last executing test programs: 23m26.176913016s ago: executing program 32 (id=731): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002020044000101000080090400020000000000000006000005240000000d240f0100000000000002000709048103ff0301040c09056702000200000009050302000200"/86], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @empty, 0x80ab}, 0x1c) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000003c0)={0x7, 0x0, [{0x86f, 0x0, 0x10001}, {0xaa6, 0x0, 0xea1}, {0xf9b}, {0x84f, 0x0, 0xffffffffffffffff}, {0xdac, 0x0, 0x1}, {0x40c, 0x0, 0xf8a7}, {0x3fd, 0x0, 0x4}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 21m20.231213826s ago: executing program 33 (id=1307): syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020058a47ff51000040240000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x7f, 0x1, r0, 0x15b4}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", "cba83b41", "ef3c6c588e3360e2"}, 0x38) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0x40045010, &(0x7f0000000080)=0xd8eb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) getresuid(&(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x80000) syz_usb_disconnect(r7) syz_usb_connect(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="534d2c9dec3a50459763e04ce945846be6c1ee120894ad166b4b6b91c4a9363d5b1dff793037d0a868ac11ca97cb0a412143a110d37e179711727dbd0f31b0cf3a53e04a06c9b0e3a7e4c5b3163630ea904aaaae8cccc24ed5d3d62ebd55dbc01a8d5e61b05439e2e8f81700f7ed346f38774750748391524106f4aa84cc850e12fb959be111754d9f2701b0b673e562596381fb16b077e27571143d111de092c99f5d424de907c3377f15c373b5f1953faf3ec705c5d34221076677d5c29f8ac7eb823ecdb10085650272f1437e7900f5fd", @ANYRESDEC=r3, @ANYRES64, @ANYRES16=r1, @ANYRESOCT, @ANYRES16=r1, @ANYRESDEC=r6, @ANYRESHEX=0x0, @ANYRES16=r6], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EVIOCRMFF(r7, 0x40085507, &(0x7f0000000100)=0x10000b) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000064000000090a01040000000000000000070000000973797a31000000000900020073797a31000000000900010073797a3000000000080005400000003b08000640ffffff00080003400000001c14001180090001006c6173740000000004000280140000001000010000000000000000000084000a000000"], 0xac}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85", @ANYRES8=r5, @ANYRES32=r6, @ANYRES64=r7], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000400)=0x2, 0x4) sendmsg(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) 19m19.44476777s ago: executing program 5 (id=1854): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x8000, 0x9001, 0x0, 0x0}], 0x1}) (fail_nth: 1) 19m16.579945094s ago: executing program 5 (id=1868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x300, 0x0, @remote, 0x3}, 0x1c) 19m16.431330526s ago: executing program 5 (id=1870): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x1a, '\x00', [@pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281", 0x52}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d", 0xb1}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19m16.051250711s ago: executing program 5 (id=1874): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19m15.630302617s ago: executing program 5 (id=1876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001180)='/sys/power/pm_async', 0x22802, 0x82) write$FUSE_STATX(r0, &(0x7f0000003780)={0x130, 0x0, 0x0, {0x9de, 0x7, 0x0, '\x00', {0x80, 0xffffffff, 0x8000001, 0x8, 0x0, 0xee00, 0x0, '\x00', 0x3000000, 0x22, 0x7fff, 0x5, {0x0, 0x7}, {0x2, 0x4}, {0x800, 0x6b}, {0x4, 0x200}, 0x5, 0x6, 0x4ba, 0xb161}}}, 0x130) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$inet(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd4(r2, &(0x7f0000000080), 0x8, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x10da, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f00000001c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) 19m15.062785104s ago: executing program 1 (id=1878): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b60000030000000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49c87b4bce0dd7b70e13e16a291fc52859eb60dcc700"/129, @ANYRES16=r4], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x4, 0xfffffffff7110f4f, 0x6, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x10, 0xff}}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0xff8}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404a090}, 0x20058895) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf25110000000c00038008000100020000001c000280080003000300000005000d0001000000080006003e00000034000380140002006e65747063693000000000000000000014000600fc01000000000000000000000000000005000800010000000800060000f8ffff1c000280080004003c06000006000f0001fe000008000800ff070000"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) timer_create(0xb, 0x0, &(0x7f0000000300)=0x0) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r11, 0x0) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf250e00000024000380060004000001000008000500ffffffff080001000000000006000400cafa000034000180080009007900000014000300ffffffff0000000000000000000000000c00070002000000020000000600041b4e2200003800028014000100fc02000000000000000000000000000106000f001000000006000f0001000000060002004e240000080004000104000008000500950000000c0003800800010002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19m14.614203667s ago: executing program 1 (id=1879): mlockall(0x2) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) io_setup(0x3ff, &(0x7f0000000500)) 19m14.423981897s ago: executing program 6 (id=1881): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x7ffffffffffffffe}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 19m14.38840076s ago: executing program 1 (id=1882): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="001805070000b7d9d38dc3c7c9096f3b3c26bbbb910aa47d25808ead334b82911599a7a8669e28f8ce44af84e378a6ab139fcca7f6e0655a92ede0e7ee0fea2cda88a7ceca9c15c15af6bc6b15d5d334c650d11c5718001f8aa1e776f2768088eb09000000000000003e4875b3245f78d3601de042d55408edeb2b2770997d75d7cc4c1eec237c15fe45233327abe139de11416a1a8deedb51326f024d61bd9f1dbabcf4336df7ee32e7ffa49f8c1f6a5d07bf7a475ec7674dd5d4a134d30b8d24ed3a423aca2b129e42d67db5fa853c5114ec7b3e551ec3fe9e45c49d7b103bf52702371bc5436e6970"], 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_usb_ep_write(r0, 0x81, 0x9c, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c") 19m14.275717531s ago: executing program 6 (id=1883): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001180)=""/4090, 0xffa}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f00000022c0)=""/147, 0x93}], 0x4}, 0xc}], 0x1, 0x30002, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x14, 0x287}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8, 0x8, {0x0, r3}, 0xa, 0x1e}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x0, [{@local}, {@dev={0xac, 0x14, 0x14, 0x80}}]}]}}, @timestamp}}}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r9, 0x0, 0x97, 0x8000000}) r10 = socket(0x1, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r10, 0x89e0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r9, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r9}) 19m14.183928725s ago: executing program 5 (id=1884): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7800, 0x10, 0xfffffffb, 0x0, {{0x1f, 0x4, 0x2, 0x1d, 0x7c, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x5, [{@multicast1, 0xfff}, {@local, 0x101}, {@multicast2, 0x1}]}, @rr={0x7, 0x1f, 0xd, [@rand_addr=0x64010102, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010101, 0x9e}, {@remote, 0x6}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010102, 0x2}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@deltfilter={0x2cc, 0x2d, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {0xfff2, 0xfff4}, {0x2, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_flower={{0xb}, {0x1fc, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_ACT={0x1e4, 0x3, [@m_bpf={0xa4, 0x12, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0xfe9f, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x3e, 0x6, "f6e144d6d9c4787721fe005fd7a83f347255bdc5f4bbf1ca63ea6cf2fecf2cc8209e02b93ff2d82956bc26c126641b4e9a0e0d4248231c7d11d3"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x13c, 0x16, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x560}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xe8bc, 0x3, 0xffffff7f, 0xedfd}, 0x1}}]}, {0xd1, 0x6, "2b91b81bb917776cafa8dd8c062bb7b32e939436ae7fc4710cba9d98844d96a21458077f5dd1be1829f88411044785d6e7579c0006e98bc0ac4e5c0ac13c01f6eaddaad72dbf94684c6264926c94581ca470197379e58e43bb52cd6730d0a8caebf5ba6d85af270660d5dad4e23b4b59c313f93c583ecca7b564ea9711c45390cdb5101620697c46fd8de9aba04685c81f69c862ee89636f36587f9fef408015fe852c13ce1c1340be83d3f214dc730714848a7e6faeaf34345f014f27a888aa142ab2265c01a4bf7490be7eec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x5, 0x10, 0x8, 0xdfc}, {0x3, 0x5, 0x2, 0x2}, {0x5, 0x8, 0xb8, 0x5}, {0x9ab3, 0xa, 0x1, 0x4}, {0x1000, 0x0, 0x91, 0x5}, {0x2, 0x9, 0x74, 0x2}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x1e3f04bb}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c9142, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) 19m13.7967992s ago: executing program 34 (id=1884): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7800, 0x10, 0xfffffffb, 0x0, {{0x1f, 0x4, 0x2, 0x1d, 0x7c, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x5, [{@multicast1, 0xfff}, {@local, 0x101}, {@multicast2, 0x1}]}, @rr={0x7, 0x1f, 0xd, [@rand_addr=0x64010102, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010101, 0x9e}, {@remote, 0x6}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010102, 0x2}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@deltfilter={0x2cc, 0x2d, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {0xfff2, 0xfff4}, {0x2, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_flower={{0xb}, {0x1fc, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_ACT={0x1e4, 0x3, [@m_bpf={0xa4, 0x12, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0xfe9f, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x3e, 0x6, "f6e144d6d9c4787721fe005fd7a83f347255bdc5f4bbf1ca63ea6cf2fecf2cc8209e02b93ff2d82956bc26c126641b4e9a0e0d4248231c7d11d3"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x13c, 0x16, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x560}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xe8bc, 0x3, 0xffffff7f, 0xedfd}, 0x1}}]}, {0xd1, 0x6, "2b91b81bb917776cafa8dd8c062bb7b32e939436ae7fc4710cba9d98844d96a21458077f5dd1be1829f88411044785d6e7579c0006e98bc0ac4e5c0ac13c01f6eaddaad72dbf94684c6264926c94581ca470197379e58e43bb52cd6730d0a8caebf5ba6d85af270660d5dad4e23b4b59c313f93c583ecca7b564ea9711c45390cdb5101620697c46fd8de9aba04685c81f69c862ee89636f36587f9fef408015fe852c13ce1c1340be83d3f214dc730714848a7e6faeaf34345f014f27a888aa142ab2265c01a4bf7490be7eec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x5, 0x10, 0x8, 0xdfc}, {0x3, 0x5, 0x2, 0x2}, {0x5, 0x8, 0xb8, 0x5}, {0x9ab3, 0xa, 0x1, 0x4}, {0x1000, 0x0, 0x91, 0x5}, {0x2, 0x9, 0x74, 0x2}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x1e3f04bb}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c9142, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) 19m13.696694049s ago: executing program 1 (id=1886): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 19m13.482736716s ago: executing program 1 (id=1887): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x4100, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c010080"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) 19m12.952423958s ago: executing program 1 (id=1890): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, 'ZM', 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [], [0x0, 0x0, 0xffffff00], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'bond0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x5325, 0x10000, 0x3, 0x3b}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x7a98, 0x9257, 0x48, 0x0, 0xffffff29) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xc, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r6, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0xffffffffffffff2d, "b1540f3e56b2db2eac2d8ac49f22ad14"}, @nop, @exp_smc={0xfe, 0x6}, @nop]}}}}}}}}, 0x0) 19m12.351920753s ago: executing program 35 (id=1890): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, 'ZM', 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [], [0x0, 0x0, 0xffffff00], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'bond0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x5325, 0x10000, 0x3, 0x3b}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x7a98, 0x9257, 0x48, 0x0, 0xffffff29) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xc, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r6, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0xffffffffffffff2d, "b1540f3e56b2db2eac2d8ac49f22ad14"}, @nop, @exp_smc={0xfe, 0x6}, @nop]}}}}}}}}, 0x0) 19m12.340071153s ago: executing program 6 (id=1892): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x5022, &(0x7f0000000000)={0x0, 0x556, 0x100, 0x0, 0x3ab}, &(0x7f0000000400), &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4, 0x67, 0x9b, 0x40, 0x733, 0x401, 0xad7d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1f, 0x50, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x4a, {0x4a, 0x21, "707d6add8a6b062a33c876558c53060fbd560f87691845e77604a37436b0aa3467d1a5503a13dfdf54e3c7cba06dcd2c3eb94e49f5c2a5a5b395778472503bcbdad9669d6314b8d2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x16, 0x3b, "c7a6c5af55aac8192d6513bd99d649e9e4bee8ae643106386f313a4a10f77d769a5227f0425547935dcb1472045ea8522bf2e96d0f87979496dc81"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xfb}}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x5, {0x5, 0x10, "ccc0eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 19m10.468540858s ago: executing program 6 (id=1896): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 19m10.338667187s ago: executing program 6 (id=1898): preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/220, 0xdc}], 0x5, 0x7a, 0xc4b8, 0x1e) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a300000000028000480"], 0x9c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x101942, 0xe) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x3737, 0x4) 19m9.844054965s ago: executing program 6 (id=1899): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x1}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$netlink(0x10, 0x3, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="040000000200000005000000000000000000000010000000000000008cdf82d1270f741eb5a4b179433df77a3ecf2845ceb988397fdacba6349b0d0f75b6aebf95bd14ae736c787b09b20c2634c270a613463700a1cd1d2c39bf1bb47114cbd2e3"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0x60, 0x25, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1}, {0x4, 0x1}, {0xd, 0xfff1}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc, 0x3, 0x5, 0x0, 0x6, 0xbf4f, 0x4}}, {0xc, 0x2, [0x8, 0xff, 0xc, 0xb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa75c}, @qdisc_kind_options=@q_mq={0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200000000000000000000000001000000000000855f0b8bd71d94b79ca71f4db5a91923e514f9e104e87475f7d2cbcc3dd0517ce99c5140ee723649cb533919539e7950e64bcb131543474fe99169255dcd056f95043b10ea81fd50545d5ac89c9cd8895cd47ee7afa4af4a68f8f286373613542d3c8bf0a898dc42bb64a1df55ffd05bf348b15c9e9722dd7ed38e31e34d08a2c40fae9bcf8eb33adc81d022c4736341431b77f9fb8b3c2d2b3f3dd390", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000004200)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000000c0), &(0x7f0000000600)}, 0x20) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_timeval(r11, 0x1, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008fe5000000000000040000004db7f0ff0800000018110000", @ANYRESDEC=r2, @ANYBLOB="00000000f1ffffffb7020000000000008500000086ecf3ffb40b1000f0dfffff181b0000892d063d0607261ecb0542e50f4ba92de3d0273feb03d6b29cacee7af4c5d7bebfbabc59e1567766dfd142ae356eb11e583c78c4b8aea739bd740418d5e3c11bcc9c95781a68ac8c23023eb260ce05736703fac01a86e05c0b56b46eef4d81828b1e2fdb4ea57d07a04169aa37d3940ad7ca2365c4dc02ca6a81c7723d730c76b2e7bd9116d71284436148108cb5bb1fb30de85d27f4cf8bf1bcd4a96c86646bda38046eb52dd54a6999f17e4e76b4a7f55f826e8448cf593712e3c033f535a99c", @ANYRES32=r7, @ANYRES8=r9], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb9, &(0x7f0000000280)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x6, 0x0, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x8ae5}, 0x94) 19m9.292533554s ago: executing program 36 (id=1899): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x1}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$netlink(0x10, 0x3, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="040000000200000005000000000000000000000010000000000000008cdf82d1270f741eb5a4b179433df77a3ecf2845ceb988397fdacba6349b0d0f75b6aebf95bd14ae736c787b09b20c2634c270a613463700a1cd1d2c39bf1bb47114cbd2e3"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0x60, 0x25, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1}, {0x4, 0x1}, {0xd, 0xfff1}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc, 0x3, 0x5, 0x0, 0x6, 0xbf4f, 0x4}}, {0xc, 0x2, [0x8, 0xff, 0xc, 0xb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa75c}, @qdisc_kind_options=@q_mq={0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200000000000000000000000001000000000000855f0b8bd71d94b79ca71f4db5a91923e514f9e104e87475f7d2cbcc3dd0517ce99c5140ee723649cb533919539e7950e64bcb131543474fe99169255dcd056f95043b10ea81fd50545d5ac89c9cd8895cd47ee7afa4af4a68f8f286373613542d3c8bf0a898dc42bb64a1df55ffd05bf348b15c9e9722dd7ed38e31e34d08a2c40fae9bcf8eb33adc81d022c4736341431b77f9fb8b3c2d2b3f3dd390", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000004200)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000000c0), &(0x7f0000000600)}, 0x20) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_timeval(r11, 0x1, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008fe5000000000000040000004db7f0ff0800000018110000", @ANYRESDEC=r2, @ANYBLOB="00000000f1ffffffb7020000000000008500000086ecf3ffb40b1000f0dfffff181b0000892d063d0607261ecb0542e50f4ba92de3d0273feb03d6b29cacee7af4c5d7bebfbabc59e1567766dfd142ae356eb11e583c78c4b8aea739bd740418d5e3c11bcc9c95781a68ac8c23023eb260ce05736703fac01a86e05c0b56b46eef4d81828b1e2fdb4ea57d07a04169aa37d3940ad7ca2365c4dc02ca6a81c7723d730c76b2e7bd9116d71284436148108cb5bb1fb30de85d27f4cf8bf1bcd4a96c86646bda38046eb52dd54a6999f17e4e76b4a7f55f826e8448cf593712e3c033f535a99c", @ANYRES32=r7, @ANYRES8=r9], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb9, &(0x7f0000000280)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x6, 0x0, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x8ae5}, 0x94) 19m8.532010576s ago: executing program 3 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = socket(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x44082) ioctl$BLKGETZONESZ(r6, 0x80041284, &(0x7f0000001240)=0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000300)='[\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1011, 0x1, @discrete={0xfffffffe, 0x7fff}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x24c, r8, 0x1, 0x100, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x223, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xc}, @device_b, @device_a, @random="6ddc1bc3e9af", {0x6, 0xc}}, 0x8, 0xe, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x8, "9fdb9b4a2446961b"}, {0xdd, 0xb9, "9fec9554f283213a61a00fb771c1d8bb1828a61cb831f0eddb458f8744e5df0f22fa4da32630cd824643429d5e674c08a1952cd7d82f484f56344b1fce3f22bce44c72cf528501afcafd40288758aced2b657e4ee060ab10d7778f92ddcfe0998c10b6591cf1271a500e4001d69c4bf2dee496d42d55dda3d1c08ca306c3a5acdbbb189dfffb636f7c0bbe3cba8ff4e79c5356fc02ba9d42601a4272f409bcc9d3e2a036491793d863975b0561cdfeb5d9e7307502531db2bf"}, {0xdd, 0x10, "ff2a79bb8a27346db5d4c159215c4d37"}, {0xdd, 0x5a, "c26e24abe6147784a389344aa24679a448f5068af548f057a8108a69582a6d71048e6a1720f7affc2dc0871794c0b7a22f7cea6aac766e37fb8435e2d3a58638363b48cea4d53d9187f997dd198d3c9e14dd15f1489c0adb3fc8"}, {0xdd, 0x31, "5b8e44e45c37cbe1cbd63473922b768e0e35847e8cadcc4575c86f2a9ec55993cd2eb356f8452188dddf56ed3022f9ee89"}, {0xdd, 0x93, "5269e38e9f11cad34b93d03f9ef19d95ebad1f574696720aeb228b0a76f1c01ccb2d36a6a49aa59802ffc464e666ac397b84090f687da55947ae20b15c80107f7c29e425ae205c5e1fdfb678c7138a1a301ae00424aa9a4a3df77ca24603dc4c6c3b6e1c3b364ebbea4445edb4d08bc9144396e6bec9b9516d32e843f72c924a9698b399f0d3e124fc725167d9d3e68163b9f0"}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) 19m8.111614965s ago: executing program 3 (id=1903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0xb, {0x6, 0x1000, 0x6}}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x141000) ioctl$BLKOPENZONE(r2, 0x40101286, &(0x7f0000000040)={0x9, 0x8}) listen(r0, 0x0) r3 = syz_io_uring_setup(0x77ff, &(0x7f0000000080)={0x0, 0x36ca, 0x800, 0x2, 0xe, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x57f1, &(0x7f00000001c0)={0x0, 0xc7bf, 0x20, 0x2, 0x3b9, 0x0, r3}, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x200448d1) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x63, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x3, 0x0, 0xfff9, {[@timestamp={0x8, 0xa, 0x1, 0x3}]}}}}}}}, 0x0) 19m7.997510791s ago: executing program 3 (id=1904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 19m7.072009878s ago: executing program 3 (id=1906): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 19m6.974308447s ago: executing program 3 (id=1907): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="c382ab6928a9e16875d2d4c46550bde6d03b1fa5e2594c02682cd69602a0a391cf5b8333f31992021109f76359f8a8f3b8a4777a10fd3e84ab5a01752d90d340975d325a3cc7b2d917516ce82dcf1da4da7a379d8e51416d920c07e89acb07182e15b4d90aada4669e28cdc10a6311b7b3e59b23d2d94073463a3e627470860d305ba62640569d655706559b0abda1ef0e4f6d6513726b6bd598447f6bac14361f56b885f08b9607be0ac8ed33cce8c9284dc58038e14333cb366800d3f509c8cecb074c3354030eb25d708c699c51bd90c9a20b161880a920b38364e1d42a0f106343de5419705bda7956fbef95b55c21d85950d61a2897b22b0f564476a8914ae89cea2ad52322e0d0a2851db44573d83834b3ddbc09d502ccea5f2b257b02897a428b18997d62e6cfcee5921ca4433784c4f8c21a736e63b585e054cdd12b5db5576f122b53f77cac0ea44fb5956da54f87fc3225a3ce4ff8ff998b6ff02727ed51bdfbeed44add7408b8b707482996830a67f753a8a4941fc4ef77980897f460c1806342075edd4a48f14693c5a767154f80200b26d7bc086744ea5b5a7674faa1d746506cd8d030337219e8bd3864945182b76da1b62e6d804bd84a52bd835d57d1e5b174e347e083cb3dd78f494f174ad26e5c049b6b8741b9ca3e7a387788a3ac9f5df59961d588b56e051b113239096ec8ed1b904c7a8af9175e88633a5eb69318647bbe56e8c771b2dde14e605c8c8d7fee230191cd16fe81b9f2adb67864717bc5cfa3dfe895aa039712e6008cade509a4394f5a01d0945e318722178fea5998c7d98e1e4a79583803845d3feff50362c5c0881e00ee3cfc8a2159f051b9b0a6138e18a023bc65e94956c1624692331648f03d77b40b0b595b9817841ab7fe808a56baae8c821ee71f8bc13b6bdbd27da1c6b2b9dfbf76811ad35d049a6f8b48d2e53e2928f0951407ff35f1ac982f2987befee4d819ce3e2101eb4d186e5b305cd43fdefc2e8baeea0205a31e8029aa2525ba1e8643f83cc3e5bfa5f53e8b280cc15ca2c1234b766b2d8888e5edb71f0ac9ca32a655f462833b3b68ebbef9fa5ef5d99a1468bdc60028b0b1ffdfee745c9847f5bee89b66bba5af1a67a8bfe283fcd55f02597f9bd377827658847b89fc6ff056624d767f2ea6224a436a02ff790014c8b1fcbf2a148ea8fa71e0c173c05e8bba2ea0bdcee094ce45dbda1fd885e7a159c1850bf041fef9912504966cafe890e58b82e88a654ce03ca4d1abcd94aad70c45999d27fd9fd09c49127918f3f8b970336dd6ebb94be87693daedfdd099435fc8830e2c178779ac8c96a1b1eba0343629c27c05052e26224269931efdd29b73ed91d1d5864a986f577f65afd900695ea3eba523b781f666649ee46bb284020467778a8b026a4cd5f4765e964ee47e640a060da6d1e2a28329bc34088ce39afb66186fdd1fbba0cfba6e76679b1523461b5f410818bdab0e08d1c59fe940e028798a2572f605f5c7643a171ce61e685da0bb24be150bef0b1a0523d97e96d0c6df18bb7c9a3fd95b53b133f01a094c8f53ab141eb278c806b004f926ef7fb57381a0529bb02ef52ad268590dfc86796e6fc007c5e3efb472f696805c3c52c8797a3686809d4c4c6cea8ada4f06e404d8dcdaf8cfaf1fb76087a2aa40f2821704e98ba5d970168bd76c963db3be59b7434d0480994d7078ca663c3cb440044158f38eacc55bc6906db57680db0f3a494f7ff8ea2d6d9ecfb2265500f00593aef5e1c2d3c5ae78bd6241361b8632643de1c4ddf8a45f5f6fe6447fbe307b8c0ea7549f1a14a606d34e1b59e6bbc68ac77214345790de0b08b93e159ed23cdaf41f74a60e2c0a1e60ca8f317ceac4a35f666b71c6e957b6aaeb05f06223dd42c12980ec328feb9d94d4f8d2252da249c9771bd37a3fb8d5a8c51a4dac91e5f3a461f7107114466329c8e69e7955bf3675735c1d070e415f485dd3924bdc0ad2e57bc8ee5bda3c65650df672207dcc2ca82ac6f1b5b427c09690d7ed8954501aadb5d59c050c5e571a284048156b9f7d3c46a4a75a856e3e5c66b18b6fc39a60b279c959f4c29746029dcefda9ec9dd1eacddbdc1911123b03353e61431585e6478fe81c20e7cc3e3b18c49f6ef3e9bf03e262b7ad8c1197ef513d2f34ec2075c30565d309102cd80cfb7de631aad1afc33769d1a41f43cd2916b8af77e48e62feb404e609dedb777a6039a4c577d3a539970b1acac5ae0184c568739d2e6fc7a8c6ddf5fcc954a48b9e626387b1085ba6cb2f8e9303728e21bd912cdab1103d442f8f8ab09afa59a5623390b547a7093abfc0391889d2f2713199ab3e62969f5eeefd828ffd133727ad97eaae31fb722f8637edac70e62b708012194b9f139cf28743826d50f4001bea420adda35e9ca90060eabbb784275ecb2d396e04eb54f1bee6f7420ab363692ecf0b996b4913cf2139d01ed7b14cb9f9334f5ae53f654a6403625cb75d5ea8edbf19b149fa8abe246ae1eccf07839ec2ba6fe0607600c3ec6d07911ea39c6f5be87be2f345d7b9110ae56c5780a4a27237ba9a71af1308b6c6159700e6d33ade8c398a861fd7b17dadee13777caa2aa1b53994cb0b829a1a59dedf793e6b64c5fc84facf93ada96da4d6995c28c38bd01e2194023d1602fb6a4aa3390a46dd3d1677e8a03bd8b05964e61b8fa50312e478d263f1219b29af66cf6522a733bd006316960306f505ca5fc46be7b3bd222c9df90d8b73bc9cb072697c980e7a0069523847ede8dc140e5bbdc126269dc53637ee9bc39702fda110d1fe021baeef446aa78f2d3b60c74ddbed05846afbc03dc01ae8a43d2f8f981094ab5b3d1659af6b53cc2612e7901156b8168377f4ee7fdb486e0164a73f94c06fed4a2621abdf0ad0da7fdeb2466893c78c005c000220e7573e7c54f851826affa7049e83417170e0a6384299e0e392e027a93cea09783fcf4f106d66669a9acdd6dfb6b7c2ee41242d7d8b0f64fcd2076bf0102dbda1f531711a4557b30e40aee7c53435be08b650cb66b2014d6bcc0f6ae606335c95ec8e5c76023a8db4406dc5f70720634b883e4a36965b3234ca309413242cf92574004405cbafbce3bf5c8ec08b3f5c849025aa15e61988cb3e056def272f3891952ce9582b2d0ca3990c58bc7fcbfff9c6ed3542cdd2c1bedb295bd1f48ddf89f0a80a25cd994ec5cf6bea19bb91a958276f4ce4166db6c685bd059186ae976cc9b6f3e0c3056fd394c4090b8393de3089b8eccc9d0da7a07e7c27727184ecd91979d5c5d3d0712c5fd6d24063c62fd22c81c38890231a8a5388d75950577c75c1cac6e59e8dfde345ee978508e4d8c892f119499b2c8ad17b869cdd62557a7d5e2185a47e4efcd20464250f8d7f89a51dd725b6f2ff68bdf4ac05686ad7a7f6c351c17a79bab71381631051ba4011e9cf77157b4eb4b73aa253e541a131c219851d0a55b831768c12a9a9d27f88f2f5aa6ed0d7b2741d61ba59b8b783170f7ba52527e82ce914f316e13e7735046d4e087ecd2530db87708ab59bfec091b078cb2ade57def682288d414b0204b18d429f86ac111bd364ad8a3b529ed7ddbe475135fabfa1b31e282f0155140b8617e9a411a4dbbdd713cb9156ea2fa849c9151e257c84ce9bafb8727d7e422061c95780a8a710259b1d4c1a655b3c3b2403efed142501b81fbb2a1ffee31470aa07e8c98ef0d9cd2e9e539c5c710e79f763b31100f27df0dbc04b4069d0c2ff0e34844d38a16356c4b790999164820f8fa070fd5b5479af4382d2bc9cb0a3ebab4818d7698904145a9e49f3a80d4c3bc3b951b91e8882e1b54f510778339bf96420033db39a95651d2e49947e9aba003c2ae7271b89162e65835d0fa11fedec4220c5cb718cdae97955e10280c845aa929a59dd65f5d05fbe8fc7de4faca21f23dd38b6156075b2102b4c592255702efed70243e38b77c0d7b6230918fbdede34624f6cfc4be1d9297f5c2e9df17d444317ad158d69cf09c97badd7e91369fba842900354674956905a8ae1cd4f73d000eab9008acd74aa7361edb7047e16cee57c2b5e39f83c6f6ee640e8258f6ac20716d19ebc6eb3df3d013317a667f5a15727ec6bfecc908b987b3fc768dc4247ebe74dfe23fe7433c7f116666bd1c8493e62ccf1c0e3e49cc9ced55b93f501fb68210ae29e4f2791113ee3388b2d1530138c4b42d36723ae6c86cbd8a35695f074e17e25c25718e461ef32adb98d273989e247be4cd27b159623780a150989c49439e3168cec0595a08dd64512d18285bb7b69d0f2e0438517f8321bc3914dd4e13c6255c06b19a6299d3ef603f4d4f820f3827114bb3eebdd38717dc2d07ff6eeaf087594e477caee1c953e6d142681b192202ce3b29aaa903a066273e8d3fbab200dbae1ab463fd9b8e7cb2dcf54255e438940ac9be8470e21eb290aa356f48d2cce6059f999ef8d9616423e399bf1daf0bbe243982b8bf209938902d5103e6a6d4611e7829b2b3a51edbc45abfda3114367f5a533231051140b7bc2a80dec4d2e50e117c19c0458f4eed43fa865ab0350ea98d3771d563065db3fa999a60c93c69d4b355058fe6eb7c734a86655a425f92fb6c625addd9bf189c3123c9db7dafadfa312c681be9869df14bbb9f5350dac104da091006033ea817f525f0d463f0d35875874c2f8d46800ab4e5f8bb1f4e57a15f055d037d47231bc90bdf51123081b9efa2ae9a46f3b48139cafbcc216b37a79016ecef01fcf1f1606b2beb91b0a708621b412593a5818560e1607f7d9e4d7231b575d566b251209209efe52fc60876dcc235cc0fe322b0425e9828a57dc98caab3ad2c36ee9c5b333bb7ddf098706494c13a1f506a0e07d9c6cd0b981fb709a7931d92b86c433ba0bb87bfd8dcb43f2c31add97713fcb10fad876f269788d8ada53310aea98dc1364a96a6dc2d4efa70687575b58637d81a79f3bfe347f329b18c5dcf17aad7e2f11ebae418c72f752b43a5975cfb158f494da85db1aa6eb9f87f7634a8d6ec4730abcb45d56178eaf9dc722119e16220cac688f20d28a5008ef7c232e7f9f41a401e44fff93720a3c6c093a3126071feb49b8f77ef46ac66870754080c7e7455d1d267450fbf9ca076507046f7ef51432e789387a3485db6266643929516c73dbe75beae8333c3a978f34fd86f4a91b15fef5961f457fd19b280a0f39f96fafedd4a5df703a5f512caf2304c1df042832c75a3c2f722ab3e9fce7bd322f0c0254656f677cd98fb55245bf71b2e46d90608a5fddd940170bef8dac61ecb95d68d6b451cd031e38d8e7837443bea101db1a4d009a455d7db7323f32124964ebed7f56b7dda66b7b911a1eb3f11642676ac4da0e8ebf84f3689d86d84baa89da2d1a9da1c7d20a6b87036123fbbb3e7b42031b7067b7ae41af6127ba1e52777a56cca6537422e76fd68559477a91e546d4ea0b568874f8c328d0621ae7d522afcb3228e670d178d30dd92ef134d9e9a7fc0017125b82fc0c466a996567375aff746791f5cf77876a0d34d7285d0e925217c13a730ddecdae522bed5f6bd2f92565acd2f407ba27611dccc612af7f7542834c9d9167f524b5d8529b7e142490fe1a2ee485135839e2b0d59e0e40f88a4762106a6c664160b0b2d0a9a316dcd7f677b1fe89b1da39c785d713e96d601ee4628ebf36db25e0b60284215637b2a766b40ed5cbe0a4cc63c60345e12818ea446889ec27715fa1db150a4bf7df77db7522767d550b1c8bc7e52bb76470bde955eb28f31394314b98f56256932de6541b8ea7ad86dd298c9ee9b6e97e1576b6f5fbfd6be151a9a2190bef4b3538f43f6475e5d5b99714e7f016dd0bbc90b6877aa4600cadc28b77647394d0923cc147ae1a06bccb70b2998bbbe332bb77064e7c0c21cf2015a202d872fcb0fa56dcadd3f719a58a73a150d8eabf34279192da1811af64c972fb24eec98d4106927666baa0a07212e162eeeebd3e5a9fed921aa53002b81c0048dd1545163ad7379165fe234a6c55559a7d9b484205a72a0a85f30b76a795a9f75a0b63aee2232366d0ced237339ea7168431e3b2a8261716b6d0987b6911fa53ce804dc2ea03135825ec99cef953a44aee562d5bcabcaac4e56cd6add65a2e4c3496b773d81950291a522ca079c017b269237f79d69a51cfe72f35dba748cb3aa743d028e9fbc87961a37552b54987bd24343329a23c4c7b5caa284ff464791b084f8d9cb556661a91b5954102d380cdf6ff67d5b8cb4d7b3c8ab1357724831ff449ede29e510eee80a549b2754443fd11d85dcb442b8c3c2382bd026f2eff6c6579a84dd91bfdb441a64a3996d59aeacf32c7f87f76df7b1d63bbb7b3ce94de6f355956a3c1d748928f0dc2f7889387b2ea491d3f97e5cae47dc05ebe7a342249cfc635a171792330eb9fde6aaf4fd05977d729c091a298a8531b6fc89a93cbcb5d847e31bc4aa815d1ff7c017c6a34357e55ebd02afc9e9f88fc043a609404fba127d7ffe09882ba5d1ed53688356814ba6eca5c457a6f0d7ce0ebd655e5f7696ca8a0d00d4cf8359b3e0aa788ec989e6d46160a1114b2beca2d617a26a828983a3e7f2182b428f07f20a5a5008004e3ee7b4500261350707cdd88559604cb65ec61be68e5b2a296cb315ebc544e10bddd00d661b4c7c5e47ca2b594c7ede6161dc7a9007d20cca0986893bc0742e65c7b57b4096ad2842fe60657e65960124f43c7978abb3727293869778324812e692a198c121ac826c59fb0dce20d2a956024e7f9179674939ddb9666e9321c84fa348efa5d3304543c419b03a7ddab74bf230519305208095348f38d82a9fd82b9889bdf1e1f4f644e46d3b79901c547497b958fc308bc619dc3d369598ffb129f43e32d7e29eb1e75c6d4c56bdf808f74776850ed80ac4a3ddfb3138a7d6b6a294c1e51c7e82402c8ce17a71ca1dbba19ec30311a1d69399e579826b41e71967fc696093bcc469a95c72cf600d34cb59b9a61535f504f2ea39c1c56486d486defe4663858b9b499d1cba7d9a6878ef5538e06e9d1292d296859ce58fe1c84121a4a466ae64df87c76c8e85cf736234b36ea170d0b7084633ac427092b67265712b7187f63d83674b1db6ee09c06437578560db7dd200948cb0e512621260a3c6ebef02c24a4d297165bdd0694e89e81fea38168165ae745fa877a31d942c87aa7871b848f0fce256c0e00a75c16876cb813de3ea0f567e1f35b08cb3f2d8978329298d527a9d2a0de5d2291e38db244e16579859ff84d1b0914a43e74bab0d9074ba128e28f18549d584f7cae1e4936c7aecb4f0d11903ad3c74b192486d511396fd7015b16bc09c29b5cd38749236d38a79d96e9d44e01f7b39c627f353c616f0964be99d9c05cab8488f3ab2e65b2da98853645a5b2ea3510d64e6193202d629aa510fbe6dbecf496ba497fa6441c4d59c968ec9a75e9fc976e8d5d773b0639b13018331fc1f5e0174c7d9f30338c4474758165157acd3fe33a2a35ea170153782d6e6ca4e6edc56ec3e6ed0f0c21593667f1a9447172307fee9a0dd7cefafc55578bd2e8df162c01de618a3a5517be6e1ea640c737f85ed58583cbdd45f196d19ff159691c2c80a438ebd86ac3e99d1a8cb06b9c3d707c74c30bc30012ac787060d7b8a34c895ca5184c1c202f70fc0c64d17aea986b9d91e6d125aba002be628dea6e5c76df80a77fe41aeace1e8ccfff9b0918785acd9505b562825cc2b11bd41bc0d4f2c4c7cb790742ffc5b0d9d75a523e4523fd3b5f97127116988efff8e94d1e6aa77bb84cb8f2ef3c4d391992cbc02e651f79448cbc6f67f13dc4e3e362053433350bb0288e6e60aa2dd6a19a059069824d6492fd6e95eae89e2271aaacce3b1aaf4c98e6bde1b2c4df6a8f5962fe979ace4f4694c6c2027221276ba0a04d3ea1c1e83b18dce5d0312204e5146362fb574c1ada530a0ac8b19167ced6ee827e773be9d3ccb6228a0f53bd47a4897c1262b2e73bd2ca5a11e3a631a78d46b0553d3453cc5a7a58f362811150fad877319fe94711d6d6f28ee49ad6f71891f4e1491004799d3843e8ad1758169da12ee0d63d6a3b8972bf11a46200b125a52644dcb956b7ef27e84314c63d282aa074130deffcd96c0aedc2f3d8ccfb7aff3ce25699c1568bdb4630ba4d5f3dcb48f65fafa47b430365dd79c54d87a8f19327d7eb6fe215a05f43b88a5e756b80794cd983342cbe4d8b0da49d0b9ce006599e6929def8e81af11ac34f9a78bbf7e0f274ed04e45c6e341e74d2f14105356a5ee47386c2e500dd4668478e6f8135098de8b48bbe7fa9a5395d0b375cb6152c9681bc4d2c3227d1a93afb3dd5db44585398f8447bcc0df6eb0ca110a6367512f521f8507755feb8b8691e0400670e7eeff5c6b064d2baf4882fc25d7d67a785ab6011b61548ef38612ce4fb584516bed1bb18416edaff2104212e9eae2ab58ffa98fc02be0e74744b29d48dff1a3dd610c3824d35cb7bfaebe856c13fae8901591760974ca1f2b8260df263d5d9604b7a277bc237523d5c00f1d1bd0cc2cbb5b753d58e2522c3e880c747e4da57a78c9d3f4f453c771a56c2c5154d0f913f9b3a21cc48fbf83755ce0d694de5743a5897e38d271a58802d62315cde9a70a444ff5c1b69bd301461245bc20b0bd4d0f598c304edca4fa16f4437a60b7253e43a3ec01dbf3ce60e1706e38ae2d9f6bba59618ce21df2aa0bcbb92d81eae808813936e4744dc6289efa8afeb0ca0009874aa8ff047960b1cc0bb2a8b4670a1085cbd91b7aeeb7caf9fc4b951c64292ca0a8103ac2b906952f90012be4bca2f34983c49f701153a9121ab1374ebe653b332a15c4ae33d90d9ce862ed006358d60ee2b4ef7d6198f45d3ed4d6a671239860033f801a7a82378e4470aa8c95aed6a552dc437803cd58b8145ae092ad3aa63fa968d9140caae9582fa242a4795fffcced17af8a5fd2b9f0399d78c53763a31b4af4711c92167032517c1e536495f73773bee7d4f7ea633c65d1d7fbb1c65b99ba3ae0197acc196f1dae9a949b4fc68f7cc8332e7026bafe528cf951c76f2cd3014c2f44a7e89721bbca3ef27c2df50590fbff7c70af91bbb7f0b2d50d9a5607a8781732ba04b97a8637aa12d11d56af7581d16b22c97e8622902b9fac7a5aa9644721c752e9522e8fdd0f1ad7c58bf608b3e50d95db73afc34fc5094270e888831348d73ce23307d2e4c241b225b65a95499adc1393c499238a433d16e430b50e4f2ff5ba9d384cd02afaae8ceb9bf326045ae16ef985bd9102b06010f70ab3c114506a55a3cf690a2734cb85489395d9292904f4e3e22e0accfb12962d3d60d9154c72d7178268aecf099cc01003c8acb0fde5d6b132029330a24bb10aaabee9eb6b1b5a2bb0234b82fdb8b7ee71b71ee793d26b96fa916b921cd83a15c8906371bc96f5f1dc171ab3d1da5adb68e0752e10af043b5de402825f1d49bfd38e73d9de6121f8a267eeddbeac7c17ee960d7a3ea305cb5acbb032586ac02e1ca02ba5d0be101ce062d99d00d2b4eace0e9566231595c3cad29cb87b2caa438fe55795a5f3003fe74f68e0c1bfe14af221bf678796ad55712d92d1a58c41bbbcf103944e043cd55fd04bcc3eba37277a0c9e19ba1ebd8587349875476ed7a98c340350d703f8042925ceccf76d0314309e78508471bdfec5ea1a3175f320b08bbdabadc76cee0280ca80f7dd5e6b7c3c1015b892ae1bdb64c14d85657ab0688006f83cdb68680e4f86734dbd37ea87affd8b3d536ed8a2d3c48e2c259ae35e1e2b1fe80b908d44ff2a33be36963839d2a5b802fc1c69afe205b49379093dfdf6a3d4e63aa2b5846daf6010e5c3a340f7573d5baed64b85351849b6c97062c7b198d0fd83a97f2f3a786a5ac6f3aa86ad99686ed450d4cb0b32ffd2fec841e1bdcf4ab4bacb0e2ce5869ccbbaf75a9f4920e1470226a2a1ebaf302bb5df5a47529a99c69a41ab56c007554ce47699a85b2282e4ff70ddbb6b7270776beb3491d0de53bfe11d080fa4071197802f34539f94f7f86e7cef7bb3ec6593c639edfb9cb3a1c137b153f10698ceec832828d71b21073679eaf0a2aba454d424e442ac313a5f45be4d3b542844fc4833e2665c5ba61b432e4a61fdbbd09923bdde2ef54b7111eb97b912981bddfbc2e7aae386e3f74438fd00846f6309e72ed0dcb3659aabcaf485d323fc1890c4be20492941b6a364d2dc1163f78700e0025ca6ce5dffe132987708f20bb870ab476f715ee47ec08064cfef4079b0a60a7732f1096327011b24f5ca42a0e225e6d1ad49a3aac222fd5b53bef65c10e818fbe8f4a72e2dccfabfb8242f5519ca7cfec831f738dd5004c879a01cf6228039bda7a4a4b65886d863930f9dbe2e451f714a20d5f290664476d576d0d2d240cf9cc42a72c448f72aadfb7eacc6bb2cdd3743b784d01d5c2b2967d516d51e996a6468d4d3d5c81eb5454ab6b05072f770938e6c0bbcb8cf5419546bd2b298b0ca33a70b9bf2906f06f257264e9b138aad8090c0f26f83b3c1965d45b7d882361f61b6185b7f448f951ba5db030539f3f1b48d4c48ff85b0645d9291be98bd56163a38e0a1a958bee0304b442fa37dfa5e9d4a472e7e4b8b1e95f74fabd5d036acc0d252df7d0f9eb89bf55d343f93f454411d6b3aec18df1407316f7a24b696c96feaeb379a5ea719380e1943640b81090ebf8c459e755b28a995f3a9546d5381467f3af9a8d1be4d9871e8cf477e8cdb00a1523b425fc0f5acb477da98e11e181e499c0283c1eb1aff41d3a3c6596f1c7a841ec9cbe52a3e3cc49e109875fb489306adfed77ab722b57b033bd6dc73d64eeb027d3f084af3b4c618622bc2e36eec8eb2fdec9b0c8f35265c6b86c9aa584a62eb5f3b878857756f36a20287791e63ca7ebc8f1325850957b136be614112a289eeef66904bc61ef6967dbeb98ed826a8cff87a29d4f612aadde5d6eda99e4a2c9f3cfd4f64020e7abd31db74172e0c7b793c69ef5d66a65f09e7c7b3cc09846bc5d9b36443c7a59c79bca7398b23252dd0d0c597e3c399ea655b82b58b54e9a9042cfe4dc389e5496210ca64eb9355a57dea458fb7f39fa2880f61d5189af0c7de1f786962131d77b2628fed79040e01aab552536ae5eb66f728bcced7ffc557ed46d4a6bf466ebe483fb4be725af57f2b4ce788dfe9e660e3e32a62f2fa10c4fdd6dc378f7f9c6588095e6716218df38fb8c5b5d0ae96b453d68060e264b90d54b59e42df7354bc073f4dc789372c64e5af9822b22642e41c0d6d2f54a0522b4f5ed9db4e5eecde6e865557cbb58b776db4b785559100c5b6f6f0b63a126692b48ca1498dfe5a8e7d908e97a7ed3545b891cd6c56665934c94845662197cecd6dd8b02db0f3c3fc06e269fdd32dbfacc7351e33095f7d709f8ef69b3b4fa07166c05675fc41663b98fe08d8dbc58dda5aad85ad2df3c52969059ec4b388dd9cd3fc25c09e5deaef5e5ddf9871d97d53974b1f0711fe086aabf2067441ca21693c86de316", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2004, 0x1, 0x0, 0x7fff}, 0x0, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40e, 0xe5, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000009, 0x1010, r2, 0xaa921000) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x242, 0x0) r4 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0xa0000011}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0x7, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 19m6.502983042s ago: executing program 3 (id=1908): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r2, &(0x7f0000000100)=""/100, 0x64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000480), 0x0, 0x0}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="1400000016000b63d2767228154c473c20bcff1c", 0x14}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) (async) syz_usb_disconnect(r0) sendto(r3, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) 19m6.050892849s ago: executing program 37 (id=1908): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r2, &(0x7f0000000100)=""/100, 0x64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000480), 0x0, 0x0}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="1400000016000b63d2767228154c473c20bcff1c", 0x14}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) (async) syz_usb_disconnect(r0) sendto(r3, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) 12m29.544439803s ago: executing program 8 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x25, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x5, 0x6, "268815679455"}}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x3, 0xb, {0xb, 0x24, "be5c7e29927ca9b46b"}}, &(0x7f0000000240)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "ea2bfb3a4a49a82c7ca5884a2b28901245657262490239b6db8f87fc0ec8faca80ce8dd259d273341be03827f4f30cde0324da42e05ba490"}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x2e, 0xcf, "a0d95deabf7c06090cca7193d2ff8f498dc8de4daf01d1c69643b18d0696f213ffc00dcdab8bad3d61a97c0f2cb73eaae7793838dca9a787e32bcea902e75ca9b4643dd41f3282dd2812b29665b8d32210f95dd0030c308137cbeee5d001fcabb1d19b29ccfca3c82a5afb1466a09da0e83689f59d77a8b5e73031f9bb66de25aacfd6922bb161dd5aa065ea972cf169e40019b82de4bb46da504f604ee78474de01fa80f01d302ae70f2396a461d651cbeeffb8584a82f64f84548f4a537989cc12a18d268ab126bf622c71b2d38d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0xc0, 0x5, 0x1, "d4"}, &(0x7f0000000480)={0x40, 0x5, 0x3, "557f79"}}) 12m28.571559637s ago: executing program 8 (id=3703): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0xfffffffffffffdd7, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000040)=""/169, 0xa9}], 0x3) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000480)=""/21, 0x15}], 0x2}, 0x1}], 0x2, 0x2023, 0x0) 12m28.451617798s ago: executing program 8 (id=3704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0xf9ef, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 12m28.244266029s ago: executing program 8 (id=3705): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d886454a2fdaffcef41d4c9dd0cc608ea353a1af3cc4f3717e1594d427823aac95e4d775ffc1f2bfbff855cde57f14e29c3686232d90b0b94aed7d071b28805abd2fdb5383f49d6c58078e908ecf858d48f065e929bd6621959efb05a1e74045ce88001f0ffa270e732301b0a2803381c799d7de58e6290d6efe3375bb06f224239ee0d9bb05787470c9b25cb4440bd2d2342dd97f8010000802c97d4a2d7853b13788ef9298c26434c12b939b5ef", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) fdatasync(r6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000004740)="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"}, 0x20) syz_fuse_handle_req(r7, &(0x7f0000002580)="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", 0x2000, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x10000, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f00000046c0)={0x50, 0x0, r8, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) 12m27.787543852s ago: executing program 8 (id=3707): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x2, [{0x1, 0x1}, {0x8, 0x1}]}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12m26.915257979s ago: executing program 8 (id=3711): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "0020f9", 0x30, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xe527, {0x4, 0x6, "10911b", 0x8ab2, 0x3a, 0x0, @loopback, @local}}}}}}}, 0x0) 12m26.859391489s ago: executing program 38 (id=3711): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "0020f9", 0x30, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xe527, {0x4, 0x6, "10911b", 0x8ab2, 0x3a, 0x0, @loopback, @local}}}}}}}, 0x0) 2.783142927s ago: executing program 0 (id=7221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000a40c00000100000008000100", @ANYRES32=r2], 0x5c}, 0x1, 0x400000000000000}, 0x40000) 2.587877074s ago: executing program 0 (id=7224): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000401c1b001d00000000000109022400010000400109040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.322373902s ago: executing program 7 (id=7227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xddda5000}) 2.044106346s ago: executing program 7 (id=7230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="63000500000001000000000abd03", 0xe}, {0x0}], 0x2) 2.008203956s ago: executing program 4 (id=7232): syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x11f}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.846184229s ago: executing program 4 (id=7233): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x101800, 0x2}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) 1.564642699s ago: executing program 4 (id=7234): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 1.483716036s ago: executing program 