(1772237404.665:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.027282][ T29] audit: type=1326 audit(1772237404.665:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.105894][ T29] audit: type=1326 audit(1772237404.665:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.190738][ T29] audit: type=1326 audit(1772237404.665:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.277168][ T29] audit: type=1326 audit(1772237404.665:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.437976][ T29] audit: type=1326 audit(1772237404.665:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.486370][T22152] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1377.524105][ T7461] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 1296535471 serial 8F50FE38.CE0FBA1B (2 channels) [ 1377.545578][ T7461] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1377.555861][T22152] PKCS7: Only support pkcs7_signedData type [ 1377.577521][T22154] netlink: 'syz.7.4450': attribute type 9 has an invalid length. [ 1377.588883][ T7461] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1377.608379][ T29] audit: type=1326 audit(1772237404.665:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.725466][T22145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.734348][T22145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.773091][ T29] audit: type=1326 audit(1772237404.665:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.6.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1377.861708][ T7461] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1377.935629][ T7461] usb 3-1: USB disconnect, device number 93 [ 1382.034821][T22182] ip6gretap0: entered promiscuous mode [ 1382.103943][T22182] vlan2: entered promiscuous mode [ 1382.608331][T13816] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.878661][T22198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.614584][T22215] ip6gretap0: entered promiscuous mode [ 1385.692597][T22221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.818482][T22215] vlan2: entered promiscuous mode [ 1388.268030][ T7464] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1388.468106][ T7464] usb 3-1: Using ep0 maxpacket: 16 [ 1388.501230][ T7464] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 1388.547441][ T7464] usb 3-1: config 5 has no interface number 0 [ 1388.568807][ T7464] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1388.587969][ T7464] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1388.616429][ T7464] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 1388.652951][ T7464] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1388.687979][ T7464] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 1388.713963][ T7464] usb 3-1: config 5 interface 168 has no altsetting 0 [ 1388.778500][ T7464] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1388.798051][ T7464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.833978][ T7464] usb 3-1: Product: syz [ 1388.845274][ T7464] usb 3-1: Manufacturer: syz [ 1388.858076][ T7464] usb 3-1: SerialNumber: syz [ 1388.879774][T22238] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1389.495238][ T7464] usb 3-1: NFC: Unable to get FW version [ 1389.508637][ T7464] pn533_usb 3-1:5.168: probe with driver pn533_usb failed with error -90 [ 1389.563944][ T7464] usb 3-1: USB disconnect, device number 94 [ 1390.758042][ T5898] IPVS: starting estimator thread 0... [ 1390.868401][T22251] IPVS: using max 29 ests per chain, 69600 per kthread [ 1392.158943][T22265] vlan2: entered promiscuous mode [ 1392.279815][T22267] netlink: 'syz.1.4480': attribute type 9 has an invalid length. [ 1392.295139][T22267] netlink: 'syz.1.4480': attribute type 11 has an invalid length. [ 1392.627970][ T5898] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1392.720778][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1392.720799][ T29] audit: type=1326 audit(1772237421.065:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1392.805851][ T29] audit: type=1326 audit(1772237421.095:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1392.833258][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 1392.913283][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.928119][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1392.994792][ T29] audit: type=1326 audit(1772237421.095:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.157774][ T29] audit: type=1326 audit(1772237421.095:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.201855][ T29] audit: type=1326 audit(1772237421.095:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.248408][ T5898] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1393.257746][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1393.277997][ T29] audit: type=1326 audit(1772237421.095:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.315204][ T5898] usb 3-1: Product: syz [ 1393.325457][ T5898] usb 3-1: Manufacturer: syz [ 1393.335573][ T5898] usb 3-1: SerialNumber: syz [ 1393.356684][ T5898] usb 3-1: config 0 descriptor?? [ 1393.366449][ T29] audit: type=1326 audit(1772237421.095:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.410217][ T5898] hub 3-1:0.0: bad descriptor, ignoring hub [ 1393.416164][ T5898] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1393.482911][ T29] audit: type=1326 audit(1772237421.095:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1393.758187][ T29] audit: type=1326 audit(1772237421.095:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1394.033872][ T29] audit: type=1326 audit(1772237421.105:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22272 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b9c799 code=0x7ffc0000 [ 1395.126583][T14890] usb 3-1: USB disconnect, device number 95 [ 1396.571651][T22298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.548003][ T5898] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1397.738028][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 1397.757108][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1397.789365][ T5898] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 1397.797686][ T5898] usb 3-1: config 11 has no interface number 0 [ 1397.824402][ T5898] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1397.855141][ T5898] usb 3-1: config 11 interface 244 has no altsetting 0 [ 1397.874510][T22306] netlink: 'syz.1.4491': attribute type 10 has an invalid length. [ 1397.894737][ T5898] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1397.916671][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.952791][ T5898] usb 3-1: Product: syz [ 1397.970202][ T5898] usb 3-1: Manufacturer: syz [ 1397.986484][ T5898] usb 3-1: SerialNumber: syz [ 1398.003844][T22306] team0: Port device dummy0 added [ 1398.115174][T22310] FAULT_INJECTION: forcing a failure. [ 1398.115174][T22310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1398.129943][T22310] CPU: 0 UID: 0 PID: 22310 Comm: syz.6.4493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.129970][T22310] Tainted: [L]=SOFTLOCKUP [ 1398.129976][T22310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1398.129986][T22310] Call Trace: [ 1398.129992][T22310] [ 1398.130002][T22310] dump_stack_lvl+0xe8/0x150 [ 1398.130028][T22310] should_fail_ex+0x412/0x560 [ 1398.130050][T22310] _copy_from_user+0x2d/0xb0 [ 1398.130072][T22310] bpf_test_init+0xd8/0x150 [ 1398.130093][T22310] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1398.130119][T22310] ? __fget_files+0x2a/0x420 [ 1398.130140][T22310] ? __fget_files+0x3a0/0x420 [ 1398.130161][T22310] ? __fget_files+0x2a/0x420 [ 1398.130184][T22310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1398.130203][T22310] bpf_prog_test_run+0x2c7/0x340 [ 1398.130220][T22310] __sys_bpf+0x643/0x950 [ 1398.130245][T22310] ? __pfx___sys_bpf+0x10/0x10 [ 1398.130278][T22310] ? ksys_write+0x242/0x270 [ 1398.130301][T22310] ? __pfx_ksys_write+0x10/0x10 [ 1398.130322][T22310] __x64_sys_bpf+0x7c/0x90 [ 1398.130343][T22310] do_syscall_64+0x14d/0xf80 [ 1398.130356][T22310] ? trace_irq_disable+0x3b/0x150 [ 1398.130378][T22310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.130394][T22310] ? clear_bhb_loop+0x40/0x90 [ 1398.130412][T22310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.130427][T22310] RIP: 0033:0x7ff065b9c799 [ 1398.130443][T22310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.130456][T22310] RSP: 002b:00007ff066a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1398.130473][T22310] RAX: ffffffffffffffda RBX: 00007ff065e15fa0 RCX: 00007ff065b9c799 [ 1398.130484][T22310] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1398.130494][T22310] RBP: 00007ff066a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.130504][T22310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.130514][T22310] R13: 00007ff065e16038 R14: 00007ff065e15fa0 R15: 00007ff065f3fa48 [ 1398.130537][T22310] [ 1398.594340][ T5898] usb 3-1: USB disconnect, device number 96 [ 1398.876441][T14041] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1398.887450][T14041] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1398.897595][T14041] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1398.943059][T14041] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1398.955983][T14041] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1400.095207][T22317] chnl_net:caif_netlink_parms(): no params data found [ 1400.202793][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4499'. [ 1400.224366][T22333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4499'. [ 1400.334958][ T5984] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.366673][ T5984] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.430137][ T5984] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.813396][T22317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.820818][T22317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.838506][T22317] bridge_slave_0: entered allmulticast mode [ 1400.847295][T22317] bridge_slave_0: entered promiscuous mode [ 1400.861779][T22317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.921634][T22317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.963258][T22317] bridge_slave_1: entered allmulticast mode [ 1400.986013][T22317] bridge_slave_1: entered promiscuous mode [ 1401.048176][T14041] Bluetooth: hci8: command tx timeout [ 1401.054217][T22339] FAULT_INJECTION: forcing a failure. [ 1401.054217][T22339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1401.125222][T22339] CPU: 0 UID: 0 PID: 22339 Comm: syz.1.4500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.125258][T22339] Tainted: [L]=SOFTLOCKUP [ 1401.125266][T22339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1401.125279][T22339] Call Trace: [ 1401.125287][T22339] [ 1401.125296][T22339] dump_stack_lvl+0xe8/0x150 [ 1401.125330][T22339] should_fail_ex+0x412/0x560 [ 1401.125358][T22339] prepare_alloc_pages+0x22a/0x650 [ 1401.125391][T22339] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1401.125419][T22339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1401.125447][T22339] ? __pfx_policy_nodemask+0x10/0x10 [ 1401.125474][T22339] ? percpu_ref_get_many+0x19/0x140 [ 1401.125497][T22339] ? percpu_ref_get_many+0x19/0x140 [ 1401.125526][T22339] alloc_pages_mpol+0x232/0x4a0 [ 1401.125557][T22339] alloc_pages_noprof+0xa8/0x190 [ 1401.125584][T22339] pgd_alloc+0x44/0x730 [ 1401.125620][T22339] mm_init+0x617/0xc50 [ 1401.125647][T22339] ? copy_mm+0xf6/0x4b0 [ 1401.125686][T22339] copy_mm+0x122/0x4b0 [ 1401.125717][T22339] copy_process+0x18b6/0x3cf0 [ 1401.125756][T22339] ? copy_process+0x921/0x3cf0 [ 1401.125798][T22339] ? __pfx_copy_process+0x10/0x10 [ 1401.125839][T22339] kernel_clone+0x248/0x8e0 [ 1401.125875][T22339] ? __pfx_kernel_clone+0x10/0x10 [ 1401.125924][T22339] __se_sys_clone3+0x33c/0x360 [ 1401.125958][T22339] ? __pfx___se_sys_clone3+0x10/0x10 [ 1401.125988][T22339] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1401.126022][T22339] ? __fget_files+0x3a0/0x420 [ 1401.126067][T22339] ? __pfx_ksys_write+0x10/0x10 [ 1401.126101][T22339] do_syscall_64+0x14d/0xf80 [ 1401.126119][T22339] ? trace_irq_disable+0x3b/0x150 [ 1401.126148][T22339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.126169][T22339] ? clear_bhb_loop+0x40/0x90 [ 1401.126189][T22339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.126206][T22339] RIP: 0033:0x7f6e6919c799 [ 1401.126221][T22339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.126236][T22339] RSP: 002b:00007f6e6a112ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1401.126253][T22339] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6e6919c799 [ 1401.126264][T22339] RDX: 00007f6e6a112f10 RSI: 0000000000000058 RDI: 00007f6e6a112f10 [ 1401.126275][T22339] RBP: 00007f6e6a113090 R08: 0000000000000000 R09: 0000000000000058 [ 1401.126285][T22339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1401.126295][T22339] R13: 00007f6e69416038 R14: 00007f6e69415fa0 R15: 00007f6e6953fa48 [ 1401.126320][T22339] [ 1401.394128][T22317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.410584][T22317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.495079][T22317] team0: Port device team_slave_0 added [ 1401.525363][T22317] team0: Port device team_slave_1 added [ 1401.604433][T22317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.648213][T22317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.679777][T22317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.719806][T22317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.727005][T22317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.785050][T22317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.807565][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'. [ 