last executing test programs: 1m51.898402997s ago: executing program 3 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m51.736803474s ago: executing program 3 (id=527): unshare(0x6a040000) socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 1m48.62076218s ago: executing program 3 (id=535): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x304000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7ff, 0x20, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r7, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r8}, 0x10) 1m46.81236537s ago: executing program 3 (id=540): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014709d405f0530dcfec4090212000100"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="000298000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0) syz_usb_disconnect(r0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000000)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="8e310c0000080c0d5d768d97c37e80aa81"], 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) 1m45.07900107s ago: executing program 3 (id=548): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x0, 0x35315258, 0x280, 0x870, 0x1, @discrete={0x2, 0x1}}) 1m44.836936104s ago: executing program 3 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000000000000) 1m44.365000129s ago: executing program 32 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000000000000) 7.791306735s ago: executing program 4 (id=927): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0x4, 0xffffffffffffffff, 0x0, 0x8, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x0, 0x1, 0x7, 0x7f, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) gettid() syz_emit_ethernet(0xc2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="911040000000000095000000000000002b3cd7711ef800bb43ca12a2e76e281d514d08e3683a7a1ca7edb168eed5704aa5fc14bcbb581ae1da3138d7493424dab692066ddf42da89b170731d62ae693b5437f5e576fad954c020e6a824b51c63880f25eb1a1803cb8a164a9cb3400c7c69168d022a13f449519ff6c75ed18d48c7048af8b4edaeaf2b9f7a09b2763a0c95c42bec6264313a105240c914d8f83523c654583e387e67ad3fbae20c874696a9cb905504f7f86e5e6df4d77dd3d2270772791c7e23fc9d8fdf15ff64c49e39eb7c22040000000000000056f738d7aac5c492ec43bfad8a1956bc61de1e3b0e22b008731a892a6aaf171df8fc128fa716da902ba641ecce3982317a57ad3987c5aeb157052174d8de7fa0cbf41f27d2ce942bc6a37043415d934babe71e3dc933dfca101889e493d7e62ae1f4f7e1"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$inet(r0, 0x0, &(0x7f0000000340), 0x1800) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003a00)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="b60265802dbc6edb80e56462d0722dc7a8fc52cbe321", 0x16}, {&(0x7f0000000400)="be5c3a208276ad89bb72098f01a981d67abb70cf59029f9003ccef1ca994ff5296d609e16ea2dcd3cb9f5324061393798724eda6a53340c221f2f18d26c1e5e28a8ed8a84a50e391e042020fd5c6aaf6922426f233da1efed664e1957065d028b534f995b58b7b226ad6d228e0", 0x6d}, {&(0x7f0000000300)="74da388bcce0c9e1", 0x8}], 0x3, 0x0, 0x0, 0x24040004}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="bdecbd43165e452c6892b3413de7f9a680882c5198a9", 0x16}, {&(0x7f0000000740)="0c6cf28dcaccac88c956ed38354879628f0d072b99441855f603cd8c6d3f6eb1768ddf533aa79a22dd3bb774551a98b3a149eeee7788bfad5b010324b44cf5c7520d2f835de71911fcc565ac7be61c80008db429762b253a8c33a8209b0708cf96204fd22a9edab02722948de4d062ed9fab8bece27cb3a05e57ffa5d313dd2e6829ded323a889c412fe33c76a52c04bbae2c1bc76b01fd4d0e5f8cea0424f8fb777a8e18dc9613d8f4699b08a52d780b3690ae908810527d0da77d0b43135e1fb27b0db6568196179fdf3d771599b08fddd5cc69177597e065e36d6c8ce2e8b1ffdae6789f641a5bfeb2d829c4fe3f7", 0xf0}, {&(0x7f0000000900)="4309afb5f0374707ea30417584c9d203fd508e3a8396315872d28f23e8888bd13c44295949981abb3e49dc561c72b1d59a7519ffa361ef9e9ce70216016ce17a2c96b4b7132d5e7d951db52514fa628d20cccc7c8525757f10de2673e029a29cb7dd41aba9365af0220da7ddda74377135fc65253a8f8db58a5edabc567e7258c1037b3686f2307ac24c28", 0x8b}, {&(0x7f0000000580)="e0c3bc34", 0x4}, {&(0x7f0000001440)="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", 0x1000}], 0x5, &(0x7f00000009c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd}], 0x48, 0x40000}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)="8ab2f4b99192bfac3c49a09418444e1f0c7baa56a5cac68fbb", 0x19}], 0x1, &(0x7f0000000a80), 0x0, 0x804}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="4465bd1a09a8077c45376fd5202f56b5eeada90df3acb21bc6f5b29d3d776545cb333f4b98e60489d37879810fb7479ca898a7baf1d13f97669b245112e83a4874f338f7c6445269f5d11506372920f1017d77802847870a40aa168a9c61297336e055a9eeb59e480a6bf8e7ecfb04614b48508cd3683e072703b13a08420dbd49d40cfad44486959c77ce3766e32f648abfcffda6fe1fbad80c31056f3e2f260cbb379a0412a163c333e27fbdbda45c75f4bd1e3a80e929da2a53cc3d8618b67aa877bd234bfc73174ebc8051372f5baa191b1ef6cefa8d2f329ca89ce57f8834c0ea7e255e3f89c480c43fa300a57077b72f349aa529578f", 0xf9}, {&(0x7f0000000bc0)="07cdf3c989d761941493c87e1e19cf9910abb4dd78def6ea6f24e01ff21bf6dd7f0d9dd971ae6db4fd445a0933a5d4f68323c81b30fda21d846c8d34bf712a6a67302738ca19bbbe3263bf49774380ecbd0420204924b299d84d5c1824673380712f17b9055fcfb5c33ff198c5c6175f59b9c54e1f3a2be320260219ef5a388b4063a7aeaf22007ddb962ba0da1559783be0f2595de0c29e3aaff989d7497ea139a0ecedcdab3be47b7a6d31985ff851381a6b4760149a82a39dde5044cf3c34885d0ac831a5ff00"/214, 0xd6}, {&(0x7f0000000cc0)="1f9f20306ca44e45f19fc20a30f6422332f09996d51716f785dd605fd29c1f4c5d515ae3247f892f450032caa1bad5543a58843111c17d86d9966b0785fb9e2aabdd9376a152b57046919871a19bf30344f0b2dcfdaf76381c26c50d61e9bd88ae9314acac889c2b4ae77a06", 0x6c}, {&(0x7f0000000d40)="1c51", 0x2}], 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x268, 0x80}, {0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001040)="60858167958d62ac6da8d0e2c4b29768f6fc8f9dd13917042e22162c6b6e221c7b14f91b719c038600ec0b508600cbda7897baa8802271afb13d7fc45f99995a4b5452c648589acb4c3cf2f206350c", 0x4f}, {&(0x7f00000010c0)="befc1fe891e016eea0c49200b79e", 0xe}, {&(0x7f0000001100)}, {&(0x7f0000001140)="3c0ed2a3efbab17f67006ce0f1d69bda96b16637fea4780b718bb8d9e766e7e7dc98dfb42b68c540f80f8a6da4d5bfa69342d5ce00b58f9d787585cfc1baccb3d8075f", 0x43}, {&(0x7f00000011c0)="693f361dbdecd2c19c6678f6e9a56278b4f3a455be3a72e977d59cbe4509c7ac79aad978f4f5bf9e85e1e6ac8e2ee8941599959c9650869b46d366a3580ad24202c5a08a77ee1d31de7520dd1c37003738b91dcbb4e422d8a7d0ddd6e60a1280a1f2c5dd4e0490b2dbecb7e4859b", 0x6e}, {&(0x7f0000001240)="b27b3c30d183e5c57d23339b9cc3491a2c84b0e220513fef13122a0ec0e1618eea327a5f57", 0x25}, {&(0x7f0000001300)="72280edbae6741927d97ce7770c24f9657574e6f65a1935b992412b26d5881304d6c1fae1e7cd4becbf4fd6e5922e060785280a90aedcdc610cc50f8c59fd9ff4f4ba5f43849dfde7a21d264cb15d982f010dd5a9023d0e9f420bebd0d2f700494a06887dcef15935a071c2e960ce142f3ed288821b41c7cde69a285595d03f9cd9e74be0751c2baef59729b28c46ebc5bed88888d3dad22a3059978dbdc40e8c284314df627bad54933ac84d2ada14b928fe0dffa", 0xb5}, {&(0x7f0000002440)="22d43b1db407111da15e6d939f89174444ae0ba39bf331cdee000ed58fccc99601f528ee936687404cee70982b54ccc97239ee22692baee7d3600846fbcc9a6aa35a501e7698cc345dd5f836079e4ef3b61612c54a5343b701c77bd42406020cdeba8ac17da6ceb6ea65164b8e4d32737188c4d7446e101f70abffe4d762b8e2916fe3b71fd88ae1cd59445644e5847f2c48cbf470d01065b829320bdc1f2678bd2f4c3b2a0b0ee90d5db4b31a36b712bfc220734daaa7e689636222548fc81df368b88a97d642ffffe0", 0xca}], 0x8, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x1}, {0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002600)="dcee81fff9201f14d29ee6b151ac270d6e2459b0d1ee2d8d7472dd7f120acd93ca8e5e2d5306ef87984e2bc281ac12bd6fed01e65a", 0x35}, {&(0x7f0000002640)="6d25dcd28580453a6f66ed2a4fc18c458eb90f1cf290c1b17b83ae1c9c3a3a1445e2c4711d71555da97700640efd383d95af5ec9f3b248360edfc579643bb2ac60ca4694b46bb57d17d2d321ab737cb1c8e1be456fc0", 0x56}, {&(0x7f00000026c0)="9b4e65ea883eb156fcbf97e4bf30", 0xe}, {&(0x7f0000002700)="494b6785806310c55c2e9c342f7bbc0526275f5f7bb879bdc81f5be0c13388eb5d122d33859ecd86838ec604e1721db2a3108ca6bcfe7aa265415bcc1a54ad925036d1748ecccedaf552a912809e294e9311f0d612ad7837bb51808acad7f24d3ddfb67c91ba134c51a45cfc48a715ba69a2d25deb34ee558ef68eac3c4ade57187a6f8ffb5cfe78067de89ae6bca85ee8", 0x91}, {&(0x7f00000027c0)="9dfb69db4218ea0acdc6daebcc6b89df2ed05967f37b47448796fc2a55479deae951b34b15fda57b1dfe5e9d27b4b5151517542ea448a36a687d187ec0331193d0e6dee141eeaad2ac155bd80299b482f0b9be7e6ba501470a3f955b17822d4e0f70e395cfbe54444f8804a59c438ed91ca5399748ae077deb85cc1b03823a8aeeac11f799bd37e32ffc1527a980777ed51384ad1b9d1791e860817ba27325f27dd8e185874b099b29e7752a915e9a4d2462cc318cca57a75a68862104d8faa8b9fcddee4ba0528eeae3570bdf03f5a8f5eb375a041495d6cfb05c727985aaabed61cb79057ad767d968cd8e7898ee0e88f743d862ecab41c67302f016db9ae2dca504e4026adf0aef7584c651501ed519743e68db22d8d42e55f2ed525037a4187bd2b21efb8ba57964857e2a4f67bcffbcef99fc66a9cc898c23b84ef8a2e3a2898932aeb75370fe320b76ac133a001a68340aa3c39bbc901b035cbf5c6e27d85ddf9a50f12546827aa583866643b9949e29f2b2c24f15f6cb0cb3c2397ec8ed6187fd08661f5cda94fccc7f118072c7845b70c18c6f7f193edcdaa10dbc2a2b36decb41cf08cd0fff32559d4de7a2a346ba9fcbf60cc5d73883c3907be7d9ff7a5f8cc8718988a6adf9cf6c6c5e7b0bc9c23a1ce7d58209a7e87d323f6270606ea8ff7a5ff5570a579bb985a6b93049bbe84f07cb7eb8daf61b719e043eab0c0399a819beb9c69574065226e85029afaa80fa37ab7c60a918c318d74227308292abfaba5baca3ac21a230cd08cdc85e2bc823567bf7d44c8f1eee20fcac53f1ee117e908a12e61767e33b32bd879d40a1018faf96513a2ca790f4dcf695d7fc834476238ecd69836a07cfc7493c9df731c5d2159735addd7fa4fbca24512d0a47e93eef573d6c1455683367784e93df428f2c46acd188d9f213bd0090a55058a5659d5e6b5f1b957417de745590ace3e9b54a704317120da45b4ad8ca9cf71286db895e1f3b5c4ddcdd1f071e54037e3812a73acfee740d73c9fc52a7f64d271dc15bf753ca047e1ece92feaabd3884e51cc49c91f0ddb78cd33e2caa9937092b416f9a1167a8a04f21acd03951620ed93426737165142e1b950b2b219009258c98cb9b893967430023a31bccea1c1bb9ecaf0e50327c5408941cb577b4bb292aa4cd9d2de3d13d1a1d96860f0a354a34c6746b3cccd95a1957fa17cda06442458503fa8ea141b0b16de245facbaf4b3bec1f99fc63fcbe75575920feed5419c9e4e4cda13daf1262fdcf4a32e051eafae1e6a49923c6f9370db62b095bf01c69743ee39a1ccfbae569bfd13a91bfb98cb00960f927ef3798d1d73be37d690ac384063b968a998db228e2b01c8430953b798d4cad353127598fa05885e7426506351b0e5a2cc9090a3f480ed219bdd1838d82e867d3e4435af86fa0bad4e96f62b05e93a45f00ddeae2708b144d3d7dc3cb0c66a6d63fe02313b127b71251dd6d66fc97fcfa0cc227eb0277899c9bd3e8c6b5b3700b430e2c7e56e37e3d4a8bc4b9670f03a73dd4f0c119c36fa7fe761279ac991ce6bec7588cbc9bc5ba1738e4dce0322402614d616c7ee267f64f0fc33fbdaf77ee4a5974ca44246c2b4d42f635a67b469f101d61a62462eec64c80e2ed3b5fc576893f30511dcbf786d13ffc787271b7803b2ddd734074b3a79c911ef923d435d449764bda45b567118d43fe03d3982d63aa5a3e6898207780759bcf959a9e7143671831aef306024a8e787f7969e5891a4a87908cf718a719c784f4327cc7dfe206bc1cc840d9b32372633620eced478368595a396dc53066b8d324ac20a1aab76ca53834ba3a280c5fc4594d292ca203241bbe431bd07cba9089ef15a1cc8671087f8b243daa6dd7c4b99443be097e758a61ddbe7c00a1b6c130a78855f800e05ec9a72eeec45ca6b029b88114be01c4860ee9045cf5ed27c9f06d0a50529739317de36c979f73711cdca88edb47e9de324a7d17e6110e8946072fa643f6aec2f418b27d5c9c16aaf07625af8a694396b3a45cc7d72cd62dd1060670e3af3d91db5485d78b0d1418eae21721f3b2757684fbe32e1f4080175dc9301d9ccffb292120b29789970dcc9a3f7fb3633cdb2155ca1500f826e653348959651e03095013829446b80074973530f8331516e3ae9dec26db997a6a73ddfe133f81e61537ba012a3174504399707b572be8b62b43441fcd1be4d6bf58a19a3de799d662d42a7daa5e9ba1b7be1f96bf0a23fbf94f7b13bfd33310c32ba84747172b25dc62b8e55a4c5e37d58a2624e0051cfa5800bd48ab18b90311992474f5c5e8ba9540a4a9229b2c13073e0536576aa24c4da4fb5868e6e3213c0f4504a25d424b532ced5ec9d4fb644e59140bc096b6479deb96e4dacc40cb44142102f0d249a74f025e0c3019639de7ee66b5e3e6a308b29ede3cc004baf2046427ad22d4d16ba1c0d0f8c528528c6bcd5954ffd699e26f0c4782c6d7f9785e594c7c2cbb1229b26560861b33ccf0acb8923101cbd6d683447ef0f6d5bb6ca8112953291c074aea2d24e9c66b91018cf8b7db02e7d8af49c091f86ac351ebd1b8343f11f2ca5afa935c76cdc121e7204ed02114a7cc23f1ac5bba0aa27742ba7e4214c83cd202deff0c98dbffade633358fdf68330473a845bc131ec7128e9e8d5d4ad000a7c6b1c5a5f67c6553e10f705e7dc11ef18abeb95c62ec3d6ba9ce98c8f54cf83628be5523867da59051f800c8da486167c0c0dd8dca1c45d59c1b1089bc94158fb628fbb43e12c9909d72f53ed98404904b6bd61048118c0e50c4b1dfd3bf33383b41e31bc2a858a32d642040cf3bfd1cba49d40a4e10ab396115b2d588fb42cc47a46324f900227410224ed0722cb72456c06609bd4ef360a31d7ebf98a2e57b13675f9904c781e2cf8492f341751dcf7dc16f280817e5ac1118e9c2e7f99eb6d3d96be04490f35b5fb76bf8b4f3752ea57b505e7177c6e7083a55d72a8733aad573042ef001c3a2ebdaf0ae3b47de52b6b07ceb32747579175a1034a21fe91a1aaa6346e744921756280e09b576b9b7d20af5e57311613c123ab10b9c645af5535fe83707c188df2267ed2f87ff6ff42f783a68e35ab0b6547ca1480ff17386432379c2e7177b7daa2641346ac2b010e7b7e5446056cccda1379669339e6dbe268c108032e33ea0168ecae7363d618085df3c3c84a88c7ae03ca925e32d7d486fe73732d4220b1088ba29be951eb18a6a333b47ffc541eeb8244351c044765e74581f723ad6b19047918433a27f45ed2db2469b59088274e734ac3f15164788713d9268ee31697118df713ec1be928025e020eea71b8a6cb9b904e7246f069fe10bdcd779a444b794c1cd86d8f55e0a2e19f2f424c5bc2f4bfc0443d8584f293de3d565b29e0576061012ec368af79964da3c5cb1ab967ee80e5d4e1ba84013b266666cb23433485c600ad22043317de700baa342a938cb99a1aa02f8c3d271d22f84d244e20797e9890c80b043f6e72f89df8ce0af2a091b38848c056b6977c1ad5cdcc0c6a9aedd1295142a5290f87ddfe8736d704ee76eae57bf332e748a3fdb02c3b92a38dd72e005836d44943e094d75014f1af7a72c9844e652abad68b266e8795ac956df60ae621cd6c4d5c1ca4a696884c6e40255f97057f3d5b8802e10ce0844b2acb0d808747b7b123202d24548e0799a6bca87cbb4f939048bda2589051aeeca8f9a8e08897614dc935c60471499256d04e7d512806528bd7172728db2f6bca6a88cb4ddf046b9f528cceaac0cde7d984a168ef0d2fae5d540cb72cfba81eca506f5365307114290d6e68f02c4d8e3791b3b82b237355a54ed06f1eb2faaa5054c24a68a4fe54ad61688224e1bb646b95c1ff2fabeaf9f9a5e109292cfc6d173c680322a423902be223c81b792cfee2202bce88e1e31798448e3576617ef34f550714e5cdedebfa322a4027944e51d69e08c5a14291574e1cbd861820f5d19ca97a2ce6dcdaea802bb951f98aa48cf2697f816f71796bb4383fb4ddaca9b4bc266fb911fe0a69555563e5f6b4c52b0d12c8cec812d58a8f95aa2e909781c0384aaf385b0894a17ea8ef50d61d104e030b848bed15a4aba8a3a07b57fba4e70d7fe4c79594522e56dab9e24b8280cfe3f1a8fc0601d055c007d99097c15fa0fe60a63f6ff2e93b9775666ab93bd629c7711c0ae3a3b2c814830b8f16bd93e7c2731b0fc4f38102bb85f1b20e3e0546f62349721abce283e99ff536bf8b4cd544b2f622f04e6f5399633c2eaceee817267f1af8f8f795de242d2d4a2e8234504216a5f1cf3613f75aa022fe4110959986dc1ea12f95ed6a29114f5d3864b89c82400ca166794d9586ac8fa61400ff00c43d4b3da53f9d219117a7c427b746b0f79d4740bac0b42e94b3c00db354e370c9aa9d4a9e8df14d509df951a622e057ce9af9f6df2049b9d3d3763ef5e0bc736fb2cd68cc997dbf5c553405cf6da2bce370f18f621ee310e904b04521ee73e1555d95345eab039f89deed9aef2c06dbfaaeff29735dc98178f034fdf525d8e947ab1912eabf9689844527cefb0adac2c2c119fc837b04f0815a590000605ffab810e06c27db561ce9c2ad1a9d3d99cfa18eee97511f1871d6666ea0078d631659f62be5302ffccca7961a592a54fdb26785c280396a1bbeeb92961d766c006bf1f5ced125428bb9363b1f31b13bcaf5ee491687462dfa9acb9193743ee3d92422444f2c4d5163373b67b5b8d3107e064d2c306dd1c8cfc913c4efb34d54b628e1235bd0229de84c7312f9366f224822d5c0bf83187c79eb7f7ade10e5e484b6e5d7609b39607797c681598e6ffbb2491cd9dfb445a773fdeb05b72d8073faa52652f260f0db8a975928b98df1cba33007c506b732691468e4edc4d45fb45713eeb37dc73c58e85927231ec58576e60123f6e3742b7f51153263a60ddc0b48edde474d07123826bd9421c5a10ba5576d7a9ce8860089f9bcf793a4e8ad2dfd8db14a7af4992164e889b0070671572e6186f0359bd8196b84320df0c395007ec5337390a623ec222031e711acdb1a43d2ef0d0593d4a645373f37fd1d7fb672b11937cb313428a1d43ac0c852ff8bc92de728774f7abca4fc9a77965297cb2794756825296567a6f3f6310f0e4571a4f83f87152b06468532fc96113a4704bbdefef461ef18f5d692fccec81685ae710706f278d7147705fe4456376d9f6f0c7686680784e3e2d9151582d9dee4d734e2427d93ad31b4fa1f4b19366ce2d54c6cdaa51f953523b664f6de3f6b07300c25bed8ba5ce78602bc2cad6214a641ea45c3f16fb01d993ebd6a6679656b7ec83c5edfd6af2605490fb25476f78f8f96acbb1fd147211419838bd53e8414b3f9e83cb073fe4252b2ede8beadfc2c4a30761ca013104b7ea2efc959ccfbce6fd341865d70242138eca37a8af7120d3b050bf3df792d6f3ab33ef9ec428a4b0986143ff7cf1c405caa784a9970dfd062921324031db76f67794c82b4d0b0b7957d8f2a37e85e93812682868c5e857a55eda6fe0e683a6d91ffcb6e0bd7c26611faaa28157bb80d0390a234804306fa6ed2a35b561ec62877be3165fa0f0a7e1d6549a2b6d5e95db3abecd9f54617339af016059e4dc64b1a017d32344fa59f3b08223d9a282811af1f35efd4ff254f9bf6f1fd1f73e3bd5f2dd94d762bc200688b072f93a5a557919719c31183f9d95623ee9f4130d78ab09c92387be278b322bfae71b1c713b0357cf", 0x1000}, {&(0x7f00000037c0)="98e387bc7e8abaa77a0573", 0xb}], 0x6, &(0x7f0000003880)=[@assoc={0x18, 0x117, 0x4, 0x87}, @assoc={0x18}, @iv={0x58, 0x117, 0x2, 0x3d, "5537f6798f7175da188d364925c47f680d5403bf2c754987f98ec5579b768e7aac29ed4efa84897376ebafc583db5452428419fe2370ec41913599ef5d"}, @iv={0xd0, 0x117, 0x2, 0xbb, "b5a837865b1266aa102baee0c3ab5b168799829299fbe28cca3f3923ce0b2d93f036b194788e8c303d1e346bfd0aee7cb72fcd33282c39cb9dbd2958982cd6458b90c5ca6c595b1daa1c7e03b5104a7a22de9038b98e8833f9d2ac9540cd05cfe03437e96aa4b0a0716af79412df8420c04b7eb84d3c0a30de475e6886ab35d623f74e3cb210cdf016f3728999820a6acac9cf068d10e48665c32fe728c84cfe7ab6ed8c55e0f9f9a438156fc47769a63dca0bbb0ce449186c1560"}], 0x158, 0xc0}], 0x6, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) 6.992066671s ago: executing program 0 (id=932): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0x26, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r4 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) 6.299303093s ago: executing program 4 (id=936): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 5.784500059s ago: executing program 1 (id=937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 5.531404076s ago: executing program 4 (id=938): unshare(0x24060400) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000240)) (fail_nth: 1) 4.796165689s ago: executing program 5 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0939acdcd04e195e", "eaf62c923a565ad9392ced7389aa62eca4cc631ca5c112e15ca608ff4175a7df", "0b6458c5", "a6893cf725a53605"}, 0x38) readv(r0, &(0x7f0000000040)=[{&(0x7f00000021c0)=""/215, 0xd7}], 0x1) 4.752023216s ago: executing program 4 (id=942): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x400c0, &(0x7f00000001c0)={0xa, 0xcaa1, 0x0, @loopback, 0x200000c}, 0x1c) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.587070112s ago: executing program 5 (id=943): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r3, 0x3514, 0x9141, 0x69, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff020500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$isdn(0x22, 0x3, 0x26) ioctl$IMCLEAR_L2(r11, 0x80044946, &(0x7f00000000c0)=0x1) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x100, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x2}, {0x0, 0x0, 0x800}, 0x200, 0x10000000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0xc5}, 0x4000) 2.948493926s ago: executing program 0 (id=945): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000100)}, {&(0x7f0000002240)=""/255, 0xff}, {&(0x7f0000002340)=""/252, 