4 (id=7235): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r2, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) 1.207947087s ago: executing program 9 (id=7238): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x42300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x80207450, &(0x7f00000001c0)) 1.186744415s ago: executing program 9 (id=7239): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f00000002c0)) 1.071450068s ago: executing program 4 (id=7240): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) 1.019922647s ago: executing program 7 (id=7241): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000180)="b9ff00", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0xe, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 997.743471ms ago: executing program 9 (id=7243): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x4c000000) 884.748678ms ago: executing program 7 (id=7244): syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0xe) 828.676033ms ago: executing program 4 (id=7245): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) 828.338591ms ago: executing program 2 (id=7246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 828.20805ms ago: executing program 9 (id=7247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0xe}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) 797.427246ms ago: executing program 7 (id=7248): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d0007", 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 760.379553ms ago: executing program 0 (id=7249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x0) 672.017416ms ago: executing program 2 (id=7250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) fanotify_init(0x40, 0x80000) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xffdd) 671.494188ms ago: executing program 7 (id=7251): ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000180)={0x0, 0x3d28, 0x10000, 0x3, 0xee}, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x100, 0x0, 0xf23, 0x7, 0x6}) 642.000435ms ago: executing program 0 (id=7252): creat(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x23) 579.195132ms ago: executing program 2 (id=7253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b90f040000ba000000000f3026660f3881954aa60000c4c28d9ab60e0000000f79e9c744240068000000c744240260884a82ffff442406000000000f0114240f79ea0fc79ce60d000000ea020000007d0046c4c1d1160ec4c2f932c6", 0x5c}], 0x1, 0x20, 0x0, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb2}) 524.703063ms ago: executing program 0 (id=7254): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000400)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f00000001c0)=[{0xfffffffffffffffc}], 0x1, 0x234, 0x0, 0x2, 0x5a, 0x47}) 206.956106ms ago: executing program 9 (id=7255): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x105, &(0x7f0000000540)={0x0, 0x84d9, 0x0, 0x0, 0x2d4}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 206.793819ms ago: executing program 2 (id=7256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d00200000081100"/36], 0x42) 206.694293ms ago: executing program 2 (id=7257): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x4d570, 0x13310, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x20000c00}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x61, 0x0, 0xfedb) 206.459688ms ago: executing program 9 (id=7258): alarm(0x6a90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1, 0x829, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x12, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020603000000000000000000050000000c00078008000800000000400900020073797a32000000000500040000000000050005000a000000050001000600000012000300686173683a6e65742c70ef7274000000"], 0x58}}, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r5, 0x5452, &(0x7f0000001080)=0x3) write(r5, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) alarm(0x7fffffff) 185.253215ms ago: executing program 0 (id=7259): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f00002c6000/0x2000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000100)={r1, r2}) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x0, 0x202041) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) setregid(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) read(r4, &(0x7f0000000200)=""/31, 0x1f) 0s ago: executing program 2 (id=7260): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004e2000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="36460faab9120a00000f32420f070f2bab614584dfc4e1ddea0d0b000000440fc7b000880000c74424002b000000c74424020a000000ff2c24653e66430f388143d167430fe11c36c4e2c1a6e1", 0x4d}], 0x1, 0x19, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000240)}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040)=0x46c, 0x4) r5 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r6, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x8002) close_range(r5, r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.793095][T22335] RSP: 002b:00007fe9c0250028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1561.793113][T22335] RAX: ffffffffffffffda RBX: 00007fe9bf615fa0 RCX: 00007fe9bf39c629 [ 1561.793125][T22335] RDX: 0000000000000042 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 1561.793137][T22335] RBP: 00007fe9c0250090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.793148][T22335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1561.793158][T22335] R13: 00007fe9bf616038 R14: 00007fe9bf615fa0 R15: 00007fe9bf73fa48 [ 1561.793186][T22335] [ 1562.349300][T14878] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1562.419090][T14861] usb 1-1: Using ep0 maxpacket: 32 [ 1562.478627][T14861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1562.578841][T14878] usb 10-1: Using ep0 maxpacket: 8 [ 1562.587630][T14861] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1562.618787][T14861] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1562.640411][T14861] usb 1-1: Product: syz [ 1562.648909][T14861] usb 1-1: Manufacturer: syz [ 1562.649006][T14878] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1562.653522][T14861] usb 1-1: SerialNumber: syz [ 1562.679959][T14861] usb 1-1: config 0 descriptor?? [ 1562.686779][T22328] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1562.698438][T14878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1562.741064][T14878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1562.784227][T14878] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1562.823418][T14878] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1562.848042][T14878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.881244][ T29] audit: type=1326 audit(1771439408.828:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1562.985855][T22365] netlink: 'syz.7.6774': attribute type 4 has an invalid length. [ 1562.999878][ T29] audit: type=1326 audit(1771439408.828:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.044820][T14876] usb 1-1: USB disconnect, device number 68 [ 1563.072567][T22358] netlink: 'syz.7.6774': attribute type 4 has an invalid length. [ 1563.080643][ T29] audit: type=1326 audit(1771439408.848:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.198246][T14878] usb 10-1: GET_CAPABILITIES returned 0 [ 1563.210173][T14878] usbtmc 10-1:16.0: can't read capabilities [ 1563.220082][ T29] audit: type=1326 audit(1771439408.848:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.250649][ T29] audit: type=1326 audit(1771439408.858:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.360417][ T29] audit: type=1326 audit(1771439408.858:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.360460][ T29] audit: type=1326 audit(1771439408.858:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.360495][ T29] audit: type=1326 audit(1771439408.868:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.360530][ T29] audit: type=1326 audit(1771439408.868:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.7.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1563.573364][T14876] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1563.721227][T14861] usb 10-1: USB disconnect, device number 98 [ 1563.768906][T14876] usb 1-1: device descriptor read/64, error -71 [ 1564.008523][T14876] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1564.218550][T14876] usb 1-1: device descriptor read/64, error -71 [ 1564.356265][T14876] usb usb1-port1: attempt power cycle [ 1565.010347][T14876] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1565.049181][T14876] usb 1-1: Using ep0 maxpacket: 16 [ 1565.063307][T14876] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1565.095028][T14876] usb 1-1: config 0 has no interface number 0 [ 1565.114937][T14876] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1565.150895][T14876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.177530][T14876] usb 1-1: Product: syz [ 1565.189742][T14876] usb 1-1: Manufacturer: syz [ 1565.208805][T14876] usb 1-1: SerialNumber: syz [ 1565.234903][T14876] usb 1-1: config 0 descriptor?? [ 1565.255326][T14876] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1565.496687][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1565.496707][ T29] audit: type=1800 audit(1771439411.418:4064): pid=22421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6782" name="bus" dev="tmpfs" ino=153 res=0 errno=0 [ 1566.354140][T14876] gspca_spca1528: reg_w err -71 [ 1566.393239][T14876] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1566.443939][T14876] usb 1-1: USB disconnect, device number 71 [ 1567.677739][ T5908] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 1567.707532][ T5908] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1567.783034][ T29] audit: type=1326 audit(1771439413.728:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.828096][T22507] netlink: 'syz.7.6790': attribute type 4 has an invalid length. [ 1567.854677][T22507] netlink: 'syz.7.6790': attribute type 4 has an invalid length. [ 1567.862673][ T29] audit: type=1326 audit(1771439413.728:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862714][ T29] audit: type=1326 audit(1771439413.728:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862748][ T29] audit: type=1326 audit(1771439413.728:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862784][ T29] audit: type=1326 audit(1771439413.728:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862817][ T29] audit: type=1326 audit(1771439413.728:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862853][ T29] audit: type=1326 audit(1771439413.728:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862886][ T29] audit: type=1326 audit(1771439413.728:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1567.862919][ T29] audit: type=1326 audit(1771439413.728:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.7.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bf39c629 code=0x7ffc0000 [ 1568.075788][T22501] fido_id[22501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1568.192302][T22513] macvlan0: entered promiscuous mode [ 1568.202031][T22513] netlink: 'syz.4.6787': attribute type 1 has an invalid length. [ 1568.271019][T22513] netlink: 'syz.4.6787': attribute type 2 has an invalid length. [ 1568.558855][T14876] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1568.753773][T14876] usb 1-1: Using ep0 maxpacket: 32 [ 1568.770206][T14876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1568.830828][T14876] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1568.866753][T14876] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1568.978516][T14876] usb 1-1: Product: syz [ 1569.005341][T14876] usb 1-1: Manufacturer: syz [ 1569.022418][T14876] usb 1-1: SerialNumber: syz [ 1569.116629][T14876] usb 1-1: config 0 descriptor?? [ 1569.138104][T22517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1569.156009][T22526] veth0: entered promiscuous mode [ 1569.472952][T14878] usb 1-1: USB disconnect, device number 72 [ 1569.526166][T22522] veth0: left promiscuous mode [ 1569.869491][T14878] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1570.018469][T14878] usb 1-1: device descriptor read/64, error -71 [ 1570.149750][T22570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1570.269123][T14878] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1570.328621][T14876] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1570.398449][T14878] usb 1-1: device descriptor read/64, error -71 [ 1570.488448][T14876] usb 10-1: Using ep0 maxpacket: 32 [ 1570.501805][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1570.501842][ T29] audit: type=1326 audit(1771439416.448:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.544662][T14878] usb usb1-port1: attempt power cycle [ 1570.554706][T14876] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1570.564143][T14876] usb 10-1: config 0 has no interface number 0 [ 1570.571286][T14876] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1570.581613][ T29] audit: type=1326 audit(1771439416.448:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.604131][T14876] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1570.614707][ T29] audit: type=1326 audit(1771439416.488:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.647316][ T29] audit: type=1326 audit(1771439416.498:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.670395][ T29] audit: type=1326 audit(1771439416.498:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.693322][T14876] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1570.702736][T14876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.711394][T14876] usb 10-1: Product: syz [ 1570.715663][T14876] usb 10-1: Manufacturer: syz [ 1570.720518][ T29] audit: type=1326 audit(1771439416.498:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.743004][T14876] usb 10-1: SerialNumber: syz [ 1570.752031][T14876] usb 10-1: config 0 descriptor?? [ 1570.764162][T22564] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1570.774691][ T29] audit: type=1326 audit(1771439416.558:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.798304][T22585] netlink: 'syz.4.6805': attribute type 4 has an invalid length. [ 1570.837265][ T29] audit: type=1326 audit(1771439416.588:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.889637][ T29] audit: type=1326 audit(1771439416.588:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.924279][T14878] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1570.950777][ T29] audit: type=1326 audit(1771439416.588:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.9.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a619c2bb code=0x7ffc0000 [ 1570.984443][T14878] usb 1-1: device descriptor read/8, error -71 [ 1571.230609][T14878] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1571.283658][T14878] usb 1-1: device descriptor read/8, error -71 [ 1571.409089][T14878] usb usb1-port1: unable to enumerate USB device [ 1571.565711][T14876] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1571.614226][T14876] ipheth 10-1:0.196: probe with driver ipheth failed with error -71 [ 1571.675981][T14876] usb 10-1: USB disconnect, device number 99 [ 1571.716036][T22605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6808'. [ 1571.725453][T14878] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1571.892103][T14878] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1571.924242][T14878] usb 1-1: config 0 has no interface number 0 [ 1571.953469][T14878] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1571.984995][T14878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.011806][T14878] usb 1-1: Product: syz [ 1572.041289][T14878] usb 1-1: Manufacturer: syz [ 1572.063996][T14878] usb 1-1: SerialNumber: syz [ 1572.076896][T14878] usb 1-1: config 0 descriptor?? [ 1572.319143][T14878] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1572.346472][T14878] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1572.361990][T14878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1572.372553][T14878] usb 1-1: media controller created [ 1572.422153][T14878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1572.465721][T22627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.492210][T22627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.529354][T22596] FAULT_INJECTION: forcing a failure. [ 1572.529354][T22596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.554439][T22596] CPU: 1 UID: 0 PID: 22596 Comm: syz.0.6807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.554468][T22596] Tainted: [L]=SOFTLOCKUP [ 1572.554474][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1572.554485][T22596] Call Trace: [ 1572.554495][T22596] [ 1572.554503][T22596] dump_stack_lvl+0xe8/0x150 [ 1572.554530][T22596] should_fail_ex+0x412/0x560 [ 1572.554554][T22596] _copy_from_user+0x2d/0xb0 [ 1572.554576][T22596] memdup_user+0x5e/0xd0 [ 1572.554595][T22596] i2cdev_ioctl+0x656/0x880 [ 1572.554616][T22596] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1572.554635][T22596] ? __fget_files+0x3a0/0x420 [ 1572.554655][T22596] ? __fget_files+0x2a/0x420 [ 1572.554677][T22596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1572.554696][T22596] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1572.554714][T22596] __se_sys_ioctl+0xfc/0x170 [ 1572.554734][T22596] do_syscall_64+0x14d/0xf80 [ 1572.554755][T22596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.554771][T22596] ? clear_bhb_loop+0x40/0x90 [ 1572.554791][T22596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.554807][T22596] RIP: 0033:0x7fa1f959c629 [ 1572.554824][T22596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.554837][T22596] RSP: 002b:00007fa1fa370028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.554855][T22596] RAX: ffffffffffffffda RBX: 00007fa1f9815fa0 RCX: 00007fa1f959c629 [ 1572.554867][T22596] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 1572.554878][T22596] RBP: 00007fa1fa370090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.554888][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.554897][T22596] R13: 00007fa1f9816038 R14: 00007fa1f9815fa0 R15: 00007fa1f993fa48 [ 1572.554924][T22596] [ 1572.556122][T14878] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1572.638466][ T5908] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1572.775009][T14878] usb 1-1: USB disconnect, device number 77 [ 1572.940995][T22656] loop3: detected capacity change from 0 to 7 [ 1572.951357][T22656] Dev loop3: unable to read RDB block 7 [ 1572.957238][T22656] loop3: unable to read partition table [ 1572.964037][T22656] loop3: partition table beyond EOD, truncated [ 1572.977957][T22656] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1573.389915][T22674] FAULT_INJECTION: forcing a failure. [ 1573.389915][T22674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.421576][T22674] CPU: 1 UID: 0 PID: 22674 Comm: syz.4.6819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1573.421604][T22674] Tainted: [L]=SOFTLOCKUP [ 1573.421611][T22674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1573.421620][T22674] Call Trace: [ 1573.421629][T22674] [ 1573.421636][T22674] dump_stack_lvl+0xe8/0x150 [ 1573.421664][T22674] should_fail_ex+0x412/0x560 [ 1573.421688][T22674] _copy_from_user+0x2d/0xb0 [ 1573.421710][T22674] snd_seq_write+0x309/0x820 [ 1573.421740][T22674] ? __pfx_snd_seq_write+0x10/0x10 [ 1573.421758][T22674] ? bpf_lsm_file_permission+0x9/0x20 [ 1573.421776][T22674] ? security_file_permission+0x75/0x260 [ 1573.421806][T22674] ? rw_verify_area+0x255/0x4d0 [ 1573.421832][T22674] vfs_writev+0x4bd/0x990 [ 1573.421853][T22674] ? __pfx_snd_seq_write+0x10/0x10 [ 1573.421875][T22674] ? __pfx_vfs_writev+0x10/0x10 [ 1573.421906][T22674] ? __fget_files+0x2a/0x420 [ 1573.421930][T22674] ? __fget_files+0x3a0/0x420 [ 1573.421948][T22674] ? __fget_files+0x2a/0x420 [ 1573.421975][T22674] do_writev+0x154/0x2e0 [ 1573.421996][T22674] ? __pfx_do_writev+0x10/0x10 [ 1573.422023][T22674] do_syscall_64+0x14d/0xf80 [ 1573.422045][T22674] ? trace_irq_disable+0x3b/0x150 [ 1573.422064][T22674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.422081][T22674] ? clear_bhb_loop+0x40/0x90 [ 1573.422100][T22674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.422116][T22674] RIP: 0033:0x7fc7ba99c629 [ 1573.422131][T22674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.422142][T22674] RSP: 002b:00007fc7bb8f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1573.422159][T22674] RAX: ffffffffffffffda RBX: 00007fc7bac15fa0 RCX: 00007fc7ba99c629 [ 1573.422171][T22674] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 1573.422181][T22674] RBP: 00007fc7bb8f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.422191][T22674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.422200][T22674] R13: 00007fc7bac16038 R14: 00007fc7bac15fa0 R15: 00007fc7bad3fa48 [ 1573.422227][T22674] [ 1573.708759][T14878] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1573.801886][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1573.858671][T14878] usb 1-1: Using ep0 maxpacket: 32 [ 1573.866128][T14878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1573.880944][T14878] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1573.891394][T14878] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1573.902190][T14878] usb 1-1: Product: syz [ 1573.906424][T14878] usb 1-1: Manufacturer: syz [ 1573.912010][T14878] usb 1-1: SerialNumber: syz [ 1573.921403][T14878] usb 1-1: config 0 descriptor?? [ 1573.931151][T22667] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1574.210624][T14876] usb 1-1: USB disconnect, device number 78 [ 1574.578559][T14876] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1574.738480][T14876] usb 1-1: device descriptor read/64, error -71 [ 1575.019916][T14876] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1575.178504][T14876] usb 1-1: device