last executing test programs: 12m32.523246481s ago: executing program 0 (id=1767): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/87, 0x57) 12m31.600446182s ago: executing program 0 (id=1769): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000498000/0x2000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000e51000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd001, 0x2, 0xc1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 12m31.501947993s ago: executing program 0 (id=1770): syz_emit_ethernet(0x109, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x8, 0xfb, 0x69, 0x0, 0xf, 0x1, 0x0, @local, @private=0xa010100}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x7, "3fed6c29471c8cd9cea9b8f409676e849b62a4a3197af52a8a59abf8311b69ed2dc780f585f690a7c5f41cd980ab28221f8bf851ac9ab99132c2e86c75f2a87f3827f271ae3e00674e5146778b79ac2ac384079085f68a3da6aac21a1eb051c6c9e70af64e781de785b901d00304a32cf473ed3f2619a61dd8572cf51adc777a965d898c4dd439cce2011b11fa267f519a0d1132c5bdc2dc51246b212eb3360c83a692b17f3a166ec43c06c51c2faebd134aa265afefb85e8aa5a1fd307dc048c6a3d688e304b78f28141996bae5e0fe5d8ec8069906bb71d076d4935dfa2e"}}}}}, 0x0) 12m31.350025968s ago: executing program 0 (id=1771): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0405627, &(0x7f0000000000)={0x3, 0x9a090b, 0x1}) 12m31.257250176s ago: executing program 0 (id=1772): syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x82840) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x169a82, 0x10) sendfile(r5, r5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) close_range(r1, r0, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) syz_open_dev$evdev(0x0, 0x2, 0xe000) setrlimit(0x8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20001, 0x80002) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000480)={{0x4, 0x2, 0x2, 0x3, 'syz0\x00', 0x8706}, 0x4, 0x10000000, 0x42a, 0x0, 0x8, 0x5, 'syz1\x00', &(0x7f0000000100)=['vfat\x00', 's\xc2\x92\xe8Z', '}/^\\+*@@\x00', '@\x00', '\x00', 'q\x00', '{\x00', '\x00'], 0x1b}) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0xfffffffffffffffc, 0x20040804) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x100}, {0x0, 0x100000001}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x0, 0x1, 0x3, 0x4}}, 0xe8) 12m29.356888596s ago: executing program 0 (id=1788): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="0881", 0x2}], 0x1}, 0x45) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f00000003c0)={0x0, {0x0, 0x0, @qam}}) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 12m14.157432554s ago: executing program 32 (id=1788): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="0881", 0x2}], 0x1}, 0x45) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f00000003c0)={0x0, {0x0, 0x0, @qam}}) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 2m31.010684206s ago: executing program 5 (id=4778): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x20) 2m30.527565336s ago: executing program 5 (id=4781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) (fail_nth: 4) 2m30.038098911s ago: executing program 5 (id=4783): socket$inet6(0xa, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x64, 0x36, 0x65, 0x38, 0x36, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "0011223344576677889981bbccddeeff00112233445566778899aabbccddeeff00112213445566778899aabbccddeeff002233445566778899aabbccddeeef00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x54, 0x36, 0x65, 0x34, 0x31, 0x66, 0x63, 0x61, 0x61, 0x39, 0x66, 0x3, 0x62, 0x62, 0x33, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x37, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x38, 0x62, 0x30, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x0, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x39, 0x33, 0x61, 0x30, 0x30, 0x31, 0x35]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000008c0)={'fscrypt:', @auto=[0x65, 0x63, 0x63, 0x65, 0x38, 0x30, 0x32, 0x61, 0x30, 0x2e, 0x65, 0x61, 0x30, 0x33, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbcc5deeff00118d3e153466778899aabbccddeeff001157a12233445566578899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000540)="f3", 0x1, r0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="0a8857b2da4d552341cf49ba34be4b5dc6cbde4af7ca675b11defc95d827feb800f5b8861ae75f1e8431398ed64e33fc4679fc85981fab1df02781e80d6a9fee0777f58f5f3881c0fa65823a041529e2e0c8292db835", 0x56, r0) 2m29.851417583s ago: executing program 5 (id=4784): syz_emit_ethernet(0x32e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2f8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x55, 0x2, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x38, "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"}]}}}}}}, 0x0) 2m29.66121913s ago: executing program 5 (id=4785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640), 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m28.611850875s ago: executing program 5 (id=4791): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x29, 0x80005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff80000180140001800800010000000000080002007f000001060003400002000014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="dc", 0x1}], 0x1}, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0xfffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRES64=r6], 0x3c}}, 0x40044) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)=""/100, 0x64}, {0x0}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000001640)=""/206, 0xce}], 0x4, &(0x7f0000001780)=""/171, 0xab}, 0x40}, {{&(0x7f0000001840), 0x80, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/135, 0x87}], 0x1, &(0x7f00000019c0)=""/196, 0xc4}, 0x6}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) 2m12.73002443s ago: executing program 33 (id=4791): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x29, 0x80005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff80000180140001800800010000000000080002007f000001060003400002000014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="dc", 0x1}], 0x1}, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0xfffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRES64=r6], 0x3c}}, 0x40044) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)=""/100, 0x64}, {0x0}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000001640)=""/206, 0xce}], 0x4, &(0x7f0000001780)=""/171, 0xab}, 0x40}, {{&(0x7f0000001840), 0x80, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/135, 0x87}], 0x1, &(0x7f00000019c0)=""/196, 0xc4}, 0x6}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) 2m3.802429933s ago: executing program 1 (id=4908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000104400014677128697200000000000081d3d26508e7c807e9d14c176275682f845f56373fa24d9d93cbb59a51b8", @ANYRES32=0x0, @ANYBLOB="03000000000000002c00128009000100766c616e000000001c0002800600010002000000100004800c000803030000000500000021002400c87fa9d0beeaef03737a87d67e8c2d2f0832c4dfb3df90a829af80e1a4000000"], 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x104, @tick, 0x2, {0x48, 0x4}, 0x76, 0x2, 0x1}) 2m3.422572708s ago: executing program 1 (id=4911): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x6, r2, r3, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x7fffffff, 0xfffffffe}, {0x3, 0x7}], r2}, 0x18, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) brk(0x200020ff8000) 2m3.213675779s ago: executing program 1 (id=4913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b801000000000000000f21f8640f808c6a060623f848b8fcffffffffffffff0f23d80f21f835800000100f23f86464660f38807d0036400f23f440dec93e460f01c4af0f20d835200000000f22d8b91e0200000f32440f01d1", 0x5a}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x80a4d1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) timer_settime(r6, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0x9, 0x800}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000340)={0x68, 0x5, 0x8080000, 0x1000, &(0x7f00000fe000/0x1000)=nil}) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000540)={0x4, @output={0x1000, 0x0, {0x10000, 0x5}, 0x5, 0x3}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x129301) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f0000000200)={0x7, r11, 'id0\x00'}) 2m2.584455928s ago: executing program 1 (id=4916): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2062, 0x3, 0x1, 0x0, 0x9}, 0x30, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x3e, &(0x7f00000000c0)="279a004c5b346ee1884baa7199c8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) landlock_restrict_self(r4, 