0xfc}, {&(0x7f0000000140)=""/76, 0x4c}], 0x7, &(0x7f00000001c0)=""/50, 0x32}, 0x8}, {{&(0x7f00000024c0)=@x25, 0x80, &(0x7f0000002800)=[{&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/41, 0x29}, {&(0x7f00000025c0)=""/129, 0x81}, {&(0x7f0000002680)=""/21, 0x15}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/234, 0xea}], 0x6, &(0x7f0000002880)=""/4096, 0x1000}, 0xe}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003880)}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/33, 0x21}, {&(0x7f0000004900)=""/68, 0x44}], 0x4, &(0x7f00000049c0)=""/117, 0x75}, 0x9}], 0x3, 0x2040, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0501, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15}) 2.844228153s ago: executing program 1 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc084) 1.260659983s ago: executing program 0 (id=947): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f00000000c0)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_proto_private(r2, 0x8993, &(0x7f0000000680)="d8990ef9b33a") writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) 1.260173083s ago: executing program 2 (id=948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00090010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f6", 0x42}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1.258988506s ago: executing program 0 (id=949): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3, @mcast1, 0x3}, @in={0x2, 0x4e24, @empty}], 0x2c) syz_usb_connect(0x5, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c208edbb9f65a79e0660030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xffffffffffffffa8, 0x0}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x20000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 1.25856951s ago: executing program 1 (id=950): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r0, 0xffffffffffffffff, 0x400000) 1.254070527s ago: executing program 5 (id=951): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000000, 0x0) 1.253621501s ago: executing program 1 (id=952): socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffffff97}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.251937241s ago: executing program 5 (id=953): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0xb8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x84, 0x2, [@TCA_MATCHALL_ACT={0x80, 0x2, [@m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfaed}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.25151405s ago: executing program 1 (id=954): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c000240000000000000000109000300737904fff50000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x3, 0x0, [{0x1b3b02006, 0x8e, &(0x7f0000000880)=""/142}, {0x1, 0xffb, &(0x7f0000001d80)=""/4091}, {0x0, 0x83, &(0x7f0000000a00)=""/131}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) creat(0x0, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) 1.249629133s ago: executing program 5 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420a}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x5000aea5, 0x0) 1.24860569s ago: executing program 2 (id=956): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x541b, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r4 = getpid() kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/pid_for_children\x00') (async) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@delqdisc={0x5e4, 0x25, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xd, 0xa}, {0x9, 0x6}}, [@TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0xda}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x7}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8001, 0x80000000, 0x7fffffff, 0x3, 0xfff, 0x6, 0xe, 0x80, 0x4, 0x80000001, 0x7, 0x5, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x7, 0x4, 0x7, 0x4, 0x0, 0x8, 0x7769bbc1, 0x8, 0xb50, 0xcc9f, 0xfffffffd, 0x5, 0x4d2d, 0x4000000, 0x7, 0x401, 0x9d40, 0x2, 0x400, 0x7ff, 0xffff, 0x2, 0xfffffff7, 0x401, 0x1000, 0x7ff, 0xfff, 0xb9, 0x4, 0x4, 0x8000, 0x1, 0x0, 0xfffffff8, 0x1, 0x5, 0x4, 0x9, 0x9, 0x200, 0x0, 0x7, 0x16f, 0x8, 0x1, 0x1c4a000, 0x10001, 0x0, 0xc2, 0x200, 0x8, 0x8, 0x7, 0x5, 0x7fffffff, 0x7, 0x10001, 0x9, 0x6, 0x2, 0x6, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x874, 0xfffff867, 0xfffffffa, 0x9, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x0, 0x7, 0x9, 0x0, 0x9ee, 0x6, 0x7, 0x1, 0x8000, 0x5ff, 0x4, 0xa, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x3, 0x5, 0x7, 0x4, 0xffff7fff, 0x3, 0x1419, 0x8000, 0xa, 0x7, 0x3, 0x5, 0x7a6c, 0x10000, 0x101, 0x2, 0x1000, 0x4, 0x3, 0x8, 0x6, 0x3, 0x6, 0x5, 0x10001, 0x4, 0x7, 0x6, 0x1000, 0xc, 0x6, 0x80, 0x2, 0x79, 0x3, 0xf669, 0xcf040000, 0x7ff, 0xd39c, 0x8000, 0x4, 0x8, 0x80, 0x5b, 0x1, 0x4, 0x4, 0x1, 0x8a, 0x5, 0x3, 0x9, 0x10000, 0xf, 0x400, 0x3, 0x1000, 0x432, 0xd, 0x7, 0xd939, 0x0, 0xaf, 0x4d, 0x9, 0x81, 0xa, 0x4, 0x8001, 0x400, 0x8, 0x4, 0x9, 0x5, 0x9, 0x7, 0x2, 0x40, 0x1, 0x2, 0x0, 0xbe93, 0x1c0, 0x9, 0x6, 0xd637, 0x5, 0xddf, 0x401, 0x6b, 0x9, 0x9, 0x8, 0x10, 0x5, 0x7c2, 0x4e44, 0x800, 0x4, 0x10, 0xd0ea7bad, 0xc, 0x8, 0x3, 0x8, 0x8, 0x3, 0x41d, 0x8, 0x3, 0x8000, 0x9, 0x8, 0x8, 0x33c, 0x9, 0x5, 0x8d, 0xb, 0x5, 0xfff, 0x4, 0x10000, 0x52964221, 0xfffffffb, 0x401, 0x2, 0x0, 0x1, 0x19, 0x0, 0x7ff, 0xfffffffc, 0x9, 0x8, 0x1]}, @TCA_TBF_PBURST={0x8, 0x7, 0x319}, @TCA_TBF_RATE64={0xc, 0x4, 0xf141140507ab4726}]}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2, 0x9, 0x1, 0x0, 0x5d, 0x53, 0x2}}, {0x8, 0x2, [0x0, 0x10]}}, {{0x1c, 0x1, {0x8, 0x7, 0x7fff, 0x101, 0x1e4e495620153fa4, 0x0, 0x2, 0x4}}, {0xc, 0x2, [0x1, 0x1, 0x370, 0x7d2]}}]}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4, 0x6, 0x3, 0x0, 0x5, 0x3ff, 0x1}}, {0x6, 0x2, [0x4e5]}}, {{0x1c, 0x1, {0x10, 0x4, 0x8000, 0x80000000, 0x0, 0xfffffff5, 0x7ff, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x2, 0x12, 0x8, 0xffffff7f, 0x1, 0x1, 0x1c17, 0x3}}, {0xa, 0x2, [0x10, 0xfff, 0x400]}}, {{0x1c, 0x1, {0x2, 0x2, 0x1, 0x6, 0x2, 0xffffff02, 0x25, 0x5}}, {0xe, 0x2, [0x7, 0xffc6, 0x7, 0xd31, 0x2]}}, {{0x1c, 0x1, {0x3e, 0x0, 0x0, 0x3, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8, 0x16, 0x7, 0x6, 0x0, 0x800, 0x9a2a, 0x6}}, {0x10, 0x2, [0x571, 0x41a, 0x7, 0xd, 0x1, 0xc3]}}, {{0x1c, 0x1, {0x2, 0x5, 0xc, 0x2, 0x1, 0x802000, 0x6, 0x5}}, {0xe, 0x2, [0x75, 0x6e00, 0x6, 0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x73}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x25, 0x1d, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x8000], &(0x7f0000000240)=[0x0], 0x3, 0x1, 0x1, r4}}, 0x40) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)=0x0) (rerun: 64) r7 = open(0x0, 0x64842, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) (rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=@newpolicy={0x230, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e21, 0xa94e, 0x4e24, 0x0, 0x2, 0x10, 0xa0, 0x5e}, {0x7, 0x4, 0x10, 0x8, 0x7936ab44, 0x40, 0x5a, 0x7}, {0x6, 0x54000000000000, 0x0, 0x6}, 0x0, 0x0, 0x2, 0x1, 0x2, 0x1}, [@replay_thresh={0x8, 0xb, 0x5}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2c, 0x70bd28, 0x70bd2d, 0x70bd25, 0x7, [0x0, 0x2, 0x800, 0xfffffbdf, 0x0, 0x5]}}, @lastused={0xc, 0xf, 0x1}, @lifetime_val={0x24, 0x9, {0x0, 0x5, 0x8, 0x4}}, @sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x4, 0x4e24, 0x1, 0x2, 0x0, 0xa0, 0x1, 0x0, r9}, {@in6=@mcast1, 0x4d5, 0x2b}, @in6=@private1, {0x6e6, 0x0, 0x7, 0x6000000000000000, 0x8, 0x37, 0x300, 0x800}, {0x8, 0x1, 0x5, 0xdc4}, {0x7, 0xc00, 0xc56}, 0x70bd26, 0x3504, 0xa, 0x1, 0x8, 0x10}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd25, 0x5}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd27, 0x8}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]}) (async, rerun: 32) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000300)=r6) (rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b80080003", @ANYRES32], 0x78}, 0x1, 0x2}, 0x0) ptrace$getregs(0xc, 0x0, 0x4, &(0x7f0000000480)=""/161) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x2c8, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x234, 0x2, [@TCA_ROUTE4_ACT={0x230, 0x6, [@m_ctinfo={0xf4, 0x11, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x8, 0x10000000, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xbc54, 0x0, 0x6, 0xffffffff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x4, 0x8, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x2, 0xfc0c, 0x81}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb, 0x101, 0xffffffffffffffff, 0x8, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6f7a, 0x9, 0x20000000, 0xb, 0x7f}}]}, {0x18, 0x6, "9080ae1c8dc6c41954f2eea3a8b20bfecfaef44e"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x138, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x4, 0x8, 0x7f, 0x6}, 0x4}}]}, {0xef, 0x6, "eb71ed25e222883fe6c9bdf69262344403d71bbdff60f8987d977a569f445c1d2ddc0ac879fb34bcd779d1c4b1ee29514bdcca5eba06625ba1254905c5164a2a492e3292b44068b5feb636570fb1fed5226670b1dcd03168d6dccb294d973092ae0fbc63f62abe3a0345607a4240eb3c09189f4be14be961deb69c00ec717fabd51705075b86b9d8c9a54ca69897b6ecba34e58b609a6343c9676617175feb39d53bbf10a83da20e088623e7415adc08eda07263b97260e370ecee911bdbea334e36c2488bf474ac88256f654899cc9ee6dfefa609eab38ad68aa5f1a627b100e2ec1d884e96885d09d0ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x2c8}}, 0x0) 1.24822487s ago: executing program 4 (id=957): recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x20012101) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) (fail_nth: 7) 660.598166ms ago: executing program 5 (id=958): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003102"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="000481"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x2e, 0x1, 0x1, "051317a89621367184a1a016eef9515bae00000000010000003fda2f727200", 0x50313134}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000540)={0x0, 0x5, 0xacc}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001600)={{}, r7, 0xecefb3e89a6070bb, @unused=[0x50c613f4, 0x8001, 0xe8, 0x8000000000000000], @devid=r8}) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 588.76651ms ago: executing program 4 (id=959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="c2bf", 0x2}, {0x0, 0x600}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2000000000000, 0xfcc3}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000000)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r3], 0x38}}, 0x10) 572.800642ms ago: executing program 0 (id=960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) (async) socket(0x400000000010, 0x3, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="580100001000010000e0000002000000000000000000000000fc010000000000000000000000000001000107144e230005000000002f000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 460.889254ms ago: executing program 2 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc084) 412.828005ms ago: executing program 0 (id=962): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000180)=""/15, 0xf}], 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unlink(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0), &(0x7f0000000000)) r1 = gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/asound/seq/timer\x00', 0x1800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9088, 0x44100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x4040800) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 4) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) 335.527009ms ago: executing program 2 (id=963): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x8, 0x2, 0x1e03}, 0x10) 228.167168ms ago: executing program 1 (id=964): sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x7120, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380), 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="809c77bd384fdbc200bde3747f000000", @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) 227.87564ms ago: executing program 2 (id=965): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x5}]}}]}, 0x3c}}, 0x0) (fail_nth: 10) 0s ago: executing program 2 (id=966): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0xb8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x84, 0x2, [@TCA_MATCHALL_ACT={0x80, 0x2, [@m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfaed}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 172.997349][ T7163] Tainted: [L]=SOFTLOCKUP [ 172.997356][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 172.997367][ T7163] Call Trace: [ 172.997375][ T7163] [ 172.997384][ T7163] dump_stack_lvl+0xe8/0x150 [ 172.997418][ T7163] should_fail_ex+0x412/0x560 [ 172.997452][ T7163] should_failslab+0xa8/0x100 [ 172.997479][ T7163] __kmalloc_cache_noprof+0x83/0x6e0 [ 172.997502][ T7163] ? sctp_add_bind_addr+0x8c/0x370 [ 172.997531][ T7163] sctp_add_bind_addr+0x8c/0x370 [ 172.997559][ T7163] sctp_copy_local_addr_list+0x314/0x4f0 [ 172.997587][ T7163] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 172.997611][ T7163] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 172.997639][ T7163] ? sctp_v4_is_any+0x35/0x60 [ 172.997662][ T7163] ? sctp_copy_one_addr+0x93/0x360 [ 172.997689][ T7163] sctp_bind_addr_copy+0xb3/0x3c0 [ 172.997713][ T7163] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 172.997737][ T7163] sctp_connect_new_asoc+0x2ff/0x6b0 [ 172.997767][ T7163] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 172.997813][ T7163] ? __local_bh_enable_ip+0xd0/0x130 [ 172.997830][ T7163] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 172.997850][ T7163] ? security_sctp_bind_connect+0x7e/0x2c0 [ 172.997875][ T7163] sctp_sendmsg+0x1577/0x2920 [ 172.997918][ T7163] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.997946][ T7163] ? aa_sk_perm+0x82d/0x960 [ 172.997982][ T7163] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.998011][ T7163] ? sock_rps_record_flow+0x19/0x400 [ 172.998035][ T7163] ? inet_sendmsg+0x2f4/0x370 [ 172.998057][ T7163] __sock_sendmsg+0x19c/0x270 [ 172.998086][ T7163] ____sys_sendmsg+0x4d7/0x810 [ 172.998114][ T7163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.998144][ T7163] ? import_iovec+0x73/0xa0 [ 172.998170][ T7163] ___sys_sendmsg+0x2a5/0x360 [ 172.998187][ T7163] ? __lock_acquire+0x6b5/0x2cf0 [ 172.998213][ T7163] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.998272][ T7163] ? __fget_files+0x2a/0x420 [ 172.998296][ T7163] ? __fget_files+0x3a0/0x420 [ 172.998330][ T7163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 172.998354][ T7163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.998384][ T7163] ? __pfx_ksys_write+0x10/0x10 [ 172.998419][ T7163] do_syscall_64+0xe2/0xf80 [ 172.998445][ T7163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.998463][ T7163] ? trace_irq_disable+0x37/0x100 [ 172.998488][ T7163] ? clear_bhb_loop+0x60/0xb0 [ 172.998513][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.998531][ T7163] RIP: 0033:0x7faa9cd9acb9 [ 172.998550][ T7163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.998566][ T7163] RSP: 002b:00007faa9dc9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.998588][ T7163] RAX: ffffffffffffffda RBX: 00007faa9d015fa0 RCX: 00007faa9cd9acb9 [ 172.998602][ T7163] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000006 [ 172.998616][ T7163] RBP: 00007faa9dc9c090 R08: 0000000000000000 R09: 0000000000000000 [ 172.998628][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.998640][ T7163] R13: 00007faa9d016038 R14: 00007faa9d015fa0 R15: 00007faa9d13fa48 [ 172.998672][ T7163] [ 173.351276][ T7165] dvb-usb: bulk message failed: -22 (4/0) [ 173.380389][ T2348] pvrusb2: Invalid write control endpoint [ 173.487254][ T1221] rc_core: IR keymap rc-dvico-portable not found [ 173.515936][ T1221] Registered IR keymap rc-empty [ 173.530557][ T2348] pvrusb2: Invalid write control endpoint [ 173.537386][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 173.553443][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 173.556412][ T1221] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 173.561486][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 173.585933][ T2348] pvrusb2: Device being rendered inoperable [ 173.594220][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 173.602673][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 173.616198][ T2348] pvrusb2: Attached sub-driver cx25840 [ 173.622124][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 173.632783][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 173.666695][ T1221] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 173.711803][ T1221] dvb-usb: schedule remote query interval to 100 msecs. [ 173.718825][ T1221] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 173.824645][ T6844] dvb-usb: bulk message failed: -22 (1/0) [ 173.840498][ T1221] usb 5-1: USB disconnect, device number 5 [ 174.221618][ T7191] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 174.307320][ T7191] @„;: entered promiscuous mode [ 174.439530][ T7193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'. [ 174.766208][ T7200] program syz.0.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.479656][ T7230] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 178.022595][ T7243] FAULT_INJECTION: forcing a failure. [ 178.022595][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.070010][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.4.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.070043][ T7243] Tainted: [L]=SOFTLOCKUP [ 178.070050][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 178.070060][ T7243] Call Trace: [ 178.070068][ T7243] [ 178.070077][ T7243] dump_stack_lvl+0xe8/0x150 [ 178.070107][ T7243] should_fail_ex+0x412/0x560 [ 178.070141][ T7243] _copy_from_user+0x2d/0xb0 [ 178.070164][ T7243] input_event_from_user+0xb1/0x290 [ 178.070187][ T7243] ? __pfx_input_event_from_user+0x10/0x10 [ 178.070207][ T7243] ? get_pid_task+0x20/0x1f0 [ 178.070241][ T7243] evdev_write+0x2c7/0x4c0 [ 178.070265][ T7243] ? __pfx_evdev_write+0x10/0x10 [ 178.070285][ T7243] ? bpf_lsm_file_permission+0x9/0x20 [ 178.070304][ T7243] ? security_file_permission+0x75/0x260 [ 178.070326][ T7243] ? rw_verify_area+0x255/0x4d0 [ 178.070355][ T7243] ? __pfx_evdev_write+0x10/0x10 [ 178.070375][ T7243] vfs_write+0x29a/0xb90 [ 178.070401][ T7243] ? __pfx_vfs_write+0x10/0x10 [ 178.070422][ T7243] ? __fget_files+0x2a/0x420 [ 178.070449][ T7243] ? __fget_files+0x2a/0x420 [ 178.070471][ T7243] ? __fget_files+0x3a0/0x420 [ 178.070492][ T7243] ? __fget_files+0x2a/0x420 [ 178.070525][ T7243] ksys_write+0x150/0x270 [ 178.070546][ T7243] ? __pfx_ksys_write+0x10/0x10 [ 178.070575][ T7243] do_syscall_64+0xe2/0xf80 [ 178.070602][ T7243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.070620][ T7243] ? trace_irq_disable+0x37/0x100 [ 178.070644][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 178.070668][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.070686][ T7243] RIP: 0033:0x7f428819acb9 [ 178.070705][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.070721][ T7243] RSP: 002b:00007f428905b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.070743][ T7243] RAX: ffffffffffffffda RBX: 00007f4288415fa0 RCX: 00007f428819acb9 [ 178.070757][ T7243] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 178.070770][ T7243] RBP: 00007f428905b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.070782][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.070793][ T7243] R13: 00007f4288416038 R14: 00007f4288415fa0 R15: 00007f428853fa48 [ 178.070825][ T7243] [ 178.500869][ T7249] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.681922][ T7254] program syz.1.