descriptor read/64, error -71 [ 1575.194244][T22714] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1575.308990][T14876] usb usb1-port1: attempt power cycle [ 1575.478639][T14862] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1575.638444][T14862] usb 3-1: Using ep0 maxpacket: 32 [ 1575.652949][T14862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1575.678504][T14876] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1575.678508][T14862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1575.678558][T14862] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1575.728635][ T5908] usb 10-1: device descriptor read/64, error -71 [ 1575.752594][T14876] usb 1-1: device descriptor read/8, error -71 [ 1575.755390][T14862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.793649][T14862] usb 3-1: config 0 descriptor?? [ 1575.988533][ T5908] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1576.000219][T14876] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1576.039733][T14876] usb 1-1: device descriptor read/8, error -71 [ 1576.160144][T14876] usb usb1-port1: unable to enumerate USB device [ 1576.218162][ T5908] usb 10-1: Using ep0 maxpacket: 16 [ 1576.240319][ T5908] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1576.278472][ T5908] usb 10-1: config 0 has no interface number 0 [ 1576.325575][ T5908] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1576.378496][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.459959][ T5908] usb 10-1: Product: syz [ 1576.482973][ T5908] usb 10-1: Manufacturer: syz [ 1576.499619][T14862] usbhid 3-1:0.0: can't add hid device: -71 [ 1576.518323][ T5908] usb 10-1: SerialNumber: syz [ 1576.537546][T14862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1576.557630][ T5908] usb 10-1: config 0 descriptor?? [ 1576.582467][ T5908] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1576.612412][T14862] usb 3-1: USB disconnect, device number 24 [ 1576.638677][T14861] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1576.800374][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1576.800504][ T29] audit: type=1800 audit(1771439422.748:4146): pid=22722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6824" name="bus" dev="tmpfs" ino=1914 res=0 errno=0 [ 1576.835926][T14861] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1576.854355][T14861] usb 1-1: config 0 has no interface number 0 [ 1576.873858][T14861] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1576.891549][T14861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.921647][T14861] usb 1-1: Product: syz [ 1576.933813][T14861] usb 1-1: Manufacturer: syz [ 1576.957557][T14861] usb 1-1: SerialNumber: syz [ 1576.995029][T14861] usb 1-1: config 0 descriptor?? [ 1577.230174][T22782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.253118][T22782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.278291][T14861] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1577.311556][T14861] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1577.342343][T14861] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1577.361225][T14861] usb 1-1: media controller created [ 1577.406778][T14861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.487224][T14861] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1577.596972][T14861] usb 1-1: USB disconnect, device number 83 [ 1577.639219][ T5908] gspca_spca1528: reg_w err -71 [ 1577.672972][ T5908] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1577.706854][T22851] loop3: detected capacity change from 0 to 7 [ 1577.714567][ T5908] usb 10-1: USB disconnect, device number 101 [ 1577.726912][T12711] Dev loop3: unable to read RDB block 7 [ 1577.743622][T12711] loop3: unable to read partition table [ 1577.765558][T12711] loop3: partition table beyond EOD, truncated [ 1577.789756][T22851] Dev loop3: unable to read RDB block 7 [ 1577.795365][T22851] loop3: unable to read partition table [ 1577.830676][T22851] loop3: partition table beyond EOD, truncated [ 1577.851855][T22851] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1578.298569][T22866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1578.316862][T22866] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1580.039079][T14861] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1580.219138][T14861] usb 10-1: Using ep0 maxpacket: 32 [ 1580.234705][T14861] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1580.258193][T14861] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1580.286135][T14861] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1580.311601][T14861] usb 10-1: Product: syz [ 1580.323298][T14861] usb 10-1: Manufacturer: syz [ 1580.338809][T14861] usb 10-1: SerialNumber: syz [ 1580.361794][T14861] usb 10-1: config 0 descriptor?? [ 1580.376640][T22895] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1580.662528][T14878] usb 10-1: USB disconnect, device number 102 [ 1580.784746][ T5192] Dev loop3: unable to read RDB block 7 [ 1580.816824][ T5192] loop3: unable to read partition table [ 1580.840885][ T5192] loop3: partition table beyond EOD, truncated [ 1580.979338][ T29] audit: type=1326 audit(1771439426.928:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.034563][T14878] usb 10-1: new full-speed USB device number 103 using dummy_hcd [ 1581.060993][T22981] netlink: 'syz.2.6843': attribute type 4 has an invalid length. [ 1581.103547][T22981] netlink: 'syz.2.6843': attribute type 4 has an invalid length. [ 1581.120082][ T29] audit: type=1326 audit(1771439426.948:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.239490][T14878] usb 10-1: device descriptor read/64, error -71 [ 1581.265478][ T29] audit: type=1326 audit(1771439426.968:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.382827][ T29] audit: type=1326 audit(1771439426.968:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.498652][T14878] usb 10-1: new full-speed USB device number 104 using dummy_hcd [ 1581.516987][ T29] audit: type=1326 audit(1771439426.968:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.638916][T14878] usb 10-1: device descriptor read/64, error -71 [ 1581.646415][ T29] audit: type=1326 audit(1771439426.968:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.750367][ T29] audit: type=1326 audit(1771439426.968:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.778582][ T29] audit: type=1326 audit(1771439426.968:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.805003][T14878] usb usb10-port1: attempt power cycle [ 1581.813232][ T29] audit: type=1326 audit(1771439426.978:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.897863][ T5833] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1581.923207][ T29] audit: type=1326 audit(1771439426.978:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.966539][ T29] audit: type=1326 audit(1771439426.978:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1581.996765][ T29] audit: type=1326 audit(1771439426.988:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.025332][ T29] audit: type=1326 audit(1771439426.988:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.056487][ T29] audit: type=1326 audit(1771439426.988:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.080134][ T5833] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 1582.090544][ T29] audit: type=1326 audit(1771439426.988:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.118466][ T5833] usb 1-1: config 5 has no interface number 0 [ 1582.118493][ T29] audit: type=1326 audit(1771439426.988:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.155045][ T29] audit: type=1326 audit(1771439426.988:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.158859][ T5833] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1582.189815][T14878] usb 10-1: new full-speed USB device number 105 using dummy_hcd [ 1582.207365][ T29] audit: type=1326 audit(1771439426.988:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1582.230678][T14878] usb 10-1: device descriptor read/8, error -71 [ 1582.264533][ T5833] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1582.301879][T23002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.317420][ T5833] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1582.332327][T23002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.347008][ T5833] usb 1-1: config 5 interface 123 has no altsetting 0 [ 1582.408827][ T5833] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1582.419164][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.427333][ T5833] usb 1-1: Product: syz [ 1582.435012][ T5833] usb 1-1: Manufacturer: syz [ 1582.449120][ T5833] usb 1-1: SerialNumber: syz [ 1582.483724][T14875] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 1582.491880][T14878] usb 10-1: new full-speed USB device number 106 using dummy_hcd [ 1582.506995][T14875] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1582.520859][T14878] usb 10-1: device descriptor read/8, error -71 [ 1582.570795][T23017] fido_id[23017]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1582.628934][T14878] usb usb10-port1: unable to enumerate USB device [ 1582.693847][ T5833] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1582.717877][ T5833] usb 1-1: USB disconnect, device number 84 [ 1582.763024][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1582.814640][T23049] fuse: Bad value for 'fd' [ 1582.905985][T23053] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1582.995261][T23061] syzkaller1: entered promiscuous mode [ 1583.006714][T23061] syzkaller1: entered allmulticast mode [ 1583.356574][T23096] loop3: detected capacity change from 0 to 7 [ 1583.383129][T23096] Dev loop3: unable to read RDB block 7 [ 1583.389075][T23096] loop3: unable to read partition table [ 1583.397219][T23096] loop3: partition table beyond EOD, truncated [ 1583.406335][T23096] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1584.293186][T23135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.316887][T23135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.355706][T23135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.371993][T23135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.413291][T23135] fuse: Bad value for 'group_id' [ 1584.418275][T23135] fuse: Bad value for 'group_id' [ 1584.989584][T14878] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1585.049181][T23169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.062247][T23169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.179073][T14878] usb 10-1: Using ep0 maxpacket: 32 [ 1585.192964][T14878] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1585.220149][T14878] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1585.229833][T14878] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1585.238164][T14878] usb 10-1: Product: syz [ 1585.243009][T14878] usb 10-1: Manufacturer: syz [ 1585.248192][T14878] usb 10-1: SerialNumber: syz [ 1585.256170][T14878] usb 10-1: config 0 descriptor?? [ 1585.262970][T23148] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1585.537949][T14878] usb 10-1: USB disconnect, device number 107 [ 1585.871318][T14878] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 1586.018500][T14878] usb 10-1: device descriptor read/64, error -71 [ 1586.191997][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1586.201415][T23214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.220340][T23214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.260481][T14878] usb 10-1: new full-speed USB device number 109 using dummy_hcd [ 1586.404379][T14878] usb 10-1: device descriptor read/64, error -71 [ 1586.458210][ T5192] Dev loop3: unable to read RDB block 7 [ 1586.466748][ T5192] loop3: unable to read partition table [ 1586.483046][ T5192] loop3: partition table beyond EOD, truncated [ 1586.525114][T14878] usb usb10-port1: attempt power cycle [ 1586.868470][T14878] usb 10-1: new full-speed USB device number 110 using dummy_hcd [ 1586.898464][T14875] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1586.911476][T14878] usb 10-1: device descriptor read/8, error -71 [ 1587.080732][T14875] usb 1-1: Using ep0 maxpacket: 16 [ 1587.096538][T14875] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1587.123933][T14875] usb 1-1: config 0 has no interface number 0 [ 1587.142534][T14875] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1587.164603][T14875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.172770][T14878] usb 10-1: new full-speed USB device number 111 using dummy_hcd [ 1587.187024][T14875] usb 1-1: Product: syz [ 1587.194970][T14875] usb 1-1: Manufacturer: syz [ 1587.208611][T14875] usb 1-1: SerialNumber: syz [ 1587.213973][T14878] usb 10-1: device descriptor read/8, error -71 [ 1587.256032][T14875] usb 1-1: config 0 descriptor?? [ 1587.276608][T14875] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1587.329972][T14878] usb usb10-port1: unable to enumerate USB device [ 1587.476669][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1587.476687][ T29] audit: type=1800 audit(1771439433.418:4209): pid=23251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6873" name="bus" dev="tmpfs" ino=222 res=0 errno=0 [ 1587.795928][T23287] tipc: Enabled bearer , priority 0 [ 1587.812448][T23287] syzkaller0: entered promiscuous mode [ 1587.828172][T23287] syzkaller0: entered allmulticast mode [ 1587.845180][T23292] SET target dimension over the limit! [ 1587.892491][T23287] tipc: Resetting bearer [ 1587.901183][T23287] netlink: 'syz.9.6877': attribute type 34 has an invalid length. [ 1587.911431][T23292] netdevsim netdevsim4: Direct firmware load for / [ 1587.911431][T23292] failed with error -2 [ 1587.912443][T23286] tipc: Resetting bearer [ 1587.930494][T23292] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1587.930494][T23292] [ 1587.958579][T14876] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1587.982890][T23286] tipc: Disabling bearer [ 1588.131454][T14876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1588.161370][T14876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1588.187656][T14876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1588.224027][T14876] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1588.237978][T14876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.254054][T14875] gspca_spca1528: reg_w err -71 [ 1588.265345][T14876] usb 3-1: Product: syz [ 1588.279279][T14876] usb 3-1: Manufacturer: syz [ 1588.288716][T14875] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1588.297498][T14876] usb 3-1: SerialNumber: syz [ 1588.334517][T14876] usb 3-1: config 0 descriptor?? [ 1588.342941][T14875] usb 1-1: USB disconnect, device number 85 [ 1588.383506][T23275] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1588.411919][T23275] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1588.442717][T14876] usb 3-1: ucan: probing device on interface #0 [ 1588.483657][T23307] SET target dimension over the limit! [ 1588.497962][T23317] xt_TCPMSS: Only works on TCP SYN packets [ 1588.660013][T14876] usb 3-1: ucan: device protocol version 65539 is not supported [ 1588.686294][T14876] usb 3-1: ucan: probe failed; try to update the device firmware [ 1589.170064][T14875] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1589.349042][T14875] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1589.357253][T14875] usb 1-1: config 8 has no interface number 0 [ 1589.418548][T14875] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1589.449516][T14875] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 1589.477699][T14875] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1589.501979][T14875] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1589.518516][T14875] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1589.527577][T14875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.597424][T23346] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1589.830198][T23369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.861846][T23369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.015567][T14875] usb 1-1: string descriptor 0 read error: -71 [ 1590.046961][T14875] ir_toy 1-1:8.177: required endpoints not found [ 1590.083588][T14875] usb 1-1: USB disconnect, device number 86 [ 1590.195415][T23388] FAULT_INJECTION: forcing a failure. [ 1590.195415][T23388] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.210578][T23388] CPU: 1 UID: 0 PID: 23388 Comm: syz.9.6888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.210605][T23388] Tainted: [L]=SOFTLOCKUP [ 1590.210611][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1590.210620][T23388] Call Trace: [ 1590.210627][T23388] [ 1590.210634][T23388] dump_stack_lvl+0xe8/0x150 [ 1590.210662][T23388] should_fail_ex+0x412/0x560 [ 1590.210684][T23388] should_failslab+0xa8/0x100 [ 1590.210705][T23388] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1590.210730][T23388] ? rds_rm_size+0x40c/0x760 [ 1590.210750][T23388] ? rds_rm_size+0x40c/0x760 [ 1590.210770][T23388] krealloc_node_align_noprof+0x1ae/0x390 [ 1590.210791][T23388] rds_rm_size+0x40c/0x760 [ 1590.210822][T23388] rds_sendmsg+0xb13/0x2170 [ 1590.210855][T23388] ? __pfx_rds_sendmsg+0x10/0x10 [ 1590.210879][T23388] ? __pfx_aa_sk_perm+0x10/0x10 [ 1590.210894][T23388] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1590.210919][T23388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1590.210938][T23388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1590.210956][T23388] ? __pfx_rds_sendmsg+0x10/0x10 [ 1590.210973][T23388] ____sys_sendmsg+0xa68/0xad0 [ 1590.211000][T23388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1590.211029][T23388] ? import_iovec+0x73/0xa0 [ 1590.211051][T23388] ___sys_sendmsg+0x2a5/0x360 [ 1590.211076][T23388] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.211127][T23388] ? __fget_files+0x2a/0x420 [ 1590.211146][T23388] ? __fget_files+0x3a0/0x420 [ 1590.211174][T23388] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1590.211197][T23388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1590.211226][T23388] ? __pfx_ksys_write+0x10/0x10 [ 1590.211259][T23388] do_syscall_64+0x14d/0xf80 [ 1590.211279][T23388] ? trace_irq_disable+0x3b/0x150 [ 1590.211299][T23388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.211315][T23388] ? clear_bhb_loop+0x40/0x90 [ 1590.211335][T23388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.211350][T23388] RIP: 0033:0x7f50a619c629 [ 1590.211366][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.211379][T23388] RSP: 002b:00007f50a703b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.211398][T23388] RAX: ffffffffffffffda RBX: 00007f50a6415fa0 RCX: 00007f50a619c629 [ 1590.211410][T23388] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000007 [ 1590.211420][T23388] RBP: 00007f50a703b090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.211430][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.211439][T23388] R13: 00007f50a6416038 R14: 00007f50a6415fa0 R15: 00007f50a653fa48 [ 1590.211467][T23388] [ 1590.356266][T23390] FAULT_INJECTION: forcing a failure. [ 1590.356266][T23390] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.562218][T23390] CPU: 0 UID: 0 PID: 23390 Comm: syz.7.6889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.562244][T23390] Tainted: [L]=SOFTLOCKUP [ 1590.562251][T23390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1590.562260][T23390] Call Trace: [ 1590.562267][T23390] [ 1590.562275][T23390] dump_stack_lvl+0xe8/0x150 [ 1590.562301][T23390] should_fail_ex+0x412/0x560 [ 1590.562324][T23390] should_failslab+0xa8/0x100 [ 1590.562339][T23390] __kmalloc_cache_noprof+0x88/0x660 [ 1590.562355][T23390] ? snd_timer_instance_new+0x51/0x220 [ 1590.562368][T23390] snd_timer_instance_new+0x51/0x220 [ 1590.562378][T23390] snd_seq_timer_open+0x23f/0x670 [ 1590.562397][T23390] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1590.562416][T23390] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1590.562431][T23390] snd_seq_queue_alloc+0x3dd/0x790 [ 1590.562448][T23390] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 1590.562466][T23390] snd_seq_oss_open+0x674/0xfc0 [ 1590.562475][T23390] ? do_sys_openat2+0x113/0x200 [ 1590.562492][T23390] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1590.562516][T23390] ? trace_contention_end+0x3d/0x150 [ 1590.562532][T23390] ? __mutex_lock+0x319/0x1300 [ 1590.562556][T23390] ? __pfx___mutex_lock+0x10/0x10 [ 1590.562571][T23390] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1590.562581][T23390] ? __pfx_free_devinfo+0x10/0x10 [ 1590.562589][T23390] ? do_raw_spin_unlock+0xf5/0x210 [ 1590.562601][T23390] ? soundcore_open+0x2da/0x490 [ 1590.562613][T23390] odev_open+0x67/0xd0 [ 1590.562627][T23390] chrdev_open+0x4cd/0x5e0 [ 1590.562640][T23390] ? __pfx_chrdev_open+0x10/0x10 [ 1590.562649][T23390] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1590.562667][T23390] ? __pfx_chrdev_open+0x10/0x10 [ 1590.562676][T23390] do_dentry_open+0x785/0x14e0 [ 1590.562694][T23390] vfs_open+0x3b/0x340 [ 1590.562705][T23390] ? path_openat+0x2df0/0x3860 [ 1590.562714][T23390] path_openat+0x2e08/0x3860 [ 1590.562730][T23390] ? __pfx_stack_trace_save+0x10/0x10 [ 1590.562742][T23390] ? stack_depot_save_flags+0x33/0x810 [ 1590.562757][T23390] ? __pfx_path_openat+0x10/0x10 [ 1590.562764][T23390] ? __x64_sys_openat+0x138/0x170 [ 1590.562776][T23390] ? do_syscall_64+0x14d/0xf80 [ 1590.562789][T23390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.562802][T23390] ? __lock_acquire+0x6b5/0x2cf0 [ 1590.562817][T23390] do_file_open+0x23e/0x4a0 [ 1590.562835][T23390] ? __pfx_do_file_open+0x10/0x10 [ 1590.562860][T23390] ? _raw_spin_unlock+0x28/0x50 [ 1590.562871][T23390] ? alloc_fd+0x64b/0x6c0 [ 1590.562891][T23390] do_sys_openat2+0x113/0x200 [ 1590.562905][T23390] ? __pfx_do_sys_openat2+0x10/0x10 [ 1590.562918][T23390] ? ksys_write+0x242/0x270 [ 