1402.122296][T22317] hsr_slave_0: entered promiscuous mode [ 1402.133797][T22317] hsr_slave_1: entered promiscuous mode [ 1402.143548][T22317] debugfs: 'hsr0' already exists in 'hsr' [ 1402.151191][T22317] Cannot create hsr debugfs directory [ 1403.128052][T14041] Bluetooth: hci8: command tx timeout [ 1403.520669][T22317] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1403.553784][T22317] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1403.605249][T22317] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1403.639637][T22317] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1403.995095][T22317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.078885][T22317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.103250][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.110580][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.210616][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.217801][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.487609][T22317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.655133][T22317] veth0_vlan: entered promiscuous mode [ 1404.721041][T22317] veth1_vlan: entered promiscuous mode [ 1404.989163][T22317] veth0_macvtap: entered promiscuous mode [ 1405.032904][T22317] veth1_macvtap: entered promiscuous mode [ 1405.126742][T22317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.195346][T22317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.210684][T14041] Bluetooth: hci8: command tx timeout [ 1405.298910][ T1164] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.334353][ T1164] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.374919][ T1164] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.420626][ T1164] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.713062][T22054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.744975][T22054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.828025][T13816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.844574][T13816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.761189][T22387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.863876][T22387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.977543][T22387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.272907][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1407.272930][ T29] audit: type=1326 audit(1772237435.605:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22384 comm="syz.8.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93cd9c799 code=0x7ffc0000 [ 1407.288803][T14041] Bluetooth: hci8: command tx timeout [ 1407.397322][ T29] audit: type=1326 audit(1772237435.605:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22384 comm="syz.8.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93cd9c799 code=0x7ffc0000 [ 1407.467415][T22395] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1407.577974][T21523] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1407.744684][T21523] usb 9-1: config 7 has an invalid interface number: 252 but max is 0 [ 1407.759234][T21523] usb 9-1: config 7 has no interface number 0 [ 1407.791867][T21523] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1407.819619][T21523] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1407.857963][T21523] usb 9-1: config 7 interface 252 has no altsetting 0 [ 1407.926518][T22402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.934375][T22402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.946809][T21523] usb 9-1: string descriptor 0 read error: -22 [ 1407.964682][T21523] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1407.978414][T22402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.997210][T22407] netlink: 'syz.6.4519': attribute type 1 has an invalid length. [ 1408.005316][T22402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.035785][T21523] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.070526][T21523] idmouse 9-1:7.252: Unable to find bulk-in endpoint. [ 1408.272829][T22385] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1408.287014][T21523] usb 9-1: USB disconnect, device number 2 [ 1408.725129][T22415] sctp: [Deprecated]: syz.6.4521 (pid 22415) Use of int in max_burst socket option deprecated. [ 1408.725129][T22415] Use struct sctp_assoc_value instead [ 1409.352115][ T5898] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1409.412286][T22425] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4525'. [ 1409.528125][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 1409.554468][ T5898] usb 3-1: config 5 has an invalid interface number: 202 but max is 0 [ 1409.585454][ T5898] usb 3-1: config 5 has no interface number 0 [ 1409.612715][ T5898] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1409.646000][ T5898] usb 3-1: config 5 interface 202 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 584 [ 1409.676841][ T5898] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1409.729980][ T5898] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1409.751223][ T5898] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1409.770647][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1409.788189][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1409.948081][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1409.969154][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1409.998022][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1410.026083][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1410.056077][ T5898] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1410.078148][ T5898] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1410.110839][ T5898] usb 3-1: config 5 interface 202 has no altsetting 0 [ 1410.312988][ T5898] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=18.24 [ 1410.350531][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.391574][ T5898] usb 3-1: Product: 餶覇숆雸詥ꑗሾ拥谴톢꩒ዼ嘰࠽롙惰➉ꑻ櫑됳詣否焌䄠ż鿧諾秄ٸ⯫ㅠ沬䏒ꊥﵿ殰꜁镁᥉◚涩䔿㿶芷⑆鞌햜珞ﮗ흀름鱓哫腫઱崇沠衤辦@爑焑皬䲕五९깈✯讙닝 [ 1410.428357][ T5898] usb 3-1: Manufacturer: ᠉ [ 1410.435836][ T5898] usb 3-1: SerialNumber: syz [ 1410.452787][T22420] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1410.552013][T22420] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1410.581436][T22395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.995370][ T5898] ums_eneub6250 3-1:5.202: USB Mass Storage device detected [ 1411.104880][T22438] netlink: 'syz.1.4529': attribute type 13 has an invalid length. [ 1411.169555][ T5898] usb 3-1: USB disconnect, device number 97 [ 1411.888050][ T5898] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1412.111863][ T5898] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1412.133938][ T5898] usb 9-1: config 0 has no interface number 0 [ 1412.160608][ T5898] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1412.175480][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.183995][ T5898] usb 9-1: Product: syz [ 1412.189530][ T5898] usb 9-1: Manufacturer: syz [ 1412.194568][ T5898] usb 9-1: SerialNumber: syz [ 1412.218808][ T5898] usb 9-1: config 0 descriptor?? [ 1412.490407][T22451] syz_tun: entered promiscuous mode [ 1412.495879][T22451] vlan2: entered promiscuous mode [ 1412.772649][T22454] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1413.067414][T22445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.102734][T22466] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4536'. [ 1413.170756][T22445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.781717][ T5898] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.063500][ T5898] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1415.141506][ T5898] asix 9-1:0.251: probe with driver asix failed with error -71 [ 1415.234767][ T5898] usb 9-1: USB disconnect, device number 3 [ 1415.592210][T22490] FAULT_INJECTION: forcing a failure. [ 1415.592210][T22490] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.615349][T22490] CPU: 0 UID: 0 PID: 22490 Comm: syz.8.4542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.615382][T22490] Tainted: [L]=SOFTLOCKUP [ 1415.615390][T22490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1415.615402][T22490] Call Trace: [ 1415.615411][T22490] [ 1415.615419][T22490] dump_stack_lvl+0xe8/0x150 [ 1415.615455][T22490] should_fail_ex+0x412/0x560 [ 1415.615486][T22490] should_failslab+0xa8/0x100 [ 1415.615513][T22490] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1415.615547][T22490] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1415.615572][T22490] ? __alloc_skb+0x1d0/0x7d0 [ 1415.615606][T22490] __alloc_skb+0x1d0/0x7d0 [ 1415.615639][T22490] tipc_buf_acquire+0x2b/0xe0 [ 1415.615670][T22490] tipc_msg_build+0x7c8/0xd60 [ 1415.615714][T22490] ? __pfx_tipc_msg_build+0x10/0x10 [ 1415.615743][T22490] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 1415.615773][T22490] ? tipc_nametbl_lookup_mcast_nodes+0x4ac/0x9e0 [ 1415.615797][T22490] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 1415.615841][T22490] __tipc_sendmsg+0x1c6f/0x2bf0 [ 1415.615875][T22490] ? is_bpf_text_address+0x26/0x2b0 [ 1415.615910][T22490] ? kernel_text_address+0xa5/0xe0 [ 1415.615939][T22490] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1415.615977][T22490] ? look_up_lock_class+0x57/0x110 [ 1415.616018][T22490] ? __pfx_woken_wake_function+0x10/0x10 [ 1415.616052][T22490] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.616117][T22490] ? tipc_sendmsg+0x47/0x70 [ 1415.616150][T22490] ? __local_bh_enable_ip+0xd0/0x130 [ 1415.616179][T22490] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1415.616325][T22490] tipc_sendmsg+0x55/0x70 [ 1415.616358][T22490] sock_sendmsg+0x4a4/0x500 [ 1415.616388][T22490] ? __pfx_sock_sendmsg+0x10/0x10 [ 1415.616425][T22490] ? __asan_memset+0x22/0x50 [ 1415.616457][T22490] ? iov_iter_bvec+0xb8/0x180 [ 1415.616489][T22490] splice_to_socket+0xae2/0x11f0 [ 1415.616542][T22490] ? __pfx_splice_to_socket+0x10/0x10 [ 1415.616605][T22490] ? touch_atime+0x379/0x6b0 [ 1415.616626][T22490] ? shmem_file_splice_read+0xa63/0xbd0 [ 1415.616669][T22490] ? __pfx_splice_to_socket+0x10/0x10 [ 1415.616700][T22490] direct_splice_actor+0x101/0x160 [ 1415.616735][T22490] splice_direct_to_actor+0x53a/0xc70 [ 1415.616777][T22490] ? __pfx_direct_splice_actor+0x10/0x10 [ 1415.616816][T22490] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1415.616847][T22490] ? get_pid_task+0x20/0x1f0 [ 1415.616875][T22490] do_splice_direct+0x195/0x290 [ 1415.616908][T22490] ? __pfx_do_splice_direct+0x10/0x10 [ 1415.616939][T22490] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1415.616974][T22490] ? bpf_lsm_file_permission+0x9/0x20 [ 1415.616999][T22490] ? security_file_permission+0x75/0x260 [ 1415.617034][T22490] ? rw_verify_area+0x255/0x4d0 [ 1415.617060][T22490] do_sendfile+0x535/0x7d0 [ 1415.617097][T22490] ? __pfx_do_sendfile+0x10/0x10 [ 1415.617125][T22490] ? __fget_files+0x3a0/0x420 [ 1415.617165][T22490] __se_sys_sendfile64+0x144/0x1a0 [ 1415.617203][T22490] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1415.617243][T22490] do_syscall_64+0x14d/0xf80 [ 1415.617262][T22490] ? trace_irq_disable+0x3b/0x150 [ 1415.617292][T22490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.617314][T22490] ? clear_bhb_loop+0x40/0x90 [ 1415.617344][T22490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.617361][T22490] RIP: 0033:0x7fc93cd9c799 [ 1415.617380][T22490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.617395][T22490] RSP: 002b:00007fc93afd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1415.617415][T22490] RAX: ffffffffffffffda RBX: 00007fc93d016090 RCX: 00007fc93cd9c799 [ 1415.617429][T22490] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 1415.617440][T22490] RBP: 00007fc93afd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.617452][T22490] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000002 [ 1415.617463][T22490] R13: 00007fc93d016128 R14: 00007fc93d016090 R15: 00007fc93d13fa48 [ 1415.617492][T22490] [ 1417.398010][ T7461] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1417.628250][ T7461] usb 3-1: Using ep0 maxpacket: 32 [ 1417.682978][ T7461] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1417.711212][ T7461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.828950][ T7461] usb 3-1: Product: syz [ 1417.869969][ T7461] usb 3-1: Manufacturer: syz [ 1417.890306][ T7461] usb 3-1: SerialNumber: syz [ 1417.934749][ T7461] usb 3-1: config 0 descriptor?? [ 1418.791081][ T7461] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1418.841219][ T7461] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1419.029426][ T7461] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32 [ 1420.208369][T12068] usb 3-1: USB disconnect, device number 98 [ 1423.132557][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.139606][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.189389][T22506] vlan2: entered promiscuous mode [ 1425.363780][T22510] syz.8.4550 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 1425.432757][T22510] CPU: 0 UID: 0 PID: 22510 Comm: syz.8.4550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.432793][T22510] Tainted: [L]=SOFTLOCKUP [ 1425.432802][T22510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.432815][T22510] Call Trace: [ 1425.432824][T22510] [ 1425.432833][T22510] dump_stack_lvl+0xe8/0x150 [ 1425.432868][T22510] dump_header+0xd3/0x4c0 [ 1425.432910][T22510] oom_kill_process+0x3ab/0x970 [ 1425.432937][T22510] out_of_memory+0x1141/0x1410 [ 1425.432973][T22510] ? __pfx_out_of_memory+0x10/0x10 [ 1425.433005][T22510] __alloc_pages_may_oom+0x1ea/0x330 [ 1425.433039][T22510] ? lockdep_hardirqs_on+0x7a/0x110 [ 1425.433074][T22510] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 1425.433106][T22510] ? unreserve_highatomic_pageblock+0x3e3/0x610 [ 1425.433156][T22510] __alloc_pages_slowpath+0x6c2/0xd40 [ 1425.433204][T22510] __alloc_frozen_pages_noprof+0x322/0x380 [ 1425.433233][T22510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1425.433263][T22510] ? __pfx_policy_nodemask+0x10/0x10 [ 1425.433299][T22510] alloc_pages_mpol+0x232/0x4a0 [ 1425.433332][T22510] alloc_pages_noprof+0xa8/0x190 [ 1425.433361][T22510] folio_alloc_noprof+0x1e/0x30 [ 1425.433386][T22510] filemap_alloc_folio_noprof+0x111/0x470 [ 1425.433428][T22510] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1425.433471][T22510] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1425.433504][T22510] filemap_fault+0x9ac/0x1320 [ 1425.433538][T22510] ? __pfx_filemap_fault+0x10/0x10 [ 1425.433565][T22510] ? __pfx_filemap_map_pages+0x10/0x10 [ 1425.433607][T22510] __do_fault+0x138/0x390 [ 1425.433633][T22510] do_pte_missing+0x228f/0x3750 [ 1425.433655][T22510] ? do_pte_missing+0x130a/0x3750 [ 1425.433688][T22510] ? handle_mm_fault+0xee/0x3310 [ 1425.433722][T22510] handle_mm_fault+0x1bec/0x3310 [ 1425.433765][T22510] ? handle_mm_fault+0xee/0x3310 [ 1425.433804][T22510] ? __pfx_handle_mm_fault+0x10/0x10 [ 1425.433833][T22510] ? lock_vma_under_rcu+0x45a/0x500 [ 1425.433883][T22510] do_user_addr_fault+0xa73/0x1340 [ 1425.433919][T22510] ? rcu_is_watching+0x15/0xb0 [ 1425.433950][T22510] ? trace_page_fault_user+0x84/0x210 [ 1425.433980][T22510] exc_page_fault+0x6a/0xc0 [ 1425.434012][T22510] asm_exc_page_fault+0x26/0x30 [ 1425.434033][T22510] RIP: 0033:0x7fc93cc55195 [ 1425.434059][T22510] Code: Unable to access opcode bytes at 0x7fc93cc5516b. [ 1425.434070][T22510] RSP: 002b:00007fc93d13fba0 EFLAGS: 00010287 [ 1425.434090][T22510] RAX: 0000001b2e020000 RBX: 0000001b2e020000 RCX: 0000000000000000 [ 1425.434104][T22510] RDX: 0000001b2e020000 RSI: 00007fc93d13fb90 RDI: 00007fc93d13fc90 [ 1425.434119][T22510] RBP: 000000000015bb63 R08: 0000001b2e420000 R09: 3fffffffffffffff [ 1425.434133][T22510] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1425.434146][T22510] R13: 0000000000000000 R14: 000000000015bb63 R15: 00007fc93d13fe40 [ 1425.434180][T22510] [ 1425.434205][T22510] Mem-Info: [ 1425.885242][T21641] syz.0.4320: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1425.947823][T21641] CPU: 0 UID: 0 PID: 21641 Comm: syz.0.4320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.947872][T21641] Tainted: [L]=SOFTLOCKUP [ 1425.947881][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.947894][T21641] Call Trace: [ 1425.947904][T21641] [ 1425.947914][T21641] dump_stack_lvl+0xe8/0x150 [ 1425.947949][T21641] warn_alloc+0x249/0x340 [ 1425.947978][T21641] ? __pfx_warn_alloc+0x10/0x10 [ 1425.948018][T21641] __alloc_pages_slowpath+0xcac/0xd40 [ 1425.948065][T21641] __alloc_frozen_pages_noprof+0x322/0x380 [ 1425.948096][T21641] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1425.948126][T21641] ? __pfx_policy_nodemask+0x10/0x10 [ 1425.948168][T21641] alloc_pages_mpol+0x232/0x4a0 [ 1425.948192][T21641] alloc_pages_noprof+0xa8/0x190 [ 1425.948213][T21641] relay_open_buf+0x28c/0xde0 [ 1425.948243][T21641] relay_open+0x427/0x920 [ 1425.948268][T21641] blk_trace_setup_prepare+0x425/0x5a0 [ 1425.948288][T21641] blk_trace_setup+0x2f8/0x520 [ 1425.948318][T21641] ? __pfx_blk_trace_setup+0x10/0x10 [ 1425.948357][T21641] ? snprintf+0xe8/0x140 [ 1425.948400][T21641] blk_trace_ioctl+0x37f/0x920 [ 1425.948424][T21641] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1425.948443][T21641] ? kasan_quarantine_put+0xbb/0x1f0 [ 1425.948465][T21641] ? tomoyo_path_number_perm+0x219/0x630 [ 1425.948484][T21641] ? tomoyo_path_number_perm+0x219/0x630 [ 1425.948503][T21641] ? do_vfs_ioctl+0x1166/0x1530 [ 1425.948522][T21641] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1425.948549][T21641] ? do_futex+0x333/0x420 [ 1425.948585][T21641] blkdev_ioctl+0x4c1/0x740 [ 1425.948604][T21641] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1425.948626][T21641] ? __fget_files+0x2a/0x420 [ 1425.948652][T21641] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1425.948671][T21641] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1425.948688][T21641] __se_sys_ioctl+0xfc/0x170 [ 1425.948707][T21641] do_syscall_64+0x14d/0xf80 [ 1425.948722][T21641] ? trace_irq_disable+0x3b/0x150 [ 1425.948744][T21641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.948760][T21641] ? clear_bhb_loop+0x40/0x90 [ 1425.948780][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.948796][T21641] RIP: 0033:0x7ffb85f9c799 [ 1425.948818][T21641] Code: Unable to access opcode bytes at 0x7ffb85f9c76f. [ 1425.948826][T21641] RSP: 002b:00007ffb86e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.948842][T21641] RAX: ffffffffffffffda RBX: 00007ffb86215fa0 RCX: 00007ffb85f9c799 [ 1425.948854][T21641] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1425.948865][T21641] RBP: 00007ffb86032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1425.948874][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.948884][T21641] R13: 00007ffb86216038 R14: 00007ffb86215fa0 R15: 00007ffb8633fa48 [ 1425.948908][T21641] [ 1426.372028][T21641] Mem-Info: [ 1426.375292][T21641] active_anon:7 inactive_anon:203 isolated_anon:0 [ 1426.375292][T21641] active_file:15 inactive_file:62 isolated_file:0 [ 1426.375292][T21641] unevictable:768 dirty:0 writeback:0 [ 1426.375292][T21641] slab_reclaimable:7075 slab_unreclaimable:117554 [ 1426.375292][T21641] mapped:57346 shmem:768 pagetables:3992 [ 1426.375292][T21641] sec_pagetables:0 bounce:0 [ 1426.375292][T21641] kernel_misc_reclaimable:0 [ 1426.375292][T21641] free:16911 free_pcp:5931 free_cma:0 [ 1426.428241][T22510] active_anon:0 inactive_anon:167 isolated_anon:0 [ 1426.428241][T22510] active_file:63 inactive_file:14 isolated_file:0 [ 1426.428241][T22510] unevictable:768 dirty:0 writeback:0 [ 1426.428241][T22510] slab_reclaimable:7075 slab_unreclaimable:117554 [ 1426.428241][T22510] mapped:57346 shmem:768 pagetables:3992 [ 1426.428241][T22510] sec_pagetables:0 bounce:0 [ 1426.428241][T22510] kernel_misc_reclaimable:0 [ 1426.428241][T22510] free:16911 free_pcp:5911 free_cma:0 [ 1426.596924][T21641] Node 0 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167944kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12544kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1426.659206][T22510] Node 0 active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:52kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167944kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12544kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1426.758129][T21641] Node 1 active_anon:700kB inactive_anon:140kB active_file:0kB inactive_file:164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1344kB pagetables:11320kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1426.850473][T22510] Node 1 active_anon:444kB inactive_anon:176kB active_file:140kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1344kB pagetables:11320kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1426.909573][T21641] Node 0 DMA free:10076kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.028038][T22510] Node 0 DMA free:10076kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.116157][T21641] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1427.137963][T21641] Node 0 DMA32 free:23240kB boost:55296kB min:89496kB low:98044kB high:106592kB reserved_highatomic:6144KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB writepending:0kB zspages:1160kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:14716kB local_pcp:7724kB free_cma:0kB [ 1427.178210][T22510] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1427.184335][T22510] Node 0 DMA32 free:23240kB boost:55296kB min:89496kB low:98044kB high:106592kB reserved_highatomic:6144KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB writepending:0kB zspages:1160kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:14684kB local_pcp:6960kB free_cma:0kB [ 1427.320656][T21641] lowmem_reserve[]: 0 0 0 0 0 [ 1427.325464][T21641] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.386184][T22510] lowmem_reserve[]: 0 0 0 0 0 [ 1427.469797][ T31] oom_reaper: reaped process 21641 (syz.0.4320), now anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB [ 1427.505989][T22510] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.518188][T21641] lowmem_reserve[]: 0 0 0 0 0 [ 1427.606952][T21641] Node 1 Normal free:34328kB boost:36864kB min:92552kB low:106472kB high:120392kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:100kB inactive_anon:488kB active_file:160kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:5780kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8208kB local_pcp:8124kB free_cma:0kB [ 1427.682598][T21641] lowmem_reserve[]: 0 0 0 0 0 [ 1427.687523][T21641] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10076kB [ 1427.708533][T22510] lowmem_reserve[]: 0 0 0 0 0 [ 1427.713818][T22510] Node 1 Normal free:34328kB boost:36864kB min:92552kB low:106472kB high:120392kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:48kB inactive_anon:724kB active_file:100kB inactive_file:44kB unevictable:1536kB writepending:0kB zspages:5780kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8208kB local_pcp:8124kB free_cma:0kB [ 1427.896582][T21641] Node 0 DMA32: 188*4kB (UME) 313*8kB (ME) 285*16kB (UME) 204*32kB (UME) 81*64kB (ME) 29*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23240kB [ 1427.916345][T22510] lowmem_reserve[]: 0 0 0 0 0 [ 1427.990032][T22510] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10076kB [ 1428.017974][T21641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1428.098956][T21641] Node 1 Normal: 302*4kB (UME) 224*8kB (ME) 158*16kB (ME) 132*32kB (ME) 86*64kB (ME) 49*128kB (UM) 16*256kB (M) 11*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 34328kB [ 1428.118325][T22510] Node 0 DMA32: 188*4kB (UME) 313*8kB (ME) 285*16kB (UME) 204*32kB (UME) 81*64kB (ME) 29*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23240kB [ 1428.142131][T21641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.165396][T21641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1428.208092][T21641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.217713][T21641] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1428.278017][T22510] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1428.377789][T21641] 1034 total pagecache pages [ 1428.418111][T22510] Node 1 Normal: 343*4kB (UME) 243*8kB (UME) 175*16kB (UME) 179*32kB (UME) 114*64kB (UME) 62*128kB (UM) 25*256kB (UM) 17*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 45252kB [ 1428.439598][T21641] 193 pages in swap cache [ 1428.494133][T21641] Free swap = 80588kB [ 1428.528290][T21641] Total swap = 124996kB [ 1428.532511][T21641] 2097051 pages RAM [ 1428.536409][T21641] 0 pages HighMem/MovableOnly [ 1428.631397][T22510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.667951][T21641] 427008 pages reserved [ 1428.672264][T21641] 0 pages cma reserved [ 1428.718059][T22510] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1428.889223][T22510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.028027][T22510] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1429.158342][T22510] 1034 total pagecache pages [ 1429.250820][T22510] 193 pages in swap cache [ 1429.255237][T22510] Free swap = 80588kB [ 1429.428019][T22510] Total swap = 124996kB [ 1429.432253][T22510] 2097051 pages RAM [ 1429.436189][T22510] 0 pages HighMem/MovableOnly [ 1429.705459][T22510] 427008 pages reserved [ 1429.794166][T22510] 0 pages cma reserved [ 1429.858166][T22510] Unreclaimable slab info: [ 1429.863262][T22510] Name Used Total [ 1429.976094][T22510] pid_3 8KB 23KB [ 1430.118082][T22510] pid_2 51KB 102KB [ 1430.124308][T22510] bio-464 17KB 22KB [ 1430.357348][T22510] bio-528 19KB 31KB [ 1430.547968][T22510] bio-544 19KB 31KB [ 1430.554123][T22510] bio-560 19KB 31KB [ 1430.629221][T22510] zswap_entry 735KB 810KB [ 1430.635364][T22510] AF_VSOCK 13KB 61KB [ 1430.878119][T22510] sw_flow_stats 9KB 16KB [ 1430.884269][T22510] sw_flow 6KB 47KB [ 1431.131894][T22510] batadv_tt_change_cache 0KB 4KB [ 1431.308048][T22510] batadv_tl_cache 12KB 16KB [ 1431.490727][T22510] SMC6 46KB 93KB [ 1431.496978][T22510] SMC 37KB 125KB [ 1431.537987][T22510] TIPC 48KB 123KB [ 1431.544314][T22510] rds_tcp_connection 6KB 15KB [ 1431.792140][T22510] RDS 35KB 61KB [ 1431.859480][T22510] rds_connection 14KB 18KB [ 1431.865790][T22510] SCTPv6 64KB 120KB [ 1431.949807][T22510] SCTP 10KB 91KB [ 1431.995086][T22510] sctp_chunk 31KB 48KB [ 1432.050799][T22510] sctp_bind_bucket 0KB 4KB [ 1432.057037][T22510] L2TP/IPv6 26KB 63KB [ 1432.149040][T22510] L2TP/IP 15KB 63KB [ 1432.155191][T22510] KCM 3KB 62KB [ 1432.227984][T22510] kcm_mux 38KB 47KB [ 1432.288899][T22510] RXRPC 46KB 96KB [ 1432.295321][T22510] rxrpc_call_jar 226KB 255KB [ 1432.317264][T22516] netlink: 'syz.6.4552': attribute type 11 has an invalid length. [ 1432.338034][T22510] can_receiver 4KB 31KB [ 1432.344723][T22510] net_bridge_fdb_entry 29KB 47KB [ 1432.389483][T22510] nf-frags 0KB 7KB [ 1432.395695][T22510] xfrm6_tunnel_spi 0KB 4KB [ 1432.457003][T22510] MPTCPv6 38KB 127KB [ 1432.497362][T22510] fib6_node 266KB 288KB [ 1432.514945][T22510] ip6_dst_cache 