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.772986][ T5923] IPVS: starting estimator thread 0... [ 178.869956][ T7255] IPVS: using max 46 ests per chain, 110400 per kthread [ 180.911830][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 181.042616][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.071728][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.768995][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 183.389273][ T7304] netlink: 'syz.3.377': attribute type 3 has an invalid length. [ 183.426948][ T7305] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 183.596310][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.677955][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.756229][ T7282] syzkaller1: entered promiscuous mode [ 183.770465][ T7282] syzkaller1: entered allmulticast mode [ 183.820609][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.380'. [ 183.867952][ T7313] [U] kæ}ŠÁ [ 183.929799][ T7319] program syz.3.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.041884][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 184.464745][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.412185][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 186.379835][ T5960] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.539828][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 186.549442][ T5960] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.582311][ T5960] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.616286][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.624955][ T6844] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 186.656655][ T7347] xt_l2tp: invalid flags combination: 8 [ 186.661128][ T5960] usb 1-1: config 0 descriptor?? [ 186.806486][ T6844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.826293][ T6844] usb 4-1: not running at top speed; connect to a high speed hub [ 186.847621][ T6844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.879326][ T6844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.933484][ T6844] usb 4-1: string descriptor 0 read error: -22 [ 186.942474][ T6844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.960683][ T6844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.982136][ T6844] usb 4-1: 0:2 : does not exist [ 187.390558][ T7344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.435446][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'. [ 187.473529][ T7365] netlink: 252 bytes leftover after parsing attributes in process `syz.2.396'. [ 187.497322][ T7370] kAFS: unable to lookup cell ' [ 187.497322][ T7370] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 187.497322][ T7370] ' [ 187.524492][ T7365] netlink: 'syz.2.396': attribute type 126 has an invalid length. [ 187.581654][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.695555][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 188.028231][ T7379] program syz.4.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.038968][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.055866][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.075474][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.087111][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.217613][ T6844] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 188.355499][ T6844] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 188.387774][ T6844] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 188.436356][ T6844] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 188.476306][ T6844] usb 4-1: USB disconnect, device number 13 [ 188.648168][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.684860][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.218829][ T5960] usb 1-1: USB disconnect, device number 16 [ 189.430187][ T6844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.652081][ T6844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.670661][ T6844] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 189.733955][ T6844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.847387][ T6844] usb 4-1: config 0 descriptor?? [ 190.299283][ T6844] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 190.326216][ T6844] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 190.340007][ T6844] hid_mf 0003:0079:1846.0005: Invalid report, this should never happen! [ 190.349776][ T6844] hid_mf 0003:0079:1846.0005: Force feedback init failed. [ 190.454958][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.410'. [ 190.506526][ T6164] usb 4-1: USB disconnect, device number 14 [ 191.187867][ T7428] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 191.197728][ T7428] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 191.205761][ T7428] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 191.318559][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.342223][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.392806][ T7436] program syz.0.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.406245][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.451918][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.488070][ T7439] binder: 7438:7439 ioctl c0306201 2000000003c0 returned -14 [ 191.530892][ T7441] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 191.546404][ T7441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.628942][ T7441] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.676616][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 191.741391][ T7447] program syz.4.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.467722][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 193.871508][ T7471] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 194.191543][ T7483] openvswitch: netlink: IP tunnel TTL not specified. [ 194.333945][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345061][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.131128][ T6286] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 195.379845][ T6286] usb 1-1: Using ep0 maxpacket: 32 [ 195.389390][ T6286] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 195.409929][ T6286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.435634][ T6286] usb 1-1: config 0 descriptor?? [ 195.485094][ T6286] as10x_usb: device has been detected [ 195.494304][ T6286] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 195.540746][ T6286] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 195.683384][ T6286] as10x_usb: error during firmware upload part1 [ 195.799161][ T6286] Registered device nBox DVB-T Dongle [ 196.569667][ T5923] usb 1-1: USB disconnect, device number 17 [ 196.686652][ T5923] Unregistered device nBox DVB-T Dongle [ 196.730708][ T5923] as10x_usb: device has been disconnected [ 197.245403][ T7518] program syz.2.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.105512][ T7521] netlink: 56 bytes leftover after parsing attributes in process `syz.1.439'. [ 198.273915][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.307295][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.344568][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.354038][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.529807][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.711833][ T5895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.720160][ T5895] usb 2-1: config 0 has no interface number 0 [ 198.728802][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.751652][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.762364][ T5895] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.318451][ T5895] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 199.347430][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.373980][ T5895] usb 2-1: config 0 descriptor?? [ 200.160011][ T5895] usbhid 2-1:0.1: can't add hid device: -71 [ 200.166164][ T5895] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 200.177503][ T5895] usb 2-1: USB disconnect, device number 11 [ 201.165152][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.424698][ T5922] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 201.433038][ T5922] usb 2-1: config 1 has no interface number 0 [ 201.439197][ T5922] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 201.681414][ T5922] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 201.714675][ T5922] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 201.735662][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.768897][ T5922] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 201.785201][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.799975][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.807886][ T5922] usb 2-1: Product: syz [ 201.813489][ T5922] usb 2-1: Manufacturer: syz [ 201.818626][ T5922] usb 2-1: SerialNumber: syz [ 201.828034][ T7557] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 201.839659][ T7557] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 201.861823][ T5922] usb 2-1: Expected 3 endpoints, found: 2 [ 202.128579][ T5895] usb 2-1: USB disconnect, device number 12 [ 202.795741][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.806440][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.847633][ T7589] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 202.921699][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.943051][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.279798][ T6132] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 203.374090][ T7600] netlink: 'syz.1.467': attribute type 15 has an invalid length. [ 203.529870][ T6132] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.659781][ T6132] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 203.849769][ T6132] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.856076][ T6132] usb usb1-port1: attempt power cycle [ 204.201730][ T6132] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 204.231146][ T6132] usb 1-1: Invalid ep0 maxpacket: 64 [ 204.359889][ T6132] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 204.400763][ T6132] usb 1-1: Invalid ep0 maxpacket: 64 [ 204.404329][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 204.416053][ T7606] netem: incorrect ge model size [ 204.421401][ T7606] netem: change failed [ 204.493799][ T6132] usb usb1-port1: unable to enumerate USB device [ 204.589851][ T6844] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.739913][ T6844] usb 2-1: Using ep0 maxpacket: 8 [ 204.746491][ T6844] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.791912][ T6844] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 204.803855][ T6844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.818485][ T6844] usb 2-1: config 0 descriptor?? [ 204.833940][ T6844] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 205.259601][ T7609] fuse: Unknown parameter 'group_id00000000000000000000' [ 205.393429][ T7611] fuse: Bad value for 'group_id' [ 205.404995][ T7611] fuse: Bad value for 'group_id' [ 205.857813][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 206.075945][ T7621] program syz.0.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.095631][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 206.109420][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 206.156061][ T7626] tipc: Enabled bearer , priority 10 [ 206.164972][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 206.174609][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 206.967505][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.976677][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.237782][ T7648] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 207.355549][ T7648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.375621][ T6844] usb 2-1: USB disconnect, device number 13 [ 207.413862][ T5922] tipc: Node number set to 3073021649 [ 207.498080][ T7650] macvlan2: entered promiscuous mode [ 207.539829][ T7650] macvlan2: entered allmulticast mode [ 207.547381][ T7650] bond1: entered promiscuous mode [ 207.554445][ T7650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.578942][ T7650] bond1: left promiscuous mode [ 207.715785][ T7651] bond1: (slave ip6gretap1): making interface the new active one [ 207.726540][ T7651] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 208.207155][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 208.727291][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 208.758910][ T6844] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 208.809857][ T5960] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.922345][ T6844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.945383][ T6844] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 208.971501][ T6844] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 208.989874][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 209.004152][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.017845][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.029162][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.046484][ T6844] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 209.064732][ T5960] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 209.078820][ T6844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.096058][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.108123][ T6844] usb 1-1: config 0 descriptor?? [ 209.124984][ T6844] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 209.135311][ T5960] usb 2-1: config 0 descriptor?? [ 209.153565][ T5960] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 209.332217][ T7673] batadv_slave_0: entered promiscuous mode [ 209.541830][ T7671] batadv_slave_0: left promiscuous mode [ 209.568828][ T5960] usb 1-1: USB disconnect, device number 22 [ 209.761461][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 210.594918][ T7722] binder: 7710:7722 ioctl c0306201 0 returned -14 [ 210.949830][ T5895] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 211.149821][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 211.158132][ T5895] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 211.166585][ T5895] usb 4-1: config 2 has no interface number 0 [ 211.174207][ T5895] usb 4-1: config 2 interface 88 has no altsetting 0 [ 211.189431][ T5895] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 211.198868][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.209300][ T5895] usb 4-1: Product: syz [ 211.214172][ T5895] usb 4-1: Manufacturer: syz [ 211.218942][ T5895] usb 4-1: SerialNumber: syz [ 211.440320][ T7731] vivid-001: ================= START STATUS ================= [ 211.463604][ T7731] vivid-001: Interlaced VBI Format: false [ 211.489836][ T7731] vivid-001: ================== END STATUS ================== [ 211.720703][ T5922] usb 2-1: USB disconnect, device number 14 [ 211.786400][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.786430][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 211.786469][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 211.792713][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.792836][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 211.874671][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.884100][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.907216][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.510'. [ 211.953079][ T5895] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.006674][ T5895] asix 4-1:2.88: probe with driver asix failed with error -71 [ 212.039546][ T5895] usb 4-1: USB disconnect, device number 15 [ 212.319806][ T5960] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 212.336737][ T7749] netlink: 'syz.4.511': attribute type 5 has an invalid length. [ 212.421793][ T7749] ip6erspan0: entered promiscuous mode [ 212.739433][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.771391][ T5960] usb 1-1: config 64 has an invalid interface number: 146 but max is 0 [ 213.103396][ T5960] usb 1-1: config 64 has no interface number 0 [ 213.133797][ T5960] usb 1-1: config 64 interface 146 has no altsetting 0 [ 213.154593][ T5960] usb 1-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 213.164213][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.174701][ T5960] usb 1-1: Product: syz [ 213.179322][ T5960] usb 1-1: Manufacturer: syz [ 213.184985][ T5960] usb 1-1: SerialNumber: syz [ 213.425311][ T7765] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 213.498506][ T5960] ftdi_sio 1-1:64.146: FTDI USB Serial Device converter detected [ 213.526215][ T5960] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 213.533873][ T7722] syz.2.503 (7722): drop_caches: 2 [ 213.559643][ T5960] usb 1-1: USB disconnect, device number 23 [ 213.584738][ T5960] ftdi_sio 1-1:64.146: device disconnected [ 213.817795][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.853787][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.364981][ T7777] netlink: 'syz.1.519': attribute type 21 has an invalid length. [ 214.406787][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.519'. [ 214.433680][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 214.450315][ T5923] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 214.600990][ T5923] usb 1-1: no configurations [ 214.605734][ T5923] usb 1-1: can't read configurations, error -22 [ 214.769386][ T5923] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 214.809134][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.522'. [ 214.970328][ T5923] usb 1-1: no configurations [ 214.975006][ T5923] usb 1-1: can't read configurations, error -22 [ 214.983195][ T5923] usb usb1-port1: attempt power cycle [ 215.182451][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.192067][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.380088][ T5923] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 215.404824][ T5923] usb 1-1: no configurations [ 215.409469][ T5923] usb 1-1: can't read configurations, error -22 [ 215.464485][ T7798] binder: 7797:7798 ioctl c0306201 0 returned -14 [ 215.940439][ T5923] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 216.220294][ T5923] usb 1-1: no configurations [ 216.224963][ T5923] usb 1-1: can't read configurations, error -22 [ 216.233859][ T5923] usb usb1-port1: unable to