0x9) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r8 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32, @ANYBLOB="402000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m1.080788815s ago: executing program 1 (id=4919): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000000b45, 0x10000000000a, 0xa, 0x0, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1f00, 0x12) (fail_nth: 7) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000a80)={0x66, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x3, 0x4, 0x80, 0x0, {0x77359400}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a500e300"}, 0x4, 0x2, {}, 0x20804, 0x0, r4}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m58.426464393s ago: executing program 1 (id=4933): r0 = fsopen(&(0x7f00000001c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) r2 = creat(0x0, 0x109) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) process_vm_readv(r3, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/133, 0x85}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r8 = fsmount(r6, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r10 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402f1737000000000000010902240000000000000000000f020300000009210400ff01222800090581034000b483fe"], 0x0) read(r7, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003b80)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 1m43.422209852s ago: executing program 34 (id=4933): r0 = fsopen(&(0x7f00000001c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) r2 = creat(0x0, 0x109) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) process_vm_readv(r3, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/133, 0x85}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r8 = fsmount(r6, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r10 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402f1737000000000000010902240000000000000000000f020300000009210400ff01222800090581034000b483fe"], 0x0) read(r7, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003b80)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 10.352155295s ago: executing program 6 (id=5509): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) write$binfmt_misc(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$uac3(0x5, 0x93, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000404406218040000102030109028100030154c00f080bac5d010130040900000000010130000a8f827ab60081000000132403060104060503b30a0000f7ff05000100090401000001023000090401010101023000090562260002"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r3 = socket$inet6(0xa, 0xa, 0x7) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x4e23, 0x10008, @private0, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="929bf7a2ec7d57913b", 0x9}, {&(0x7f0000000280)="064b827451333114d269ddce1a141750083458d5ce96eeff320611efcb071e5c829a46e07bf5f9eb8d609653a000989be43d03cfadcf6fd583fdaf4c6c1dd7d221d4f968b864b9667705a4309cd6cd3171256637e80fb10a1d97afaeda3d47c877898cbc74cefc6598145b415eae305b78c06172de2c2f629d64feb7f8702a1c7def278a886d3a61e3d52e0ca60e99e9ea131fbc8020fb20e731f16196f1580808fcdb16d307524de8e6142c51319ed1d37f29dc58fe7d00a6b69c4e958c06c3bbeba7e7c320c620624cdc28944f4f4c0cd34a87b9786cedd3f713f7e43fb7fb57892a2d37", 0xe5}, {&(0x7f0000000380)="c611dc22ac61e8f467b83f2a43daf1bdfd8e7bf273e5ad9c84d318e6b80378e3", 0x20}], 0x3}, 0x44) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) 7.443464083s ago: executing program 7 (id=5530): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000e9c0)=ANY=[@ANYBLOB="44000000100001042dbd74000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02060025210000140012800b00010069001000086e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0, @ANYBLOB="93017f63e2ec0f"], 0x44}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x4f, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)=ANY=[@ANYBLOB="1201500200000020c016e17540000102035003090300040203010005092104003c01221a090905810300020401750000000000000000"], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x9, 0xfff, 0x2, 0x0, [{0x1, 0x10, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x3, '\x00', 0x58}, {0x97, 0x1, 0x3, '\x00', 0x7}, {0x5, 0x1, 0x0, '\x00', 0x8c}, {0x80, 0x3, 0x81, '\x00', 0x1}, {0xcd, 0x7, 0x4, '\x00', 0x3}, {0x18, 0xd, 0x7, '\x00', 0x50}, {0x6, 0x1, 0x8, '\x00', 0x3}, {0x10, 0x8, 0x5, '\x00', 0x90}, {0xc8, 0x4, 0x5, '\x00', 0xd3}, {0x69, 0x1, 0x7, '\x00', 0x40}, {0x80, 0x3b, 0x6}, {0x80, 0x10, 0x1}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0x9, 0x6d, 0x6, '\x00', 0x5}, {0x0, 0x0, 0x1, '\x00', 0x4}, {0x5, 0x0, 0x66, '\x00', 0x9}, {0x0, 0xd, 0xb, '\x00', 0x4}, {0x8, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x80, 0x4, '\x00', 0xc0}, {0x6, 0x59, 0x6, '\x00', 0x74}, {0x6, 0x81, 0x55, '\x00', 0x7}, {0x5, 0x8, 0xc, '\x00', 0x9}, {0xf, 0xd, 0xff, '\x00', 0x16}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r6, 0xae80, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x3a5800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x5, 0x4, 0x42, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x8000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f00000003c0)=ANY=[@ANYBLOB="d50b0000060000002c0100001800000000000000000000008935dc86f3117f666580f4ae512336119aa5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743a2b54d110c5c57ad0b34f4b3ebd84ef586f5dcbf81d753920a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e34945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db72892038968b"]) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000001540)=""/4107, 0x100b}], 0x1166) 7.213490066s ago: executing program 6 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514000cc0080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCFLSH(r2, 0x5411, 0x2000000000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000e9c0)=ANY=[@ANYBLOB="44000000100001042dbd74000000000000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) 7.067730313s ago: executing program 6 (id=5535): munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xd, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138c, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3653400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bC\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 5.167703843s ago: executing program 3 (id=5550): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1802) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x00\x00\x00\x00\x00\x00\x03\xff\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r7, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x40, 0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 4.200406108s ago: executing program 7 (id=5552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000001c0)={0x5, 0xffffff00, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000030000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 3.89675513s ago: executing program 6 (id=5553): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) (async) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000c89000/0x1000)=nil, &(0x7f000035b000/0x2000)=nil, 0x1000, 0x1}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r5 = syz_open_pts(r1, 0x0) r6 = dup3(r5, r1, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000080)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3.747885302s ago: executing program 2 (id=5554): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x7fffff, 0x4) getdents64(r0, &(0x7f0000001a80)=""/4073, 0xfe9) r3 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r4 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='crc\x00', &(0x7f0000000500)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 3.709783627s ago: executing program 7 (id=5555): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2e, 0x0, @loopback, @broadcast}, "000086ddffff0000"}}}}}, 0x0) clock_gettime(0xfffffffffffffffd, 0x0) 3.569280358s ago: executing program 7 (id=5556): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202", @ANYBLOB="68c689"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, 0x0) close(r0) 3.502653888s ago: executing program 4 (id=5557): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="047461636b20232825237b2f2f28405c292f2f26407d2c5b272525265c232a40"], 