225KB 378KB [ 1432.524242][T22510] RAWv6 134KB 185KB [ 1432.531206][T22510] UDPLITEv6 24KB 126KB [ 1432.537339][T22510] UDPv6 148KB 157KB [ 1432.547370][T22510] tw_sock_TCPv6 0KB 7KB [ 1432.592252][T22510] request_sock_TCPv6 0KB 7KB [ 1432.607981][T22510] TCPv6 135KB 268KB [ 1432.624451][T22510] ip_vs_conn 0KB 7KB [ 1432.678208][T22510] nf_conntrack 1KB 7KB [ 1432.722279][T22510] wg_peer 158KB 178KB [ 1432.765146][T22510] allowedips_node 21KB 23KB [ 1432.793715][T22510] t10_alua_lu_gp_cache 8KB 11KB [ 1432.817425][T22510] scsi_sense_cache 1318KB 1328KB [ 1432.847765][T22510] virtio_scsi_cmd 21KB 24KB [ 1432.871110][T22510] bio-136 50KB 72KB [ 1432.894005][T22510] io_kiocb 1487KB 1533KB [ 1432.923108][T22510] bio-264 10KB 15KB [ 1432.958279][T22510] mqueue_inode_cache 35KB 60KB [ 1432.992577][T22510] f2fs_bio_post_read_ctx 30KB 31KB [ 1433.052031][T22510] jfs_mp 14KB 15KB [ 1433.179028][T22510] fuse_request 1KB 15KB [ 1433.612055][T22510] cifs_small_rq 28KB 32KB [ 1433.658645][T22510] cifs_request 67KB 67KB [ 1433.717991][T22510] cifs_mpx_ids 8KB 11KB [ 1433.750473][T22510] cifs_io_subrequest 42KB 47KB [ 1433.787979][T22510] cifs_io_request 105KB 111KB [ 1433.849936][T22510] nfs_commit_data 24KB 31KB [ 1433.866807][T22510] nfs_write_data 38KB 47KB [ 1433.945124][T22510] jbd2_inode 10KB 11KB [ 1433.971160][T22510] ext4_system_zone 1KB 3KB [ 1434.001701][T22510] ext4_io_end_vec 3KB 7KB [ 1434.032228][T22510] kioctx 11KB 47KB [ 1434.087964][T22510] aio_kiocb 15KB 18KB [ 1434.117960][T22510] userfaultfd_ctx_cache 22KB 47KB [ 1434.148000][T22510] fanotify_fid_event 10KB 11KB [ 1434.154228][T22510] fanotify_mark 21KB 23KB [ 1434.198159][T22510] dnotify_mark 11KB 11KB [ 1434.204288][T22510] dnotify_struct 2KB 3KB [ 1434.268770][T22510] fasync_cache 19KB 19KB [ 1434.298034][T22510] zspage 136KB 145KB [ 1434.304191][T22510] zs_handle 263KB 632KB [ 1434.358308][T22510] pid_namespace 22KB 61KB [ 1434.364446][T22510] kvm_gmem_inode_cache 30KB 31KB [ 1434.423193][T22510] kvm_vcpu 83KB 156KB [ 1434.443475][T22510] kvm_mmu_page_header 14KB 27KB [ 1434.470623][T22510] pte_list_desc 11KB 23KB [ 1434.495817][T22510] x86_emulator 23KB 126KB [ 1434.527972][T22510] rpc_buffers 25KB 31KB [ 1434.534121][T22510] rpc_tasks 8KB 11KB [ 1434.568041][T22510] UNIX-STREAM 59KB 122KB [ 1434.621623][T22510] UNIX 113KB 398KB [ 1434.628626][T22510] ip4-frags 0KB 7KB [ 1434.645037][T22510] UDP-Lite 8KB 63KB [ 1434.671997][T22510] MPTCP 18KB 91KB [ 1434.692343][T22510] request_sock_subflow_v4 0KB 7KB [ 1434.728892][T22510] tcp_bind2_bucket 2KB 8KB [ 1434.747988][T22510] tcp_bind_bucket 13KB 16KB [ 1434.768100][T22510] inet_peer 0KB 4KB [ 1434.792784][T22510] xfrm_dst 0KB 31KB [ 1434.828016][T22510] xfrm_state 1KB 15KB [ 1434.847934][T22510] ip_fib_trie 41KB 44KB [ 1434.854077][T22510] ip_fib_alias 138KB 146KB [ 1434.874268][T12068] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1434.888562][T22510] rtable 18KB 52KB [ 1434.948108][T22510] RAW 24KB 95KB [ 1434.954350][T22510] UDP 148KB 191KB [ 1434.987647][T22510] request_sock_TCP 0KB 7KB [ 1435.011792][T22510] TCP 191KB 446KB [ 1435.038052][T22510] hugetlbfs_inode_cache 21KB 45KB [ 1435.039126][T12068] usb 3-1: device descriptor read/64, error -71 [ 1435.065186][T22510] netfs_subrequest 35KB 37KB [ 1435.087998][T22510] netfs_request 105KB 111KB [ 1435.118055][T22510] bio-280 21KB 23KB [ 1435.134425][T22510] ep_head 3KB 16KB [ 1435.171267][T22510] eventpoll_pwq 9KB 23KB [ 1435.177408][T22510] eventpoll_epi 33KB 35KB [ 1435.218028][T22510] inotify_inode_mark 29KB 35KB [ 1435.224266][T22510] sgpool-128 17KB 29KB [ 1435.238058][T22510] sgpool-64 172KB 350KB [ 1435.244325][T22510] sgpool-32 86KB 173KB [ 1435.280101][T22510] sgpool-16 44KB 45KB [ 1435.287364][T22510] sgpool-8 60KB 78KB [ 1435.321070][T22510] bio_crypt_ctx 9KB 11KB [ 1435.327223][T22510] bio_integrity_data 7KB 8KB [ 1435.348114][T22510] request_queue 193KB 309KB [ 1435.354258][T22510] blkdev_ioc 9KB 11KB [ 1435.387571][T12068] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1435.396374][T22510] bio-200 285KB 303KB [ 1435.414822][T22510] biovec-max 854KB 1028KB [ 1435.433586][T22510] biovec-128 293KB 446KB [ 1435.468318][T22510] biovec-64 190KB 271KB [ 1435.494062][T22510] biovec-16 39KB 60KB [ 1435.518554][T22510] mm_slot 4KB 7KB [ 1435.533103][T12068] usb 3-1: device descriptor read/64, error -71 [ 1435.538440][T22510] ksm_mm_slot 2KB 8KB [ 1435.575654][T22510] user_namespace 42KB 46KB [ 1435.598770][T22510] uid_cache 7KB 11KB [ 1435.625957][T22536] tipc: Started in network mode [ 1435.641354][T22510] dmaengine-unmap-256 26KB 30KB [ 1435.658133][T22536] tipc: Node identity 96782450ce6d, cluster identity 4711 [ 1435.670121][T22510] dmaengine-unmap-128 14KB 15KB [ 1435.671134][T12068] usb usb3-port1: attempt power cycle [ 1435.693114][T22510] dmaengine-unmap-16 7KB 8KB [ 1435.708926][T22536] tipc: Enabled bearer , priority 0 [ 1435.723654][T22510] dmaengine-unmap-2 3KB 4KB [ 1435.744222][T22539] program syz.7.4558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.769147][T22510] QIPCRTR 17KB 62KB [ 1435.796638][T22542] tipc: Disabling bearer [ 1435.803071][T22510] audit_buffer 18KB 31KB [ 1435.814812][T22510] skbuff_ext_cache 5KB 32KB [ 1435.850853][T22510] skbuff_small_head 4466KB 5118KB [ 1435.867248][T22510] skbuff_fclone_cache 48KB 82KB [ 1435.885090][T22510] skbuff_head_cache 9438KB 10020KB [ 1435.899928][T22510] configfs_dir_cache 7KB 8KB [ 1435.913682][T22510] file_lease_cache 11KB 15KB [ 1435.975728][T22510] file_lock_cache 13KB 31KB [ 1436.008002][T22510] file_lock_ctx 27KB 35KB [ 1436.021672][T22510] fsnotify_inode_mark_connector 23KB 31KB [ 1436.041897][T22510] fsnotify_mark_connector 13KB 15KB [ 1436.062833][T22510] posix_timers_cache 28KB 48KB [ 1436.078078][T12068] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1436.083566][T22510] taskstats 50KB 111KB [ 1436.131037][T22510] mem_cgroup_per_node 82KB 123KB [ 1436.137361][T22510] mem_cgroup 79KB 89KB [ 1436.149819][T12068] usb 3-1: device descriptor read/8, error -71 [ 1436.171790][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4562'. [ 1436.277376][T22510] proc_dir_entry 950KB 975KB [ 1436.311515][T22552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1436.372562][T22510] pde_opener 0KB 15KB [ 1436.424991][T22510] seq_file 54KB 78KB [ 1436.445251][T22510] sigqueue 7KB 43KB [ 1436.468763][T12068] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1436.476725][T22510] shmem_inode_cache 7820KB 8541KB [ 1436.503583][T22510] kernfs_iattrs_cache 16KB 23KB [ 1436.518929][T12068] usb 3-1: device descriptor read/8, error -71 [ 1436.554850][T22510] kernfs_node_cache 33070KB 33173KB [ 1436.599513][T22510] mnt_cache 132KB 189KB [ 1436.630822][T22510] filp 611KB 1000KB [ 1436.638350][T12068] usb usb3-port1: unable to enumerate USB device [ 1436.684249][T22510] names_cache 569KB 572KB [ 1436.763696][T22510] net_namespace 105KB 172KB [ 1436.788927][T22510] ima_iint_cache 20KB 43KB [ 1436.946427][T22510] lsm_inode_cache 1476KB 2114KB [ 1436.997658][T22510] lsm_file_cache 182KB 352KB [ 1437.026240][T22510] key_jar 29KB 47KB [ 1437.042787][T22510] uts_namespace 45KB 77KB [ 1437.070286][T22510] nsproxy 9KB 15KB [ 1437.101807][T22510] vm_area_struct 1047KB 1301KB [ 1437.158147][T22510] fs_cache 30KB 52KB [ 1437.211453][T22510] files_cache 103KB 239KB [ 1437.239766][T22510] signal_cache 841KB 2126KB [ 1437.254863][T22510] sighand_cache 1082KB 2344KB [ 1437.267969][T22510] task_struct 3902KB 4991KB [ 1437.281202][T22510] cred 137KB 340KB [ 1437.295940][T22510] anon_vma_chain 326KB 468KB [ 1437.311596][T22510] anon_vma 367KB 525KB [ 1437.328071][T22510] pid 140KB 303KB [ 1437.334273][T22510] Acpi-Operand 118KB 205KB [ 1437.522257][T22510] Acpi-ParseExt 14KB 27KB [ 1437.538265][T22510] Acpi-Parse 8KB 27KB [ 1437.548059][T22510] Acpi-State 10KB 27KB [ 1437.579233][T22510] Acpi-Namespace 26KB 32KB [ 1437.630428][T22510] shared_policy_node 7KB 8KB [ 1437.636629][T22510] numa_policy 2KB 7KB [ 1437.694130][T22510] perf_event 28KB 62KB [ 1437.712470][T22510] trace_event_file 540KB 540KB [ 1437.745905][T22510] ftrace_event_field 1020KB 1023KB [ 1437.770254][T22510] pool_workqueue 776KB 816KB [ 1437.788768][T22565] netlink: 'syz.2.4565': attribute type 9 has an invalid length. [ 1437.797099][T22510] task_group 43KB 46KB [ 1437.807273][T22510] maple_node 802KB 1744KB [ 1437.878922][T22510] mm_struct 272KB 581KB [ 1437.885047][T22510] vmap_area 761KB 819KB [ 1437.921205][T22510] debug_objects_cache 4505KB 5173KB [ 1437.939926][T22510] page->ptl 164KB 275KB [ 1437.946146][T22510] kmalloc-cg-8k 2272KB 2528KB [ 1438.009663][T22510] kmalloc-cg-4k 25312KB 26496KB [ 1438.032059][T22510] kmalloc-cg-2k 15332KB 15776KB [ 1438.067606][T22510] kmalloc-cg-1k 4592KB 4832KB [ 1438.109622][T22510] kmalloc-cg-512 2559KB 3040KB [ 1438.115776][T22510] kmalloc-cg-256 587KB 624KB [ 1438.132434][T22510] kmalloc-cg-128 383KB 396KB [ 1438.172069][T22510] kmalloc-cg-64 64KB 92KB [ 1438.188004][T22510] kmalloc-cg-32 54KB 200KB [ 1438.194487][T22510] kmalloc-cg-16 4KB 8KB [ 1438.217961][T22510] kmalloc-cg-8 32KB 36KB [ 1438.224112][T22510] kmalloc-cg-192 60KB 76KB [ 1438.278152][T22510] kmalloc-cg-96 95KB 128KB [ 1438.308045][T22510] kmalloc-8k 9072KB 9888KB [ 1438.348469][T22510] kmalloc-4k 174272KB 175304KB [ 1438.371516][T22510] kmalloc-2k 13396KB 15936KB [ 1438.391831][T22510] kmalloc-1k 18930KB 19952KB [ 1438.409580][T22510] kmalloc-512 14054KB 14480KB [ 1438.438110][T22510] kmalloc-256 6687KB 6764KB [ 1438.458315][T22510] kmalloc-128 2765KB 3652KB [ 1438.483673][T22510] kmalloc-64 3513KB 3948KB [ 1438.558293][T22510] kmalloc-32 2617KB 4164KB [ 1438.585957][T22510] kmalloc-16 503KB 532KB [ 1438.622643][T22510] kmalloc-8 486KB 568KB [ 1438.643091][T22510] kmalloc-192 2276KB 2396KB [ 1438.663493][T22510] kmalloc-96 2281KB 2448KB [ 1438.694125][T22510] kmem_cache_node 213KB 220KB [ 1438.720965][T22510] kmem_cache 177KB 195KB [ 1438.753170][T22510] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz8,task=syz.8.4550,pid=22510,uid=0 [ 1438.860231][T22510] Out of memory (oom_kill_allocating_task): Killed process 22510 (syz.8.4550) total-vm:102020kB, anon-rss:0kB, file-rss:20484kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 1438.980763][ T29] audit: type=1326 audit(1772237467.325:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22567 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1439.088121][ T29] audit: type=1326 audit(1772237467.325:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22567 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1439.188034][ T29] audit: type=1326 audit(1772237467.325:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22567 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1439.218924][ T29] audit: type=1326 audit(1772237467.415:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22567 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1439.617115][ T7464] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1439.801607][ T7464] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 1439.831595][ T7464] usb 3-1: config 7 has no interface number 0 [ 1439.890019][ T7464] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1439.948271][ T7464] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1439.995393][ T7464] usb 3-1: config 7 interface 252 has no altsetting 0 [ 1440.292768][ T7464] usb 3-1: string descriptor 0 read error: -22 [ 1440.341955][ T7464] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1440.365706][T22582] netlink: 'syz.7.4570': attribute type 9 has an invalid length. [ 1440.461456][ T7464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.503049][T22583] netlink: 'syz.7.4570': attribute type 11 has an invalid length. [ 1440.694851][ T7464] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 1440.743949][T18025] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1440.769739][T18025] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1440.807679][T18025] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1440.838401][T22568] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1440.868109][T18025] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1440.879650][T18025] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1440.990910][T12068] usb 3-1: USB disconnect, device number 103 [ 1441.834685][ T5989] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.173094][ T5989] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.415675][T22603] netlink: 'syz.6.4577': attribute type 9 has an invalid length. [ 1442.430630][ T5989] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.969412][T14041] Bluetooth: hci9: command tx timeout [ 1443.140058][T22617] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 1443.193956][ T5989] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.246105][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1443.351494][T22618] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1443.362795][T22618] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1443.376560][T22618] bond2: (slave ip6gre1): making interface the new active one [ 1443.387662][T22618] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1443.445538][T22621] hsr0: entered promiscuous mode [ 1443.788404][T22616] hsr0: left promiscuous mode [ 1443.964220][T22585] chnl_net:caif_netlink_parms(): no params data found [ 1444.000452][T22624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1444.053319][T22625] fuse: Unknown parameter ' [ 1444.053319][T22625] @20x0000000000000006' [ 1444.908091][ T5989] bridge_slave_1: left allmulticast