enumerate USB device [ 217.267247][ T7814] ALSA: seq fatal error: cannot create timer (-19) [ 217.644080][ T7826] trusted_key: encrypted_key: insufficient parameters specified [ 217.785674][ T7827] capability: warning: `syz.0.533' uses deprecated v2 capabilities in a way that may be insecure [ 217.846691][ T7798] syz.3.527 (7798): drop_caches: 2 [ 218.358469][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 219.230301][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.460757][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 219.511017][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 219.524451][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.537199][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.549265][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.579630][ T5922] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 219.590086][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.598419][ T5922] usb 2-1: Product: syz [ 219.603357][ T5922] usb 2-1: Manufacturer: syz [ 219.608084][ T5922] usb 2-1: SerialNumber: syz [ 219.625334][ T5922] usb 2-1: config 0 descriptor?? [ 219.656027][ T5922] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 219.847676][ T7873] netlink: 'syz.1.536': attribute type 46 has an invalid length. [ 219.877322][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 219.925789][ T5922] usb 2-1: USB disconnect, device number 15 [ 220.263406][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.272475][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.290367][ T5922] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 220.340069][ T5960] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 220.443147][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.460155][ T5922] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 220.476721][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.486584][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.506584][ T5922] usb 4-1: Product: syz [ 220.509949][ T5960] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.513568][ T5922] usb 4-1: Manufacturer: syz [ 220.530751][ T5960] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.539017][ T5922] usb 4-1: SerialNumber: syz [ 220.563285][ T5960] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.577518][ T5960] usb 1-1: config 1 interface 0 has no altsetting 0 [ 220.588073][ T5960] usb 1-1: string descriptor 0 read error: -22 [ 220.596283][ T5960] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.605906][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.621845][ T5960] usb 1-1: bad CDC descriptors [ 220.787731][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.816857][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.864183][ T5960] usb 1-1: USB disconnect, device number 28 [ 221.134171][ T5922] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 221.162456][ T5922] usb 4-1: USB disconnect, device number 16 [ 221.750605][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 222.242206][ T7842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.422201][ T7842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.557995][ T7842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.598668][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.614628][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.738511][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.749357][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.757433][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 222.759607][ T7842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.769256][ T7929] capability: warning: `syz.1.558' uses 32-bit capabilities (legacy support in use) [ 222.787938][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.799754][ T5902] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 222.809005][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.817969][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.980555][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 222.992165][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.006125][ T5902] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 223.022737][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.034880][ T5902] usb 1-1: config 0 descriptor?? [ 223.064567][ T5902] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.410353][ T7945] binder: 7937:7945 ioctl c0306201 0 returned -14 [ 223.423658][ T7842] bridge_slave_1: left promiscuous mode [ 223.441665][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.755693][ T7842] bridge_slave_0: left allmulticast mode [ 224.022397][ T7842] bridge_slave_0: left promiscuous mode [ 224.028333][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.903868][ T52] Bluetooth: hci0: command tx timeout [ 225.241068][ T7945] syz.1.562 (7945): drop_caches: 2 [ 225.585630][ T5960] usb 1-1: USB disconnect, device number 29 [ 225.668468][ T7842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.718368][ T7842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.732733][ T7842] bond0 (unregistering): Released all slaves [ 226.032418][ T5960] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 226.200046][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 226.248539][ T5960] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 226.273979][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.302944][ T5960] usb 1-1: config 0 descriptor?? [ 226.437228][ T7930] chnl_net:caif_netlink_parms(): no params data found [ 226.533084][ T5960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 226.586142][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.627135][ T5960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 226.656259][ T5960] usb 1-1: media controller created [ 226.720807][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.862430][ T5960] az6027: usb out operation failed. (-71) [ 226.898613][ T5960] az6027: usb out operation failed. (-71) [ 226.907832][ T5960] stb0899_attach: Driver disabled by Kconfig [ 226.918855][ T5960] az6027: no front-end attached [ 226.918855][ T5960] [ 226.946014][ T5960] az6027: usb out operation failed. (-71) [ 226.959194][ T7842] hsr_slave_0: left promiscuous mode [ 226.979824][ T52] Bluetooth: hci0: command tx timeout [ 226.997981][ T5960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 227.026294][ T7842] hsr_slave_1: left promiscuous mode [ 227.042598][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.053450][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 227.073809][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.086945][ T5960] dvb-usb: schedule remote query interval to 400 msecs. [ 227.095149][ T5960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 227.108181][ T5960] usb 1-1: USB disconnect, device number 30 [ 227.115824][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.127715][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.195263][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.216793][ T7842] veth1_vlan: left promiscuous mode [ 227.222720][ T7842] veth0_vlan: left promiscuous mode [ 227.454805][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.573'. [ 227.760052][ T5960] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 227.807704][ T7842] team0 (unregistering): Port device team_slave_1 removed [ 227.857774][ T7842] team0 (unregistering): Port device team_slave_0 removed [ 227.923597][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 227.931848][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.955014][ T5960] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 227.964578][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.976181][ T5960] usb 1-1: config 0 descriptor?? [ 227.986931][ T5960] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 228.289087][ T8004] : renamed from bond_slave_0 (while UP) [ 228.328879][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.336931][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.345058][ T7930] bridge_slave_0: entered allmulticast mode [ 228.367745][ T7930] bridge_slave_0: entered promiscuous mode [ 228.395716][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.413165][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.440008][ T7930] bridge_slave_1: entered allmulticast mode [ 228.453652][ T7930] bridge_slave_1: entered promiscuous mode [ 228.586347][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.602270][ T8028] tipc: Invalid UDP bearer configuration [ 228.602333][ T8028] tipc: Enabling of bearer rejected, failed to enable media [ 228.689026][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.728369][ T8032] binder: 8022:8032 ioctl c0306201 0 returned -14 [ 228.893883][ T7930] team0: Port device team_slave_0 added [ 228.923839][ T7930] team0: Port device team_slave_1 added [ 229.157125][ T52] Bluetooth: hci0: command tx timeout [ 229.229238][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.246953][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.366302][ T7930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.540064][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.547204][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.573726][ T7930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.056366][ T7930] hsr_slave_0: entered promiscuous mode [ 230.064354][ T7930] hsr_slave_1: entered promiscuous mode [ 230.123804][ T7930] debugfs: 'hsr0' already exists in 'hsr' [ 230.128804][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.130735][ T7930] Cannot create hsr debugfs directory [ 230.162852][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.195295][ T8050] trusted_key: encrypted_key: insufficient parameters specified [ 230.226016][ T8050] trusted_key: encrypted_key: keylen parameter is missing [ 230.578348][ T5909] usb 1-1: USB disconnect, device number 31 [ 231.061588][ T7930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.101385][ T7930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.200983][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.209942][ T52] Bluetooth: hci0: command tx timeout [ 231.232421][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.304467][ T7930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.342043][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.417064][ T7930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.505033][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.594257][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 232.005146][ T8103] netlink: 2148 bytes leftover after parsing attributes in process `syz.4.589'. [ 232.018972][ T8103] netlink: 2148 bytes leftover after parsing attributes in process `syz.4.589'. [ 232.044575][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.133362][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.169612][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.176796][ T7857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.245025][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.252357][ T7857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.548740][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.684836][ T7930] veth0_vlan: entered promiscuous mode [ 232.742110][ T7930] veth1_vlan: entered promiscuous mode [ 232.872926][ T7930] veth0_macvtap: entered promiscuous mode [ 232.920397][ T7930] veth1_macvtap: entered promiscuous mode [ 232.978314][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.024165][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.093523][ T3004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.104615][ T3004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.131925][ T3004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.148203][ T3004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.334918][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.357418][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.484960][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.493872][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.523088][ T8123] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 233.999985][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.200136][ T5895] usb 6-1: device descriptor read/64, error -71 [ 234.449809][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 234.589857][ T5895] usb 6-1: device descriptor read/64, error -71 [ 234.742024][ T5895] usb usb6-port1: attempt power cycle [ 235.089797][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 235.110496][ T5895] usb 6-1: device descriptor read/8, error -71 [ 235.268984][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.282400][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.359774][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 235.380469][ T5895] usb 6-1: device descriptor read/8, error -71 [ 235.388463][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.460570][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.506608][ T5895] usb usb6-port1: unable to enumerate USB device [ 236.399837][ T5902] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.570248][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 236.579061][ T5902] usb 2-1: config 0 has no interfaces? [ 236.586110][ T5902] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.595237][ T5902] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.603734][ T5902] usb 2-1: Manufacturer: syz [ 236.610708][ T5902] usb 2-1: config 0 descriptor?? [ 237.479815][ T5902] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 237.621117][ T5902] usb 1-1: device descriptor read/64, error -71 [ 237.860000][ T5902] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 237.999877][ T5902] usb 1-1: device descriptor read/64, error -71 [ 238.052764][ T8202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.123822][ T5902] usb usb1-port1: attempt power cycle [ 238.321699][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.336568][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.421377][ T5960] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.489920][ T5902] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 238.530572][ T5902] usb 1-1: device descriptor read/8, error -71 [ 238.579791][ T5960] usb 6-1: Using ep0 maxpacket: 8 [ 238.586347][ T5960] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.594083][ T8210] binder: 8208:8210 ioctl c0306201 0 returned -14 [ 238.599859][ T5960] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 238.615403][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.626297][ T5960] usb 6-1: config 0 descriptor?? [ 238.636852][ T5960] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 238.780831][ T5902] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 238.810577][ T5902] usb 1-1: device descriptor read/8, error -71 [ 238.930361][ T5902] usb usb1-port1: unable to enumerate USB device [ 239.128926][ T5923] usb 2-1: USB disconnect, device number 16 [ 239.202119][ T8219] fuse: Unknown parameter 'grou00000000000000000000' [ 239.384662][ T8221] nftables ruleset with unbound chain [ 239.521605][ T8224] netlink: 9 bytes leftover after parsing attributes in process `syz.4.618'. [ 239.580269][ T8224] dummy0: left promiscuous mode [ 239.602277][ T8224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.764960][ T8252] veth0: entered promiscuous mode [ 240.779569][ T8250] veth0: left promiscuous mode [ 241.095403][ T8259] binder: 8254:8259 ioctl c0306201 0 returned -14 [ 241.237366][ T5923] usb 6-1: USB disconnect, device number 6 [ 241.416676][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 242.358506][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 242.358520][ T30] audit: type=1326 audit(1769243697.573:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 242.393934][ T8285] FAULT_INJECTION: forcing a failure. [ 242.393934][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 242.521188][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.2.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.521213][ T8285] Tainted: [L]=SOFTLOCKUP [ 242.521217][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 242.521225][ T8285] Call Trace: [ 242.521231][ T8285] [ 242.521236][ T8285] dump_stack_lvl+0xe8/0x150 [ 242.521258][ T8285] should_fail_ex+0x412/0x560 [ 242.521278][ T8285] should_failslab+0xa8/0x100 [ 242.521294][ T8285] __kmalloc_noprof+0xde/0x7e0 [ 242.521306][ T8285] ? tomoyo_encode+0x28b/0x550 [ 242.521326][ T8285] tomoyo_encode+0x28b/0x550 [ 242.521345][ T8285] tomoyo_realpath_from_path+0x58d/0x5d0 [ 242.521367][ T8285] ? tomoyo_path_number_perm+0x219/0x630 [ 242.521384][ T8285] tomoyo_path_number_perm+0x246/0x630 [ 242.521405][ T8285] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.521418][ T8285] ? __lock_acquire+0x6b5/0x2cf0 [ 242.521440][ T8285] ? __pfx___seccomp_filter+0x10/0x10 [ 242.521451][ T8285] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 242.521481][ T8285] ? __fget_files+0x2a/0x420 [ 242.521502][ T8285] ? __fget_files+0x2a/0x420 [ 242.521515][ T8285] ? __fget_files+0x3a0/0x420 [ 242.521528][ T8285] ? __fget_files+0x2a/0x420 [ 242.521545][ T8285] security_file_ioctl+0xc3/0x2a0 [ 242.521560][ T8285] __se_sys_ioctl+0x47/0x170 [ 242.521579][ T8285] do_syscall_64+0xe2/0xf80 [ 242.521595][ T8285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.521606][ T8285] ? trace_irq_disable+0x37/0x100 [ 242.521621][ T8285] ? clear_bhb_loop+0x60/0xb0 [ 242.521635][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.521653][ T8285] RIP: 0033:0x7fd54fd9acb9 [ 242.521671][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.521689][ T8285] RSP: 002b:00007fd550ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.521710][ T8285] RAX: ffffffffffffffda RBX: 00007fd550015fa0 RCX: 00007fd54fd9acb9 [ 242.521724][ T8285] RDX: 0000200000000180 RSI: 0000000040045731 RDI: 0000000000000003 [ 242.521738][ T8285] RBP: 00007fd550ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 242.521750][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.521760][ T8285] R13: 00007fd550016038 R14: 00007fd550015fa0 R15: 00007fd55013fa48 [ 242.521779][ T8285] [ 242.521856][ T8285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.570261][ T5922] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 242.579374][ T30] audit: type=1326 audit(1769243697.613:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 242.929126][ T30] audit: type=1326 audit(1769243697.613:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 243.003021][ T5922] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 243.020092][ T30] audit: type=1326 audit(1769243697.613:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 243.095186][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.099736][ T30] audit: type=1326 audit(1769243697.613:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 243.157815][ T30] audit: type=1326 audit(1769243697.613:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 