1590.562928][T23390] ? __pfx_ksys_write+0x10/0x10 [ 1590.562938][T23390] __x64_sys_openat+0x138/0x170 [ 1590.562953][T23390] do_syscall_64+0x14d/0xf80 [ 1590.562965][T23390] ? trace_irq_disable+0x3b/0x150 [ 1590.562984][T23390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.562993][T23390] ? clear_bhb_loop+0x40/0x90 [ 1590.563005][T23390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.563015][T23390] RIP: 0033:0x7fe9bf39c629 [ 1590.563025][T23390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.563033][T23390] RSP: 002b:00007fe9c0250028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1590.563043][T23390] RAX: ffffffffffffffda RBX: 00007fe9bf615fa0 RCX: 00007fe9bf39c629 [ 1590.563051][T23390] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1590.563057][T23390] RBP: 00007fe9c0250090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.563063][T23390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1590.563068][T23390] R13: 00007fe9bf616038 R14: 00007fe9bf615fa0 R15: 00007fe9bf73fa48 [ 1590.563083][T23390] [ 1590.993565][ T5908] usb 3-1: USB disconnect, device number 25 [ 1591.089118][T14861] usb 10-1: new full-speed USB device number 112 using dummy_hcd [ 1591.284073][T14861] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1591.293312][T14861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.301545][T14861] usb 10-1: Product: syz [ 1591.305814][T14861] usb 10-1: Manufacturer: syz [ 1591.310546][T14861] usb 10-1: SerialNumber: syz [ 1591.327988][T14861] usb 10-1: config 0 descriptor?? [ 1591.345559][T14861] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1591.982800][T23471] usb usb7: usbfs: process 23471 (syz.7.6902) did not claim interface 0 before use [ 1592.029263][T23472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.043843][T23472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.106215][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6890'. [ 1592.398580][T14861] gspca_stk1135: reg_w 0x3 err -110 [ 1592.416404][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1592.443137][T14861] gspca_stk1135: Sensor write failed [ 1592.532975][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1592.639972][T14861] gspca_stk1135: Sensor write failed [ 1592.701787][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1592.738904][T23479] netlink: 'syz.2.6896': attribute type 1 has an invalid length. [ 1592.800605][T14861] gspca_stk1135: Sensor read failed [ 1592.820725][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1592.877965][T23479] netlink: 'syz.2.6896': attribute type 2 has an invalid length. [ 1592.905449][T14861] gspca_stk1135: Sensor read failed [ 1592.919075][T14861] gspca_stk1135: Detected sensor type unknown (0x0) [ 1593.002262][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1593.032456][T14861] gspca_stk1135: Sensor read failed [ 1593.037875][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1593.045261][T14861] gspca_stk1135: Sensor read failed [ 1593.234024][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1593.254132][T14861] gspca_stk1135: Sensor write failed [ 1593.259867][T14861] gspca_stk1135: serial bus timeout: status=0x00 [ 1593.268145][T14861] gspca_stk1135: Sensor write failed [ 1593.278475][T14861] stk1135 10-1:0.0: probe with driver stk1135 failed with error -110 [ 1593.796121][T14861] usb 10-1: USB disconnect, device number 112 [ 1594.228547][T14861] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1594.381728][T14861] usb 10-1: device descriptor read/64, error -71 [ 1594.634636][T14861] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1594.665626][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6911'. [ 1594.704990][T23545] bond0: option downdelay: invalid value (18446744071951403948) [ 1594.705080][T23535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1594.747662][T23545] bond0: option downdelay: allowed values 0 - 2147483647 [ 1594.858682][T14861] usb 10-1: device descriptor read/64, error -71 [ 1594.999825][T14861] usb usb10-port1: attempt power cycle [ 1595.368467][T14861] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1595.432878][T14861] usb 10-1: device descriptor read/8, error -71 [ 1595.708653][T14861] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1595.766538][T14861] usb 10-1: device descriptor read/8, error -71 [ 1595.890653][T23612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.929455][T14861] usb usb10-port1: unable to enumerate USB device [ 1596.201323][T12801] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1596.232570][ T29] audit: type=1326 audit(1771439442.178:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.283835][T23626] netlink: 'syz.0.6921': attribute type 4 has an invalid length. [ 1596.335798][T23626] netlink: 'syz.0.6921': attribute type 4 has an invalid length. [ 1596.361323][ T29] audit: type=1326 audit(1771439442.178:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.481358][ T29] audit: type=1326 audit(1771439442.178:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.510734][ T29] audit: type=1326 audit(1771439442.178:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.599022][ T29] audit: type=1326 audit(1771439442.178:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.671859][ T29] audit: type=1326 audit(1771439442.178:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.733491][ T29] audit: type=1326 audit(1771439442.178:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.818977][ T29] audit: type=1326 audit(1771439442.178:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1596.921490][ T29] audit: type=1326 audit(1771439442.208:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1597.050344][ T29] audit: type=1326 audit(1771439442.208:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1597.368436][ T5908] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1597.528440][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1597.541848][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.570202][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.597327][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1597.636918][ T5908] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1597.657719][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.704074][ T5908] usb 3-1: config 0 descriptor?? [ 1597.916697][T23658] netlink: 'syz.7.6928': attribute type 4 has an invalid length. [ 1597.983615][T23662] netlink: 'syz.7.6928': attribute type 4 has an invalid length. [ 1598.139037][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 1598.183616][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1598.228979][ T5908] usb 3-1: USB disconnect, device number 26 [ 1598.934595][T23681] Cannot find add_set index 0 as target [ 1599.075352][T23681] netdevsim netdevsim0: Direct firmware load for / [ 1599.075352][T23681] failed with error -2 [ 1599.119850][T23681] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1599.119850][T23681] [ 1600.247981][ T5908] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 1600.269005][T12801] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1600.279457][T12801] Bluetooth: hci4: Injecting HCI hardware error event [ 1600.289664][T12801] Bluetooth: hci4: hardware error 0x00 [ 1600.337541][ T5908] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1600.513647][T23729] SET target dimension over the limit! [ 1600.551341][T23720] fido_id[23720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1601.242826][T23761] SET target dimension over the limit! [ 1601.359507][T23761] netdevsim netdevsim4: Direct firmware load for / [ 1601.359507][T23761] failed with error -2 [ 1601.480735][T23761] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1601.480735][T23761] [ 1601.678831][T14876] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1601.740810][T14875] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1601.838995][T14876] usb 3-1: Using ep0 maxpacket: 32 [ 1601.847183][T14876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.862195][T14876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.875389][T14876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1601.889262][T14876] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1601.908514][T14875] usb 10-1: Using ep0 maxpacket: 16 [ 1601.914088][T14876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.923882][T14875] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1601.934459][T14875] usb 10-1: config 0 has no interface number 0 [ 1601.943411][T14875] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1601.954776][T23778] loop3: detected capacity change from 0 to 7 [ 1601.979824][T14876] usb 3-1: config 0 descriptor?? [ 1601.985502][T14875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.985979][T23778] Dev loop3: unable to read RDB block 7 [ 1602.019029][T14875] usb 10-1: Product: syz [ 1602.023357][T14875] usb 10-1: Manufacturer: syz [ 1602.031530][T14875] usb 10-1: SerialNumber: syz [ 1602.033527][T23778] loop3: unable to read partition table [ 1602.056502][T14875] usb 10-1: config 0 descriptor?? [ 1602.069934][T23778] loop3: partition table beyond EOD, truncated [ 1602.083330][T14875] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1602.104847][T23778] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1602.300411][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 1602.300423][ T29] audit: type=1800 audit(1771439448.248:4326): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6944" name="bus" dev="tmpfs" ino=2006 res=0 errno=0 [ 1602.348955][T12801] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1602.421188][T14876] usbhid 3-1:0.0: can't add hid device: -71 [ 1602.460397][T14876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1602.498657][T14876] usb 3-1: USB disconnect, device number 27 [ 1602.554366][T23798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.586112][T23798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.607607][T14875] gspca_spca1528: reg_w err -110 [ 1602.629631][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6949'. [ 1602.639738][T14875] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110 [ 1602.665023][T23798] FAULT_INJECTION: forcing a failure. [ 1602.665023][T23798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.694719][T23798] CPU: 0 UID: 0 PID: 23798 Comm: syz.4.6948 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.694746][T23798] Tainted: [L]=SOFTLOCKUP [ 1602.694752][T23798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1602.694763][T23798] Call Trace: [ 1602.694770][T23798] [ 1602.694778][T23798] dump_stack_lvl+0xe8/0x150 [ 1602.694806][T23798] should_fail_ex+0x412/0x560 [ 1602.694829][T23798] set_fd_set+0x3a/0xa0 [ 1602.694848][T23798] core_sys_select+0xa23/0xc30 [ 1602.694882][T23798] ? __pfx_core_sys_select+0x10/0x10 [ 1602.694921][T23798] ? __pfx_set_user_sigmask+0x10/0x10 [ 1602.694939][T23798] ? kmem_cache_free+0x187/0x630 [ 1602.694963][T23798] __se_sys_pselect6+0x267/0x320 [ 1602.694986][T23798] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1602.695005][T23798] ? __pfx_ksys_write+0x10/0x10 [ 1602.695025][T23798] ? __x64_sys_pselect6+0x21/0xf0 [ 1602.695046][T23798] do_syscall_64+0x14d/0xf80 [ 1602.695066][T23798] ? trace_irq_disable+0x3b/0x150 [ 1602.695084][T23798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.695098][T23798] ? clear_bhb_loop+0x40/0x90 [ 1602.695117][T23798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.695132][T23798] RIP: 0033:0x7fc7ba99c629 [ 1602.695149][T23798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.695160][T23798] RSP: 002b:00007fc7bb8f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1602.695176][T23798] RAX: ffffffffffffffda RBX: 00007fc7bac15fa0 RCX: 00007fc7ba99c629 [ 1602.695187][T23798] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1602.695196][T23798] RBP: 00007fc7bb8f3090 R08: 0000200000000280 R09: 0000000000000000 [ 1602.695206][T23798] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1602.695215][T23798] R13: 00007fc7bac16038 R14: 00007fc7bac15fa0 R15: 00007fc7bad3fa48 [ 1602.695238][T23798] [ 1603.040569][T14876] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1603.076796][T14876] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1603.265215][T23818] fido_id[23818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1603.660412][T23837] xt_TCPMSS: Only works on TCP SYN packets [ 1603.980505][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1604.088262][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1604.217221][ T29] audit: type=1326 audit(1771439450.158:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.282313][T23874] netlink: 'syz.2.6960': attribute type 4 has an invalid length. [ 1604.334414][T23876] netlink: 'syz.2.6960': attribute type 4 has an invalid length. [ 1604.348031][ T29] audit: type=1326 audit(1771439450.208:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.392118][ T29] audit: type=1326 audit(1771439450.208:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.433888][ T29] audit: type=1326 audit(1771439450.208:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.481562][ T29] audit: type=1326 audit(1771439450.208:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.574993][ T29] audit: type=1326 audit(1771439450.218:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.599826][T14875] usb 10-1: USB disconnect, device number 117 [ 1604.625039][ T29] audit: type=1326 audit(1771439450.218:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.640792][ T5908] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 1604.705892][ T29] audit: type=1326 audit(1771439450.218:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.722070][ T5908] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1604.814480][ T29] audit: type=1326 audit(1771439450.218:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23873 comm="syz.2.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4319c629 code=0x7ffc0000 [ 1604.990381][ T5192] Dev loop3: unable to read RDB block 7 [ 1605.061927][T23894] fido_id[23894]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1605.086819][ T5192] loop3: unable to read partition table [ 1605.103592][ T5192] loop3: partition table beyond EOD, truncated [ 1605.129189][T23909] blktrace: Concurrent blktraces are not allowed on nbd2 [ 1605.279610][T23914] fuse: Bad value for 'fd' [ 1606.136100][T23935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.174336][T23935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.428548][T14875] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1606.680470][T14875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.698526][T14875] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1606.718052][T14875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.779973][T14875] usb 10-1: config 0 descriptor?? [ 1606.792509][ T5908] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1606.809528][ T5908] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1606.916270][T23952] fido_id[23952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1606.949059][T23961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6977'. [ 1607.234920][T23972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1607.246488][T23940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.261484][T23940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.274612][T14875] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 1607.301228][T14875] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0056/input/input146 [ 1607.393207][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.400304][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.494272][T14875] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1607.800539][T14875] usb 10-1: USB disconnect, device number 118 [ 1608.018798][T14879] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1608.170706][T14879] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 1608.170743][T14879] usb 3-1: config 0 has no interface number 0 [ 1608.170809][T14879] usb 3-1: config 0 interface 213 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.170833][T14879] usb 3-1: config 0 interface 213 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.170853][T14879] usb 3-1: config 0 interface 213 has no altsetting 0 [ 1608.170886][T14879] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1608.170906][T14879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.187859][T14879] usb 3-1: config 0 descriptor?? [ 1608.545833][T24029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6984'. [ 1608.617411][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617449][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617475][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617501][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617523][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617544][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.617566][T14879] logitech 0003:046D:CA04.0057: unknown main item tag 0x0 [ 1608.637245][T14879] logitech 0003:046D:CA04.0057: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input213 [ 1608.637287][T14879] logitech 0003:046D:CA04.0057: no inputs found [ 1608.710170][T24045] bond4: entered promiscuous mode [ 1608.710195][T24045] bond4: entered allmulticast mode [ 1608.860265][T14861] usb 3-1: USB disconnect, device number 28 [ 1608.913331][T24082] blktrace: Concurrent blktraces are not allowed on nbd9 [ 1609.021439][T24084] fuse: Bad value for 'fd' [ 1609.022639][T24084] veth0: entered promiscuous mode [ 1609.336018][T24087] usb usb1: check_ctrlrecip: process 24087 (syz.0.6986) requesting ep 01 but needs 81 [ 1609.377070][T24087] usb usb1: usbfs: process 24087 (syz.0.6986) did not claim interface 0 before use [ 1609.497851][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1609.497868][ T29] audit: type=1326 audit(1771439455.438:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.533087][T24097] netlink: 'syz.0.6987': attribute type 4 has an invalid length. [ 1609.551007][ T29] audit: type=1326 audit(1771439455.468:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.575739][ T29] audit: type=1326 audit(1771439455.478:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.599485][T24097] netlink: 'syz.0.6987': attribute type 4 has an invalid length. [ 1609.607304][ T29] audit: type=1326 audit(1771439455.478:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.632571][ T29] audit: type=1326 audit(1771439455.478:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.660813][ T29] audit: type=1326 audit(1771439455.478:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.688240][ T29] audit: type=1326 audit(1771439455.478:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.688658][ T5908] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1609.713474][ T29] audit: type=1326 audit(1771439455.478:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.743318][T24073] veth0: left promiscuous mode [ 1609.813897][ T29] audit: type=1326 audit(1771439455.478:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.843006][ T29] audit: type=1326 audit(1771439455.478:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.0.