mode [ 1444.913991][ T5989] bridge_slave_1: left promiscuous mode [ 1444.959323][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.051891][T14041] Bluetooth: hci9: command tx timeout [ 1445.057345][ T5989] bridge_slave_0: left allmulticast mode [ 1445.057372][ T5989] bridge_slave_0: left promiscuous mode [ 1445.058119][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.768723][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.849196][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.892978][ T5989] bond0 (unregistering): Released all slaves [ 1445.955867][T22585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.986165][T22585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.014655][T22585] bridge_slave_0: entered allmulticast mode [ 1446.066569][T22585] bridge_slave_0: entered promiscuous mode [ 1446.444465][T22585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.484279][T22585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.577065][T22585] bridge_slave_1: entered allmulticast mode [ 1446.623934][T22585] bridge_slave_1: entered promiscuous mode [ 1446.651010][T22662] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1446.846885][T22666] netlink: 'syz.2.4588': attribute type 9 has an invalid length. [ 1446.958584][T22585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.987041][T22585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.132483][T14041] Bluetooth: hci9: command tx timeout [ 1447.721239][T22585] team0: Port device team_slave_0 added [ 1447.810423][T22585] team0: Port device team_slave_1 added [ 1447.924079][ T5989] hsr_slave_0: left promiscuous mode [ 1448.035092][ T5989] hsr_slave_1: left promiscuous mode [ 1448.092243][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.288083][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.714094][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.808303][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.888306][ T5989] veth1_macvtap: left promiscuous mode [ 1448.893962][ T5989] veth0_macvtap: left promiscuous mode [ 1448.952989][ T5989] veth1_vlan: left promiscuous mode [ 1448.988012][ T5989] veth0_vlan: left promiscuous mode [ 1449.218487][T14041] Bluetooth: hci9: command tx timeout [ 1450.108708][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 1450.202824][ T29] audit: type=1326 audit(1772237478.505:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.263488][ T29] audit: type=1326 audit(1772237478.505:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.286828][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 1450.458055][ T29] audit: type=1326 audit(1772237478.505:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.511341][ T29] audit: type=1326 audit(1772237478.505:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.573385][ T29] audit: type=1326 audit(1772237478.505:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.628058][ T29] audit: type=1326 audit(1772237478.505:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.732893][ T29] audit: type=1326 audit(1772237478.505:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1450.938656][ T29] audit: type=1326 audit(1772237478.505:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1451.065672][T22585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.095240][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.123316][ T29] audit: type=1326 audit(1772237478.505:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1451.265309][ T29] audit: type=1326 audit(1772237478.515:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22689 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1451.298459][T22585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.339283][T22695] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1451.397511][T22585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.468164][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.564954][T22585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.095444][T22585] hsr_slave_0: entered promiscuous mode [ 1452.209396][T22585] hsr_slave_1: entered promiscuous mode [ 1452.215585][T22585] debugfs: 'hsr0' already exists in 'hsr' [ 1452.300445][T22585] Cannot create hsr debugfs directory [ 1452.750361][T22707] netlink: 'syz.2.4599': attribute type 9 has an invalid length. [ 1453.470581][T21931] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1453.680125][T21931] usb 3-1: Using ep0 maxpacket: 8 [ 1453.708258][T21931] usb 3-1: config 5 has an invalid interface number: 202 but max is 0 [ 1453.737089][T21931] usb 3-1: config 5 has no interface number 0 [ 1453.761152][T21931] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1453.878052][T21931] usb 3-1: config 5 interface 202 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 584 [ 1453.918048][T21931] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1453.959556][T21931] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1454.040145][T21931] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1454.107615][T21931] usb 3-1: config 5 interface 202 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1454.182957][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1454.234479][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1454.266234][T22731] FAULT_INJECTION: forcing a failure. [ 1454.266234][T22731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.298128][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1454.328992][T22731] CPU: 0 UID: 0 PID: 22731 Comm: syz.7.4604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.329018][T22731] Tainted: [L]=SOFTLOCKUP [ 1454.329025][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1454.329034][T22731] Call Trace: [ 1454.329041][T22731] [ 1454.329048][T22731] dump_stack_lvl+0xe8/0x150 [ 1454.329080][T22731] should_fail_ex+0x412/0x560 [ 1454.329102][T22731] _copy_from_user+0x2d/0xb0 [ 1454.329126][T22731] video_usercopy+0x36f/0x14b0 [ 1454.329147][T22731] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1454.329164][T22731] ? __pfx___video_do_ioctl+0x10/0x10 [ 1454.329183][T22731] ? __pfx_video_usercopy+0x10/0x10 [ 1454.329208][T22731] ? __fget_files+0x2a/0x420 [ 1454.329231][T22731] ? __fget_files+0x2a/0x420 [ 1454.329251][T22731] ? __fget_files+0x3a0/0x420 [ 1454.329274][T22731] v4l2_ioctl+0x18d/0x1e0 [ 1454.329291][T22731] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1454.329307][T22731] __se_sys_ioctl+0xfc/0x170 [ 1454.329326][T22731] do_syscall_64+0x14d/0xf80 [ 1454.329339][T22731] ? trace_irq_disable+0x3b/0x150 [ 1454.329361][T22731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.329377][T22731] ? clear_bhb_loop+0x40/0x90 [ 1454.329395][T22731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.329412][T22731] RIP: 0033:0x7f8a60f9c799 [ 1454.329425][T22731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.329438][T22731] RSP: 002b:00007f8a61f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.329455][T22731] RAX: ffffffffffffffda RBX: 00007f8a61215fa0 RCX: 00007f8a60f9c799 [ 1454.329466][T22731] RDX: 0000200000000500 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1454.329476][T22731] RBP: 00007f8a61f40090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.329486][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.329495][T22731] R13: 00007f8a61216038 R14: 00007f8a61215fa0 R15: 00007f8a6133fa48 [ 1454.329518][T22731] [ 1454.737999][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1454.754872][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1454.769794][T21931] usb 3-1: config 5 interface 202 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1454.788098][T21931] usb 3-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1454.794756][T22585] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1454.822593][T21931] usb 3-1: config 5 interface 202 has no altsetting 0 [ 1454.866805][T21931] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=18.24 [ 1454.876449][T21931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.890393][T22585] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1455.032810][T21931] usb 3-1: Product: 餶覇숆雸詥ꑗሾ拥谴톢꩒ዼ嘰࠽롙惰➉ꑻ櫑됳詣否焌䄠ż鿧諾秄ٸ⯫ㅠ沬䏒ꊥﵿ殰꜁镁᥉◚涩䔿㿶芷⑆鞌햜珞ﮗ흀름鱓哫腫઱崇沠衤辦@爑焑皬䲕五९깈✯讙닝 [ 1455.070003][T22585] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1455.126149][T22585] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1455.256900][T21931] usb 3-1: Manufacturer: ᠉ [ 1455.285509][T21931] usb 3-1: SerialNumber: syz [ 1455.321379][T22715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1455.359013][T22715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1455.801847][T21931] ums_eneub6250 3-1:5.202: USB Mass Storage device detected [ 1455.928358][T18025] Bluetooth: hci0: command 0x0406 tx timeout [ 1455.940820][T22585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.957758][T22585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.037662][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.044930][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.258477][T21931] usb 3-1: USB disconnect, device number 104 [ 1456.282369][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.289582][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.929510][T22585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.230409][T22585] veth0_vlan: entered promiscuous mode [ 1457.296188][T22585] veth1_vlan: entered promiscuous mode [ 1457.561567][T22585] veth0_macvtap: entered promiscuous mode [ 1457.634737][T22585] veth1_macvtap: entered promiscuous mode [ 1457.804998][T22585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.846079][T22585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.919109][ T5984] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.947347][ T5984] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.012212][ T5984] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.135736][ T5984] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.911268][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.943949][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.167686][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.200917][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.787997][T22514] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1462.946941][ T5989] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.110472][T22514] usb 3-1: Using ep0 maxpacket: 32 [ 1463.150163][T22514] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1463.193479][T22514] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1463.223419][T22514] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1463.253805][T22514] usb 3-1: Product: syz [ 1463.272790][T22514] usb 3-1: Manufacturer: syz [ 1463.295482][T22514] usb 3-1: SerialNumber: syz [ 1463.325147][T22514] usb 3-1: config 0 descriptor?? [ 1463.354494][T22830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1463.382403][T22514] hub 3-1:0.0: bad descriptor, ignoring hub [ 1463.406446][T22514] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1464.456341][T22830] FAULT_INJECTION: forcing a failure. [ 1464.456341][T22830] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.469575][T22830] CPU: 0 UID: 0 PID: 22830 Comm: syz.2.4620 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.469600][T22830] Tainted: [L]=SOFTLOCKUP [ 1464.469606][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.469616][T22830] Call Trace: [ 1464.469622][T22830] [ 1464.469630][T22830] dump_stack_lvl+0xe8/0x150 [ 1464.469656][T22830] should_fail_ex+0x412/0x560 [ 1464.469678][T22830] should_failslab+0xa8/0x100 [ 1464.469699][T22830] __kmalloc_noprof+0xe8/0x760 [ 1464.469715][T22830] ? raw_queue_event+0x86/0x2e0 [ 1464.469730][T22830] ? __pfx_dummy_pullup+0x10/0x10 [ 1464.469748][T22830] raw_queue_event+0x86/0x2e0 [ 1464.469764][T22830] ? __pfx_dummy_pullup+0x10/0x10 [ 1464.469779][T22830] gadget_disconnect+0x51/0xe0 [ 1464.469804][T22830] usb_gadget_disconnect_locked+0x233/0x4d0 [ 1464.469825][T22830] gadget_unbind_driver+0xc7/0x450 [ 1464.469847][T22830] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1464.469868][T22830] device_release_driver_internal+0x46f/0x860 [ 1464.469890][T22830] driver_detach+0x1f3/0x2d0 [ 1464.469909][T22830] bus_remove_driver+0x226/0x320 [ 1464.469939][T22830] usb_gadget_unregister_driver+0x4e/0x70 [ 1464.469958][T22830] raw_release+0xd7/0x260 [ 1464.469981][T22830] ? __pfx_raw_release+0x10/0x10 [ 1464.470010][T22830] __fput+0x44f/0xa70 [ 1464.470040][T22830] fput_close_sync+0x11f/0x240 [ 1464.470061][T22830] ? __pfx_fput_close_sync+0x10/0x10 [ 1464.470092][T22830] __x64_sys_close+0x7e/0x110 [ 1464.470114][T22830] do_syscall_64+0x14d/0xf80 [ 1464.470128][T22830] ? trace_irq_disable+0x3b/0x150 [ 1464.470154][T22830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.470170][T22830] ? clear_bhb_loop+0x40/0x90 [ 1464.470189][T22830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.470209][T22830] RIP: 0033:0x7f350395cfce [ 1464.470225][T22830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1464.470238][T22830] RSP: 002b:00007f3504828f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1464.470255][T22830] RAX: ffffffffffffffda RBX: 00007f35048296c0 RCX: 00007f350395cfce [ 1464.470266][T22830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1464.470275][T22830] RBP: 00007f3504829090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.470285][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.470294][T22830] R13: 00007f3503c16038 R14: 00007f3503c15fa0 R15: 00007f3503d3fa48 [ 1464.470318][T22830] [ 1464.777481][T22830] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1464.822152][T22856] netlink: 'syz.6.4626': attribute type 2 has an invalid length. [ 1464.878728][T12068] usb 3-1: USB disconnect, device number 105 [ 1465.776912][T22873] xt_hashlimit: size too large, truncated to 1048576 [ 1466.206621][T18025] Bluetooth: hci6: command 0x0406 tx timeout [ 1467.403266][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1467.403285][ T29] audit: type=1326 audit(1772237495.745:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22883 comm="syz.1.