243.306691][ T8300] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 243.335285][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.363861][ T30] audit: type=1326 audit(1769243698.043:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 243.364792][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.440021][ T5922] usb 1-1: Product: syz [ 243.444339][ T5922] usb 1-1: Manufacturer: syz [ 243.448979][ T5922] usb 1-1: SerialNumber: syz [ 243.476160][ T5922] usb 1-1: config 0 descriptor?? [ 243.493146][ T30] audit: type=1326 audit(1769243698.043:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 243.608480][ T30] audit: type=1326 audit(1769243698.043:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 243.644389][ T5922] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 243.676033][ T30] audit: type=1326 audit(1769243698.043:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 244.180465][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.214324][ T5960] usb 1-1: USB disconnect, device number 36 [ 244.285830][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.297753][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.317834][ T8316] fuse: Unknown parameter 'grou00000000000000000000' [ 244.518747][ T8317] syz.5.639 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.145878][ T8335] fuse: Unknown parameter 'g' [ 245.152602][ T8337] binder: 8332:8337 ioctl c0306201 0 returned -14 [ 245.219749][ T5960] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 245.294886][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.311557][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.404902][ T5960] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 245.437443][ T5960] usb 1-1: config 0 has no interface number 0 [ 245.465613][ T5960] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 245.500374][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.535213][ T5960] usb 1-1: config 0 descriptor?? [ 245.681426][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.747283][ T52] Bluetooth: hci4: Unknown advertising packet type: 0x78 [ 245.747345][ T52] Bluetooth: hci4: Malformed LE Event: 0x0d [ 245.820547][ T5923] usb 2-1: device descriptor read/64, error -71 [ 246.061379][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 246.220605][ T5923] usb 2-1: device descriptor read/64, error -71 [ 246.332753][ T5923] usb usb2-port1: attempt power cycle [ 246.700418][ T5923] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 246.732263][ T5923] usb 2-1: device descriptor read/8, error -71 [ 246.970530][ T5923] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 247.110719][ T5923] usb 2-1: device descriptor read/8, error -71 [ 247.230152][ T5923] usb usb2-port1: unable to enumerate USB device [ 248.040799][ T5960] usb 1-1: string descriptor 0 read error: -71 [ 248.073929][ T5960] usb-storage 1-1:0.168: USB Mass Storage device detected [ 248.118931][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.144111][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.145007][ T5960] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 248.278529][ T5960] usb 1-1: USB disconnect, device number 37 [ 248.318552][ T8393] fuse: Unknown parameter 'grou00000000000000000000' [ 248.485621][ T5923] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 248.642401][ T5923] usb 6-1: device descriptor read/64, error -71 [ 248.825828][ T8409] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 248.863685][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 248.880242][ T5923] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 248.897340][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 249.023448][ T5923] usb 6-1: device descriptor read/64, error -71 [ 249.086332][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 249.150405][ T5923] usb usb6-port1: attempt power cycle [ 249.501635][ T5923] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 249.544326][ T5923] usb 6-1: device descriptor read/8, error -71 [ 249.810958][ T5923] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 249.873421][ T5923] usb 6-1: device descriptor read/8, error -71 [ 249.990637][ T5923] usb usb6-port1: unable to enumerate USB device [ 250.306157][ T8447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.892827][ T8473] trusted_key: encrypted_key: insufficient parameters specified [ 251.914926][ T5960] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 251.979336][ T8474] trusted_key: encrypted_key: keylen parameter is missing [ 254.626031][ T6132] IPVS: starting estimator thread 0... [ 254.720612][ T8506] IPVS: using max 24 ests per chain, 57600 per kthread [ 254.790303][ T5909] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 254.957082][ T5909] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 255.028849][ T5909] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 255.060186][ T5909] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 255.079433][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.197456][ T5909] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 255.772490][ T5909] gspca_sn9c2028: read1 error -110 [ 255.790249][ T5909] gspca_sn9c2028: read1 error -32 [ 255.801578][ T5909] gspca_sn9c2028: read1 error -32 [ 255.802754][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806713][ T5909] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -32 [ 255.816761][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.840776][ T8520] netlink: 'syz.5.682': attribute type 5 has an invalid length. [ 256.139082][ T8522] trusted_key: encrypted_key: insufficient parameters specified [ 256.166432][ T8522] trusted_key: encrypted_key: keylen parameter is missing [ 256.550872][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 256.550893][ T30] audit: type=1326 audit(1769243711.743:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 256.695407][ T30] audit: type=1326 audit(1769243711.763:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd54fd5b58e code=0x7ffc0000 [ 256.821524][ T30] audit: type=1326 audit(1769243711.763:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 256.939131][ T30] audit: type=1326 audit(1769243711.763:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.014715][ T30] audit: type=1326 audit(1769243711.763:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.043579][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.052882][ T30] audit: type=1326 audit(1769243711.763:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.257029][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.372893][ T30] audit: type=1326 audit(1769243711.763:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.438834][ T30] audit: type=1326 audit(1769243711.763:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.553905][ T30] audit: type=1326 audit(1769243711.763:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 257.559815][ T8547] sctp: [Deprecated]: syz.0.694 (pid 8547) Use of int in max_burst socket option. [ 257.559815][ T8547] Use struct sctp_assoc_value instead [ 257.601933][ T30] audit: type=1326 audit(1769243711.763:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54fd9acb9 code=0x7ffc0000 [ 258.430992][ T5895] usb 6-1: USB disconnect, device number 11 [ 258.551415][ T8561] binder: BC_ACQUIRE_RESULT not supported [ 258.557323][ T8561] binder: 8560:8561 ioctl c0306201 2000000001c0 returned -22 [ 258.800785][ T5895] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 259.952189][ T5960] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.196335][ T5960] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.205966][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.244267][ T5960] usb 2-1: Product: syz [ 260.248584][ T5960] usb 2-1: Manufacturer: syz [ 260.268844][ T5960] usb 2-1: SerialNumber: syz [ 260.762061][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 260.793646][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 261.087059][ T8586] xt_TCPMSS: Only works on TCP SYN packets [ 261.173122][ T6286] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 261.337409][ T6286] usb 6-1: config 252 has an invalid interface number: 107 but max is 0 [ 261.366898][ T6286] usb 6-1: config 252 has no interface number 0 [ 261.388078][ T6286] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 261.444969][ T6286] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 261.483493][ T6286] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 261.512547][ T6286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.541887][ T6286] usb 6-1: Product: syz [ 261.564564][ T6286] usb 6-1: Manufacturer: syz [ 261.576557][ T6286] usb 6-1: SerialNumber: syz [ 261.829802][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.707'. [ 261.851452][ T6286] usb 6-1: USB disconnect, device number 12 [ 262.134197][ T8603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.323767][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 262.357911][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 262.690244][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 262.705830][ T8572] 8021q: VLANs not supported on caif0 [ 262.730781][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 262.760874][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 262.819347][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 262.870971][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 262.895156][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 262.925532][ T5960] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 262.968820][ T5960] usb 2-1: USB disconnect, device number 21 [ 263.291916][ T8617] openvswitch: netlink: IP tunnel dst address not specified [ 263.547630][ T8621] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 263.684542][ T8627] FAULT_INJECTION: forcing a failure. [ 263.684542][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 263.840092][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.1.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.840128][ T8627] Tainted: [L]=SOFTLOCKUP [ 263.840136][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 263.840147][ T8627] Call Trace: [ 263.840155][ T8627] [ 263.840164][ T8627] dump_stack_lvl+0xe8/0x150 [ 263.840208][ T8627] should_fail_ex+0x412/0x560 [ 263.840233][ T8627] should_failslab+0xa8/0x100 [ 263.840249][ T8627] __kmalloc_noprof+0xde/0x7e0 [ 263.840261][ T8627] ? tomoyo_encode+0x28b/0x550 [ 263.840282][ T8627] tomoyo_encode+0x28b/0x550 [ 263.840301][ T8627] tomoyo_realpath_from_path+0x58d/0x5d0 [ 263.840324][ T8627] ? tomoyo_path_number_perm+0x219/0x630 [ 263.840339][ T8627] tomoyo_path_number_perm+0x246/0x630 [ 263.840354][ T8627] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.840367][ T8627] ? __lock_acquire+0x6b5/0x2cf0 [ 263.840389][ T8627] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 263.840419][ T8627] ? __fget_files+0x2a/0x420 [ 263.840435][ T8627] ? __fget_files+0x2a/0x420 [ 263.840448][ T8627] ? __fget_files+0x3a0/0x420 [ 263.840461][ T8627] ? __fget_files+0x2a/0x420 [ 263.840477][ T8627] security_file_ioctl+0xc3/0x2a0 [ 263.840492][ T8627] __se_sys_ioctl+0x47/0x170 [ 263.840511][ T8627] do_syscall_64+0xe2/0xf80 [ 263.840528][ T8627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.840539][ T8627] ? trace_irq_disable+0x37/0x100 [ 263.840553][ T8627] ? clear_bhb_loop+0x60/0xb0 [ 263.840567][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.840579][ T8627] RIP: 0033:0x7f550c39acb9 [ 263.840592][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.840602][ T8627] RSP: 002b:00007f550d1cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.840618][ T8627] RAX: ffffffffffffffda RBX: 00007f550c616090 RCX: 00007f550c39acb9 [ 263.840627][ T8627] RDX: 0000200000000180 RSI: 0000000040047438 RDI: 0000000000000006 [ 263.840635][ T8627] RBP: 00007f550d1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 263.840642][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.840649][ T8627] R13: 00007f550c616128 R14: 00007f550c616090 R15: 00007f550c73fa48 [ 263.840668][ T8627] [ 263.847995][ T8627] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.489819][ T6844] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 265.519925][ T5895] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 265.679918][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 265.699257][ T5895] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 265.742223][ T5895] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 265.786959][ T5895] usb 2-1: config 1 interface 0 has no altsetting 0 [ 265.829589][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.902682][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.932570][ T5895] usb 2-1: Product: syz [ 265.947947][ T5895] usb 2-1: Manufacturer: syz [ 265.967248][ T5895] usb 2-1: SerialNumber: syz [ 266.005900][ T8653] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 266.026944][ T8653] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 266.189933][ T5960] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 266.284899][ T5895] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 266.309251][ T5895] usb 2-1: USB disconnect, device number 22 [ 266.377581][ T5960] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 266.398818][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.424882][ T5960] usb 6-1: Product: syz [ 266.448921][ T5960] usb 6-1: Manufacturer: syz [ 266.457890][ T5960] usb 6-1: SerialNumber: syz [ 266.475071][ T5960] usb 6-1: config 0 descriptor?? [ 266.497649][ T5960] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 266.898397][ T5960] gspca_sunplus: reg_r err -71 [ 267.173339][ T5960] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 267.196015][ T5960] usb 6-1: USB disconnect, device number 13 [ 267.585721][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.606271][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.981054][ T8691] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 268.988997][ T8691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.734'. [ 269.001636][ T8691] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 269.009515][ T8691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.734'. [ 269.179395][ T8692] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 269.605622][ T30] audit: type=1326 audit(1769243724.823:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 269.662599][ T30] audit: type=1326 audit(1769243724.823:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 269.686603][ T30] audit: type=1326 audit(1769243724.823:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 269.749388][ T30] audit: type=1326 audit(1769243724.823:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 269.883696][ T30] audit: type=1326 audit(1769243724.823:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 270.118967][ T30] audit: type=1326 audit(1769243724.823:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 270.184970][ T30] audit: type=1326 audit(1769243724.823:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 270.240056][ T30] audit: type=1326 audit(1769243724.823:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 270.312702][ T30] audit: type=1326 audit(1769243724.823:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 270.477752][ T30] audit: type=1326 audit(1769243724.823:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d79acb9 code=0x7ffc0000 [ 271.180969][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.250374][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.269928][ T5960] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 271.356220][ T8736] netlink: 'syz.1.743': attribute type 8 has an invalid length. [ 271.364462][ T8736] netlink: 'syz.1.743': attribute type 9 has an invalid length. [ 271.374692][ T8736] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 271.382588][ T8736] netlink: 'syz.1.743': attribute type 11 has an invalid length. [ 271.390911][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 271.434720][ T8717] binder: 8707:8717 ioctl c0306201 0 returned -14 [ 271.829192][ T8717] syz.0.739 (8717): drop_caches: 2 [ 272.040309][ T5960] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 272.073761][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 272.305394][ T5960] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.331819][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.359466][ T5960] usb 6-1: Product: syz [ 272.371293][ T5960] usb 6-1: Manufacturer: syz [ 272.402015][ T5960] usb 6-1: SerialNumber: syz [ 272.492291][ T5960] usb 6-1: config 0 descriptor?? [ 272.566865][ T5960] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 272.604476][ T5960] em28xx 6-1:0.0: Device initialization failed. [ 272.635174][ T5960] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 272.695229][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.629850][ T6132] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 273.639107][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 273.692843][ T8755] batadv_slave_1: entered promiscuous mode [ 273.789766][ T6132] usb 1-1: device descriptor read/64, error -71 [ 273.909987][ T5960] usb 6-1: USB disconnect, device number 14 [ 274.061349][ T6132] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 274.214904][ T8769] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 274.264683][ T6132] usb 1-1: device descriptor read/64, error -71 [ 274.394681][ T6132] usb usb1-port1: attempt power cycle [ 274.750183][ T6132] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 274.804686][ T6132] usb 1-1: device descriptor read/8, error -71 [ 275.089960][ T6132] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 275.120524][ T6844] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 275.162839][ T6132] usb 1-1: device descriptor read/8, error -71 [ 275.280161][ T6132] usb usb1-port1: unable to enumerate USB device [ 275.329913][ T6844] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 275.338645][ T6844] usb 2-1: config 0 has no interface number 0 [ 275.356572][ T6844] usb 2-1: config 0 interface 128 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 275.370493][ T6844] usb 2-1: config 0 interface 128 has no altsetting 0 [ 275.389080][ T6844] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 275.419233][ T6844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.429095][ T6844] usb 2-1: Product: syz [ 275.433621][ T6844] usb 2-1: Manufacturer: syz [ 275.438304][ T6844] usb 2-1: SerialNumber: syz [ 275.448145][ T6844] usb 2-1: config 0 descriptor?? [ 275.475031][ T6844] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 275.679619][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.694658][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.779899][ T6844] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 275.897975][ T8790] binder: 8785:8790 ioctl c0306201 0 returned -14 [ 275.909760][ T6844] usb 6-1: device descriptor