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f959c629 code=0x7ffc0000 [ 1609.898761][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 1609.907957][T24107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6993'. [ 1609.908111][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1609.927737][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.961857][ T5908] usb 3-1: Product: syz [ 1609.974516][ T5908] usb 3-1: Manufacturer: syz [ 1609.984187][T24107] bond1: option ad_select: invalid value (46) [ 1609.994614][ T5908] usb 3-1: SerialNumber: syz [ 1610.010625][T24107] bond1 (unregistering): Released all slaves [ 1610.025289][ T5908] usb 3-1: config 0 descriptor?? [ 1610.065694][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1610.583735][T24197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.599553][T24197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.830533][T24220] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1610.957770][T24224] fuse: Bad value for 'fd' [ 1611.036299][T24226] veth0: entered promiscuous mode [ 1611.493516][ T5908] input: sonixj as /devices/platform/dummy_hcd.2/usb3/3-1/input/input147 [ 1611.657349][T24219] veth0: left promiscuous mode [ 1611.754257][ T5908] usb 3-1: USB disconnect, device number 29 [ 1612.131832][T24261] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1612.155980][T24261] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1613.256914][T24280] QAT: failed to copy from user cfg_data. [ 1613.623852][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.651957][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.721394][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.764692][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.779081][T24300] Invalid logical block size (201) [ 1613.806549][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.837461][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.859721][T24305] loop3: detected capacity change from 0 to 7 [ 1613.880282][ T7706] Dev loop3: unable to read RDB block 7 [ 1613.893528][ T7706] loop3: unable to read partition table [ 1613.912731][ T7706] loop3: partition table beyond EOD, truncated [ 1613.933724][T24305] Dev loop3: unable to read RDB block 7 [ 1613.940098][T24305] loop3: unable to read partition table [ 1613.946735][T24305] loop3: partition table beyond EOD, truncated [ 1613.972970][T24305] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1614.158721][ T5833] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1614.364823][T24323] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1614.365706][T24321] FAULT_INJECTION: forcing a failure. [ 1614.365706][T24321] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.385653][T24321] CPU: 1 UID: 0 PID: 24321 Comm: syz.9.7017 Tainted: G L syzkaller #0 PREEMPT(full) [ 1614.385679][T24321] Tainted: [L]=SOFTLOCKUP [ 1614.385686][T24321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1614.385695][T24321] Call Trace: [ 1614.385703][T24321] [ 1614.385710][T24321] dump_stack_lvl+0xe8/0x150 [ 1614.385737][T24321] should_fail_ex+0x412/0x560 [ 1614.385759][T24321] should_failslab+0xa8/0x100 [ 1614.385778][T24321] __kmalloc_noprof+0xe8/0x760 [ 1614.385802][T24321] ? drm_atomic_state_init+0x9c/0x3e0 [ 1614.385832][T24321] drm_atomic_state_init+0x9c/0x3e0 [ 1614.385853][T24321] drm_atomic_state_alloc+0xbc/0x100 [ 1614.385873][T24321] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 1614.385897][T24321] ? __lock_acquire+0x6b5/0x2cf0 [ 1614.385925][T24321] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1614.385967][T24321] ? do_raw_spin_unlock+0xf5/0x210 [ 1614.385985][T24321] ? _raw_spin_unlock+0x28/0x50 [ 1614.386004][T24321] ? drm_is_current_master+0x19f/0x200 [ 1614.386028][T24321] drm_ioctl_kernel+0x2df/0x3b0 [ 1614.386051][T24321] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1614.386072][T24321] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1614.386100][T24321] drm_ioctl+0x6ba/0xb80 [ 1614.386122][T24321] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1614.386146][T24321] ? __pfx_drm_ioctl+0x10/0x10 [ 1614.386176][T24321] ? __fget_files+0x2a/0x420 [ 1614.386206][T24321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1614.386223][T24321] ? __pfx_drm_ioctl+0x10/0x10 [ 1614.386241][T24321] __se_sys_ioctl+0xfc/0x170 [ 1614.386258][T24321] do_syscall_64+0x14d/0xf80 [ 1614.386277][T24321] ? trace_irq_disable+0x3b/0x150 [ 1614.386297][T24321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.386313][T24321] ? clear_bhb_loop+0x40/0x90 [ 1614.386331][T24321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.386347][T24321] RIP: 0033:0x7f50a619c629 [ 1614.386363][T24321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.386375][T24321] RSP: 002b:00007f50a703b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.386392][T24321] RAX: ffffffffffffffda RBX: 00007f50a6415fa0 RCX: 00007f50a619c629 [ 1614.386405][T24321] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 1614.386415][T24321] RBP: 00007f50a703b090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.386425][T24321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.386434][T24321] R13: 00007f50a6416038 R14: 00007f50a6415fa0 R15: 00007f50a653fa48 [ 1614.386460][T24321] [ 1614.398298][ T5833] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1614.557929][T12801] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1614.634446][T24328] fuse: Bad value for 'fd' [ 1614.667139][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.681419][ T5833] usb 3-1: Product: syz [ 1614.685663][ T5833] usb 3-1: Manufacturer: syz [ 1614.690447][ T5833] usb 3-1: SerialNumber: syz [ 1614.696892][ T5833] usb 3-1: config 0 descriptor?? [ 1614.704914][ T5833] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1614.717118][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1614.766616][ T5833] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1614.782844][T24335] veth0: entered promiscuous mode [ 1614.788249][ T5833] usb 3-1: media controller created [ 1614.827090][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.067880][T24345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.087698][T24345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.193895][T24322] veth0: left promiscuous mode [ 1615.209242][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7023'. [ 1615.223042][ T5833] DVB: Unable to find symbol mt352_attach() [ 1615.559914][ T5833] DVB: Unable to find symbol nxt6000_attach() [ 1615.581751][ T5833] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1615.603766][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148 [ 1615.618557][ T5833] dvb-usb: schedule remote query interval to 1000 msecs. [ 1615.626436][ T5833] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1615.641627][ T5833] dvb-usb: bulk message failed: -22 (7/0) [ 1615.658443][ T5833] dvb-usb: bulk message failed: -22 (7/0) [ 1615.702399][ T5833] usb 3-1: USB disconnect, device number 30 [ 1615.765723][ T5833] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1615.889632][T24388] bond5: ARP target 9.0.0.0 is already present [ 1615.895991][T24388] bond5: option arp_ip_target: invalid value (9) [ 1615.912191][T24388] bond5 (unregistering): Released all slaves [ 1616.070745][T24471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.087581][T24471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.361869][T14875] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1616.377037][T24492] macvlan0: entered promiscuous mode [ 1616.386720][T24492] netlink: 'syz.0.7027': attribute type 1 has an invalid length. [ 1616.395003][T24492] netlink: 'syz.0.7027': attribute type 2 has an invalid length. [ 1616.518762][T14875] usb 10-1: Using ep0 maxpacket: 32 [ 1616.530759][T14875] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1616.546084][T14875] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1616.556516][T14875] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1616.565317][T14875] usb 10-1: Product: syz [ 1616.573857][T14875] usb 10-1: Manufacturer: syz [ 1616.582757][T14875] usb 10-1: SerialNumber: syz [ 1616.594135][T14875] usb 10-1: config 0 descriptor?? [ 1616.604611][T24485] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1616.640895][T24500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1616.874705][ T5833] usb 10-1: USB disconnect, device number 119 [ 1617.212054][ T5833] usb 10-1: new full-speed USB device number 120 using dummy_hcd [ 1617.308613][T24569] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1617.322760][T24567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1617.360861][ T5833] usb 10-1: device descriptor read/64, error -71 [ 1617.422386][T24575] fuse: Bad value for 'fd' [ 1617.533618][T24577] veth0: entered promiscuous mode [ 1617.608566][T14861] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1617.637461][ T5833] usb 10-1: new full-speed USB device number 121 using dummy_hcd [ 1617.789776][ T5833] usb 10-1: device descriptor read/64, error -71 [ 1617.920095][ T5833] usb usb10-port1: attempt power cycle [ 1617.957884][T24582] syzkaller0: entered promiscuous mode [ 1617.967915][T14861] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 1617.976737][T24582] syzkaller0: entered allmulticast mode [ 1618.007311][T14861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.036653][T14861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1618.054216][T14861] usb 3-1: config 1 has no interface number 0 [ 1618.106564][T14861] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1618.312321][T24568] veth0: left promiscuous mode [ 1618.369694][ T5833] usb 10-1: new full-speed USB device number 122 using dummy_hcd [ 1618.469952][ T5833] usb 10-1: device descriptor read/8, error -71 [ 1618.588694][T12801] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1618.599674][T12801] Bluetooth: hci2: Injecting HCI hardware error event [ 1618.615747][ T1044] Bluetooth: hci2: hardware error 0x00 [ 1618.738975][T14861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1618.748154][T14861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.756371][T14861] usb 3-1: Product: syz [ 1618.760655][T14861] usb 3-1: Manufacturer: syz [ 1618.768109][T14861] usb 3-1: SerialNumber: syz [ 1618.772857][ T5833] usb 10-1: new full-speed USB device number 123 using dummy_hcd [ 1618.809789][ T5833] usb 10-1: device descriptor read/8, error -71 [ 1618.984844][ T5833] usb usb10-port1: unable to enumerate USB device [ 1619.051049][T14861] cdc_wdm 3-1:1.128: skipping garbage [ 1619.076545][T14861] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1619.366411][T24608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.389007][T24608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.669662][ T1044] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1620.731922][T24648] loop3: detected capacity change from 0 to 7 [ 1620.742002][T24648] Dev loop3: unable to read RDB block 7 [ 1620.763764][T24648] loop3: unable to read partition table [ 1620.783806][T24648] loop3: partition table beyond EOD, truncated [ 1620.788671][T24652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.807016][T24652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.809551][T24648] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–ë ) failed (rc=-5) [ 1621.161059][ T5833] usb 3-1: USB disconnect, device number 31 [ 1622.048592][ T5833] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1622.166812][T24700] input: syz1 as /devices/virtual/input/input149 [ 1622.211904][T24703] blktrace: Concurrent blktraces are not allowed on nbd2 [ 1622.229513][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 1622.236723][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1622.258054][T24700] FAULT_INJECTION: forcing a failure. [ 1622.258054][T24700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.274436][T24700] CPU: 0 UID: 0 PID: 24700 Comm: syz.9.7054 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.274465][T24700] Tainted: [L]=SOFTLOCKUP [ 1622.274471][T24700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1622.274481][T24700] Call Trace: [ 1622.274489][T24700] [ 1622.274496][T24700] dump_stack_lvl+0xe8/0x150 [ 1622.274524][T24700] should_fail_ex+0x412/0x560 [ 1622.274548][T24700] _copy_from_user+0x2d/0xb0 [ 1622.274570][T24700] restore_altstack+0xab/0x4c0 [ 1622.274598][T24700] ? __pfx_restore_altstack+0x10/0x10 [ 1622.274627][T24700] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.274650][T24700] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 1622.274683][T24700] ? __lock_acquire+0x6b5/0x2cf0 [ 1622.274703][T24700] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1622.274720][T24700] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1622.274738][T24700] ? signal_setup_done+0x22f/0x310 [ 1622.274760][T24700] ? arch_do_signal_or_restart+0x4be/0x830 [ 1622.274781][T24700] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1622.274811][T24700] ? __task_pid_nr_ns+0x28/0x470 [ 1622.274842][T24700] do_syscall_64+0x14d/0xf80 [ 1622.274863][T24700] ? trace_irq_disable+0x3b/0x150 [ 1622.274882][T24700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.274899][T24700] ? clear_bhb_loop+0x40/0x90 [ 1622.274917][T24700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.274933][T24700] RIP: 0033:0x7f50a613da19 [ 1622.274949][T24700] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1622.274963][T24700] RSP: 002b:00007f50a703aa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1622.274980][T24700] RAX: ffffffffffffffda RBX: 00007f50a6415fa0 RCX: 00007f50a613da19 [ 1622.274992][T24700] RDX: 00007f50a703aa80 RSI: 00007f50a703abb0 RDI: 0000000000000021 [ 1622.275003][T24700] RBP: 00007f50a703b090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.275013][T24700] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1622.275023][T24700] R13: 00007f50a6416038 R14: 00007f50a6415fa0 R15: 00007f50a653fa48 [ 1622.275048][T24700] [ 1622.275604][ T5833] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1622.496711][T24707] fuse: Bad value for 'fd' [ 1622.542570][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1622.552455][ T5833] usb 1-1: Product: syz [ 1622.557155][ T5833] usb 1-1: Manufacturer: syz [ 1622.562740][ T5833] usb 1-1: SerialNumber: syz [ 1622.579169][ T5833] usb 1-1: config 0 descriptor?? [ 1622.585303][T24684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1622.871656][ T5833] usb 1-1: USB disconnect, device number 87 [ 1623.536797][T24741] xt_TCPMSS: Only works on TCP SYN packets [ 1623.547458][T24740] netlink: 'syz.2.7058': attribute type 4 has an invalid length. [ 1623.625700][T24743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.661937][T24743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.015044][T24773] FAULT_INJECTION: forcing a failure. [ 1624.015044][T24773] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.043947][T24773] CPU: 0 UID: 0 PID: 24773 Comm: syz.0.7061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1624.043975][T24773] Tainted: [L]=SOFTLOCKUP [ 1624.043981][T24773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1624.043990][T24773] Call Trace: [ 1624.043997][T24773] [ 1624.044005][T24773] dump_stack_lvl+0xe8/0x150 [ 1624.044030][T24773] should_fail_ex+0x412/0x560 [ 1624.044051][T24773] should_failslab+0xa8/0x100 [ 1624.044067][T24773] ? ptlock_alloc+0x20/0x70 [ 1624.044089][T24773] kmem_cache_alloc_noprof+0x87/0x650 [ 1624.044119][T24773] ptlock_alloc+0x20/0x70 [ 1624.044141][T24773] pte_alloc_one+0x7a/0x370 [ 1624.044162][T24773] ? do_pte_missing+0xc1c/0x3750 [ 1624.044181][T24773] do_pte_missing+0x12c2/0x3750 [ 1624.044215][T24773] handle_mm_fault+0x1bec/0x3310 [ 1624.044248][T24773] ? handle_mm_fault+0xee/0x3310 [ 1624.044276][T24773] ? __pfx_handle_mm_fault+0x10/0x10 [ 1624.044316][T24773] ? lock_mm_and_find_vma+0xa7/0x340 [ 1624.044342][T24773] do_user_addr_fault+0x75b/0x1340 [ 1624.044375][T24773] exc_page_fault+0x6a/0xc0 [ 1624.044398][T24773] asm_exc_page_fault+0x26/0x30 [ 1624.044414][T24773] RIP: 0010:__get_user_4+0x14/0x20 [ 1624.044433][T24773] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1624.044446][T24773] RSP: 0018:ffffc9000e1b7d90 EFLAGS: 00050287 [ 1624.044462][T24773] RAX: 00007fa1f7776000 RBX: ffff8880350ce040 RCX: 0000000000000046 [ 1624.044474][T24773] RDX: 00007ffffffff000 RSI: ffffffff8e161281 RDI: ffffffff8c27a500 [ 1624.044485][T24773] RBP: ffffc9000e1b7ee0 R08: ffffffff8216193f R09: ffff888032d40f80 [ 1624.044497][T24773] R10: ffffc9000e1b7e20 R11: fffff52001c36fcc R12: 00007fa1f7776000 [ 1624.044508][T24773] R13: dffffc0000000000 R14: ffff888032d40c40 R15: dffffc0000000000 [ 1624.044526][T24773] ? __might_fault+0xaf/0x130 [ 1624.044554][T24773] lookup_ioctx+0x61/0x720 [ 1624.044575][T24773] __se_sys_io_submit+0xc0/0x340 [ 1624.044596][T24773] ? fput+0xa0/0xd0 [ 1624.044615][T24773] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1624.044634][T24773] ? ksys_write+0x242/0x270 [ 1624.044663][T24773] do_syscall_64+0x14d/0xf80 [ 1624.044684][T24773] ? trace_irq_disable+0x3b/0x150 [ 1624.044704][T24773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.044720][T24773] ? clear_bhb_loop+0x40/0x90 [ 1624.044740][T24773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.044756][T24773] RIP: 0033:0x7fa1f959c629 [ 1624.044771][T24773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.044784][T24773] RSP: 002b:00007fa1fa370028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1624.044800][T24773] RAX: ffffffffffffffda RBX: 00007fa1f9815fa0 RCX: 00007fa1f959c629 [ 1624.044811][T24773] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 00007fa1f7776000 [ 1624.044822][T24773] RBP: 00007fa1fa370090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.044832][T24773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.044848][T24773] R13: 00007fa1f9816038 R14: 00007fa1f9815fa0 R15: 00007fa1f993fa48 [ 1624.044876][T24773] [ 1624.814063][T24793] geneve2: entered promiscuous mode [ 1624.830109][T16518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.859407][T16518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.888097][T16518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.929759][T16518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.976138][T24805] blktrace: Concurrent blktraces are not allowed on nbd9 [ 1625.008976][T14875] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1625.080749][T24821] fuse: Bad value for 'fd' [ 1625.174420][T14875] usb 1-1: Using ep0 maxpacket: 32 [ 1625.189606][T14875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.208460][T14879] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1625.216130][T14875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.228880][T14875] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1625.239712][T14875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.257806][T14875] usb 1-1: config 0 descriptor?? [ 1625.277924][T24821] veth0: entered promiscuous mode [ 1625.378449][T14879] usb 3-1: Using ep0 maxpacket: 32 [ 1625.388258][T14879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1625.420438][T14879] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1625.438817][T14879] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1625.458198][T14879] usb 3-1: Product: syz [ 1625.467402][T14879] usb 3-1: Manufacturer: syz [ 1625.473300][T14875] usbhid 1-1:0.0: can't add hid device: -71 [ 1625.482526][T14875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1625.492516][T14879] usb 3-1: SerialNumber: syz [ 1625.509127][T14879] usb 3-1: config 0 descriptor?? [ 1625.517803][T14875] usb 1-1: USB disconnect, device number 88 [ 1625.548948][T24798] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1625.797230][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1625.880495][T24864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.908950][T24864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.946324][T24864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.991558][T24864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.010150][T24804] veth0: left promiscuous mode [ 1626.240696][T24884] FAULT_INJECTION: forcing a failure. [ 1626.240696][T24884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.275311][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.0.7075 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.275338][T24884] Tainted: [L]=SOFTLOCKUP [ 1626.275344][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.275354][T24884] Call Trace: [ 1626.275361][T24884] [ 1626.275368][T24884] dump_stack_lvl+0xe8/0x150 [ 1626.275392][T24884] should_fail_ex+0x412/0x560 [ 1626.275410][T24884] _copy_from_user+0x2d/0xb0 [ 1626.275426][T24884] ___sys_sendmsg+0x1c6/0x360 [ 1626.275458][T24884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.275488][T24884] ? lockdep_hardirqs_on+0x7a/0x110 [ 1626.275528][T24884] __sys_sendmmsg+0x27c/0x4e0 [ 1626.275547][T24884] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1626.275561][T24884] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1626.275594][T24884] ? ksys_write+0x242/0x270 [ 1626.275608][T24884] ? __pfx_ksys_write+0x10/0x10 [ 1626.275624][T24884] __x64_sys_sendmmsg+0xa0/0xc0 [ 1626.275645][T24884] do_syscall_64+0x14d/0xf80 [ 1626.275661][T24884] ? trace_irq_disable+0x3b/0x150 [ 1626.275677][T24884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.275689][T24884] ? clear_bhb_loop+0x40/0x90 [ 1626.275705][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.275717][T24884] RIP: 0033:0x7fa1f959c629 [ 1626.275731][T24884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.275742][T24884] RSP: 002b:00007fa1fa370028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1626.275756][T24884] RAX: ffffffffffffffda RBX: 00007fa1f9815fa0 RCX: 00007fa1f959c629 [ 1626.275764][T24884] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 1626.275772][T24884] RBP: 00007fa1fa370090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.275780][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1626.275787][T24884] R13: 00007fa1f9816038 R14: 00007fa1f9815fa0 R15: 00007fa1f993fa48 [ 1626.275807][T24884] [ 1627.002282][T24921] input: syz1 as /devices/virtual/input/input150 [ 1627.047082][T24923] netlink: 'syz.9.7081': attribute type 4 has an invalid length. [ 1627.268576][T14861] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1627.458236][T14861] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1627.467311][T14861] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1627.483936][T14861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1627.543689][T14861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1627.631592][T14861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1627.726261][T14861] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1627.739595][T14861] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1627.770568][T14861] usb 1-1: Product: syz [ 1627.839492][T14861] usb 1-1: Manufacturer: syz [ 1627.849519][T14861] cdc_wdm 1-1:1.0: skipping garbage [ 1627.854839][T14861] cdc_wdm 1-1:1.0: skipping garbage [ 1627.881695][T14861] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1627.887831][T14861] cdc_wdm 1-1:1.0: Unknown control protocol [ 1628.034527][T14862] usb 3-1: USB disconnect, device number 32 [ 1628.213457][T24974] blktrace: Concurrent blktraces are not allowed on nbd9 [ 1628.295734][T24976] fuse: Bad value for 'fd' [ 1628.416047][T24982] SET target dimension over the limit! [ 1628.427370][T24982] netdevsim netdevsim4: Direct firmware load for / [ 1628.427370][T24982] failed with error -2 [ 1628.445900][T24982] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1628.445900][T24982] [ 1629.307147][T25001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.319977][T25001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.331421][T24995] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1629.368922][T14862] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1629.383525][T25004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.403398][T25004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.491605][T25016] bond0: entered promiscuous mode [ 1629.496719][T25016] bond_slave_0: entered promiscuous mode [ 1629.502657][T25016] bond_slave_1: entered promiscuous mode [ 1629.508476][T14862] usb 3-1: device descriptor read/64, error -71 [ 1629.510315][T25016] gretap0: entered promiscuous mode [ 1629.521069][T25016] debugfs: 'hsr1' already exists in 'hsr' [ 1629.526794][T25016] Cannot create hsr debugfs directory [ 1629.548838][T25016] hsr1: entered promiscuous mode [ 