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1467.463301][ T29] audit: type=1326 audit(1772237495.745:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22883 comm="syz.1.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6919c799 code=0x7ffc0000 [ 1467.568350][T22514] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1467.728919][T22514] usb 10-1: Using ep0 maxpacket: 8 [ 1467.743633][T22514] usb 10-1: config 5 has an invalid interface number: 202 but max is 0 [ 1467.779481][T22514] usb 10-1: config 5 has no interface number 0 [ 1468.040273][T22514] usb 10-1: config 5 interface 202 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1468.092845][T22514] usb 10-1: config 5 interface 202 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 584 [ 1468.128856][T22514] usb 10-1: config 5 interface 202 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1468.167728][T22514] usb 10-1: config 5 interface 202 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1468.248133][T22514] usb 10-1: config 5 interface 202 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1468.273838][T22514] usb 10-1: config 5 interface 202 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1468.312551][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1468.415575][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1468.451456][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1468.471669][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1468.506092][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1468.536965][T22514] usb 10-1: config 5 interface 202 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1468.566518][T22514] usb 10-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1468.628109][T22514] usb 10-1: config 5 interface 202 has no altsetting 0 [ 1468.654921][T22514] usb 10-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=18.24 [ 1468.665654][T22514] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.676428][T22514] usb 10-1: Product: 餶覇숆雸詥ꑗሾ拥谴톢꩒ዼ嘰࠽롙惰➉ꑻ櫑됳詣否焌䄠ż鿧諾秄ٸ⯫ㅠ沬䏒ꊥﵿ殰꜁镁᥉◚涩䔿㿶芷⑆鞌햜珞ﮗ흀름鱓哫腫઱崇沠衤辦@爑焑皬䲕五९깈✯讙닝 [ 1468.738095][T22514] usb 10-1: Manufacturer: ᠉ [ 1468.748282][T22514] usb 10-1: SerialNumber: syz [ 1468.770971][T22888] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1468.781016][T22888] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1469.309506][T22514] ums_eneub6250 10-1:5.202: USB Mass Storage device detected [ 1469.345618][T22901] AppArmor: change_hat: Invalid input 'M' [ 1469.411357][T22514] usb 10-1: USB disconnect, device number 2 [ 1469.719327][T22905] FAULT_INJECTION: forcing a failure. [ 1469.719327][T22905] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.770192][T22905] CPU: 0 UID: 0 PID: 22905 Comm: syz.7.4638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.770219][T22905] Tainted: [L]=SOFTLOCKUP [ 1469.770225][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1469.770234][T22905] Call Trace: [ 1469.770241][T22905] [ 1469.770248][T22905] dump_stack_lvl+0xe8/0x150 [ 1469.770274][T22905] should_fail_ex+0x412/0x560 [ 1469.770296][T22905] should_failslab+0xa8/0x100 [ 1469.770315][T22905] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1469.770331][T22905] ? __lock_acquire+0x6b5/0x2cf0 [ 1469.770351][T22905] ? __kernfs_new_node+0xa9/0x8e0 [ 1469.770378][T22905] kstrdup+0x42/0x100 [ 1469.770398][T22905] __kernfs_new_node+0xa9/0x8e0 [ 1469.770419][T22905] ? arch_stack_walk+0xfb/0x150 [ 1469.770444][T22905] ? __lock_acquire+0x6b5/0x2cf0 [ 1469.770462][T22905] ? __pfx___kernfs_new_node+0x10/0x10 [ 1469.770485][T22905] ? kernfs_root+0x1c/0x230 [ 1469.770510][T22905] ? kernfs_root+0x1c/0x230 [ 1469.770530][T22905] ? kernfs_root+0x1c/0x230 [ 1469.770548][T22905] ? kernfs_root+0x1c/0x230 [ 1469.770572][T22905] kernfs_new_node+0x102/0x210 [ 1469.770597][T22905] kernfs_create_dir_ns+0x44/0x130 [ 1469.770623][T22905] sysfs_create_dir_ns+0x12f/0x2a0 [ 1469.770646][T22905] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1469.770667][T22905] ? do_raw_spin_unlock+0xf5/0x210 [ 1469.770686][T22905] kobject_add_internal+0x62b/0xd00 [ 1469.770710][T22905] kobject_add+0x163/0x240 [ 1469.770730][T22905] ? __pfx_kobject_add+0x10/0x10 [ 1469.770746][T22905] ? do_raw_spin_unlock+0xf5/0x210 [ 1469.770773][T22905] ? get_device_parent+0x366/0x3a0 [ 1469.770801][T22905] device_add+0x408/0xb70 [ 1469.770827][T22905] device_create+0x269/0x300 [ 1469.770845][T22905] ? format_decode+0x60f/0xe10 [ 1469.770863][T22905] ? string+0x279/0x2b0 [ 1469.770879][T22905] ? widen_string+0x3b/0x2a0 [ 1469.770899][T22905] ? __pfx_device_create+0x10/0x10 [ 1469.770924][T22905] bdi_register_va+0x9c/0x770 [ 1469.770949][T22905] super_setup_bdi_name+0xf8/0x210 [ 1469.770970][T22905] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1469.770992][T22905] ? do_raw_spin_unlock+0xf5/0x210 [ 1469.771010][T22905] fuse_fill_super_common+0x680/0x1270 [ 1469.771038][T22905] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 1469.771057][T22905] ? __init_swait_queue_head+0xa9/0x150 [ 1469.771084][T22905] ? shrinker_register+0x16b/0x230 [ 1469.771106][T22905] ? sget_fc+0x962/0xa40 [ 1469.771129][T22905] fuse_fill_super+0x176/0x1f0 [ 1469.771148][T22905] ? __pfx_fuse_fill_super+0x10/0x10 [ 1469.771191][T22905] get_tree_nodev+0xbb/0x150 [ 1469.771215][T22905] fuse_get_tree+0x2fb/0x4f0 [ 1469.771248][T22905] vfs_get_tree+0x92/0x2a0 [ 1469.771276][T22905] do_new_mount+0x341/0xd30 [ 1469.771297][T22905] ? apparmor_capable+0x126/0x170 [ 1469.771323][T22905] ? __pfx_do_new_mount+0x10/0x10 [ 1469.771344][T22905] ? ns_capable+0x89/0xe0 [ 1469.771365][T22905] ? path_mount+0x690/0x10e0 [ 1469.771389][T22905] ? user_path_at+0xd4/0x160 [ 1469.771414][T22905] __se_sys_mount+0x31d/0x420 [ 1469.771439][T22905] ? __pfx___se_sys_mount+0x10/0x10 [ 1469.771466][T22905] ? __x64_sys_mount+0x20/0xc0 [ 1469.771488][T22905] do_syscall_64+0x14d/0xf80 [ 1469.771502][T22905] ? trace_irq_disable+0x3b/0x150 [ 1469.771524][T22905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.771540][T22905] ? clear_bhb_loop+0x40/0x90 [ 1469.771559][T22905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.771574][T22905] RIP: 0033:0x7f8a60f9c799 [ 1469.771589][T22905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.771603][T22905] RSP: 002b:00007f8a61f40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1469.771620][T22905] RAX: ffffffffffffffda RBX: 00007f8a61215fa0 RCX: 00007f8a60f9c799 [ 1469.771631][T22905] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 1469.771642][T22905] RBP: 00007f8a61f40090 R08: 0000200000000080 R09: 0000000000000000 [ 1469.771652][T22905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.771661][T22905] R13: 00007f8a61216038 R14: 00007f8a61215fa0 R15: 00007f8a6133fa48 [ 1469.771684][T22905] [ 1469.771695][T22905] kobject: kobject_add_internal failed for 0:75 (error: -12 parent: bdi) [ 1471.172836][T12068] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1471.348138][T12068] usb 10-1: Using ep0 maxpacket: 16 [ 1471.374781][T12068] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.386697][T12068] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.461315][T12068] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1471.552622][T12068] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.589108][T12068] usb 10-1: Product: syz [ 1471.602563][T12068] usb 10-1: Manufacturer: syz [ 1471.614808][T12068] usb 10-1: SerialNumber: syz [ 1471.928884][T12068] usb 10-1: 0:2 : does not exist [ 1471.999469][T12068] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1472.304340][T12068] usb 10-1: USB disconnect, device number 3 [ 1472.343198][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.659039][T22934] netlink: 'syz.7.4647': attribute type 12 has an invalid length. [ 1472.673961][T22934] netlink: 'syz.7.4647': attribute type 29 has an invalid length. [ 1472.703456][T22934] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4647'. [ 1472.736519][T22934] netlink: 'syz.7.4647': attribute type 1 has an invalid length. [ 1472.772177][T22934] netlink: 'syz.7.4647': attribute type 2 has an invalid length. [ 1472.797416][T22934] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4647'. [ 1473.264428][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4650'. [ 1473.784180][ T29] audit: type=1326 audit(1772237502.125:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22940 comm="syz.2.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1473.818436][ T29] audit: type=1326 audit(1772237502.155:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22940 comm="syz.2.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1474.078059][T22515] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1474.255015][T22515] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 1474.273632][T22515] usb 3-1: config 7 has no interface number 0 [ 1474.287256][T22515] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1474.315943][T22515] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1474.359000][T22515] usb 3-1: config 7 interface 252 has no altsetting 0 [ 1474.402367][T22515] usb 3-1: string descriptor 0 read error: -22 [ 1474.413751][T22515] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1474.456006][T22515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.518227][T22515] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 1474.570074][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1474.590734][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.718717][T22941] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1474.734035][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1474.752324][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.838333][ T29] audit: type=1326 audit(1772237503.185:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22940 comm="syz.2.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f350399c799 code=0x7ffc0000 [ 1474.938623][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1474.995538][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.802274][ T5989] bridge_slave_1: left allmulticast mode [ 1475.832548][ T5989] bridge_slave_1: left promiscuous mode [ 1475.867070][T22976] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1475.876492][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.907529][ T5989] bridge_slave_0: left allmulticast mode [ 1475.940726][ T5989] bridge_slave_0: left promiscuous mode [ 1475.961860][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.981737][T18025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1475.995600][T18025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1476.010254][T18025] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1476.033488][T18025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1476.042726][T18025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1476.185054][ T7464] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1476.269609][ T7563] usb 3-1: USB disconnect, device number 106 [ 1476.459402][ T7464] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1476.494442][ T7464] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.524867][ T7464] usb 10-1: Product: syz [ 1476.537927][ T7464] usb 10-1: Manufacturer: syz [ 1476.542705][ T7464] usb 10-1: SerialNumber: syz [ 1476.600133][ T7464] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1476.694485][ T7563] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1476.954842][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.029310][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.080269][ T5989] bond0 (unregistering): Released all slaves [ 1477.275096][T22977] netlink: 'syz.9.4658': attribute type 10 has an invalid length. [ 1477.726158][T22977] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1477.770346][ T7563] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1477.800682][ T7563] ath9k_htc: Failed to initialize the device [ 1477.893952][ T7563] usb 10-1: ath9k_htc: USB layer deinitialized [ 1478.053157][T22997] tunl0: Caught tx_queue_len zero misconfig [ 1478.094883][T14041] Bluetooth: hci7: command tx timeout [ 1478.589247][ T5989] hsr_slave_0: left promiscuous mode [ 1478.614203][ T5989] hsr_slave_1: left promiscuous mode [ 1478.628854][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.651024][T12068] usb 10-1: USB disconnect, device number 4 [ 1478.663126][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.713043][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.720734][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.735804][T22976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.821833][ T5989] veth1_macvtap: left promiscuous mode [ 1478.842113][ T5989] veth0_macvtap: left promiscuous mode [ 1478.859391][ T5989] veth1_vlan: left promiscuous mode [ 1478.882193][ T5989] veth0_vlan: left promiscuous mode [ 1478.891301][T23006] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4662'. [ 1480.168478][T14041] Bluetooth: hci7: command tx timeout [ 1480.202040][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 1480.345850][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 