read/64, error -71 [ 275.939097][ T8790] syz.4.762 (8790): drop_caches: 2 [ 276.269774][ T6844] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 276.421111][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.429835][ T6844] usb 6-1: device descriptor read/64, error -71 [ 276.439435][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.772600][ T6844] usb usb6-port1: attempt power cycle [ 277.129856][ T6844] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 277.167277][ T6844] usb 6-1: device descriptor read/8, error -71 [ 277.420118][ T6844] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 277.450483][ T6844] usb 6-1: device descriptor read/8, error -71 [ 277.570687][ T6844] usb usb6-port1: unable to enumerate USB device [ 277.863286][ T5924] usb 2-1: USB disconnect, device number 23 [ 279.842397][ T8844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.776'. [ 280.017348][ T8847] netlink: 'syz.5.778': attribute type 62 has an invalid length. [ 280.025521][ T6844] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.302019][ T6844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.322082][ T6844] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.430297][ T6844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.473788][ T6844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.629153][ T6844] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.644753][ T6844] usb 2-1: invalid MIDI out EP 0 [ 281.041797][ T8842] fuse: Unknown parameter 'rootmod' [ 281.237087][ T6844] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 281.387199][ T8842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.950346][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 282.021041][ T8876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.037850][ T8879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.055954][ T8879] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 282.072463][ T8879] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 282.219761][ T6844] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 282.349895][ T5924] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 282.509907][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 282.523919][ T5924] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 282.532838][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.544860][ T5924] usb 6-1: config 0 has no interface number 0 [ 282.554097][ T5924] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 282.565838][ T5924] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.576409][ T5924] usb 6-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.590556][ T5924] usb 6-1: config 0 interface 223 has no altsetting 0 [ 282.603982][ T5924] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 282.630100][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.654078][ T5924] usb 6-1: Product: syz [ 282.668217][ T5924] usb 6-1: Manufacturer: syz [ 282.673929][ T5924] usb 6-1: SerialNumber: syz [ 282.687068][ T5924] usb 6-1: config 0 descriptor?? [ 283.119139][ T5922] usb 6-1: USB disconnect, device number 19 [ 283.525381][ T5924] usb 2-1: USB disconnect, device number 24 [ 283.592127][ T8886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'. [ 284.269543][ T8901] openvswitch: netlink: Multiple metadata blocks provided [ 284.281584][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.791'. [ 284.566453][ T8907] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 284.625586][ T8907] team0: Port device dummy0 added [ 285.990457][ T8923] netlink: 436 bytes leftover after parsing attributes in process `syz.0.795'. [ 286.388650][ T52] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 286.919769][ T5924] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 287.203387][ T5924] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 287.215841][ T5924] usb 1-1: config 0 has no interface number 0 [ 287.228746][ T5924] usb 1-1: config 0 interface 128 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 287.244697][ T5924] usb 1-1: config 0 interface 128 has no altsetting 0 [ 287.262568][ T5924] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 287.272043][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.340619][ T5924] usb 1-1: Product: syz [ 287.344810][ T5924] usb 1-1: Manufacturer: syz [ 287.379696][ T5924] usb 1-1: SerialNumber: syz [ 287.417609][ T5924] usb 1-1: config 0 descriptor?? [ 287.433955][ T5924] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 287.595948][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.804'. [ 287.703802][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.726600][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.754252][ T8950] ======================================================= [ 287.754252][ T8950] WARNING: The mand mount option has been deprecated and [ 287.754252][ T8950] and is ignored by this kernel. Remove the mand [ 287.754252][ T8950] option from the mount to silence this warning. [ 287.754252][ T8950] ======================================================= [ 287.851968][ T8950] fuse: Bad value for 'fd' [ 288.941877][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.954335][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.131289][ T8970] fuse: Unknown parameter 'rootmod' [ 289.411408][ T8970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.482971][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.813'. [ 289.674744][ T6286] usb 1-1: USB disconnect, device number 46 [ 292.010548][ T5909] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 292.176121][ T5909] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 292.192086][ T5909] usb 6-1: config 0 has no interface number 0 [ 292.232449][ T5909] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 292.253336][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.272458][ T5909] usb 6-1: Product: syz [ 292.276762][ T5909] usb 6-1: Manufacturer: syz [ 292.291279][ T5909] usb 6-1: SerialNumber: syz [ 292.320910][ T5909] usb 6-1: config 0 descriptor?? [ 292.326930][ T9012] FAULT_INJECTION: forcing a failure. [ 292.326930][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 292.361490][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.4.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.361526][ T9012] Tainted: [L]=SOFTLOCKUP [ 292.361532][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 292.361544][ T9012] Call Trace: [ 292.361552][ T9012] [ 292.361560][ T9012] dump_stack_lvl+0xe8/0x150 [ 292.361604][ T9012] should_fail_ex+0x412/0x560 [ 292.361637][ T9012] should_failslab+0xa8/0x100 [ 292.361664][ T9012] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 292.361693][ T9012] ? __alloc_skb+0x193/0x390 [ 292.361721][ T9012] ? __alloc_skb+0x1d7/0x390 [ 292.361745][ T9012] ? __local_bh_enable_ip+0xd0/0x130 [ 292.361768][ T9012] ? __alloc_skb+0x193/0x390 [ 292.361795][ T9012] __alloc_skb+0x1d7/0x390 [ 292.361825][ T9012] alloc_skb_with_frags+0xca/0x890 [ 292.361856][ T9012] sock_alloc_send_pskb+0x878/0x990 [ 292.361895][ T9012] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 292.361915][ T9012] ? kasan_quarantine_put+0xbb/0x1f0 [ 292.361934][ T9012] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.361966][ T9012] ? kmem_cache_free+0x195/0x610 [ 292.361985][ T9012] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 292.362009][ T9012] unix_dgram_sendmsg+0x44e/0x17b0 [ 292.362041][ T9012] ? do_wp_page+0x22dd/0x57b0 [ 292.362072][ T9012] ? __pfx_css_rstat_updated+0x10/0x10 [ 292.362102][ T9012] ? do_wp_page+0x1634/0x57b0 [ 292.362135][ T9012] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 292.362162][ T9012] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 292.362201][ T9012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.362218][ T9012] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 292.362247][ T9012] __sock_sendmsg+0x21c/0x270 [ 292.362275][ T9012] ____sys_sendmsg+0x500/0x810 [ 292.362294][ T9012] ? __might_fault+0xaf/0x130 [ 292.362325][ T9012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.362353][ T9012] ? import_iovec+0x73/0xa0 [ 292.362379][ T9012] ___sys_sendmsg+0x2a5/0x360 [ 292.362404][ T9012] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.362421][ T9012] ? __lock_acquire+0x6b5/0x2cf0 [ 292.362492][ T9012] __sys_sendmmsg+0x27c/0x4e0 [ 292.362517][ T9012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 292.362535][ T9012] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 292.362597][ T9012] ? ksys_write+0x242/0x270 [ 292.362619][ T9012] ? __pfx_ksys_write+0x10/0x10 [ 292.362644][ T9012] __x64_sys_sendmmsg+0xa0/0xc0 [ 292.362666][ T9012] do_syscall_64+0xe2/0xf80 [ 292.362691][ T9012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.362710][ T9012] ? trace_irq_disable+0x37/0x100 [ 292.362735][ T9012] ? clear_bhb_loop+0x60/0xb0 [ 292.362758][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.362777][ T9012] RIP: 0033:0x7f428819acb9 [ 292.362795][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.362812][ T9012] RSP: 002b:00007f428905b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.362834][ T9012] RAX: ffffffffffffffda RBX: 00007f4288415fa0 RCX: 00007f428819acb9 [ 292.362848][ T9012] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 292.362862][ T9012] RBP: 00007f428905b090 R08: 0000000000000000 R09: 0000000000000000 [ 292.362873][ T9012] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 292.362886][ T9012] R13: 00007f4288416038 R14: 00007f4288415fa0 R15: 00007f428853fa48 [ 292.362916][ T9012] [ 292.925939][ T5909] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 292.999053][ T3004] tipc: Subscription rejected, illegal request [ 293.013082][ T5909] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 293.031418][ T9030] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 293.094945][ T5909] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 293.181473][ T5909] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 293.252406][ T5909] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 293.587204][ T5909] usb 6-1: USB disconnect, device number 20 [ 293.601255][ T5909] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 293.642657][ T5909] keyspan 6-1:0.133: device disconnected [ 293.858101][ T9042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.629821][ T6844] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 294.792546][ T6844] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.826857][ T6844] usb 1-1: not running at top speed; connect to a high speed hub [ 294.847857][ T6844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.865416][ T6844] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.921181][ T6844] usb 1-1: string descriptor 0 read error: -22 [ 294.928510][ T9055] binder: BC_ATTEMPT_ACQUIRE not supported [ 294.933544][ T6844] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.963941][ T6844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.965629][ T9055] binder: 9054:9055 ioctl c0306201 2000000001c0 returned -22 [ 295.019883][ T5895] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 295.032875][ T6844] usb 1-1: 0:2 : does not exist [ 295.163201][ T9058] FAULT_INJECTION: forcing a failure. [ 295.163201][ T9058] name failslab, interval 1, probability 0, space 0, times 0 [ 295.204156][ T9058] CPU: 1 UID: 0 PID: 9058 Comm: syz.2.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.204191][ T9058] Tainted: [L]=SOFTLOCKUP [ 295.204199][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 295.204210][ T9058] Call Trace: [ 295.204219][ T9058] [ 295.204227][ T9058] dump_stack_lvl+0xe8/0x150 [ 295.204260][ T9058] should_fail_ex+0x412/0x560 [ 295.204293][ T9058] should_failslab+0xa8/0x100 [ 295.204321][ T9058] kmem_cache_alloc_noprof+0x87/0x6e0 [ 295.204349][ T9058] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 295.204373][ T9058] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 295.204400][ T9058] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 295.204438][ T9058] mmu_topup_memory_caches+0x21/0x170 [ 295.204465][ T9058] kvm_mmu_load+0x9d/0x22d0 [ 295.204487][ T9058] ? kvm_msr_allowed+0x9a/0x490 [ 295.204513][ T9058] ? kvm_msr_allowed+0x3f4/0x490 [ 295.204544][ T9058] ? kvm_msr_allowed+0x9a/0x490 [ 295.204567][ T9058] ? kvm_msr_allowed+0x9a/0x490 [ 295.204599][ T9058] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 295.204650][ T9058] vcpu_run+0x5509/0x7660 [ 295.204750][ T9058] ? __pfx_vcpu_run+0x10/0x10 [ 295.204770][ T9058] ? kvm_arch_vcpu_ioctl_run+0x2a9/0x1dc0 [ 295.204779][ T5895] usb 6-1: config 64 has an invalid interface number: 146 but max is 0 [ 295.204791][ T9058] ? kvm_arch_vcpu_ioctl_run+0x2a9/0x1dc0 [ 295.204813][ T9058] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 295.204840][ T9058] ? rcu_is_watching+0x15/0xb0 [ 295.204866][ T9058] kvm_arch_vcpu_ioctl_run+0x1010/0x1dc0 [ 295.204897][ T9058] ? kvm_arch_vcpu_ioctl_run+0x2a9/0x1dc0 [ 295.204914][ T9058] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 295.204934][ T9058] ? __lock_acquire+0x6b5/0x2cf0 [ 295.204956][ T9058] ? __mutex_lock+0x319/0x1300 [ 295.204989][ T9058] ? kasan_quarantine_put+0xbb/0x1f0 [ 295.205020][ T9058] ? do_raw_write_lock+0x11d/0x260 [ 295.205062][ T9058] kvm_vcpu_ioctl+0xa62/0xfd0 [ 295.205092][ T9058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 295.205114][ T9058] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 295.205160][ T9058] ? __fget_files+0x2a/0x420 [ 295.205186][ T9058] ? __fget_files+0x2a/0x420 [ 295.205206][ T9058] ? __fget_files+0x3a0/0x420 [ 295.205227][ T9058] ? __fget_files+0x2a/0x420 [ 295.205252][ T9058] ? bpf_lsm_file_ioctl+0x9/0x20 [ 295.205272][ T9058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 295.205297][ T9058] __se_sys_ioctl+0xfc/0x170 [ 295.205326][ T9058] do_syscall_64+0xe2/0xf80 [ 295.205351][ T9058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.205369][ T9058] ? trace_irq_disable+0x37/0x100 [ 295.205392][ T9058] ? clear_bhb_loop+0x60/0xb0 [ 295.205414][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.205431][ T9058] RIP: 0033:0x7fd54fd9acb9 [ 295.205457][ T9058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.205473][ T9058] RSP: 002b:00007fd54dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.205494][ T9058] RAX: ffffffffffffffda RBX: 00007fd550016180 RCX: 00007fd54fd9acb9 [ 295.205508][ T9058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 295.205519][ T9058] RBP: 00007fd54dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.205530][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.205541][ T9058] R13: 00007fd550016218 R14: 00007fd550016180 R15: 00007fd55013fa48 [ 295.205571][ T9058] [ 295.546321][ T5895] usb 6-1: config 64 has no interface number 0 [ 295.552874][ T5895] usb 6-1: config 64 interface 146 has no altsetting 0 [ 295.564970][ T5895] usb 6-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 295.576028][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.585057][ T5895] usb 6-1: Product: syz [ 295.589287][ T5895] usb 6-1: Manufacturer: syz [ 295.594445][ T5895] usb 6-1: SerialNumber: syz [ 295.799539][ T6844] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 295.821709][ T6844] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 295.845122][ T6844] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 295.868182][ T5895] ftdi_sio 6-1:64.146: FTDI USB Serial Device converter detected [ 295.901156][ T5895] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 295.950600][ T5895] usb 6-1: USB disconnect, device number 21 [ 295.958161][ T5895] ftdi_sio 6-1:64.146: device disconnected [ 295.963323][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 295.964907][ T6844] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 296.005838][ T6844] usb 1-1: USB disconnect, device number 47 [ 296.143511][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.155344][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.167223][ T5923] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 296.177461][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.192765][ T5923] usb 2-1: config 0 descriptor?? [ 296.675680][ T5923] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 296.689450][ T5923] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 296.705698][ T5923] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 296.719356][ T5923] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 296.727287][ T5923] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 296.802320][ T5922] IPVS: starting estimator thread 0... [ 296.882567][ T5923] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 296.910681][ T9082] IPVS: using max 47 ests per chain, 112800 per kthread [ 296.971588][ T9083] bridge1: entered promiscuous mode [ 297.300565][ T9089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.309505][ T9089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.497041][ T9094] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 298.016899][ T7863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.105251][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.129101][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.720927][ T6844] usb 2-1: USB disconnect, device number 25 [ 299.157787][ T9128] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 299.220156][ T6286] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 299.384363][ T6286] usb 1-1: config 64 has an invalid interface number: 146 but max is 0 [ 299.403401][ T6286] usb 1-1: config 64 has no interface number 0 [ 299.420810][ T6286] usb 1-1: config 64 interface 146 has no altsetting 0 [ 299.443014][ T6286] usb 1-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 299.463671][ T6286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.483939][ T6286] usb 1-1: Product: syz [ 299.488312][ T6286] usb 1-1: Manufacturer: syz [ 299.502517][ T6286] usb 1-1: SerialNumber: syz [ 299.540441][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 299.643558][ T9133] binder: 9132:9133 ioctl 40044591 0 returned -22 [ 299.652282][ T9133] binder: 9132:9133 ioctl c0306201 200000000640 returned -22 [ 299.700165][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 299.713713][ T5909] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 299.729876][ T9134] binder: 9132:9134 ioctl 8905 200000000000 returned -22 [ 299.760773][ T5909] usb 2-1: config 0 has no interface number 0 [ 299.774711][ T5909] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 299.793105][ T6286] ftdi_sio 1-1:64.146: FTDI USB Serial Device converter detected [ 299.802319][ T5909] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 299.814670][ T6286] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 299.825482][ T5909] usb 2-1: config 0 interface 41 has no altsetting 0 [ 299.833846][ T6286] usb 1-1: USB disconnect, device number 48 [ 299.849068][ T5909] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 299.861264][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.869398][ T5909] usb 2-1: Product: syz [ 299.874625][ T6286] ftdi_sio 1-1:64.146: device disconnected [ 299.898935][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.857'. [ 299.908329][ T9139] netlink: 'syz.5.857': attribute type 7 has an invalid length. [ 299.916138][ T9139] netlink: 'syz.5.857': attribute type 8 has an invalid length. [ 299.925214][ T5909] usb 2-1: Manufacturer: syz [ 299.931748][ T5909] usb 2-1: SerialNumber: syz [ 299.934089][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.857'. [ 299.947387][ T5909] usb 2-1: config 0 descriptor?? [ 299.955211][ T9130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 299.965729][ T9130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 300.177253][ T9130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 300.197060][ T9130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 300.408991][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.434748][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.628372][ T5909] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 300.676265][ T5909] usb 2-1: USB disconnect, device number 26 [ 300.716401][ T9149] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 301.839754][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 301.989764][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 302.024871][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 302.055757][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.098254][ T5924] usb 2-1: Product: syz [ 302.106433][ T5924] usb 2-1: Manufacturer: syz [ 302.139283][ T5924] usb 2-1: SerialNumber: syz [ 302.168177][ T5924] usb 2-1: config 0 descriptor?? [ 302.274888][ T9154] kAFS: unable to lookup cell 'ÿ' [ 302.282539][ T9154] kAFS: unable to lookup cell '(,c¾Ì' [ 302.563490][ T5924] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 302.585873][ T5924] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 302.675299][ T5924] usb 2-1: USB disconnect, device number 27 [ 303.775591][ T3578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.216936][ T9197] program syz.0.