1629.597312][T25021] netlink: 'syz.4.7092': attribute type 4 has an invalid length. [ 1629.614303][T25021] netlink: 'syz.4.7092': attribute type 4 has an invalid length. [ 1629.762380][T14862] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1629.811313][T25031] SET target dimension over the limit! [ 1629.852637][T25025] netdevsim netdevsim9: Direct firmware load for / [ 1629.852637][T25025] failed with error -2 [ 1629.864970][T25025] netdevsim netdevsim9: Falling back to sysfs fallback for: / [ 1629.864970][T25025] [ 1629.909092][T14862] usb 3-1: device descriptor read/64, error -71 [ 1630.005006][T14875] usb 1-1: USB disconnect, device number 89 [ 1630.019344][T14862] usb usb3-port1: attempt power cycle [ 1630.164941][T25054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7095'. [ 1630.398816][T14862] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1630.455193][T14862] usb 3-1: device descriptor read/8, error -71 [ 1630.751599][T14862] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1630.789350][T14862] usb 3-1: device descriptor read/8, error -71 [ 1630.908937][T14862] usb usb3-port1: unable to enumerate USB device [ 1631.202866][T25091] FAULT_INJECTION: forcing a failure. [ 1631.202866][T25091] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.220316][T25091] CPU: 0 UID: 0 PID: 25091 Comm: syz.0.7102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1631.220344][T25091] Tainted: [L]=SOFTLOCKUP [ 1631.220349][T25091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1631.220358][T25091] Call Trace: [ 1631.220366][T25091] [ 1631.220374][T25091] dump_stack_lvl+0xe8/0x150 [ 1631.220399][T25091] should_fail_ex+0x412/0x560 [ 1631.220421][T25091] should_failslab+0xa8/0x100 [ 1631.220438][T25091] ? skb_clone+0x212/0x3a0 [ 1631.220455][T25091] kmem_cache_alloc_noprof+0x87/0x650 [ 1631.220472][T25091] ? __netlink_lookup+0xc6/0x8b0 [ 1631.220492][T25091] skb_clone+0x212/0x3a0 [ 1631.220510][T25091] __netlink_deliver_tap+0x404/0x850 [ 1631.220531][T25091] ? netlink_deliver_tap+0x2e/0x1b0 [ 1631.220546][T25091] netlink_deliver_tap+0x19c/0x1b0 [ 1631.220560][T25091] netlink_unicast+0x7e3/0x9b0 [ 1631.220584][T25091] ? __pfx_netlink_unicast+0x10/0x10 [ 1631.220603][T25091] ? netlink_sendmsg+0x650/0xb40 [ 1631.220615][T25091] ? skb_put+0x11b/0x210 [ 1631.220632][T25091] netlink_sendmsg+0x813/0xb40 [ 1631.220652][T25091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.220668][T25091] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1631.220683][T25091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1631.220698][T25091] __sys_sendto+0x709/0x7a0 [ 1631.220716][T25091] ? __pfx___sys_sendto+0x10/0x10 [ 1631.220748][T25091] ? exc_page_fault+0x6a/0xc0 [ 1631.220767][T25091] ? do_user_addr_fault+0xc6f/0x1340 [ 1631.220787][T25091] __x64_sys_sendto+0xde/0x100 [ 1631.220804][T25091] do_syscall_64+0x14d/0xf80 [ 1631.220819][T25091] ? trace_irq_disable+0x3b/0x150 [ 1631.220835][T25091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.220848][T25091] ? clear_bhb_loop+0x40/0x90 [ 1631.220864][T25091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.220876][T25091] RIP: 0033:0x7fa1f955cece [ 1631.220889][T25091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1631.220900][T25091] RSP: 002b:00007fa1fa36ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1631.220916][T25091] RAX: ffffffffffffffda RBX: 00007fa1fa3706c0 RCX: 00007fa1f955cece [ 1631.220925][T25091] RDX: 0000000000000020 RSI: 00007fa1fa36f000 RDI: 0000000000000009 [ 1631.220933][T25091] RBP: 0000000000000000 R08: 00007fa1fa36ef04 R09: 000000000000000c [ 1631.220941][T25091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1631.220949][T25091] R13: 00007fa1fa36ef58 R14: 00007fa1fa36f000 R15: 0000000000000000 [ 1631.220970][T25091] [ 1631.898695][T14862] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1632.083739][T14862] usb 10-1: Using ep0 maxpacket: 8 [ 1632.093423][T14862] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1632.144917][T14862] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1632.189338][T14862] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1632.224615][T14862] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.242371][T25118] FAULT_INJECTION: forcing a failure. [ 1632.242371][T25118] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.282154][T14862] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1632.292067][T25118] CPU: 0 UID: 0 PID: 25118 Comm: syz.2.7108 Tainted: G L syzkaller #0 PREEMPT(full) [ 1632.292094][T25118] Tainted: [L]=SOFTLOCKUP [ 1632.292100][T25118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1632.292110][T25118] Call Trace: [ 1632.292118][T25118] [ 1632.292125][T25118] dump_stack_lvl+0xe8/0x150 [ 1632.292146][T25118] should_fail_ex+0x412/0x560 [ 1632.292160][T25118] should_failslab+0xa8/0x100 [ 1632.292172][T25118] __kmalloc_node_noprof+0xf0/0x7c0 [ 1632.292189][T25118] ? crypto_create_tfm_node+0x83/0x3f0 [ 1632.292207][T25118] crypto_create_tfm_node+0x83/0x3f0 [ 1632.292225][T25118] crypto_spawn_tfm2+0x5c/0x90 [ 1632.292244][T25118] crypto_authenc_init_tfm+0x47/0x1c0 [ 1632.292256][T25118] crypto_create_tfm_node+0x18c/0x3f0 [ 1632.292273][T25118] crypto_spawn_tfm2+0x5c/0x90 [ 1632.292285][T25118] aead_init_geniv+0x169/0x240 [ 1632.292301][T25118] crypto_create_tfm_node+0x18c/0x3f0 [ 1632.292318][T25118] crypto_alloc_tfm_node+0x172/0x3f0 [ 1632.292337][T25118] esp6_init_state+0x63c/0x1240 [ 1632.292352][T25118] ? ___sys_sendmsg+0x2a5/0x360 [ 1632.292370][T25118] ? __pfx_esp6_init_state+0x10/0x10 [ 1632.292398][T25118] ? __xfrm_init_state+0x842/0x1460 [ 1632.292410][T25118] __xfrm_init_state+0xac9/0x1460 [ 1632.292420][T25118] ? __xfrm_init_state+0x842/0x1460 [ 1632.292431][T25118] xfrm_init_state+0x18/0xa0 [ 1632.292446][T25118] pfkey_add+0x1d34/0x2df0 [ 1632.292465][T25118] ? __pfx_pfkey_add+0x10/0x10 [ 1632.292474][T25118] ? pfkey_broadcast+0x3c2/0x3e0 [ 1632.292489][T25118] pfkey_sendmsg+0xc56/0x1120 [ 1632.292506][T25118] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1632.292528][T25118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1632.292539][T25118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1632.292550][T25118] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1632.292558][T25118] ____sys_sendmsg+0xa68/0xad0 [ 1632.292576][T25118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1632.292596][T25118] ? import_iovec+0x73/0xa0 [ 1632.292611][T25118] ___sys_sendmsg+0x2a5/0x360 [ 1632.292627][T25118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1632.292656][T25118] ? __fget_files+0x2a/0x420 [ 1632.292669][T25118] ? __fget_files+0x3a0/0x420 [ 1632.292686][T25118] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1632.292700][T25118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1632.292717][T25118] ? __pfx_ksys_write+0x10/0x10 [ 1632.292732][T25118] do_syscall_64+0x14d/0xf80 [ 1632.292745][T25118] ? trace_irq_disable+0x3b/0x150 [ 1632.292758][T25118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.292768][T25118] ? clear_bhb_loop+0x40/0x90 [ 1632.292780][T25118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.292789][T25118] RIP: 0033:0x7f2b4319c629 [ 1632.292799][T25118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.292807][T25118] RSP: 002b:00007f2b43ffc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1632.292818][T25118] RAX: ffffffffffffffda RBX: 00007f2b43415fa0 RCX: 00007f2b4319c629 [ 1632.292827][T25118] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1632.292836][T25118] RBP: 00007f2b43ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.292844][T25118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1632.292854][T25118] R13: 00007f2b43416038 R14: 00007f2b43415fa0 R15: 00007f2b4353fa48 [ 1632.292880][T25118] [ 1632.663340][T14862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.950334][T14862] usb 10-1: GET_CAPABILITIES returned 0 [ 1632.955973][T14862] usbtmc 10-1:16.0: can't read capabilities [ 1633.007190][T25127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7109'. [ 1633.211329][T25138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7110'. [ 1633.232867][T14862] usb 10-1: USB disconnect, device number 124 [ 1633.258496][T14875] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1633.455313][T14875] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 1633.487938][T14875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.538640][T14875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1633.588947][T14875] usb 3-1: config 1 has no interface number 0 [ 1633.639090][T14875] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1634.029577][T14875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.048557][T14875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.066893][T14875] usb 3-1: Product: syz [ 1634.159044][T14875] usb 3-1: Manufacturer: syz [ 1634.164013][T14875] usb 3-1: SerialNumber: syz [ 1634.382377][T14875] cdc_wdm 3-1:1.128: skipping garbage [ 1634.387884][T14875] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1634.628503][T14861] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1634.818427][T14861] usb 1-1: Using ep0 maxpacket: 16 [ 1634.837572][T14861] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1634.871863][T14861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.920670][T14861] usb 1-1: Product: syz [ 1634.930676][T14861] usb 1-1: Manufacturer: syz [ 1634.948224][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.963231][T14861] usb 1-1: SerialNumber: syz [ 1634.995364][T14861] usb 1-1: config 0 descriptor?? [ 1635.035875][T14861] hub 1-1:0.0: bad descriptor, ignoring hub [ 1635.053861][T14861] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1635.056233][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.628823][T14861] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 1635.778410][T14861] usb 10-1: Using ep0 maxpacket: 32 [ 1635.785350][T14861] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 1635.794476][T14861] usb 10-1: config 0 has no interface number 0 [ 1635.801316][T14861] usb 10-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1635.814953][T14861] usb 10-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 1635.824542][T14861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.832798][T14861] usb 10-1: Product: syz [ 1635.837320][T14861] usb 10-1: Manufacturer: syz [ 1635.842729][T14861] usb 10-1: SerialNumber: syz [ 1635.851116][T14861] usb 10-1: config 0 descriptor?? [ 1636.122537][T14861] usb 10-1: USB disconnect, device number 125 [ 1636.133541][T25198] bond1: option resend_igmp: invalid value (18345) [ 1636.147722][T25198] bond1: option resend_igmp: allowed values 0 - 255 [ 1636.161209][T25198] bond1 (unregistering): Released all slaves [ 1636.790574][T14861] usb 3-1: USB disconnect, device number 37 [ 1637.182284][T14861] IPVS: starting estimator thread 0... [ 1637.278504][T25322] IPVS: using max 39 ests per chain, 93600 per kthread [ 1637.351008][T14879] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1637.545640][T14879] usb 3-1: Using ep0 maxpacket: 8 [ 1637.566390][T14879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1637.607916][T14879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1637.637644][T14879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1637.657398][T14879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1637.678464][T14875] usb 1-1: USB disconnect, device number 90 [ 1637.694962][T14879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1637.705406][T14879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.919192][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7129'. [ 1637.965387][T14879] usb 3-1: GET_CAPABILITIES returned 0 [ 1637.983432][T14879] usbtmc 3-1:16.0: can't read capabilities [ 1638.211809][T25360] process '/newroot/351/file0' started with executable stack [ 1638.294546][ T5833] usb 3-1: USB disconnect, device number 38 [ 1639.222221][T25415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1639.272070][T25415] pim6reg: entered allmulticast mode [ 1639.294483][T25415] fuse: Bad value for 'fd' [ 1639.312781][T25414] pim6reg: left allmulticast mode [ 1639.584784][T25433] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1639.998512][ T5833] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1640.028966][T14875] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1640.148479][ T5833] usb 10-1: Using ep0 maxpacket: 32 [ 1640.155298][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1640.164400][ T5833] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1640.173808][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.182133][ T5833] usb 10-1: Product: syz [ 1640.186387][ T5833] usb 10-1: Manufacturer: syz [ 1640.195342][ T1044] Bluetooth: hci5: command 0x0406 tx timeout [ 1640.204561][ T5833] usb 10-1: SerialNumber: syz [ 1640.210979][T14875] usb 3-1: Using ep0 maxpacket: 8 [ 1640.212091][ T5833] usb 10-1: config 0 descriptor?? [ 1640.220321][T14875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1640.237782][T14875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1640.248155][T14875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1640.258827][T14875] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1640.272444][T14875] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1640.282040][T14875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.502239][T14875] usb 3-1: GET_CAPABILITIES returned 0 [ 1640.507991][T14875] usbtmc 3-1:16.0: can't read capabilities [ 1640.629560][ T5833] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1640.776335][T14861] usb 3-1: USB disconnect, device number 39 [ 1641.032944][ T5833] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1641.041639][ T5833] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 1641.238290][T25440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.248047][T25440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.325798][T25482] netlink: 'syz.7.7149': attribute type 1 has an invalid length. [ 1641.335770][T25482] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7149'. [ 1641.628858][T14861] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1641.797871][T14861] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1641.807476][T14861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.819431][T14861] usb 3-1: Product: syz [ 1641.826281][T14861] usb 3-1: Manufacturer: syz [ 1641.831765][T14861] usb 3-1: SerialNumber: syz [ 1642.279218][T14861] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1642.308535][T14861] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1642.671355][T25511] netlink: 'syz.7.7151': attribute type 4 has an invalid length. [ 1643.596305][ T5833] usb 10-1: USB disconnect, device number 126 [ 1643.718639][T14862] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1643.734162][T25486] binder: 25483:25486 ioctl c018620c 2000000002c0 returned -22 [ 1643.839378][T25568] binder_alloc: 25567: binder_alloc_buf, no vma [ 1643.879463][T14862] usb 1-1: Using ep0 maxpacket: 8 [ 1643.903085][T14862] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1643.916409][T14862] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1643.924984][T14862] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1643.934750][T14862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.956072][T14862] usb 1-1: config 0 descriptor?? [ 1644.081939][T25581] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1644.301508][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7159'. [ 1644.335155][T25593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.346342][T25593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.564474][T25593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.585849][T25593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.697732][T25610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.742902][T14862] usbhid 1-1:0.0: can't add hid device: -71 [ 1644.750935][T25611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1644.757468][T25611] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1644.762435][T14862] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1644.813554][T14862] usb 1-1: USB disconnect, device number 91 [ 1644.855109][T25611] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1644.862463][T25611] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1645.029041][T25593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.068305][T25593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.220742][T14861] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1645.249942][T14861] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1645.262746][T14861] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1645.275342][T14861] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1645.419357][T14861] usb 3-1: USB disconnect, device number 40 [ 1645.738099][T25708] netlink: 'syz.9.7179': attribute type 1 has an invalid length. [ 1645.806684][T25708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1645.876996][T25743] bond5: (slave erspan0): making interface the new active one [ 1645.902278][T25743] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 1646.312686][T25762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1646.319294][T25762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1646.346440][T25762] vhci_hcd vhci_hcd.0: Device attached [ 1646.578477][T14861] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1646.628750][T14862] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1646.646860][T25787] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1646.646860][T25787] The task syz.9.7192 (25787) triggered the difference, watch for misbehavior. [ 1646.820711][T14862] usb 1-1: config 0 has no interfaces? [ 1646.826314][T14862] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1646.832405][T25806] tipc: Started in network mode [ 1646.836939][T14862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.846530][T25806] tipc: Node identity f23d060b62ef, cluster identity 4711 [ 1646.863691][T25806] tipc: Enabled bearer , priority 0 [ 1646.869399][T14862] usb 1-1: config 0 descriptor?? [ 1646.885304][T25806] syzkaller0: entered promiscuous mode [ 1646.900631][T25806] syzkaller0: entered allmulticast mode [ 1646.913249][T25806] tipc: Resetting bearer [ 1646.921773][T25805] tipc: Resetting bearer [ 1646.949004][T25805] tipc: Disabling bearer [ 1646.968539][T14879] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1647.085449][T25763] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1647.097956][ T5908] usb 1-1: USB disconnect, device number 92 [ 1647.111857][T16518] vhci_hcd vhci_hcd.0: stop threads [ 1647.120637][T16518] vhci_hcd vhci_hcd.0: release socket [ 1647.126166][T16518] vhci_hcd vhci_hcd.0: disconnect device [ 1647.158476][T14879] usb 3-1: Using ep0 maxpacket: 16 [ 1647.166449][T14879] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1647.179325][T14879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.192643][T25832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7202'. [ 1647.203115][T14879] usb 3-1: config 0 has no interface number 0 [ 1647.230454][T14879] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1647.242184][T14879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.261612][T14879] usb 3-1: Product: syz [ 1647.272130][T14879] usb 3-1: Manufacturer: syz [ 1647.277463][T14879] usb 3-1: SerialNumber: syz [ 1647.289664][T14879] usb 3-1: config 0 descriptor?? [ 1647.315355][T14879] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 1647.319186][T25839] Attempt to restore checkpoint with obsolete wellknown handles [ 1647.323220][T14879] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1647.337399][T14879] uvcvideo 3-1:0.105: No valid video chain found. [ 1647.511345][T14862] usb 3-1: USB disconnect, device number 41 [ 1647.662906][T25864] syzkaller0: entered promiscuous mode [ 1647.669017][T25864] syzkaller0: entered allmulticast mode [ 1647.958200][T25876] kvm: kvm [25874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x110 [ 1648.005644][T25876] kvm: kvm [25874]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1648.103667][T25891] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1648.293793][T25898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.352756][T25898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.719441][ T5833] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1648.842009][T25926] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7229'. [ 1648.891279][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.922461][T25929] netlink: 'syz.9.7231': attribute type 27 has an invalid length. [ 1648.938761][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.952245][ T5833] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 1648.962571][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.985790][ T5833] usb 1-1: config 0 descriptor?? [ 1649.028047][T25929] bridge0: port 3(hsr0) entered disabled state [ 1649.034497][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.042243][T25929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.069470][T25929] dummy0: left allmulticast mode [ 1649.144858][T25929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.179229][T25929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.247804][T25929] macvlan0: left promiscuous mode [ 1649.316328][T25929] vlan2: left promiscuous mode [ 1649.347663][T25929] vlan3: left allmulticast mode [ 1649.352873][T25929] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1649.365594][T25929] geneve2: left promiscuous mode [ 1649.370922][T25929] geneve2: left allmulticast mode [ 1649.411418][T25929] bond4: left promiscuous mode [ 1649.416243][T25929] bond4: left allmulticast mode [ 1649.427818][T25929] hsr1: left promiscuous mode [ 1649.431981][ T5833] corsair-cpro 0003:1B1C:1D00.0058: unknown main item tag 0x0 [ 1649.475994][ T13] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.488509][ T5833] corsair-cpro 0003:1B1C:1D00.0058: unknown main item tag 0x0 [ 1649.498905][ T5833] corsair-cpro 0003:1B1C:1D00.0058: unknown main item tag 0x0 [ 1649.506417][ T5833] corsair-cpro 0003:1B1C:1D00.0058: unknown main item tag 0x0 [ 1649.535031][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.563768][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1649.572890][ T5833] corsair-cpro 0003:1B1C:1D00.0058: unknown main item tag 0x0 [ 1649.600762][ T13] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.616358][ T5833] corsair-cpro 0003:1B1C:1D00.0058: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0 [ 1649.638402][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.698474][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1649.752123][ T5833] corsair-cpro 0003:1B1C:1D00.0058: probe with driver corsair-cpro failed with error -38 [ 1649.813684][ T13] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.827114][ T5833] usb 1-1: USB disconnect, device number 93 [ 1649.857633][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.903813][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1649.942764][ T13] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.966193][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.976068][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1649.995194][T25976] netlink: 'syz.4.7240': attribute type 1 has an invalid length. [ 1650.005627][T25976] netlink: 'syz.4.7240': attribute type 2 has an invalid length. [ 1650.315772][T26000] syzkaller0: left promiscuous mode [ 1650.322984][T26000] syzkaller0: left allmulticast mode [ 1650.970770][T26030] [ 1650.973185][T26030] ===================================================== [ 1650.980113][T26030] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1650.987558][T26030] syzkaller #0 Tainted: G L [ 1650.993514][T26030] ----------------------------------------------------- [ 1651.000517][T26030] syz.9.7258/26030 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1651.008235][T26030] ffff888036bb2168 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1651.016944][T26030] [ 1651.016944][T26030] and this task is already holding: [ 1651.024307][T26030] ffff88805dd37468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1651.032854][T26030] which would create a new lock dependency: [ 1651.038748][T26030] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1651.046435][T26030] [ 1651.046435][T26030] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1651.055894][T26030] (kbd_event_lock){..