0x20) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="fdffffff01000000", @ANYRES32, @ANYBLOB="000000e0ff"]) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f00000001c0)={0x6, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000002040)={&(0x7f0000000000)={0x2, 0x4f27, @multicast2}, 0x10, 0x0}, 0x20040011) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c38359761cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d0a1cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10000000000000002b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a3fe41b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000004000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c0002"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0xa, 0xffffffffffffffff, 0x1}) 3.502233796s ago: executing program 2 (id=5558): syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x82840) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x169a82, 0x10) sendfile(r5, r5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) close_range(r1, r0, 0x0) r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) syz_open_dev$evdev(0x0, 0x2, 0xe000) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20001, 0x80002) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000480)={{0x4, 0x2, 0x2, 0x3, 'syz0\x00', 0x8706}, 0x4, 0x10000000, 0x42a, 0x0, 0x7, 0x5, 'syz1\x00', &(0x7f0000000100)=['vfat\x00', 's\xc2\x92\xe8Z', '}/^\\+*@@\x00', '\x00', 'q\x00', '{\x00', '\x00'], 0x19}) socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f0000000340)={0xffffffff, 0x2, 0x80000000, 0xa, 0x5, 0x7f, 0x6, 0x9}) sendmsg$key(r7, 0xfffffffffffffffc, 0x20040804) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x100}, {0x0, 0x100000001}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x0, 0x1, 0x3, 0x4}}, 0xe8) 3.1378598s ago: executing program 3 (id=5559): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.554065788s ago: executing program 4 (id=5560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x3, 0x1132}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc0, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x43, 0x1e}}}}}}}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x8d, &(0x7f0000001180)=ANY=[@ANYBLOB="1201010202001608252a46a440000102030109027b0002010d20050904000001020d00000924060001006ea70305240000000d240f0104000000080007000306241a080020042407"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0x20000fff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x1, 0x4100, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0x10001, 0x7, 0x11fb}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa6892382d3dbd16d}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.20222598s ago: executing program 3 (id=5561): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 2.147096058s ago: executing program 3 (id=5562): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240206000547ba07240106040210090582090004"], 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYRESHEX], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r6, 0x4, 0x800) syz_usb_disconnect(r5) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000700)=""/73, 0x49}], 0x1, 0x5, 0xffe) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000340)={0x8, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0xfffffffc, 0x2, 0x0, 0x7}}, {0x6, 0x2, 0x0, 0x0, @msi={0x78, 0x93c, 0x4, 0x7}}, {0x7ec, 0x4, 0x0, 0x0, @msi={0x7ff, 0x90000, 0x0, 0x9}}, {0x9, 0x1, 0x1, 0x0, @msi={0xffffffff, 0x4, 0x40, 0x7}}, {0xfac, 0x1, 0x0, 0x0, @irqchip={0xe, 0x6e9f}}, {0xb, 0x5, 0x1, 0x0, @adapter={0x1, 0x2, 0x1cb3, 0xedd9, 0x8}}, {0x7, 0x3, 0x0, 0x0, @sint={0x40, 0x5}}, {0x3, 0x1, 0x0, 0x0, @adapter={0x7, 0x1, 0xfffc, 0x2, 0xe2}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.979467855s ago: executing program 2 (id=5563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="0000000000009701", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0), 0x8) 1.862984276s ago: executing program 2 (id=5564): unshare(0x22020600) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 1.838750659s ago: executing program 2 (id=5565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x800000b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x803) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$netlink(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f0000000240)={&(0x7f00000002c0)={0x3, 0xf42, 0x400, {0x77359400}, {0x77359400}, {0x0, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "856270485c0961819d1eb0452a648b3f57c15d69656151e1ad242a8d825bec6f31e0e9ed10a659a99dcc872969fce9e136683d89724f437d41747a2a1b588e27"}}, 0x80}}, 0x4008000) 1.762533241s ago: executing program 2 (id=5566): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}}, 0x800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r2, @ANYBLOB="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"/392], 0x198) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) madvise(&(0x7f00006fc000/0xe000)=nil, 0xe000, 0x65) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_route(r11, 0x0, 0x40804) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r12, &(0x7f0000004900)={0x2020}, 0x2020) r13 = socket(0x10, 0x3, 0x0) sendmsg$alg(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0c877c46615a251604b72a2f6fd4f4de71781aed6113931b61c1b84437f164f569be2e3bce98f655e7c29d70ef3534ee", 0x30}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x108, 0x40080c1}, 0x4000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x109000) 1.727736791s ago: executing program 7 (id=5567): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x5, 0x1c, 0x0, 0x1, [@generic="b5"]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fchown(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r5, &(0x7f0000000000)=""/182, 0xb6) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x18) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x73ea}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000340)="f65f846f395731b622d68aaddbad36075f07c7f763f8cf69a27abf613b9ce571e01f0c53ef2b388e47c70d9f9044d5abe993ed4da2402fe1c6cdf051177345c6bbfa9a7e29c2ba9d012bf0a1b1570226018c58ccc515fd52222d0a3d", 0x5c}, {&(0x7f0000000440)="aa925d61b0bb7b1c61493f270c6b541e96e6383fe22b690509428937675a0a051674b14b310541b7dd834890601c7783169405cdb0c95aa59030ccb55fdd224d58e5cb8badd29310ac82ee57427b9d1a7a8554f87cfd39427a65268440dbe5c8407ced0ad962a8c679472220604274f6eae5d0ea3e909f142714a232915ab954b79a8f17ed5af0359f6569c528e6121473f2ae6505d2a4f25fa7b92447367ef317c4cd06a46c92f343b8d1509e7934c6f4c73ce09714dead2a7170986e5a274b22f53b931cc9d160ca56a4e2", 0xcc}, {&(0x7f0000000540)="c5791a229f7bb9aef37e055c7f5ab1b648e361366d95a251a087eb45eb426ad40e37699b0dca3083381ee99473215dfa7d1944d6", 0x34}, {&(0x7f0000000600)="6770fdbd08407a7e7a68cc654f58635de25d4367a69381ff072ea7a8f21284c1170034616bb5d8905df3f9d24a834a76140f1fcab16c617e7741cbfc4197d93920d09fe46e3357065668500b9be03c6619181a4dcae33e50080aed5174425ac41dc08971fe5e8558e24d0006ca0f82fff4a33df26e01c14cdeb4a8145b14d5f1b34fe8dff23811cf18fbaf76182562d6e0b6274d97fb766f199b2fe3a4979ab7396f4238b40576726d241ffcd9e8b8ef14876dca9acdda5321107aa4f2b42c65877fc952bfb6b43a51b8f6e82c6fd1", 0xcf}], 0x4, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x18}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000007c0)="26be310497ed0b4621613a5bf473414ecf9401dc200cce8e2c9ed012787c6a7b1663ec48ec72a3478e9670a40b754623c5d5b2173a9640b4c4f0f9c60152bdcd4bd623aef36cc8ac0c30b2104aba531eb8809d4258550e5dee3773f3cceeab8be9d300fbad6d4c9bb8827b625974d74e926f9ff12690576ec4ca270313a965b9905df9c2b151fc14c3b7d2278682ce1e39cff448aee10bdd30974480b4945116341c70e07b01c6f8f5e78d3915a4d976148a932183db2095d4fab4d468bdf5e05c3aada10c07b24a61b58dce90ebfa0f4f490cf64b8f3044cb79af946b8451106e8f085286", 0xe5}, {&(0x7f00000008c0)="c146e6897d702a8f2bc4f29bf4a1e354e9a41120c24737d8f9c4eb5ef841dda00d77a5e6b0a96bc21aedb3f84177842025cf8cabcc8de29b751bb7f718b328975f8c6927b65a1792afdcdd066b8bee5cf6821575008acff8d90db8134da82be2066578e50ced9427a25a0d8d4a0036f830454f9ba4bddcb0183599e1198389ddc45e3430fc0d692a06529f664a06d0aa7e16c6e209edf5d655c01648e338151886c4fe896ec981f6168357cc0d359c7229d3d69cd8f3e34c957a9bf18945ba45fe013629eee8ec586c9c", 0xca}, {&(0x7f00000009c0)="5c3e2c120e02da04f9e32a7f1e78e595c536e5b3948426d2c7424dc3aa3ab36b1b89b23f05f3803d91ac46ee04f221515f6521f81b628f86a4962028693f7f6bac61f0aa786e342179e69aa8c6f3d53f8c3c9a8e58e649d4c7beaa461ee3e737e0facdb494e570807d84bee42b6858eaf6a4eaa8a598df6b82421dec", 