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.124217][ T9206] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 305.349761][ T5924] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 305.852228][ T5924] usb 1-1: device descriptor read/64, error -71 [ 306.118269][ T5924] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 306.268906][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.497400][ T5924] usb 1-1: device descriptor read/64, error -71 [ 306.650176][ T5924] usb usb1-port1: attempt power cycle [ 307.079914][ T5924] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 307.111036][ T5924] usb 1-1: device descriptor read/8, error -71 [ 307.231843][ T9219] binder: 9218:9219 ioctl 4018aee1 200000000040 returned -22 [ 307.375018][ T5924] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 307.547370][ T5924] usb 1-1: device descriptor read/8, error -71 [ 307.680700][ T5924] usb usb1-port1: unable to enumerate USB device [ 307.795413][ T9229] block device autoloading is deprecated and will be removed. [ 308.043994][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 308.044016][ T30] audit: type=1326 audit(1769243763.203:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 308.138198][ T9229] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 308.189044][ T6844] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 308.255777][ T9231] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 308.457575][ T30] audit: type=1326 audit(1769243763.203:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 308.488112][ T9229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.505078][ T6844] usb 2-1: Using ep0 maxpacket: 8 [ 308.527270][ T6844] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 308.537114][ T6844] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 308.548595][ T30] audit: type=1326 audit(1769243763.203:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 308.571692][ T6844] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 308.580831][ T5924] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 308.684249][ T6844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 308.706370][ T6844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.749514][ T6844] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 308.758892][ T6844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.777130][ T30] audit: type=1326 audit(1769243763.203:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 308.810604][ T6844] usb 2-1: Product: syz [ 308.814821][ T6844] usb 2-1: Manufacturer: syz [ 308.819451][ T6844] usb 2-1: SerialNumber: syz [ 308.957719][ T5924] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 308.987234][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.003369][ T6844] usb 2-1: config 0 descriptor?? [ 309.024182][ T6844] hub 2-1:0.0: bad descriptor, ignoring hub [ 309.036377][ T30] audit: type=1326 audit(1769243763.203:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.037128][ T6844] hub 2-1:0.0: probe with driver hub failed with error -5 [ 309.087948][ T5924] usb 1-1: config 0 descriptor?? [ 309.134079][ T30] audit: type=1326 audit(1769243763.203:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.139445][ T6844] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 309.237704][ T30] audit: type=1326 audit(1769243763.203:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.393088][ T30] audit: type=1326 audit(1769243763.203:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.446608][ T30] audit: type=1326 audit(1769243763.213:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.531197][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.555880][ T30] audit: type=1326 audit(1769243763.213:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404ef9acb9 code=0x7ffc0000 [ 309.850853][ T5924] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 309.859056][ T5909] usb 2-1: USB disconnect, device number 28 [ 311.028107][ T9261] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 311.715289][ T9268] input: syz0 as /devices/virtual/input/input21 [ 311.909133][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 311.931345][ T6844] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 311.958691][ T5924] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 311.980323][ T5924] [drm] Initialized udl on minor 2 [ 311.993379][ T5924] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 312.034223][ T5924] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 312.052970][ T5895] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 312.069172][ T5924] usb 1-1: USB disconnect, device number 53 [ 312.080630][ T5895] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 312.731146][ T9275] hub 1-0:1.0: USB hub found [ 312.738967][ T9275] hub 1-0:1.0: 1 port detected [ 312.940184][ T9287] netlink: 'syz.2.896': attribute type 9 has an invalid length. [ 313.174838][ T9291] loop9: detected capacity change from 0 to 7 [ 313.195132][ T9291] Dev loop9: unable to read RDB block 7 [ 313.212642][ T9291] loop9: unable to read partition table [ 313.218797][ T9291] loop9: partition table beyond EOD, truncated [ 313.279477][ T9291] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.550523][ T6844] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 313.731594][ T6844] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 313.753291][ T6844] usb 6-1: config 0 has no interface number 0 [ 313.782786][ T6844] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 313.809914][ T6844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.817968][ T6844] usb 6-1: Product: syz [ 313.839707][ T6844] usb 6-1: Manufacturer: syz [ 313.844509][ T6844] usb 6-1: SerialNumber: syz [ 313.872342][ T6844] usb 6-1: config 0 descriptor?? [ 313.880093][ T9292] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 313.966884][ T9303] netlink: set zone limit has 4 unknown bytes [ 314.103730][ T6844] asix 6-1:0.251: probe with driver asix failed with error -71 [ 314.141582][ T6844] usb 6-1: USB disconnect, device number 22 [ 314.669239][ T9313] netlink: 'syz.1.905': attribute type 58 has an invalid length. [ 315.088642][ T9325] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 315.314920][ T4364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.824864][ T9328] FAULT_INJECTION: forcing a failure. [ 315.824864][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 315.838844][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.0.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.838878][ T9328] Tainted: [L]=SOFTLOCKUP [ 315.838886][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 315.838898][ T9328] Call Trace: [ 315.838907][ T9328] [ 315.838915][ T9328] dump_stack_lvl+0xe8/0x150 [ 315.838949][ T9328] should_fail_ex+0x412/0x560 [ 315.838984][ T9328] should_failslab+0xa8/0x100 [ 315.839011][ T9328] __kvmalloc_node_noprof+0x166/0x8d0 [ 315.839036][ T9328] ? fuse_readdir+0x155b/0x2ec0 [ 315.839067][ T9328] fuse_readdir+0x155b/0x2ec0 [ 315.839132][ T9328] ? __pfx_fuse_readdir+0x10/0x10 [ 315.839166][ T9328] ? aa_file_perm+0x12d/0x1630 [ 315.839198][ T9328] ? aa_file_perm+0x12d/0x1630 [ 315.839232][ T9328] ? __lock_acquire+0x6b5/0x2cf0 [ 315.839264][ T9328] ? trace_contention_end+0x39/0x100 [ 315.839291][ T9328] ? __mutex_lock+0x319/0x1300 [ 315.839353][ T9328] ? iterate_dir+0x292/0x570 [ 315.839372][ T9328] ? down_read_killable+0x1bb/0x340 [ 315.839398][ T9328] iterate_dir+0x399/0x570 [ 315.839423][ T9328] __se_sys_getdents+0xf1/0x270 [ 315.839446][ T9328] ? __pfx___se_sys_getdents+0x10/0x10 [ 315.839464][ T9328] ? ksys_write+0x242/0x270 [ 315.839481][ T9328] ? __pfx_filldir+0x10/0x10 [ 315.839503][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 315.839537][ T9328] do_syscall_64+0xe2/0xf80 [ 315.839565][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.839584][ T9328] ? trace_irq_disable+0x37/0x100 [ 315.839610][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 315.839639][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.839659][ T9328] RIP: 0033:0x7f404ef9acb9 [ 315.839685][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.839703][ T9328] RSP: 002b:00007f404fdb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 315.839726][ T9328] RAX: ffffffffffffffda RBX: 00007f404f215fa0 RCX: 00007f404ef9acb9 [ 315.839740][ T9328] RDX: 0000000000000097 RSI: 0000200000000340 RDI: 0000000000000004 [ 315.839753][ T9328] RBP: 00007f404fdb0090 R08: 0000000000000000 R09: 0000000000000000 [ 315.839765][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.839777][ T9328] R13: 00007f404f216038 R14: 00007f404f215fa0 R15: 00007f404f33fa48 [ 315.839810][ T9328] [ 316.784567][ T9348] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 316.833645][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 316.847254][ T9349] vlan2: entered allmulticast mode [ 316.862596][ T9349] veth0_to_bond: entered allmulticast mode [ 317.072376][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.083779][ T5895] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.097441][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.107755][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.134534][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.145162][ T5895] usb 2-1: invalid MIDI out EP 0 [ 317.152123][ T9348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.214541][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.221533][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.299427][ T5895] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 317.343030][ T9342] fuse: Unknown parameter 'rootmod' [ 317.555131][ T9342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.569400][ T9] usb 2-1: USB disconnect, device number 30 [ 318.073451][ T9363] netlink: 108 bytes leftover after parsing attributes in process `syz.4.922'. [ 318.239803][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 318.323548][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.349908][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.410007][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 318.420707][ T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 318.435192][ T9] usb 6-1: config 0 has no interface number 0 [ 318.451731][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.465086][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.485836][ T9] usb 6-1: config 0 interface 85 has no altsetting 0 [ 318.508603][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 318.528171][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.545631][ T9] usb 6-1: Product: syz [ 318.555002][ T9] usb 6-1: Manufacturer: syz [ 318.561132][ T9] usb 6-1: SerialNumber: syz [ 318.575376][ T9] usb 6-1: config 0 descriptor?? [ 318.797282][ T9] appletouch 6-1:0.85: Failed to read mode from device. [ 318.830163][ T9] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 318.884421][ T9] usb 6-1: USB disconnect, device number 23 [ 319.224901][ T9383] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 319.957906][ T5909] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 320.122341][ T5909] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 320.135145][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.169049][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.207822][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 320.239394][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.242097][ T9395] xt_nfacct: accounting object `syz1' does not exist [ 320.282057][ T5909] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.302459][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.338034][ T5909] usb 6-1: config 0 descriptor?? [ 320.362718][ T9387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 320.796535][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 320.812339][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 320.959180][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 320.989828][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.021407][ T9387] ip6gre1: entered promiscuous mode [ 321.026642][ T9387] ip6gre1: entered allmulticast mode [ 321.037972][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.041847][ T9387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.046126][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.064948][ T1057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.089126][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.144147][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.170269][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.177918][ T5909] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.220930][ T5909] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 321.240974][ T7863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.310732][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.319135][ T5909] usb 6-1: USB disconnect, device number 24 [ 321.329575][ T7863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.436096][ T9414] FAULT_INJECTION: forcing a failure. [ 321.436096][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.482473][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.493674][ T9415] fuse: Bad value for 'fd' [ 321.530738][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.4.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.530773][ T9414] Tainted: [L]=SOFTLOCKUP [ 321.530781][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 321.530792][ T9414] Call Trace: [ 321.530801][ T9414] [ 321.530809][ T9414] dump_stack_lvl+0xe8/0x150 [ 321.530843][ T9414] should_fail_ex+0x412/0x560 [ 321.530877][ T9414] _copy_from_user+0x2d/0xb0 [ 321.530900][ T9414] do_sock_getsockopt+0x165/0x3f0 [ 321.530935][ T9414] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 321.530969][ T9414] ? ksys_write+0x1fc/0x270 [ 321.530995][ T9414] __x64_sys_getsockopt+0x1a4/0x240 [ 321.531024][ T9414] do_syscall_64+0xe2/0xf80 [ 321.531052][ T9414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.531070][ T9414] ? trace_irq_disable+0x37/0x100 [ 321.531096][ T9414] ? clear_bhb_loop+0x60/0xb0 [ 321.531120][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.531138][ T9414] RIP: 0033:0x7f428819acb9 [ 321.531156][ T9414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.531173][ T9414] RSP: 002b:00007f428905b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 321.531197][ T9414] RAX: ffffffffffffffda RBX: 00007f4288415fa0 RCX: 00007f428819acb9 [ 321.531212][ T9414] RDX: 000000000000003b RSI: 0000000000000001 RDI: 0000000000000003 [ 321.531225][ T9414] RBP: 00007f428905b090 R08: 0000200000000240 R09: 0000000000000000 [ 321.531238][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.531251][ T9414] R13: 00007f4288416038 R14: 00007f4288415fa0 R15: 00007f428853fa48 [ 321.531289][ T9414] [ 322.097235][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.892226][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.943'. [ 324.086049][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 324.152598][ T9438] erspan0: entered promiscuous mode [ 324.164168][ T9438] macvtap1: entered promiscuous mode [ 324.171026][ T9438] macvtap1: entered allmulticast mode [ 324.181013][ T9438] erspan0: entered allmulticast mode [ 324.312619][ T9445] syz_tun: entered allmulticast mode [ 324.741767][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 324.929770][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 324.937590][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.982077][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 325.011045][ T9] usb 1-1: config 0 has no interface number 0 [ 325.061715][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 325.094355][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 325.129456][ T9] usb 1-1: config 0 interface 88 has no altsetting 0 [ 325.163274][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 325.186289][ T9] usb 1-1: New USB device found, idVendor=bbed, idProduct=659f, bcdDevice=9e.a7 [ 325.209874][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.225446][ T9] usb 1-1: New USB device strings: Mfr=6, Product=96, SerialNumber=3 [ 325.244818][ T9] usb 1-1: Product: syz [ 325.257230][ T9] usb 1-1: Manufacturer: syz [ 325.266231][ T9] usb 1-1: SerialNumber: syz [ 325.288422][ T9] usb 1-1: config 0 descriptor?? [ 325.416979][ T9462] kvm: pic: non byte write [ 325.520414][ T9] usb 1-1: USB disconnect, device number 54 [ 325.618264][ T9465] FAULT_INJECTION: forcing a failure. [ 325.618264][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.634887][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.4.