-.}-{3:3} [ 1651.055929][T26030] [ 1651.055929][T26030] ... which became SOFTIRQ-irq-safe at: [ 1651.068478][T26030] lock_acquire+0xf0/0x2e0 [ 1651.072995][T26030] _raw_spin_lock+0x2e/0x40 [ 1651.077591][T26030] kbd_event+0xd6/0x40d0 [ 1651.081924][T26030] input_handle_events_default+0xd4/0x1a0 [ 1651.087736][T26030] input_pass_values+0x288/0x890 [ 1651.092765][T26030] input_event_dispose+0x3e5/0x6b0 [ 1651.097981][T26030] input_event+0x89/0xe0 [ 1651.102324][T26030] hidinput_hid_event+0x142d/0x1e60 [ 1651.107617][T26030] hid_process_event+0x4be/0x620 [ 1651.112642][T26030] hid_report_raw_event+0xe8f/0x1720 [ 1651.118025][T26030] hid_input_report+0x44b/0x580 [ 1651.123054][T26030] hid_irq_in+0x47e/0x6d0 [ 1651.127480][T26030] __usb_hcd_giveback_urb+0x376/0x540 [ 1651.132945][T26030] dummy_timer+0xbbd/0x45d0 [ 1651.137547][T26030] __hrtimer_run_queues+0x53a/0xcc0 [ 1651.142860][T26030] hrtimer_run_softirq+0x182/0x5a0 [ 1651.148077][T26030] handle_softirqs+0x22a/0x870 [ 1651.152918][T26030] __irq_exit_rcu+0x5f/0x150 [ 1651.157582][T26030] irq_exit_rcu+0x9/0x30 [ 1651.161907][T26030] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1651.167703][T26030] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1651.173750][T26030] pv_native_safe_halt+0xf/0x20 [ 1651.178671][T26030] default_idle+0x9/0x20 [ 1651.182982][T26030] default_idle_call+0x72/0xb0 [ 1651.187920][T26030] do_idle+0x1bd/0x500 [ 1651.192059][T26030] cpu_startup_entry+0x43/0x60 [ 1651.196903][T26030] start_secondary+0x101/0x110 [ 1651.201755][T26030] common_startup_64+0x13e/0x147 [ 1651.206765][T26030] [ 1651.206765][T26030] to a SOFTIRQ-irq-unsafe lock: [ 1651.213777][T26030] (tasklist_lock){.+.+}-{3:3} [ 1651.213797][T26030] [ 1651.213797][T26030] ... which became SOFTIRQ-irq-unsafe at: [ 1651.226394][T26030] ... [ 1651.226405][T26030] lock_acquire+0xf0/0x2e0 [ 1651.233475][T26030] _raw_read_lock+0x36/0x50 [ 1651.238054][T26030] __do_wait+0xde/0x740 [ 1651.242272][T26030] do_wait+0x1e7/0x540 [ 1651.246404][T26030] kernel_wait+0xd6/0x1c0 [ 1651.250818][T26030] call_usermodehelper_exec_work+0xbe/0x230 [ 1651.256804][T26030] process_scheduled_works+0xb02/0x1830 [ 1651.262602][T26030] worker_thread+0xa50/0xfc0 [ 1651.267267][T26030] kthread+0x388/0x470 [ 1651.271402][T26030] ret_from_fork+0x51e/0xb90 [ 1651.276056][T26030] ret_from_fork_asm+0x1a/0x30 [ 1651.280888][T26030] [ 1651.280888][T26030] other info that might help us debug this: [ 1651.280888][T26030] [ 1651.291094][T26030] Chain exists of: [ 1651.291094][T26030] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1651.291094][T26030] [ 1651.303847][T26030] Possible interrupt unsafe locking scenario: [ 1651.303847][T26030] [ 1651.312161][T26030] CPU0 CPU1 [ 1651.317513][T26030] ---- ---- [ 1651.322862][T26030] lock(tasklist_lock); [ 1651.327094][T26030] local_irq_disable(); [ 1651.333850][T26030] lock(kbd_event_lock); [ 1651.340694][T26030] lock(&tty->flow.lock); [ 1651.347622][T26030] [ 1651.351075][T26030] lock(kbd_event_lock); [ 1651.355563][T26030] [ 1651.355563][T26030] *** DEADLOCK *** [ 1651.355563][T26030] [ 1651.363694][T26030] 6 locks held by syz.9.7258/26030: [ 1651.368873][T26030] #0: ffff88805dd370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1651.378632][T26030] #1: ffff88805dd372e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x147/0x1800 [ 1651.388882][T26030] #2: ffff88805dd370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1651.398174][T26030] #3: ffff88805dd37468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1651.407111][T26030] #4: ffff88805dd370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1651.416394][T26030] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1651.425502][T26030] [ 1651.425502][T26030] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1651.435882][T26030] -> (kbd_event_lock){..-.}-{3:3} { [ 1651.441153][T26030] IN-SOFTIRQ-W at: [ 1651.445195][T26030] lock_acquire+0xf0/0x2e0 [ 1651.451414][T26030] _raw_spin_lock+0x2e/0x40 [ 1651.457732][T26030] kbd_event+0xd6/0x40d0 [ 1651.463788][T26030] input_handle_events_default+0xd4/0x1a0 [ 1651.471317][T26030] input_pass_values+0x288/0x890 [ 1651.478059][T26030] input_event_dispose+0x3e5/0x6b0 [ 1651.485146][T26030] input_event+0x89/0xe0 [ 1651.491195][T26030] hidinput_hid_event+0x142d/0x1e60 [ 1651.498194][T26030] hid_process_event+0x4be/0x620 [ 1651.504932][T26030] hid_report_raw_event+0xe8f/0x1720 [ 1651.512015][T26030] hid_input_report+0x44b/0x580 [ 1651.518665][T26030] hid_irq_in+0x47e/0x6d0 [ 1651.524798][T26030] __usb_hcd_giveback_urb+0x376/0x540 [ 1651.531967][T26030] dummy_timer+0xbbd/0x45d0 [ 1651.538269][T26030] __hrtimer_run_queues+0x53a/0xcc0 [ 1651.545269][T26030] hrtimer_run_softirq+0x182/0x5a0 [ 1651.552181][T26030] handle_softirqs+0x22a/0x870 [ 1651.558745][T26030] __irq_exit_rcu+0x5f/0x150 [ 1651.565137][T26030] irq_exit_rcu+0x9/0x30 [ 1651.571180][T26030] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1651.578616][T26030] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1651.586396][T26030] pv_native_safe_halt+0xf/0x20 [ 1651.593082][T26030] default_idle+0x9/0x20 [ 1651.599123][T26030] default_idle_call+0x72/0xb0 [ 1651.605944][T26030] do_idle+0x1bd/0x500 [ 1651.611816][T26030] cpu_startup_entry+0x43/0x60 [ 1651.618389][T26030] start_secondary+0x101/0x110 [ 1651.624953][T26030] common_startup_64+0x13e/0x147 [ 1651.631691][T26030] INITIAL USE at: [ 1651.635648][T26030] lock_acquire+0xf0/0x2e0 [ 1651.641800][T26030] _raw_spin_lock_irqsave+0x40/0x60 [ 1651.648718][T26030] vt_reset_unicode+0x2b/0x1a0 [ 1651.655282][T26030] reset_vc+0x68/0x1b0 [ 1651.661059][T26030] vc_init+0x70/0x4a0 [ 1651.666846][T26030] con_init+0x377/0x6a0 [ 1651.672729][T26030] console_init+0x10b/0x4d0 [ 1651.678950][T26030] start_kernel+0x22b/0x3d0 [ 1651.685166][T26030] x86_64_start_reservations+0x24/0x30 [ 1651.692337][T26030] x86_64_start_kernel+0x143/0x1c0 [ 1651.699166][T26030] common_startup_64+0x13e/0x147 [ 1651.705816][T26030] } [ 1651.708380][T26030] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1651.716351][T26030] -> (&tty->flow.lock){....}-{3:3} { [ 1651.721627][T26030] INITIAL USE at: [ 1651.725581][T26030] lock_acquire+0xf0/0x2e0 [ 1651.731536][T26030] _raw_spin_lock_irqsave+0x40/0x60 [ 1651.738270][T26030] start_tty+0x20/0x70 [ 1651.743874][T26030] n_tty_set_termios+0xa7c/0x10c0 [ 1651.750439][T26030] tty_set_termios+0xdb3/0x1800 [ 1651.756829][T26030] set_termios+0x566/0x710 [ 1651.762782][T26030] tty_mode_ioctl+0x4a6/0x7d0 [ 1651.768997][T26030] tty_ioctl+0x9c5/0xde0 [ 1651.774779][T26030] __se_sys_ioctl+0xfc/0x170 [ 1651.780912][T26030] do_syscall_64+0x14d/0xf80 [ 1651.787043][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.794560][T26030] } [ 1651.797033][T26030] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1651.805710][T26030] ... acquired at: [ 1651.809490][T26030] _raw_spin_lock_irqsave+0x40/0x60 [ 1651.814840][T26030] stop_tty+0x2f/0x150 [ 1651.819054][T26030] kbd_event+0x2ec1/0x40d0 [ 1651.823621][T26030] input_handle_events_default+0xd4/0x1a0 [ 1651.829492][T26030] input_pass_values+0x288/0x890 [ 1651.834621][T26030] input_event_dispose+0x330/0x6b0 [ 1651.839894][T26030] input_inject_event+0x1dd/0x340 [ 1651.845075][T26030] evdev_write+0x325/0x4c0 [ 1651.849637][T26030] vfs_write+0x29a/0xb90 [ 1651.854039][T26030] ksys_write+0x150/0x270 [ 1651.858512][T26030] do_syscall_64+0x14d/0xf80 [ 1651.863266][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.869304][T26030] [ 1651.871604][T26030] [ 1651.871604][T26030] the dependencies between the lock to be acquired [ 1651.871615][T26030] and SOFTIRQ-irq-unsafe lock: [ 1651.885128][T26030] -> (tasklist_lock){.+.+}-{3:3} { [ 1651.890406][T26030] HARDIRQ-ON-R at: [ 1651.894533][T26030] lock_acquire+0xf0/0x2e0 [ 1651.900927][T26030] _raw_read_lock+0x36/0x50 [ 1651.907404][T26030] __do_wait+0xde/0x740 [ 1651.913533][T26030] do_wait+0x1e7/0x540 [ 1651.919583][T26030] kernel_wait+0xd6/0x1c0 [ 1651.925885][T26030] call_usermodehelper_exec_work+0xbe/0x230 [ 1651.933759][T26030] process_scheduled_works+0xb02/0x1830 [ 1651.941304][T26030] worker_thread+0xa50/0xfc0 [ 1651.947890][T26030] kthread+0x388/0x470 [ 1651.954029][T26030] ret_from_fork+0x51e/0xb90 [ 1651.960607][T26030] ret_from_fork_asm+0x1a/0x30 [ 1651.967366][T26030] SOFTIRQ-ON-R at: [ 1651.971498][T26030] lock_acquire+0xf0/0x2e0 [ 1651.977895][T26030] _raw_read_lock+0x36/0x50 [ 1651.984383][T26030] __do_wait+0xde/0x740 [ 1651.990515][T26030] do_wait+0x1e7/0x540 [ 1651.996644][T26030] kernel_wait+0xd6/0x1c0 [ 1652.002947][T26030] call_usermodehelper_exec_work+0xbe/0x230 [ 1652.010817][T26030] process_scheduled_works+0xb02/0x1830 [ 1652.018348][T26030] worker_thread+0xa50/0xfc0 [ 1652.024932][T26030] kthread+0x388/0x470 [ 1652.030976][T26030] ret_from_fork+0x51e/0xb90 [ 1652.037542][T26030] ret_from_fork_asm+0x1a/0x30 [ 1652.044307][T26030] INITIAL USE at: [ 1652.048442][T26030] lock_acquire+0xf0/0x2e0 [ 1652.054748][T26030] _raw_write_lock_irq+0x3d/0x50 [ 1652.061575][T26030] copy_process+0x247a/0x3cf0 [ 1652.068141][T26030] kernel_clone+0x248/0x8e0 [ 1652.074538][T26030] user_mode_thread+0x110/0x180 [ 1652.081285][T26030] rest_init+0x23/0x300 [ 1652.087355][T26030] start_kernel+0x385/0x3d0 [ 1652.093770][T26030] x86_64_start_reservations+0x24/0x30 [ 1652.101120][T26030] x86_64_start_kernel+0x143/0x1c0 [ 1652.108156][T26030] common_startup_64+0x13e/0x147 [ 1652.114991][T26030] INITIAL READ USE at: [ 1652.119470][T26030] lock_acquire+0xf0/0x2e0 [ 1652.126210][T26030] _raw_read_lock+0x36/0x50 [ 1652.133056][T26030] __do_wait+0xde/0x740 [ 1652.139533][T26030] do_wait+0x1e7/0x540 [ 1652.145944][T26030] kernel_wait+0xd6/0x1c0 [ 1652.152611][T26030] call_usermodehelper_exec_work+0xbe/0x230 [ 1652.160844][T26030] process_scheduled_works+0xb02/0x1830 [ 1652.168715][T26030] worker_thread+0xa50/0xfc0 [ 1652.175631][T26030] kthread+0x388/0x470 [ 1652.182034][T26030] ret_from_fork+0x51e/0xb90 [ 1652.188965][T26030] ret_from_fork_asm+0x1a/0x30 [ 1652.196061][T26030] } [ 1652.198715][T26030] ... key at: [] tasklist_lock+0x18/0x40 [ 1652.206666][T26030] ... acquired at: [ 1652.210618][T26030] _raw_read_lock+0x36/0x50 [ 1652.215282][T26030] send_sigurg+0x12b/0x420 [ 1652.219855][T26030] sk_send_sigurg+0x6c/0x2e0 [ 1652.224595][T26030] queue_oob+0x42c/0x4f0 [ 1652.228987][T26030] unix_stream_sendmsg+0xcb1/0xe80 [ 1652.234244][T26030] ____sys_sendmsg+0xa68/0xad0 [ 1652.239158][T26030] ___sys_sendmsg+0x2a5/0x360 [ 1652.243985][T26030] __sys_sendmmsg+0x27c/0x4e0 [ 1652.248812][T26030] __x64_sys_sendmmsg+0xa0/0xc0 [ 1652.253822][T26030] do_syscall_64+0x14d/0xf80 [ 1652.258593][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.264635][T26030] [ 1652.266953][T26030] -> (&f_owner->lock){....}-{3:3} { [ 1652.272225][T26030] INITIAL USE at: [ 1652.276182][T26030] lock_acquire+0xf0/0x2e0 [ 1652.282316][T26030] _raw_write_lock_irq+0x3d/0x50 [ 1652.288976][T26030] __f_setown+0x67/0x370 [ 1652.294939][T26030] f_setown+0x23a/0x300 [ 1652.300810][T26030] do_fcntl+0x6cd/0x1a20 [ 1652.307025][T26030] __se_sys_fcntl+0xc8/0x150 [ 1652.313337][T26030] do_syscall_64+0x14d/0xf80 [ 1652.319655][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.327271][T26030] INITIAL READ USE at: [ 1652.331669][T26030] lock_acquire+0xf0/0x2e0 [ 1652.338268][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.345637][T26030] send_sigio+0x38/0x370 [ 1652.352047][T26030] kill_fasync+0x24d/0x4d0 [ 1652.358619][T26030] sock_wake_async+0x137/0x160 [ 1652.365624][T26030] sk_wake_async+0x184/0x280 [ 1652.372370][T26030] unix_release_sock+0x74f/0xc80 [ 1652.379550][T26030] unix_release+0x92/0xd0 [ 1652.386285][T26030] sock_close+0xc3/0x240 [ 1652.392682][T26030] __fput+0x44f/0xa70 [ 1652.398825][T26030] task_work_run+0x1d9/0x270 [ 1652.405600][T26030] get_signal+0x11eb/0x1330 [ 1652.412249][T26030] arch_do_signal_or_restart+0xbc/0x830 [ 1652.419943][T26030] exit_to_user_mode_loop+0x86/0x480 [ 1652.427374][T26030] do_syscall_64+0x32d/0xf80 [ 1652.434109][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.442147][T26030] } [ 1652.444721][T26030] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1652.453654][T26030] ... acquired at: [ 1652.457528][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.462880][T26030] send_sigio+0x38/0x370 [ 1652.467288][T26030] kill_fasync+0x24d/0x4d0 [ 1652.471849][T26030] sock_wake_async+0x137/0x160 [ 1652.476764][T26030] sk_wake_async+0x184/0x280 [ 1652.481506][T26030] unix_release_sock+0x74f/0xc80 [ 1652.486590][T26030] unix_release+0x92/0xd0 [ 1652.491067][T26030] sock_close+0xc3/0x240 [ 1652.495467][T26030] __fput+0x44f/0xa70 [ 1652.499600][T26030] task_work_run+0x1d9/0x270 [ 1652.504339][T26030] get_signal+0x11eb/0x1330 [ 1652.508995][T26030] arch_do_signal_or_restart+0xbc/0x830 [ 1652.514692][T26030] exit_to_user_mode_loop+0x86/0x480 [ 1652.520126][T26030] do_syscall_64+0x32d/0xf80 [ 1652.524869][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.530911][T26030] [ 1652.533214][T26030] -> (&new->fa_lock){...-}-{3:3} { [ 1652.538322][T26030] IN-SOFTIRQ-R at: [ 1652.542288][T26030] lock_acquire+0xf0/0x2e0 [ 1652.548335][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.555171][T26030] kill_fasync+0x199/0x4d0 [ 1652.561209][T26030] sock_wake_async+0x137/0x160 [ 1652.567600][T26030] sock_def_readable+0x3c1/0x580 [ 1652.574165][T26030] tcp_data_queue+0x1e2e/0x5e50 [ 1652.580651][T26030] tcp_rcv_established+0xf45/0x2740 [ 1652.587479][T26030] tcp_v4_do_rcv+0xa90/0x1430 [ 1652.593794][T26030] tcp_v4_rcv+0x2825/0x31f0 [ 1652.599925][T26030] ip_protocol_deliver_rcu+0x221/0x440 [ 1652.607014][T26030] ip_local_deliver_finish+0x3bb/0x6f0 [ 1652.614096][T26030] NF_HOOK+0x336/0x3c0 [ 1652.619791][T26030] NF_HOOK+0x336/0x3c0 [ 1652.625481][T26030] process_backlog+0xaa3/0x1950 [ 1652.631959][T26030] __napi_poll+0xae/0x340 [ 1652.637913][T26030] net_rx_action+0x627/0xf70 [ 1652.644133][T26030] handle_softirqs+0x22a/0x870 [ 1652.650524][T26030] do_softirq+0x76/0xd0 [ 1652.656310][T26030] __local_bh_enable_ip+0xf8/0x130 [ 1652.663046][T26030] sk_stream_wait_memory+0x72b/0xf80 [ 1652.669960][T26030] tcp_sendmsg_locked+0x23ba/0x5490 [ 1652.676787][T26030] tcp_sendmsg+0x2f/0x50 [ 1652.682661][T26030] __sys_sendto+0x627/0x7a0 [ 1652.688797][T26030] __x64_sys_sendto+0xde/0x100 [ 1652.695188][T26030] do_syscall_64+0x14d/0xf80 [ 1652.701424][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.708960][T26030] INITIAL USE at: [ 1652.712841][T26030] lock_acquire+0xf0/0x2e0 [ 1652.718809][T26030] _raw_write_lock_irq+0x3d/0x50 [ 1652.725305][T26030] fasync_remove_entry+0xf1/0x1c0 [ 1652.731874][T26030] sock_fasync+0x85/0xf0 [ 1652.737661][T26030] __fput+0x8a5/0xa70 [ 1652.743191][T26030] task_work_run+0x1d9/0x270 [ 1652.749323][T26030] exit_to_user_mode_loop+0xed/0x480 [ 1652.756150][T26030] do_syscall_64+0x32d/0xf80 [ 1652.762283][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.769717][T26030] INITIAL READ USE at: [ 1652.774021][T26030] lock_acquire+0xf0/0x2e0 [ 1652.780499][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.787676][T26030] kill_fasync+0x199/0x4d0 [ 1652.794062][T26030] sock_wake_async+0x137/0x160 [ 1652.800802][T26030] sk_wake_async+0x189/0x280 [ 1652.807377][T26030] tcp_rcv_state_process+0x1e6a/0x4810 [ 1652.814813][T26030] tcp_v4_do_rcv+0x6bb/0x1430 [ 1652.821463][T26030] __release_sock+0x265/0x3a0 [ 1652.828116][T26030] release_sock+0x5f/0x1f0 [ 1652.834506][T26030] __inet_stream_connect+0x85d/0xdd0 [ 1652.841772][T26030] inet_stream_connect+0x66/0xa0 [ 1652.848693][T26030] __sys_connect+0x312/0x450 [ 1652.855256][T26030] __x64_sys_connect+0x7a/0x90 [ 1652.861991][T26030] do_syscall_64+0x14d/0xf80 [ 1652.868558][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.876420][T26030] } [ 1652.878892][T26030] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1652.887542][T26030] ... acquired at: [ 1652.891324][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.896674][T26030] kill_fasync+0x199/0x4d0 [ 1652.901236][T26030] __start_tty+0x18c/0x220 [ 1652.905831][T26030] start_tty+0x2b/0x70 [ 1652.910050][T26030] n_tty_set_termios+0xa7c/0x10c0 [ 1652.915223][T26030] tty_set_termios+0xdb3/0x1800 [ 1652.920221][T26030] set_termios+0x566/0x710 [ 1652.924784][T26030] tty_mode_ioctl+0x4a6/0x7d0 [ 1652.929609][T26030] tty_ioctl+0x9c5/0xde0 [ 1652.933999][T26030] __se_sys_ioctl+0xfc/0x170 [ 1652.938733][T26030] do_syscall_64+0x14d/0xf80 [ 1652.943484][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.949526][T26030] [ 1652.951833][T26030] [ 1652.951833][T26030] stack backtrace: [ 1652.957701][T26030] CPU: 1 UID: 0 PID: 26030 Comm: syz.9.7258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1652.957715][T26030] Tainted: [L]=SOFTLOCKUP [ 1652.957718][T26030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1652.957725][T26030] Call Trace: [ 1652.957730][T26030] [ 1652.957736][T26030] dump_stack_lvl+0xe8/0x150 [ 1652.957750][T26030] __lock_acquire+0x2a94/0x2cf0 [ 1652.957768][T26030] lock_acquire+0xf0/0x2e0 [ 1652.957778][T26030] ? kill_fasync+0x199/0x4d0 [ 1652.957788][T26030] _raw_read_lock_irqsave+0x48/0x60 [ 1652.957806][T26030] ? kill_fasync+0x199/0x4d0 [ 1652.957813][T26030] kill_fasync+0x199/0x4d0 [ 1652.957821][T26030] ? kill_fasync+0x53/0x4d0 [ 1652.957829][T26030] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1652.957842][T26030] __start_tty+0x18c/0x220 [ 1652.957853][T26030] start_tty+0x2b/0x70 [ 1652.957862][T26030] n_tty_set_termios+0xa7c/0x10c0 [ 1652.957877][T26030] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1652.957889][T26030] tty_set_termios+0xdb3/0x1800 [ 1652.957899][T26030] ? __pfx_tty_set_termios+0x10/0x10 [ 1652.957910][T26030] set_termios+0x566/0x710 [ 1652.957920][T26030] ? __pfx_set_termios+0x10/0x10 [ 1652.957932][T26030] tty_mode_ioctl+0x4a6/0x7d0 [ 1652.957942][T26030] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1652.957950][T26030] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1652.957967][T26030] ? n_tty_ioctl_helper+0x84/0x4d0 [ 1652.957976][T26030] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1652.957989][T26030] tty_ioctl+0x9c5/0xde0 [ 1652.957999][T26030] ? __pfx_tty_ioctl+0x10/0x10 [ 1652.958009][T26030] __se_sys_ioctl+0xfc/0x170 [ 1652.958018][T26030] do_syscall_64+0x14d/0xf80 [ 1652.958032][T26030] ? trace_irq_disable+0x3b/0x150 [ 1652.958045][T26030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.958054][T26030] ? clear_bhb_loop+0x40/0x90 [ 1652.958065][T26030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.958074][T26030] RIP: 0033:0x7f50a619c629 [ 1652.958085][T26030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.958093][T26030] RSP: 002b:00007f50a701a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.958104][T26030] RAX: ffffffffffffffda RBX: 00007f50a6416090 RCX: 00007f50a619c629 [ 1652.958111][T26030] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000006 [ 1652.958117][T26030] RBP: 00007f50a6232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1652.958124][T26030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1652.958129][T26030] R13: 00007f50a6416128 R14: 00007f50a6416090 R15: 00007f50a653fa48 [ 1652.958139][T26030] [ 1653.334187][T14861] vhci_hcd vhci_hcd.0: vhci_device speed not set