0x7c}, {&(0x7f0000000a40)="2388853adf83a0142a6072c81158221ae4edd0a00e6f8b3765a306a0cb7337f34c8023b0443443d1b255d3bbe5d35fa57a5647585a6aa1430fe60cac451912baede811b57b9571adad6688808ef39b8cd8ee4e5f40efbbd1575011bbac08d851df23edda087f8bffdb2b97cdcc3a324b38d5e1a9a3dbe321562b119ccd32bdf34698a2a97c72f403179a74d62b6c9719e8c9f7f7af8d705b4edb4876991f0f", 0x9f}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400000000000000290000000b00000b0000000300000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="ec0567304d69112c79030bafe516e24ca0025d3d95b93d9b1724d8bacb3c9949ba8131a456d838b184d9fbeffb253ce876b160221195432c4f06c9a81ae5f4bff0eee92b5b834263755b7b8cd407f021b3e81a3b6f6358390464bc93b0acf581979e3d524681c50d1e8455ef", 0x6c}, {&(0x7f0000000c00)="f416bc", 0x3}, {&(0x7f0000000c40)="451f8f4d7e9d7c0064b6d12f342a203027ea1af37b1d17eea899cba01cff772461917a6dd0d28182c7fc112b6e16807142e5bc2807c4f8385c6cfa0618c64a44e15565bb5b2748eac8641c25f90a06f43f806597ed70523927dac77d4b560f0000f276cf750000000000000000cbd2e21fb973760e75707ad444fad28a4dc14f034a7db29e37b067f3d78b05babfad650760512e975702897921a1d9592040ad056ce758455fb1d4d6e5bda33c97f0668aff", 0xb2}, {&(0x7f0000000d00)="16c05eb664da12b67dbd266f199d217d3ce746d5a61969fe1649176bc420a72b0c779c6a6076c3a00607c27ad8fa1173134d3c338ac5e8c0a8fadcbc19eb75ec43ff2efdbeeffa2e986bef976480d834a2f862d1112c6864153c48c21e489d09102ff7d5c50c5a9b70ffdcfc1910f1b696c0e91f11c0c682f0120f6eb0d89c34b3f3505ff5e3f9e7887a8d09907f86def4e86758b46c8dcb5f61c8145e005868a61cbb4a28835117edc12b380c867f42d392c7297d9036866eecdf2243e42202bf8885f1fc79", 0xc6}], 0x4}}], 0x4, 0x4c040) sendmsg$nl_route(r0, 0x0, 0x0) r6 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0x7, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x100000000000000, 0x20}, 0x38) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, 0x0, 0x1) 690.475141ms ago: executing program 6 (id=5568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/187, 0xbb}], 0x3, &(0x7f0000001680)=""/4096, 0x1000}}, {{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002700)=""/146, 0x92}, {&(0x7f0000002f00)=""/235, 0xeb}, {&(0x7f00000028c0)=""/198, 0xc6}, {&(0x7f00000029c0)=""/43, 0x2b}], 0x4}, 0x4986}, {{&(0x7f0000002ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/93, 0x5d}, {&(0x7f00000026c0)=""/45, 0x2d}], 0x2, &(0x7f0000002a40)=""/87, 0x57}, 0x6}, {{&(0x7f0000003000)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003080)=""/171, 0xab}, {&(0x7f0000003140)=""/243, 0xf3}, {&(0x7f0000003240)=""/137, 0x89}, {&(0x7f0000003300)=""/52, 0x34}, {&(0x7f0000003340)=""/45, 0x2d}, {&(0x7f0000003380)=""/140, 0x8c}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f00000026c0)}, {&(0x7f00000048c0)=""/147, 0x93}], 0x9, &(0x7f00000034c0)=""/80, 0x2b}, 0x4}, {{&(0x7f0000003540)=@nfc, 0x80, &(0x7f0000003740)=[{&(0x7f00000035c0)}, {&(0x7f0000002d00)=""/67, 0x43}, {&(0x7f0000002c00)=""/215, 0xd7}], 0x3, &(0x7f0000004a40)=""/4098, 0x1000}, 0xd180}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) tkill(r2, 0x107) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002680)={0x0, &(0x7f00000026c0)}) uname(&(0x7f0000000640)=""/4096) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d80200002100000127bd7000ffdbdf25e0000001000000000000000000000000ac14141e0000000000000000000000004e2400014e2000010200a08002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRESHEX=r1], 0x2d8}}, 0x0) tkill(r2, 0x27) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4808c1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) syz_open_pts(r3, 0x40) ioctl$TIOCMBIS(r3, 0x5416, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000002f00)=ANY=[], 0x78}, 0x1, 0x7}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket(0x1a, 0x5, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) gettid() sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x20018c50) 539.565721ms ago: executing program 4 (id=5569): socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0xfefd, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xa, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 283.940629ms ago: executing program 4 (id=5570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) write(r2, &(0x7f0000000180)='10000', 0x5) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x5, 0x81, 0x80, 0x9}, {0x1, 0x4, 0xe, 0x6}, {0xd0ca, 0x3, 0xc, 0x5}, {0x6, 0x4, 0x7, 0xfff}]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 167.024776ms ago: executing program 7 (id=5571): unshare(0xe060400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffff9) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x8a000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xfffffff3) syz_usb_connect(0x4, 0x4c, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES8=0x0], 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_usb_connect(0x0, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e01"], 0x0) ioprio_get$pid(0x3, r2) 1.73345ms ago: executing program 6 (id=5572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a"], 0xec}}, 0x44000) 1.473146ms ago: executing program 4 (id=5573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x158, 0x16, 0xa, 0x504, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1dc}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 0s ago: executing program 3 (id=5574): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) kernel console output (not intermixed with test programs): N IR protocol [ 1135.409060][ T5690] imon:send_packet: packet tx failed (-71) [ 1135.417616][T21556] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1135.467039][ T5690] imon 4-1:0.0: remote input dev register failed [ 1135.475892][ T5690] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1135.643561][ T5690] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1135.657585][ T5690] imon:imon_probe: failed to initialize context! [ 1135.674507][ T5690] imon 4-1:0.0: unable to register, err -19 [ 1135.694886][ T5690] usb 4-1: USB disconnect, device number 57 [ 1135.725571][ T188] usb 3-1: USB disconnect, device number 32 [ 1136.087188][ T5690] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1136.104403][T21569] binder: 21568:21569 ioctl 59 200000001cc0 returned -22 [ 1136.225803][T21570] binder: 21568:21570 ioctl 8138ae83 7fd175eeba90 returned -22 [ 1136.286195][ T5690] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1136.322518][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.350679][ T5690] usb 4-1: Product: syz [ 1136.355049][ T5690] usb 4-1: Manufacturer: syz [ 1136.359946][ T5690] usb 4-1: SerialNumber: syz [ 1138.602227][ T5690] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1138.628331][ T5690] usb 4-1: USB disconnect, device number 58 [ 1138.727384][ T5690] usblp0: removed [ 1139.899115][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.037166][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.166911][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.291380][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.312650][T21596] FAULT_INJECTION: forcing a failure. [ 1140.312650][T21596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.354115][T21596] CPU: 1 UID: 0 PID: 21596 Comm: syz.6.5204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.354152][T21596] Tainted: [L]=SOFTLOCKUP [ 1140.354161][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1140.354174][T21596] Call Trace: [ 1140.354182][T21596] [ 1140.354192][T21596] dump_stack_lvl+0xe8/0x150 [ 1140.354228][T21596] should_fail_ex+0x410/0x560 [ 1140.354258][T21596] _copy_from_user+0x2d/0xb0 [ 1140.354286][T21596] ip_tunnel_parm_from_user+0xbd/0x3a0 [ 1140.354317][T21596] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 1140.354352][T21596] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1140.354388][T21596] ip_tunnel_siocdevprivate+0xb0/0x1d0 [ 1140.354428][T21596] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1140.354462][T21596] ? __pfx___mutex_lock+0x10/0x10 [ 1140.354488][T21596] ? full_name_hash+0x92/0xe0 [ 1140.354524][T21596] dev_ifsioc+0xb56/0x1360 [ 1140.354621][T21596] dev_ioctl+0x84c/0x1150 [ 1140.354647][T21596] sock_ioctl+0x753/0x7e0 [ 1140.354678][T21596] ? __pfx_sock_ioctl+0x10/0x10 [ 1140.354707][T21596] ? __fget_files+0x3a2/0x420 [ 1140.354737][T21596] ? __fget_files+0x2a/0x420 [ 1140.354768][T21596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1140.354792][T21596] ? __pfx_sock_ioctl+0x10/0x10 [ 1140.354819][T21596] __se_sys_ioctl+0xfc/0x170 [ 1140.354845][T21596] do_syscall_64+0x166/0x520 [ 1140.354873][T21596] ? trace_irq_disable+0x3b/0x140 [ 