1480.937026][T18025] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1480.951724][T18025] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1480.971366][T18025] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1480.991174][T18025] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1481.001760][T18025] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1481.368149][T22515] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1481.508076][T22515] usb 10-1: device descriptor read/64, error -71 [ 1481.768118][T22515] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1481.898263][T22979] chnl_net:caif_netlink_parms(): no params data found [ 1481.907996][T22515] usb 10-1: device descriptor read/64, error -71 [ 1482.022589][T22515] usb usb10-port1: attempt power cycle [ 1482.242922][T23040] bridge_slave_0: entered promiscuous mode [ 1482.252320][T14041] Bluetooth: hci7: command tx timeout [ 1482.285305][T23040] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1482.388873][T22515] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1482.428681][T22515] usb 10-1: device descriptor read/8, error -71 [ 1482.579351][T22979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.611340][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.652686][T22979] bridge_slave_0: entered allmulticast mode [ 1482.689176][T22979] bridge_slave_0: entered promiscuous mode [ 1482.698180][T22515] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1482.740649][T22515] usb 10-1: device descriptor read/8, error -71 [ 1482.819443][T22979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.826700][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.875129][T22979] bridge_slave_1: entered allmulticast mode [ 1482.888503][T22515] usb usb10-port1: unable to enumerate USB device [ 1482.930261][T22979] bridge_slave_1: entered promiscuous mode [ 1483.060171][T14041] Bluetooth: hci8: command tx timeout [ 1483.201670][T22979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.291095][T22979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.547538][T22979] team0: Port device team_slave_0 added [ 1483.604910][T22979] team0: Port device team_slave_1 added [ 1483.663358][T23017] chnl_net:caif_netlink_parms(): no params data found [ 1483.905053][T22979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.955220][T22979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.016872][T22979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.040863][T22979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.095724][T22979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.226694][T22979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.329201][T14041] Bluetooth: hci7: command tx timeout [ 1484.575772][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.582335][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.778487][T22979] hsr_slave_0: entered promiscuous mode [ 1484.819268][T22979] hsr_slave_1: entered promiscuous mode [ 1484.838987][T22979] debugfs: 'hsr0' already exists in 'hsr' [ 1484.844778][T22979] Cannot create hsr debugfs directory [ 1485.105258][T23017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.130469][T14041] Bluetooth: hci8: command tx timeout [ 1485.194867][T23017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.228190][T23017] bridge_slave_0: entered allmulticast mode [ 1485.240257][T23017] bridge_slave_0: entered promiscuous mode [ 1485.323579][T23017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.348171][T23017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.378735][T23017] bridge_slave_1: entered allmulticast mode [ 1485.388004][ T29] audit: type=1326 audit(1772237513.725:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.9.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff529f9c799 code=0x7ffc0000 [ 1485.433074][T23017] bridge_slave_1: entered promiscuous mode [ 1485.480529][ T29] audit: type=1326 audit(1772237513.725:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.9.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff529f9c799 code=0x7ffc0000 [ 1485.608902][T12068] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1485.643704][T23017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.688290][ T7563] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 1485.693446][T23017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.787917][T12068] usb 3-1: Using ep0 maxpacket: 32 [ 1485.799518][T12068] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1485.835328][T12068] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1485.861887][T12068] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1485.902608][ T7563] usb 10-1: config 7 has an invalid interface number: 252 but max is 0 [ 1485.908733][T12068] usb 3-1: Product: syz [ 1485.915122][T12068] usb 3-1: Manufacturer: syz [ 1485.930411][ T7563] usb 10-1: config 7 has no interface number 0 [ 1485.958308][ T7563] usb 10-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1485.959299][T12068] usb 3-1: SerialNumber: syz [ 1486.007448][ T7563] usb 10-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1486.015608][T12068] usb 3-1: config 0 descriptor?? [ 1486.040045][T23017] team0: Port device team_slave_0 added [ 1486.048674][T23082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1486.065079][ T7563] usb 10-1: config 7 interface 252 has no altsetting 0 [ 1486.079784][T12068] hub 3-1:0.0: bad descriptor, ignoring hub [ 1486.090424][T23017] team0: Port device team_slave_1 added [ 1486.106298][T12068] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1486.122695][ T7563] usb 10-1: string descriptor 0 read error: -22 [ 1486.144898][ T7563] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1486.175145][ T7563] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.220502][ T7563] idmouse 10-1:7.252: Unable to find bulk-in endpoint. [ 1486.446898][T23072] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1486.525845][T22514] usb 10-1: USB disconnect, device number 9 [ 1486.546096][T22979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.644790][T23017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.667932][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.758245][T23017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.791582][T23017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.818379][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.902691][T23017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.048298][T22979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.129090][ T30] INFO: task syz.3.4335:21701 blocked for more than 143 seconds. [ 1487.141831][ T30] Tainted: G L syzkaller #0 [ 1487.151342][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1487.177044][ T30] task:syz.3.4335 state:D stack:27384 pid:21701 tgid:21698 ppid:16080 task_flags:0x480040 flags:0x00080002 [ 1487.211547][T14041] Bluetooth: hci8: command tx timeout [ 1487.240890][ T30] Call Trace: [ 1487.255228][ T30] [ 1487.272326][ T30] __schedule+0x1585/0x5340 [ 1487.300067][ T30] ? __pfx___schedule+0x10/0x10 [ 1487.317800][ T30] ? schedule+0x90/0x360 [ 1487.362405][ T30] schedule+0x164/0x360 [ 1487.366702][ T30] schedule_preempt_disabled+0x13/0x30 [ 1487.470248][ T30] __mutex_lock+0x7fe/0x1300 [ 1487.474958][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1487.534301][ T30] ? blk_trace_setup+0x2d3/0x520 [ 1487.568066][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1487.573218][ T30] blk_trace_setup+0x2d3/0x520 [ 1487.638010][ T30] ? __pfx_blk_trace_setup+0x10/0x10 [ 1487.643418][ T30] ? snprintf+0xe8/0x140 [ 1487.647733][ T30] blk_trace_ioctl+0x37f/0x920 [ 1487.699224][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1487.758042][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1487.792961][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1487.818468][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1487.824200][ T30] ? do_vfs_ioctl+0x1166/0x1530 [ 1487.851181][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1487.857397][ T30] ? do_futex+0x395/0x420 [ 1487.888423][ T30] blkdev_ioctl+0x4c1/0x740 [ 1487.893545][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1487.940366][ T30] ? __fget_files+0x2a/0x420 [ 1487.945059][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1487.958141][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1487.988293][ T30] __se_sys_ioctl+0xfc/0x170 [ 1487.993098][ T30] do_syscall_64+0x14d/0xf80 [ 1488.029297][T12068] usb 3-1: USB disconnect, device number 107 [ 1488.040193][ T30] ? trace_irq_disable+0x3b/0x150 [ 1488.072148][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.099739][ T30] ? clear_bhb_loop+0x40/0x90 [ 1488.128258][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.134344][ T30] RIP: 0033:0x7fa804d9c799 [ 1488.147998][ T30] RSP: 002b:00007fa805c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.157182][ T30] RAX: ffffffffffffffda RBX: 00007fa805016180 RCX: 00007fa804d9c799 [ 1488.188040][ T30] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000006 [ 1488.196138][ T30] RBP: 00007fa804e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1488.245107][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.258187][ T30] R13: 00007fa805016218 R14: 00007fa805016180 R15: 00007fa80513fa48 [ 1488.266239][ T30] [ 1488.288186][ T30] INFO: task syz.3.4335:21702 blocked for more than 144 seconds. [ 1488.296024][ T30] Tainted: G L syzkaller #0 [ 1488.318034][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1488.326876][ T30] task:syz.3.4335 state:D stack:28472 pid:21702 tgid:21698 ppid:16080 task_flags:0x400040 flags:0x00080002 [ 1488.340067][ T30] Call Trace: [ 1488.343384][ T30] [ 1488.346326][ T30] __schedule+0x1585/0x5340 [ 1488.358279][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1488.364170][ T30] ? __pfx___schedule+0x10/0x10 [ 1488.369777][ T30] ? schedule+0x90/0x360 [ 1488.374305][ T30] schedule+0x164/0x360 [ 1488.388098][ T30] schedule_preempt_disabled+0x13/0x30 [ 1488.398222][ T30] __mutex_lock+0x7fe/0x1300 [ 1488.404885][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1488.411520][ T30] ? blk_trace_startstop+0x8f/0x610 [ 1488.416901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1488.422633][ T30] ? unwind_next_frame+0xa5/0x23c0 [ 1488.438251][ T30] blk_trace_startstop+0x8f/0x610 [ 1488.443361][ T30] ? __pfx_blk_trace_startstop+0x10/0x10 [ 1488.450719][ T30] blk_trace_ioctl+0x314/0x920 [ 1488.467975][ T30] ? kernel_text_address+0xa5/0xe0 [ 1488.478511][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1488.483921][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1488.498879][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1488.505140][ T30] ? arch_stack_walk+0xfb/0x150 [ 1488.518074][ T30] ? stack_trace_save+0xa9/0x100 [ 1488.538279][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1488.543876][ T30] ? kasan_save_free_info+0x46/0x50 [ 1488.549553][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1488.555736][ T30] ? format_decode+0xd0/0xe10 [ 1488.561336][ T30] ? kasan_save_track+0x4f/0x80 [ 1488.572738][ T30] ? kasan_save_track+0x3e/0x80 [ 1488.577772][ T30] ? kasan_save_free_info+0x46/0x50 [ 1488.583799][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1488.589379][ T30] ? kfree+0x1c1/0x630 [ 1488.598265][ T30] ? tomoyo_path_number_perm+0x501/0x630 [ 1488.603958][ T30] ? security_file_ioctl+0xc3/0x2a0 [ 1488.618459][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1488.623480][ T30] ? do_syscall_64+0x14d/0xf80 [ 1488.638369][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.644590][ T30] blkdev_common_ioctl+0x13a7/0x3250 [ 1488.650865][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1488.668388][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1488.673773][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1488.679891][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1488.699986][ T30] ? do_vfs_ioctl+0x1166/0x1530 [ 1488.708148][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1488.713472][ T30] ? freezing_slow_path+0x115/0x160 [ 1488.719306][ T30] blkdev_ioctl+0x528/0x740 [ 1488.724248][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1488.730573][ T30] ? __fget_files+0x2a/0x420 [ 1488.735320][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1488.748001][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1488.753219][ T30] __se_sys_ioctl+0xfc/0x170 [ 1488.759143][ T30] do_syscall_64+0x14d/0xf80 [ 1488.767761][ T30] ? trace_irq_disable+0x3b/0x150 [ 1488.773407][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.779878][ T30] ? clear_bhb_loop+0x40/0x90 [ 1488.784788][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.791375][ T30] RIP: 0033:0x7fa804d9c799 [ 1488.795961][ T30] RSP: 002b:00007fa805bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.805025][ T30] RAX: ffffffffffffffda RBX: 00007fa805016270 RCX: 00007fa804d9c799 [ 1488.814982][ T30] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000006 [ 1488.824316][ T30] RBP: 00007fa804e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1488.832710][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.841337][ T30] R13: 00007fa805016308 R14: 00007fa805016270 R15: 00007fa80513fa48 [ 1488.859783][ T30] [ 1488.868225][ T30] INFO: task syz.3.4335:21706 blocked for more than 145 seconds. [ 1488.903064][ T30] Tainted: G L syzkaller #0 [ 1488.948565][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1488.988792][ T30] task:syz.3.4335 state:D stack:28696 pid:21706 tgid:21698 ppid:16080 task_flags:0x400040 flags:0x00080002 [ 1489.018212][ T30] Call Trace: [ 1489.021761][ T30] [ 1489.024741][ T30] __schedule+0x1585/0x5340 [ 1489.059320][ T30] ? __pfx___schedule+0x10/0x10 [ 1489.088037][ T30] ? schedule+0x90/0x360 [ 1489.092412][ T30] schedule+0x164/0x360 [ 1489.096898][ T30] schedule_preempt_disabled+0x13/0x30 [ 1489.128111][ T30] __mutex_lock+0x7fe/0x1300 [ 1489.132844][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1489.158097][ T30] ? blk_trace_ioctl+0x39a/0x920 [ 1489.163133][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1489.177970][ T30] blk_trace_ioctl+0x39a/0x920 [ 1489.189846][ T30] ? kernel_text_address+0xa5/0xe0 [ 1489.195317][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1489.228004][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1489.233922][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1489.278260][ T30] ? arch_stack_walk+0xfb/0x150 [ 1489.283253][ T30] ? stack_trace_save+0xa9/0x100 [ 1489.298354][T14041] Bluetooth: hci8: command tx timeout [ 1489.307953][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1489.313594][ T30] ? kasan_save_free_info+0x46/0x50 [ 1489.368034][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1489.374665][ T30] ? format_decode+0xd0/0xe10 [ 1489.411568][ T30] ? kasan_save_track+0x4f/0x80 [ 1489.416508][ T30] ? kasan_save_track+0x3e/0x80 [ 1489.448165][ T30] ? kasan_save_free_info+0x46/0x50 [ 1489.453485][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1489.502974][ T30] ? kfree+0x1c1/0x630 [ 1489.507200][ T30] ? tomoyo_path_number_perm+0x501/0x630 [ 1489.538096][ T30] ? security_file_ioctl+0xc3/0x2a0 [ 1489.543677][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1489.557975][ T30] ? do_syscall_64+0x14d/0xf80 [ 1489.562910][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.598041][ T30] blkdev_common_ioctl+0x13a7/0x3250 [ 1489.603441][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1489.627992][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1489.633545][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1489.658314][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1489.664037][ T30] ? do_vfs_ioctl+0x1166/0x1530 [ 1489.732818][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1489.767669][ T30] ? do_futex+0x333/0x420 [ 1489.774880][ T30] blkdev_ioctl+0x528/0x740 [ 1489.788871][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1489.794061][ T30] ? __fget_files+0x2a/0x420 [ 1489.818106][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1489.823135][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1489.838119][ T30] __se_sys_ioctl+0xfc/0x170 [ 1489.842952][ T30] do_syscall_64+0x14d/0xf80 [ 1489.847689][ T30] ? trace_irq_disable+0x3b/0x150 [ 1489.867980][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.874188][ T30] ? clear_bhb_loop+0x40/0x90 [ 1489.898062][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.904051][ T30] RIP: 0033:0x7fa804d9c799 [ 1489.917995][ T30] RSP: 002b:00007fa805bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.926502][ T30] RAX: ffffffffffffffda RBX: 00007fa805016360 RCX: 00007fa804d9c799 [ 1489.947977][ T30] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000006 [ 1489.957930][ T30] RBP: 00007fa804e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.965966][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.997982][ T30] R13: 00007fa8050163f8 R14: 00007fa805016360 R15: 00007fa80513fa48 [ 1490.006051][ T30] [ 1490.020557][ T30] [ 1490.020557][ T30] Showing all locks held in the system: [ 1490.151025][ T30] 1 lock held by pool_workqueue_/3: [ 1490.156312][ T30] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1490.188041][ T30] 1 lock held by khungtaskd/30: [ 1490.238032][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1490.258916][ T30] 2 locks held by getty/5579: [ 1490.263665][ T30] #0: ffff888036b490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1490.338043][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1490.358080][ T30] 3 locks held by kworker/u8:15/5989: [ 1490.363494][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1490.397966][ T30] #1: ffffc90004a77c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1490.479240][ T30] #2: ffffffff8fbccd08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1490.517918][ T30] 3 locks held by syz.0.4320/21641: [ 1490.545623][ T30] 1 lock held by syz.3.4335/21701: [ 1490.598024][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 1490.638019][ T30] 1 lock held by syz.3.4335/21702: [ 1490.643227][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 1490.703180][ T30] 1 lock held by syz.3.4335/21706: [ 1490.726146][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 1490.749061][ T30] 2 locks held by syz.2.4336/21705: [ 1490.760455][ T30] #0: ffffffff8fbccd08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1490.805557][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1490.837982][ T30] 1 lock held by syz.4.4376/21888: [ 1490.843167][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 1490.929079][ T30] 1 lock held by syz.4.4376/21889: [ 1490.934614][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 1490.958026][ T30] 1 lock held by syz.4.4376/21893: [ 1490.963243][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 1490.998039][ T30] 1 lock held by syz.5.4462/22196: [ 1491.003244][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 1491.028193][ T30] 1 lock held by syz.5.4462/22206: [ 1491.033470][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 1491.068229][ T30] 1 lock held by syz.5.4462/22208: [ 1491.073409][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 1491.098300][ T30] 1 lock held by syz-executor/22585: [ 1491.103663][ T30] #0: ffffffff8fbccd08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1491.128125][ T30] 1 lock held by syz.6.4630/22869: [ 1491.133321][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 1491.158415][ T30] 1 lock held by syz.6.4630/22871: [ 1491.163603][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 1491.197949][ T30] 1 lock held by syz.6.4630/22874: [ 1491.203221][ T30] #0: ffff888025e71bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 1491.227939][ T30] 7 locks held by syz-executor/22979: [ 1491.233377][ T30] #0: ffff888035312420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1491.258010][ T30] #1: ffff888071367088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1491.277943][ T30] #2: ffff8880223b1008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1491.297949][ T30] #3: ffffffff8f441748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1491.328093][ T30] #4: ffff888033de50e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 1491.347957][ T30] #5: ffff888033de4250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1491.368587][ T30] #6: ffffffff8fbccd08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1491.387952][ T30] 4 locks held by syz-executor/23017: [ 1491.393414][ T30] #0: ffff888028278ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1491.418386][ T30] #1: ffff8880282780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1491.438118][ T30] #2: ffffffff8fd593a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1491.468017][ T30] #3: ffff8880778642f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1491.488034][ T30] 1 lock held by syz.1.4675/23093: [ 1491.493575][ T30] #0: ffffffff8fbccd08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1491.517978][ T30] [ 1491.520400][ T30] ============================================= [ 1491.520400][ T30] [ 1491.548394][ T30] NMI backtrace for cpu 0 [ 1491.548421][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.548449][ T30] Tainted: [L]=SOFTLOCKUP [ 1491.548457][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.548470][ T30] Call Trace: [ 1491.548479][ T30] [ 1491.548488][ T30] dump_stack_lvl+0xe8/0x150 [ 1491.548523][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1491.548550][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1491.548580][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1491.548611][ T30] sys_info+0x135/0x170 [ 1491.548633][ T30] watchdog+0xfd9/0x1030 [ 1491.548670][ T30] ? watchdog+0x21a/0x1030 [ 1491.548709][ T30] kthread+0x388/0x470 [ 1491.548729][ T30] ? __pfx_watchdog+0x10/0x10 [ 1491.548757][ T30] ? __pfx_kthread+0x10/0x10 [ 1491.548779][ T30] ret_from_fork+0x51e/0xb90 [ 1491.548809][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.548835][ T30] ? __switch_to+0xc7d/0x1450 [ 1491.548863][ T30] ? __pfx_kthread+0x10/0x10 [ 1491.548884][ T30] ret_from_fork_asm+0x1a/0x30 [ 1491.548939][ T30] [ 1491.548947][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1491.668261][ C1] NMI backtrace for cpu 1 [ 1491.668283][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.668307][ C1] Tainted: [L]=SOFTLOCKUP [ 1491.668315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.668326][ C1] RIP: 0010:lock_release+0x8c/0x3d0 [ 1491.668354][ C1] Code: 05 99 59 7a 11 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d e1 13 7a 11 41 83 bf 14 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 20 94 df 93 <0f> 84 ea 01 00 00 9c 5b fa 48 c7 c7 ef c1 f0 8d e8 6f b1 0b 0a 65 [ 1491.668370][ C1] RSP: 0018:ffffc90000a08ac0 EFLAGS: 00000083 [ 1491.668386][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000105 [ 1491.668398][ C1] RDX: 0000000000000000 RSI: ffffffff8c27ab60 RDI: ffffffff8c27ab20 [ 1491.668411][ C1] RBP: ffff888026bc9e40 R08: ffff8880b863adcb R09: 1ffff110170c75b9 [ 1491.668425][ C1] R10: dffffc0000000000 R11: ffffed10170c75ba R12: dffffc0000000000 [ 1491.668439][ C1] R13: ffffffff8194adbe R14: ffff888026bca890 R15: ffff88801dae0000 [ 1491.668453][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 1491.668468][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1491.668480][ C1] CR2: 00007ffe783fb118 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1491.668496][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1491.668508][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1491.668521][ C1] Call Trace: [ 1491.668528][ C1] [ 1491.668541][ C1] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 1491.668569][ C1] try_to_wake_up+0x7be/0x1390 [ 1491.668594][ C1] kick_pool+0x47d/0x640 [ 1491.668619][ C1] ? insert_work+0x273/0x330 [ 1491.668642][ C1] __queue_work+0xd10/0x1020 [ 1491.668669][ C1] ? __queue_work+0x1a1/0x1020 [ 1491.668694][ C1] call_timer_fn+0x192/0x640 [ 1491.668716][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1491.668740][ C1] ? call_timer_fn+0xd4/0x640 [ 1491.668761][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1491.668788][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1491.668807][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1491.668833][ C1] __run_timer_base+0x67e/0x8b0 [ 1491.668852][ C1] ? ktime_get+0x45/0x200 [ 1491.668875][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1491.668900][ C1] ? sched_clock_cpu+0x74/0x440 [ 1491.668927][ C1] run_timer_softirq+0xb7/0x170 [ 1491.668948][ C1] handle_softirqs+0x22a/0x870 [ 1491.668973][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1491.669000][ C1] __irq_exit_rcu+0x5f/0x150 [ 1491.669022][ C1] irq_exit_rcu+0x9/0x30 [ 1491.669043][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1491.669070][ C1] [ 1491.669076][ C1] [ 1491.669084][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1491.669103][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1491.669130][ C1] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1491.669151][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1491.669166][ C1] RAX: 0000000001c64741 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1491.669178][ C1] RDX: 0000000000000001 RSI: ffffffff8def2a5a RDI: ffffffff8c27ab80 [ 1491.669191][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1491.669204][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901189b0 [ 1491.669218][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 1491.669232][ C1] ? do_idle+0x1bd/0x500 [ 1491.669261][ C1] default_idle+0x9/0x20 [ 1491.669279][ C1] default_idle_call+0x72/0xb0 [ 1491.669297][ C1] do_idle+0x1bd/0x500 [ 1491.669319][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1491.669342][ C1] ? __pfx_do_idle+0x10/0x10 [ 1491.669371][ C1] cpu_startup_entry+0x43/0x60 [ 1491.669395][ C1] start_secondary+0x101/0x110 [ 1491.669416][ C1] common_startup_64+0x13e/0x147 [ 1491.669443][ C1] [ 1492.065469][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1492.072517][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.083263][ T30] Tainted: [L]=SOFTLOCKUP [ 1492.087628][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1492.097751][ T30] Call Trace: [ 1492.101074][ T30] [ 1492.104046][ T30] vpanic+0x56c/0xa60 [ 1492.108233][ T30] ? __pfx___schedule+0x10/0x10 [ 1492.113233][ T30] ? __pfx_vpanic+0x10/0x10 [ 1492.117891][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1492.123148][ T30] panic+0xc5/0xd0 [ 1492.126955][ T30] ? __pfx_panic+0x10/0x10 [ 1492.131421][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1492.136967][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1492.143174][ T30] watchdog+0x1023/0x1030 [ 1492.147577][ T30] ? watchdog+0x21a/0x1030 [ 1492.152115][ T30] kthread+0x388/0x470 [ 1492.156233][ T30] ? __pfx_watchdog+0x10/0x10 [ 1492.160953][ T30] ? __pfx_kthread+0x10/0x10 [ 1492.165583][ T30] ret_from_fork+0x51e/0xb90 [ 1492.170221][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1492.175461][ T30] ? __switch_to+0xc7d/0x1450 [ 1492.180346][ T30] ? __pfx_kthread+0x10/0x10 [ 1492.184966][ T30] ret_from_fork_asm+0x1a/0x30 [ 1492.189867][ T30] [ 1492.193511][ T30] Kernel Offset: disabled [ 1492.197890][ T30] Rebooting in 86400 seconds..