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.634922][ T9465] Tainted: [L]=SOFTLOCKUP [ 325.634930][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 325.634942][ T9465] Call Trace: [ 325.634950][ T9465] [ 325.634959][ T9465] dump_stack_lvl+0xe8/0x150 [ 325.634992][ T9465] should_fail_ex+0x412/0x560 [ 325.635025][ T9465] _copy_from_user+0x2d/0xb0 [ 325.635049][ T9465] snd_seq_write+0x309/0x820 [ 325.635086][ T9465] ? __pfx_snd_seq_write+0x10/0x10 [ 325.635113][ T9465] ? bpf_lsm_file_permission+0x9/0x20 [ 325.635133][ T9465] ? security_file_permission+0x75/0x260 [ 325.635168][ T9465] ? rw_verify_area+0x255/0x4d0 [ 325.635198][ T9465] ? __pfx_snd_seq_write+0x10/0x10 [ 325.635224][ T9465] vfs_write+0x29a/0xb90 [ 325.635253][ T9465] ? __pfx_vfs_write+0x10/0x10 [ 325.635274][ T9465] ? __fget_files+0x2a/0x420 [ 325.635302][ T9465] ? __fget_files+0x2a/0x420 [ 325.635325][ T9465] ? __fget_files+0x3a0/0x420 [ 325.635348][ T9465] ? __fget_files+0x2a/0x420 [ 325.635382][ T9465] ksys_write+0x150/0x270 [ 325.635406][ T9465] ? __pfx_ksys_write+0x10/0x10 [ 325.635438][ T9465] do_syscall_64+0xe2/0xf80 [ 325.635473][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.635492][ T9465] ? trace_irq_disable+0x37/0x100 [ 325.635518][ T9465] ? clear_bhb_loop+0x60/0xb0 [ 325.635550][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.635570][ T9465] RIP: 0033:0x7f428819acb9 [ 325.635595][ T9465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.635613][ T9465] RSP: 002b:00007f428905b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.635637][ T9465] RAX: ffffffffffffffda RBX: 00007f4288415fa0 RCX: 00007f428819acb9 [ 325.635652][ T9465] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 325.635665][ T9465] RBP: 00007f428905b090 R08: 0000000000000000 R09: 0000000000000000 [ 325.635677][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.635689][ T9465] R13: 00007f4288416038 R14: 00007f4288415fa0 R15: 00007f428853fa48 [ 325.635723][ T9465] [ 326.364864][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 326.381685][ T9482] erspan0: entered promiscuous mode [ 326.394111][ T9482] macvtap0: entered promiscuous mode [ 326.407427][ T9482] macvtap0: entered allmulticast mode [ 326.436967][ T9482] erspan0: entered allmulticast mode [ 326.489860][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 326.641522][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 326.648607][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 326.663500][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 326.681999][ T9494] FAULT_INJECTION: forcing a failure. [ 326.681999][ T9494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.696808][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 326.696826][ T9494] CPU: 1 UID: 0 PID: 9494 Comm: syz.2.965 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.696858][ T9494] Tainted: [L]=SOFTLOCKUP [ 326.696864][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 326.696874][ T9494] Call Trace: [ 326.696882][ T9494] [ 326.696890][ T9494] dump_stack_lvl+0xe8/0x150 [ 326.696919][ T9494] should_fail_ex+0x412/0x560 [ 326.696949][ T9494] _copy_from_user+0x2d/0xb0 [ 326.696971][ T9494] kstrtouint_from_user+0xd6/0x180 [ 326.697001][ T9494] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 326.697044][ T9494] proc_fail_nth_write+0x8e/0x210 [ 326.697064][ T9494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 326.697089][ T9494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 326.697111][ T9494] vfs_write+0x29a/0xb90 [ 326.697137][ T9494] ? __pfx_vfs_write+0x10/0x10 [ 326.697157][ T9494] ? __fget_files+0x2a/0x420 [ 326.697183][ T9494] ? __fget_files+0x3a0/0x420 [ 326.697203][ T9494] ? __fget_files+0x2a/0x420 [ 326.697234][ T9494] ksys_write+0x150/0x270 [ 326.697254][ T9494] ? __pfx_ksys_write+0x10/0x10 [ 326.697283][ T9494] do_syscall_64+0xe2/0xf80 [ 326.697309][ T9494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.697325][ T9494] ? trace_irq_disable+0x37/0x100 [ 326.697357][ T9494] ? clear_bhb_loop+0x60/0xb0 [ 326.697379][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.697396][ T9494] RIP: 0033:0x7fd54fd5b58e [ 326.697414][ T9494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.697430][ T9494] RSP: 002b:00007fd550ba0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.697451][ T9494] RAX: ffffffffffffffda RBX: 00007fd550ba16c0 RCX: 00007fd54fd5b58e [ 326.697465][ T9494] RDX: 0000000000000001 RSI: 00007fd550ba10a0 RDI: 0000000000000004 [ 326.697476][ T9494] RBP: 00007fd550ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 326.697488][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.697499][ T9494] R13: 00007fd550016038 R14: 00007fd550015fa0 R15: 00007fd55013fa48 [ 326.697530][ T9494] [ 326.810631][ T4364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.831587][ T31] INFO: task kworker/0:3:1221 blocked for more than 143 seconds. [ 326.980297][ T30] kauditd_printk_skb: 809 callbacks suppressed [ 326.980317][ T30] audit: type=1326 audit(1769243782.193:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550c39acb9 code=0x7ffc0000 [ 327.010612][ T9] usb 6-1: config 1 has no interface number 0 [ 327.017466][ T31] Tainted: G L syzkaller #0 [ 327.024713][ T30] audit: type=1326 audit(1769243782.193:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f550c39acb9 code=0x7ffc0000 [ 327.048028][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.059308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.070746][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 327.083888][ T31] task:kworker/0:3 state:D stack:19416 pid:1221 tgid:1221 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 327.104538][ T30] audit: type=1326 audit(1769243782.193:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550c39acb9 code=0x7ffc0000 [ 327.127462][ T31] Workqueue: usb_hub_wq hub_event [ 327.133235][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 327.142637][ T31] Call Trace: [ 327.147211][ T31] [ 327.150474][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.163301][ T31] __schedule+0x14ef/0x4fb0 [ 327.167882][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 327.173509][ T30] audit: type=1326 audit(1769243782.193:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f550c39acb9 code=0x7ffc0000 [ 327.197352][ T31] ? look_up_lock_class+0x57/0x110 [ 327.203241][ T31] ? __pfx___schedule+0x10/0x10 [ 327.209403][ T31] ? schedule+0x90/0x360 [ 327.214229][ T31] schedule+0x164/0x360 [ 327.222107][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 327.228845][ T31] schedule_timeout+0xc3/0x2c0 [ 327.236408][ T30] audit: type=1326 audit(1769243782.193:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550c39acb9 code=0x7ffc0000 [ 327.258902][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 327.264390][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.269559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.274899][ T31] ? wait_for_completion+0x274/0x5e0 [ 327.281531][ T30] audit: type=1326 audit(1769243782.193:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f550c39c547 code=0x7ffc0000 [ 327.304173][ T31] wait_for_completion+0x2cc/0x5e0 [ 327.310682][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 327.316586][ T31] i2c_del_adapter+0x5c0/0x790 [ 327.321564][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 327.327369][ T30] audit: type=1326 audit(1769243782.193:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f550c35b58e code=0x7ffc0000 [ 327.350486][ T31] ? rcu_is_watching+0x15/0xb0 [ 327.355337][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 327.360895][ T31] ? kfree+0x4d/0x650 [ 327.364966][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 327.370579][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 327.377095][ T30] audit: type=1326 audit(1769243782.193:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f550c35b58e code=0x7ffc0000 [ 327.399990][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 327.404919][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 327.410897][ T31] ? usb_disable_interface+0x31d/0x350 [ 327.416522][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.422006][ T30] audit: type=1326 audit(1769243782.193:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f550c35b58e code=0x7ffc0000 [ 327.446740][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 327.458183][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.473520][ T31] usb_unbind_interface+0x26e/0x910 [ 327.478824][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 327.490003][ T31] device_release_driver_internal+0x4d9/0x800 [ 327.496744][ T30] audit: type=1326 audit(1769243782.193:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f550c35b58e code=0x7ffc0000 [ 327.524014][ T31] bus_remove_device+0x34d/0x440 [ 327.530679][ T31] device_del+0x527/0x8f0 [ 327.535389][ T31] ? usb_disconnect+0xf8/0x990 [ 327.544428][ T31] ? __pfx_device_del+0x10/0x10 [ 327.550079][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 327.555644][ T31] usb_disable_device+0x3d4/0x8d0 [ 327.565191][ T31] usb_disconnect+0x32f/0x990 [ 327.570584][ T31] hub_event+0x1cc9/0x4f30 [ 327.575446][ T31] ? __pfx_hub_event+0x10/0x10 [ 327.586289][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 327.594781][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 327.604138][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 327.610503][ T31] process_scheduled_works+0xaec/0x17a0 [ 327.616978][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.624089][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.631527][ T31] ? assign_work+0x3d3/0x440 [ 327.636366][ T31] worker_thread+0x89f/0xd90 [ 327.649025][ T31] ? __kthread_parkme+0x7a/0x1f0 [ 327.657863][ T31] kthread+0x726/0x8b0 [ 327.662907][ T31] ? __pfx_worker_thread+0x10/0x10 [ 327.669162][ T31] ? __pfx_kthread+0x10/0x10 [ 327.675863][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.682018][ T31] ? __pfx_kthread+0x10/0x10 [ 327.687420][ T31] ret_from_fork+0x51b/0xa40 [ 327.698472][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.709704][ T31] ? __switch_to+0xc82/0x1410 [ 327.714673][ T31] ? __pfx_kthread+0x10/0x10 [ 327.720522][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.725574][ T31] [ 327.729172][ T31] [ 327.729172][ T31] Showing all locks held in the system: [ 327.740658][ T31] 1 lock held by khungtaskd/31: [ 327.745862][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 327.760321][ T31] 5 locks held by kworker/0:3/1221: [ 327.765702][ T31] #0: ffff8880206d7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 327.779038][ T31] #1: ffffc9000411fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 327.791317][ T31] #2: ffff888143f75198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 327.800468][ T31] #3: ffff888032701198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 327.810210][ T31] #4: ffff88805575e160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 327.821228][ T31] 3 locks held by kworker/u8:12/3578: [ 327.826666][ T31] #0: ffff88813fe29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 327.839181][ T31] #1: ffffc9000c167bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 327.851016][ T31] #2: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 327.860095][ T31] 2 locks held by kworker/u8:14/4364: [ 327.865635][ T31] #0: ffff88801c365948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 327.877928][ T31] #1: ffffc9000d3d7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 327.890255][ T31] 2 locks held by getty/5590: [ 327.894997][ T31] #0: ffff8880351f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 327.904851][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 327.911798][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.915210][ T31] 4 locks held by udevd/5830: [ 327.927741][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.928441][ T31] #0: ffff88807616c9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 327.946654][ T31] #1: ffff888031636088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 327.956839][ T31] #2: ffff888050973b48 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 327.967063][ T31] #3: ffff888032701198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 327.978918][ T31] 2 locks held by kworker/u8:15/5976: [ 327.984765][ T9472] netlink: 72 bytes leftover after parsing attributes in process `syz.5.958'. [ 327.994005][ T31] #0: ffff88801c365948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 327.995753][ T5923] usb 6-1: USB disconnect, device number 25 [ 328.005393][ T31] #1: ffffc90004c17bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 328.005478][ T31] 3 locks held by kworker/u8:23/7863: [ 328.005492][ T31] #0: ffff88814cc26948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 328.005546][ T31] #1: ffffc90003d2fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 328.005608][ T31] #2: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 328.005676][ T31] 2 locks held by syz.5.958/9471: [ 328.005689][ T31] 4 locks held by syz.4.959/9477: [ 328.005701][ T31] #0: ffff88802a390160 (&mousedev->mutex/1){+.+.}-{4:4}, at: mixdev_close_devices+0x31/0x210 [ 328.005769][ T31] #1: ffff88802a594160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mixdev_close_devices+0xba/0x210 [ 328.005835][ T31] #2: ffff88802a5932c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x280 [ 328.028300][ T5923] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 328.031292][ T31] #3: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 328.123828][ T31] 1 lock held by syz.1.964/9491: [ 328.128825][ T31] #0: ffffffff8e360b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 328.139978][ T31] 3 locks held by syz.1.964/9495: [ 328.145433][ T31] #0: ffffffff8f816810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.153762][ T31] #1: ffffffff8f816628 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 328.162943][ T31] #2: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_enable+0x17/0x40 [ 328.172824][ T31] 2 locks held by syz.1.964/9498: [ 328.177871][ T31] #0: ffffffff8f816810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.186171][ T31] #1: ffffffff8f816628 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 328.195342][ T31] 2 locks held by syz.1.964/9499: [ 328.200432][ T31] #0: ffffffff8f816810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.208930][ T31] #1: ffffffff8f816628 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 328.218222][ T31] 2 locks held by syz.1.964/9500: [ 328.223496][ T31] #0: ffffffff8f816810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.231789][ T31] #1: ffffffff8f816628 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 328.240839][ T31] 2 locks held by syz.2.966/9496: [ 328.246287][ T31] #0: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 328.255420][ T31] #1: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 328.266484][ T31] [ 328.268879][ T31] ============================================= [ 328.268879][ T31] [ 328.287724][ T31] NMI backtrace for cpu 0 [ 328.287751][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.287778][ T31] Tainted: [L]=SOFTLOCKUP [ 328.287785][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 328.287797][ T31] Call Trace: [ 328.287805][ T31] [ 328.287813][ T31] dump_stack_lvl+0xe8/0x150 [ 328.287844][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 328.287869][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.287892][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.287918][ T31] sys_info+0x135/0x170 [ 328.287937][ T31] watchdog+0xf90/0xfe0 [ 328.287970][ T31] ? watchdog+0x209/0xfe0 [ 328.288004][ T31] kthread+0x726/0x8b0 [ 328.288033][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.288059][ T31] ? __pfx_kthread+0x10/0x10 [ 328.288089][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.288114][ T31] ? __pfx_kthread+0x10/0x10 [ 328.288140][ T31] ret_from_fork+0x51b/0xa40 [ 328.288164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.288182][ T31] ? __switch_to+0xc82/0x1410 [ 328.288215][ T31] ? __pfx_kthread+0x10/0x10 [ 328.288242][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.288284][ T31] [ 328.288302][ T31] Sending NMI from CPU 0 to CPUs 1: [ 328.415010][ C1] NMI backtrace for cpu 1 [ 328.415032][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.415054][ C1] Tainted: [L]=SOFTLOCKUP [ 328.415060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 328.415070][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 328.415100][ C1] Code: 28 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 328.415114][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 328.415130][ C1] RAX: 00000000002e8771 RBX: ffffffff819849ed RCX: 0000000080000001 [ 328.415142][ C1] RDX: 0000000000000001 RSI: ffffffff8dacfb11 RDI: ffffffff8be73880 [ 328.415153][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 328.415165][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fced970 [ 328.415176][ C1] R13: 1ffff110039d8b70 R14: 0000000000000001 R15: 0000000000000001 [ 328.415187][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 328.415201][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.415212][ C1] CR2: 0000562e2fff2300 CR3: 000000007a602000 CR4: 00000000003526f0 [ 328.415229][ C1] DR0: 0000000000000002 DR1: 0000000000000007 DR2: 0000000000000004 [ 328.415239][ C1] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 328.415249][ C1] Call Trace: [ 328.415256][ C1] [ 328.415263][ C1] default_idle+0x9/0x20 [ 328.415278][ C1] default_idle_call+0x72/0xb0 [ 328.415303][ C1] do_idle+0x1bd/0x500 [ 328.415320][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.415344][ C1] ? __pfx_do_idle+0x10/0x10 [ 328.415364][ C1] cpu_startup_entry+0x43/0x60 [ 328.415383][ C1] start_secondary+0x101/0x110 [ 328.415398][ C1] common_startup_64+0x13e/0x147 [ 328.415425][ C1] [ 328.609196][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 328.616101][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.626885][ T31] Tainted: [L]=SOFTLOCKUP [ 328.631223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 328.641292][ T31] Call Trace: [ 328.644749][ T31] [ 328.647683][ T31] vpanic+0x1e0/0x670 [ 328.651686][ T31] panic+0xc5/0xd0 [ 328.655422][ T31] ? __pfx_panic+0x10/0x10 [ 328.659859][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 328.665251][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 328.671425][ T31] watchdog+0xfda/0xfe0 [ 328.675608][ T31] ? watchdog+0x209/0xfe0 [ 328.679964][ T31] kthread+0x726/0x8b0 [ 328.684057][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.688747][ T31] ? __pfx_kthread+0x10/0x10 [ 328.693352][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.698561][ T31] ? __pfx_kthread+0x10/0x10 [ 328.703192][ T31] ret_from_fork+0x51b/0xa40 [ 328.707791][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.712923][ T31] ? __switch_to+0xc82/0x1410 [ 328.717913][ T31] ? __pfx_kthread+0x10/0x10 [ 328.722523][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.727321][ T31] [ 328.730501][ T31] Kernel Offset: disabled [ 328.734827][ T31] Rebooting in 86400 seconds..