1140.354899][T21596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.354920][T21596] ? clear_bhb_loop+0x70/0xc0 [ 1140.354946][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.354967][T21596] RIP: 0033:0x7fd10af9e0d9 [ 1140.354988][T21596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.355007][T21596] RSP: 002b:00007fd10be17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.355031][T21596] RAX: ffffffffffffffda RBX: 00007fd10b225fa0 RCX: 00007fd10af9e0d9 [ 1140.355047][T21596] RDX: 0000200000000d80 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1140.355060][T21596] RBP: 00007fd10be17090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.355074][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.355087][T21596] R13: 00007fd10b226038 R14: 00007fd10b225fa0 R15: 00007fd10b34fa48 [ 1140.355120][T21596] [ 1140.431084][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.705646][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5202'. [ 1140.937071][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.047083][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.317020][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.518844][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.624942][T21610] FAULT_INJECTION: forcing a failure. [ 1141.624942][T21610] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.669035][T21610] CPU: 1 UID: 0 PID: 21610 Comm: syz.3.5208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.669071][T21610] Tainted: [L]=SOFTLOCKUP [ 1141.669076][T21610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.669084][T21610] Call Trace: [ 1141.669090][T21610] [ 1141.669096][T21610] dump_stack_lvl+0xe8/0x150 [ 1141.669119][T21610] should_fail_ex+0x410/0x560 [ 1141.669137][T21610] should_failslab+0xa8/0x100 [ 1141.669156][T21610] __kmalloc_cache_noprof+0xa8/0x660 [ 1141.669172][T21610] ? nfnetlink_rcv+0x1021/0x28c0 [ 1141.669186][T21610] ? nfnetlink_rcv+0x1021/0x28c0 [ 1141.669203][T21610] nfnetlink_rcv+0x1021/0x28c0 [ 1141.669236][T21610] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1141.669282][T21610] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.669303][T21610] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.669317][T21610] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.669335][T21610] netlink_unicast+0x7bd/0x940 [ 1141.669355][T21610] netlink_sendmsg+0x813/0xb40 [ 1141.669375][T21610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.669392][T21610] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1141.669412][T21610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.669426][T21610] sock_sendmsg_nosec+0x13a/0x180 [ 1141.669445][T21610] ____sys_sendmsg+0x54e/0x850 [ 1141.669463][T21610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.669481][T21610] ? import_iovec+0x73/0xa0 [ 1141.669499][T21610] ___sys_sendmsg+0x2a5/0x360 [ 1141.669513][T21610] ? __lock_acquire+0x683/0x2cf0 [ 1141.669532][T21610] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.669572][T21610] ? __fget_files+0x2a/0x420 [ 1141.669598][T21610] ? __fget_files+0x3a2/0x420 [ 1141.669622][T21610] __x64_sys_sendmsg+0x1b1/0x290 [ 1141.669638][T21610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1141.669664][T21610] do_syscall_64+0x166/0x520 [ 1141.669682][T21610] ? trace_irq_disable+0x3b/0x140 [ 1141.669698][T21610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.669711][T21610] ? clear_bhb_loop+0x70/0xc0 [ 1141.669726][T21610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.669738][T21610] RIP: 0033:0x7fd62179e0d9 [ 1141.669751][T21610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.669766][T21610] RSP: 002b:00007fd6225f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.669781][T21610] RAX: ffffffffffffffda RBX: 00007fd621a25fa0 RCX: 00007fd62179e0d9 [ 1141.669790][T21610] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1141.669798][T21610] RBP: 00007fd6225f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.669806][T21610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.669814][T21610] R13: 00007fd621a26038 R14: 00007fd621a25fa0 R15: 00007fd621b4fa48 [ 1141.669832][T21610] [ 1141.737173][ T5690] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1141.807655][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1142.013628][ T5690] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1142.045699][ T5690] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1142.056795][ T5690] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1142.088450][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.096945][ T5690] usb 3-1: Product: syz [ 1142.101310][ T5690] usb 3-1: Manufacturer: syz [ 1142.106535][ T5690] usb 3-1: SerialNumber: syz [ 1142.134803][ T5690] usb 3-1: config 0 descriptor?? [ 1142.157219][ T5690] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1142.353694][ T5690] gspca_sunplus: reg_r err -32 [ 1142.363575][ T5690] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1142.472187][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5217'. [ 1142.481706][T21640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.501241][T21640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.556943][ T188] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1142.707011][ T188] usb 4-1: Using ep0 maxpacket: 8 [ 1142.713210][ T188] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1142.724610][ T188] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1142.732925][ T188] usb 4-1: config 0 has no interface number 0 [ 1142.739518][ T188] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.750453][ T188] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1142.762084][ T188] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.775070][ T188] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1142.788136][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.799101][ T188] usb 4-1: config 0 descriptor?? [ 1142.812694][ T188] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1143.245538][T21647] random: crng reseeded on system resumption [ 1143.373639][T21650] ip6erspan0: entered allmulticast mode [ 1143.783850][T21660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.798345][T21660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.991101][T21664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5223'. [ 1144.012845][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5223'. [ 1144.274511][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1144.274533][ T30] audit: type=1800 audit(1787272592.232:2798): pid=21656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5221" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1144.886521][ T5620] usb 3-1: USB disconnect, device number 33 [ 1144.996899][ T12] net_ratelimit: 25 callbacks suppressed [ 1144.996920][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.085582][ T5690] usb 4-1: USB disconnect, device number 59 [ 1145.115224][ T5690] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1145.122210][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.258510][T20758] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.377193][T20758] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.488205][T20758] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.518089][ T5690] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1145.606972][T20758] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.647944][T21682] FAULT_INJECTION: forcing a failure. [ 1145.647944][T21682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.662557][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.7.5230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.662579][T21682] Tainted: [L]=SOFTLOCKUP [ 1145.662584][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.662592][T21682] Call Trace: [ 1145.662597][T21682] [ 1145.662603][T21682] dump_stack_lvl+0xe8/0x150 [ 1145.662626][T21682] should_fail_ex+0x410/0x560 [ 1145.662643][T21682] _copy_from_iter+0x1d3/0x1660 [ 1145.662657][T21682] ? skb_set_owner_w+0x263/0x3d0 [ 1145.662677][T21682] ? __pfx__copy_from_iter+0x10/0x10 [ 1145.662696][T21682] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1145.662713][T21682] skb_copy_datagram_from_iter+0xe6/0x720 [ 1145.662735][T21682] ? skb_put+0x112/0x210 [ 1145.662749][T21682] tun_get_user+0xc7f/0x44d0 [ 1145.662828][T21682] ? aa_file_perm+0x18b/0x15f0 [ 1145.662847][T21682] ? aa_file_perm+0x4ed/0x15f0 [ 1145.662861][T21682] ? __pfx_tun_get_user+0x10/0x10 [ 1145.662875][T21682] ? __lock_acquire+0x683/0x2cf0 [ 1145.662894][T21682] ? kstrtoull+0x12f/0x1d0 [ 1145.662910][T21682] ? ref_tracker_alloc+0x341/0x4b0 [ 1145.662924][T21682] ? get_pid_task+0x20/0x1f0 [ 1145.662941][T21682] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1145.662956][T21682] ? tun_get+0x1c/0x2f0 [ 1145.662968][T21682] ? tun_get+0x1c/0x2f0 [ 1145.662983][T21682] ? tun_get+0x1c/0x2f0 [ 1145.662994][T21682] ? tun_get+0x1c/0x2f0 [ 1145.663009][T21682] tun_chr_write_iter+0x113/0x200 [ 1145.663022][T21682] vfs_write+0x612/0xba0 [ 1145.663045][T21682] ? __pfx_vfs_write+0x10/0x10 [ 1145.663067][T21682] ? __fget_files+0x2a/0x420 [ 1145.663089][T21682] ksys_write+0x150/0x270 [ 1145.663107][T21682] ? __pfx_ksys_write+0x10/0x10 [ 1145.663131][T21682] do_syscall_64+0x166/0x520 [ 1145.663148][T21682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.663160][T21682] ? clear_bhb_loop+0x70/0xc0 [ 1145.663175][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.663187][T21682] RIP: 0033:0x7fc37f19e0d9 [ 1145.663200][T21682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.663211][T21682] RSP: 002b:00007fc37d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.663240][T21682] RAX: ffffffffffffffda RBX: 00007fc37f425fa0 RCX: 00007fc37f19e0d9 [ 1145.663249][T21682] RDX: 000000000000004a RSI: 0000200000000200 RDI: 0000000000000003 [ 1145.663257][T21682] RBP: 00007fc37d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.663265][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.663273][T21682] R13: 00007fc37f426038 R14: 00007fc37f425fa0 R15: 00007fc37f54fa48 [ 1145.663291][T21682] [ 1145.956867][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 1145.962285][T20758] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.970781][ T5690] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1145.981135][ T5690] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1145.989362][ T5690] usb 4-1: config 0 has no interface number 0 [ 1146.000272][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.008471][ T5690] usb 4-1: Product: syz [ 1146.012669][ T5690] usb 4-1: Manufacturer: syz [ 1146.017383][ T5690] usb 4-1: SerialNumber: syz [ 1146.025222][ T5690] usb 4-1: config 0 descriptor?? [ 1146.040285][ T5690] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1146.087791][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1146.196897][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1146.306848][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1146.325608][ T5690] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1146.341283][ T5690] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1146.783573][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1146.791818][T14225] usb 4-1: USB disconnect, device number 60 [ 1146.816131][T14225] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1146.834826][T14225] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1146.859273][T14225] quatech2 4-1:0.51: device disconnected [ 1146.908577][ T5690] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1147.069087][ T5690] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1147.087902][ T5690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.098671][ T5690] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1147.116791][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.141593][ T5690] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1147.394753][T21702] [U]  [ 1147.485316][T21706] binder: 21705:21706 ioctl c0306201 200000000040 returned -14 [ 1148.345247][T21739] FAULT_INJECTION: forcing a failure. [ 1148.345247][T21739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.359644][T21739] CPU: 0 UID: 0 PID: 21739 Comm: syz.6.5248 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.359678][T21739] Tainted: [L]=SOFTLOCKUP [ 1148.359687][T21739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1148.359708][T21739] Call Trace: [ 1148.359717][T21739] [ 1148.359726][T21739] dump_stack_lvl+0xe8/0x150 [ 1148.359763][T21739] should_fail_ex+0x410/0x560 [ 1148.359792][T21739] _copy_from_user+0x2d/0xb0 [ 1148.359821][T21739] ethtool_get_link_ksettings+0x27c/0x570 [ 1148.359919][T21739] ? __pfx_ethtool_get_link_ksettings+0x10/0x10 [ 1148.359949][T21739] ? ref_tracker_alloc+0x2d7/0x4b0 [ 1148.359978][T21739] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1148.360002][T21739] ? netdev_get_by_name+0x7b/0xb0 [ 1148.360060][T21739] ? dev_ioctl+0x392/0x1150 [ 1148.360079][T21739] ? sock_do_ioctl+0x23e/0x320 [ 1148.360104][T21739] ? dev_ethtool+0x3a0/0x29c0 [ 1148.360131][T21739] ? __se_sys_ioctl+0xfc/0x170 [ 1148.360163][T21739] ? dev_get_by_name+0x21/0x200 [ 1148.360187][T21739] ? dev_get_by_name+0x21/0x200 [ 1148.360222][T21739] dev_ethtool+0x1000/0x29c0 [ 1148.360250][T21739] ? __lock_acquire+0x683/0x2cf0 [ 1148.360295][T21739] ? __pfx_dev_ethtool+0x10/0x10 [ 1148.360325][T21739] ? kasan_quarantine_put+0xbb/0x1f0 [ 1148.360354][T21739] ? dev_load+0x21/0x1f0 [ 1148.360383][T21739] ? dev_load+0x21/0x1f0 [ 1148.360404][T21739] ? dev_load+0x21/0x1f0 [ 1148.360425][T21739] dev_ioctl+0x392/0x1150 [ 1148.360450][T21739] sock_do_ioctl+0x23e/0x320 [ 1148.360480][T21739] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1148.360505][T21739] ? hook_file_ioctl+0x1f0/0x5f0 [ 1148.360544][T21739] sock_ioctl+0x57a/0x7e0 [ 1148.360574][T21739] ? __pfx_sock_ioctl+0x10/0x10 [ 1148.360601][T21739] ? __fget_files+0x2a/0x420 [ 1148.360629][T21739] ? __fget_files+0x3a2/0x420 [ 1148.360655][T21739] ? __fget_files+0x2a/0x420 [ 1148.360685][T21739] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1148.360718][T21739] ? __pfx_sock_ioctl+0x10/0x10 [ 1148.360744][T21739] __se_sys_ioctl+0xfc/0x170 [ 1148.360769][T21739] do_syscall_64+0x166/0x520 [ 1148.360798][T21739] ? trace_irq_disable+0x3b/0x140 [ 1148.360825][T21739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.360847][T21739] ? clear_bhb_loop+0x70/0xc0 [ 1148.360873][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.360894][T21739] RIP: 0033:0x7fd10af9e0d9 [ 1148.360915][T21739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.360933][T21739] RSP: 002b:00007fd10be17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.360956][T21739] RAX: ffffffffffffffda RBX: 00007fd10b225fa0 RCX: 00007fd10af9e0d9 [ 1148.360971][T21739] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 1148.360984][T21739] RBP: 00007fd10be17090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.360997][T21739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.361009][T21739] R13: 00007fd10b226038 R14: 00007fd10b225fa0 R15: 00007fd10b34fa48 [ 1148.361042][T21739] [ 1149.028483][T21750] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5250'. [ 1149.177439][ T5690] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1149.282090][T12870] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 1149.351508][ T5690] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1149.387518][T21754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1149.400289][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.419101][T21754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1149.425147][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.441446][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.452748][T21754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1149.480655][T21754] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1149.491566][ T5690] usb 3-1: config 0 descriptor?? [ 1149.500729][T21754] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1149.529955][T21754] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1149.788874][ T5690] usbhid 3-1:0.0: can't add hid device: -71 [ 1149.799517][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1149.821357][ T5690] usb 3-1: USB disconnect, device number 34 [ 1150.009659][T21774] FAULT_INJECTION: forcing a failure. [ 1150.009659][T21774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.011525][T21768] program syz.2.5256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.024608][T21774] CPU: 0 UID: 0 PID: 21774 Comm: syz.3.5259 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.024639][T21774] Tainted: [L]=SOFTLOCKUP [ 1150.024646][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1150.024657][T21774] Call Trace: [ 1150.024665][T21774] [ 1150.024673][T21774] dump_stack_lvl+0xe8/0x150 [ 1150.024705][T21774] should_fail_ex+0x410/0x560 [ 1150.024733][T21774] _copy_from_iter+0x1d3/0x1660 [ 1150.024754][T21774] ? kmem_cache_alloc_node_noprof+0x1d1/0x620 [ 1150.024777][T21774] ? rcu_is_watching+0x16/0xb0 [ 1150.024797][T21774] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1150.024820][T21774] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 1150.024841][T21774] ? __pfx__copy_from_iter+0x10/0x10 [ 1150.024861][T21774] ? __alloc_skb+0x27a/0x7a0 [ 1150.024878][T21774] ? __alloc_skb+0x27a/0x7a0 [ 1150.024901][T21774] ? netlink_sendmsg+0x650/0xb40 [ 1150.024924][T21774] ? skb_put+0x112/0x210 [ 1150.024946][T21774] netlink_sendmsg+0x6c0/0xb40 [ 1150.024977][T21774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.025003][T21774] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1150.025031][T21774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.025052][T21774] sock_sendmsg_nosec+0x13a/0x180 [ 1150.025080][T21774] ____sys_sendmsg+0x54e/0x850 [ 1150.025106][T21774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.025135][T21774] ? import_iovec+0x73/0xa0 [ 1150.025161][T21774] ___sys_sendmsg+0x2a5/0x360 [ 1150.025190][T21774] ? __lock_acquire+0x683/0x2cf0 [ 1150.025219][T21774] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.025237][T21774] ? __lock_acquire+0x683/0x2cf0 [ 1150.025266][T21774] ? kstrtouint+0x6e/0xe0 [ 1150.025320][T21774] __sys_sendmmsg+0x273/0x4d0 [ 1150.025346][T21774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1150.025376][T21774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1150.025415][T21774] ? ksys_write+0x242/0x270 [ 1150.025443][T21774] ? __pfx_ksys_write+0x10/0x10 [ 1150.025475][T21774] __x64_sys_sendmmsg+0xa0/0xc0 [ 1150.025498][T21774] do_syscall_64+0x166/0x520 [ 1150.025522][T21774] ? trace_irq_disable+0x3b/0x140 [ 1150.025546][T21774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.025565][T21774] ? clear_bhb_loop+0x70/0xc0 [ 1150.025587][T21774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.025605][T21774] RIP: 0033:0x7fd62179e0d9 [ 1150.025624][T21774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.025640][T21774] RSP: 002b:00007fd6225f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1150.025661][T21774] RAX: ffffffffffffffda RBX: 00007fd621a25fa0 RCX: 00007fd62179e0d9 [ 1150.025675][T21774] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1150.025688][T21774] RBP: 00007fd6225f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.025701][T21774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.025713][T21774] R13: 00007fd621a26038 R14: 00007fd621a25fa0 R15: 00007fd621b4fa48 [ 1150.025742][T21774] [ 1150.113785][T21773] bridge0: port 3(ipvlan2) entered blocking state [ 1150.354031][T21773] bridge0: port 3(ipvlan2) entered disabled state [ 1150.361631][T21773] ipvlan2: entered allmulticast mode [ 1150.367483][T21773] bridge0: entered allmulticast mode [ 1150.381572][T21773] ipvlan2: left allmulticast mode [ 1150.387381][T21773] bridge0: left allmulticast mode [ 1150.447037][T15243] net_ratelimit: 30 callbacks suppressed [ 1150.447059][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1150.577504][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1150.606088][T21793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1150.706266][T21793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1150.826612][T21798] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1150.889153][T21798] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 1150.917198][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1150.996266][ T5620] usb 5-1: USB disconnect, device number 77 [ 1151.018048][ T5620] idmouse 5-1:1.0: disconnected [ 1151.051175][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.167235][T21810] [U]  [ 1151.177193][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.264342][T21819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5274'. [ 1151.292892][T21820] FAULT_INJECTION: forcing a failure. [ 1151.292892][T21820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.307748][T14386] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.325545][T21820] CPU: 0 UID: 0 PID: 21820 Comm: syz.2.5272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1151.325578][T21820] Tainted: [L]=SOFTLOCKUP [ 1151.325586][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1151.325598][T21820] Call Trace: [ 1151.325606][T21820] [ 1151.325614][T21820] dump_stack_lvl+0xe8/0x150 [ 1151.325648][T21820] should_fail_ex+0x410/0x560 [ 1151.325675][T21820] copy_fpstate_to_sigframe+0xa83/0xd20 [ 1151.325702][T21820] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 1151.325737][T21820] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1151.325765][T21820] ? ktime_get+0x45/0x220 [ 1151.325791][T21820] ? ktime_get+0x45/0x220 [ 1151.325816][T21820] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1151.325843][T21820] ? ktime_get+0x1f5/0x220 [ 1151.325875][T21820] ? fpu__alloc_mathframe+0xac/0x130 [ 1151.325902][T21820] get_sigframe+0x603/0x830 [ 1151.325935][T21820] ? __pfx_get_sigframe+0x10/0x10 [ 1151.325970][T21820] x64_setup_rt_frame+0x163/0xc50 [ 1151.326003][T21820] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1151.326028][T21820] ? get_signal+0x10dd/0x12c0 [ 1151.326057][T21820] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1151.326091][T21820] arch_do_signal_or_restart+0x456/0x860 [ 1151.326118][T21820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1151.326149][T21820] ? ksys_write+0x242/0x270 [ 1151.326187][T21820] exit_to_user_mode_loop+0x10e/0x770 [ 1151.326213][T21820] ? rcu_is_watching+0x16/0xb0 [ 1151.326237][T21820] do_syscall_64+0x328/0x520 [ 1151.326263][T21820] ? trace_irq_disable+0x3b/0x140 [ 1151.326288][T21820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.326308][T21820] ? clear_bhb_loop+0x70/0xc0 [ 1151.326332][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.326351][T21820] RIP: 0033:0x7fd174f5e90e [ 1151.326371][T21820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1151.326387][T21820] RSP: 002b:00007fd175ecbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.326409][T21820] RAX: 0000000000000001 RBX: 00007fd175ecc6c0 RCX: 00007fd174f5e90e [ 1151.326422][T21820] RDX: 0000000000000001 RSI: 00007fd175ecc090 RDI: 0000000000000004 [ 1151.326434][T21820] RBP: 00007fd175ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.326450][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.326461][T21820] R13: 00007fd175226218 R14: 00007fd175226180 R15: 00007fd17534fa48 [ 1151.326492][T21820] [ 1151.570750][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.575915][T12870] Bluetooth: hci1: command 0x0c1a tx timeout [ 1151.584452][T12870] Bluetooth: hci7: command 0x0c1a tx timeout [ 1151.714278][T14386] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.722300][ T5690] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1151.827597][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1151.856969][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1151.936870][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1152.037465][T15389] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1152.106812][ T5690] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1152.186927][T15389] usb 4-1: Using ep0 maxpacket: 16 [ 1152.192738][T15389] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1152.203647][T15389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.214954][T15389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.224898][T15389] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1152.238211][T15389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.250983][T15389] usb 4-1: config 0 descriptor?? [ 1152.251112][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1152.367449][ T5690] usb usb5-port1: attempt power cycle [ 1152.471705][T21831] netlink: 'syz.7.5277': attribute type 13 has an invalid length. [ 1152.550530][T21831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.558552][T21831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.654633][T21831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.675189][T15389] hid_parser_main: 5 callbacks suppressed [ 1152.675215][T15389] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1152.715629][T15389] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1152.739991][ T5690] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1152.768890][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1152.875087][T15389] usb 4-1: USB disconnect, device number 61 [ 1152.887818][T20760] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.908415][T20760] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.921585][T20760] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.935705][T20760] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.970991][T21835] binder: 21834:21835 ioctl 59 200000001cc0 returned -22 [ 1153.027490][ T5690] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1153.048596][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1153.157724][ T5690] usb usb5-port1: unable to enumerate USB device [ 1153.509190][T21842] netlink: 'syz.3.5281': attribute type 1 has an invalid length. [ 1153.517214][T21842] netlink: 'syz.3.5281': attribute type 2 has an invalid length. [ 1153.606887][ T5617] Bluetooth: hci7: command 0x0c1a tx timeout [ 1153.607216][T12870] Bluetooth: hci1: command 0x0c1a tx timeout [ 1154.155810][T21853] netlink: 'syz.4.5284': attribute type 5 has an invalid length. [ 1154.329516][T21856] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5285'. [ 1154.452882][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5286'. [ 1154.472357][T21858] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5286'. [ 1154.503049][T21858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.773144][ T30] audit: type=1326 audit(1787272602.722:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21857 comm="syz.6.5286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x0 [ 1154.907128][ T5620] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1155.076809][ T5620] usb 4-1: Using ep0 maxpacket: 16 [ 1155.083059][ T5620] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1155.095499][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.104029][ T5620] usb 4-1: Product: syz [ 1155.108420][ T5620] usb 4-1: Manufacturer: syz [ 1155.116226][ T5620] usb 4-1: SerialNumber: syz [ 1155.342355][ T5620] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1155.365952][ T5620] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1155.378063][ T5620] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1155.388703][ T5620] usb 4-1: media controller created [ 1155.419137][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.533451][ T5620] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1155.546843][T15243] net_ratelimit: 28 callbacks suppressed [ 1155.546865][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.613381][ T5620] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1155.643117][T21874] binder: 21873:21874 ioctl 59 200000001cc0 returned -22 [ 1155.676939][T12870] Bluetooth: hci7: command 0x0c1a tx timeout [ 1155.687456][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.695136][T12870] Bluetooth: hci1: command 0x0c1a tx timeout [ 1155.807013][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.815804][T21877] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5294'. [ 1155.917492][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.036881][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.106819][ T188] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1156.147123][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.257133][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.257944][ T188] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1156.274973][ T188] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1156.287778][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1156.299153][ T188] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1156.312302][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.323928][ T188] usb 5-1: config 0 descriptor?? [ 1156.366907][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.478471][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.596974][T15243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.754927][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.773971][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.788282][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.801163][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.812789][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.827150][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.837034][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.844475][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.852258][ T188] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 1156.931577][ T188] magicmouse 0003:05AC:0324.003D: hidraw0: USB HID v7f.fc Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 1157.008947][ T188] usb 5-1: USB disconnect, device number 82 [ 1157.190859][T21888] fido_id[21888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1157.675904][ T188] usb 4-1: USB disconnect, device number 62 [ 1157.843338][T21898] loop4: detected capacity change from 0 to 6 [ 1157.872248][T21898] Dev loop4: unable to read RDB block 6 [ 1157.883792][T21898] loop4: unable to read partition table [ 1157.899654][T21898] loop4: partition table beyond EOD, truncated [ 1157.960010][T21898] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ) failed (rc=-5) [ 1158.158258][ T188] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1158.347229][ T188] usb 4-1: Invalid ep0 maxpacket: 64 [ 1158.423805][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5305'. [ 1158.497306][ T188] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 1158.514788][T21907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.528192][T21911] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1158.537309][T21911] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 1158.569129][T21907] bond4 (unregistering): (slave batadv4): Releasing backup interface [ 1158.580812][T21907] bond4 (unregistering): Released all slaves [ 1158.656904][ T188] usb 4-1: Invalid ep0 maxpacket: 64 [ 1158.667655][ T188] usb usb4-port1: attempt power cycle [ 1158.685229][ T30] audit: type=1326 audit(1787272606.632:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.715747][ T30] audit: type=1326 audit(1787272606.632:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.742448][ T30] audit: type=1326 audit(1787272606.672:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.769780][ T30] audit: type=1326 audit(1787272606.672:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.796462][ T30] audit: type=1326 audit(1787272606.672:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.822502][ T30] audit: type=1326 audit(1787272606.672:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.850022][ T30] audit: type=1326 audit(1787272606.672:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.902661][ T30] audit: type=1326 audit(1787272606.672:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1158.929109][ T30] audit: type=1326 audit(1787272606.672:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.4.5307" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1159.046920][ T188] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1159.068211][ T188] usb 4-1: Invalid ep0 maxpacket: 64 [ 1159.146955][ T5690] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1159.217133][ T188] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1159.237332][ T188] usb 4-1: Invalid ep0 maxpacket: 64 [ 1159.243158][ T188] usb usb4-port1: unable to enumerate USB device [ 1159.308241][ T5690] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1159.319910][ T5690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1159.331135][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1159.342355][ T5690] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1159.355667][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.365569][ T5690] usb 5-1: config 0 descriptor?? [ 1159.806981][ T5690] hid_parser_main: 208 callbacks suppressed [ 1159.807009][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.828822][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.836248][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.845148][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.852735][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.861021][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.869816][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.877678][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.885106][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.892923][ T5690] magicmouse 0003:05AC:0324.003E: unknown main item tag 0x0 [ 1159.922371][ T5690] magicmouse 0003:05AC:0324.003E: hidraw0: USB HID v7f.fc Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 1160.004338][T21930] tipc: Started in network mode [ 1160.012573][T21930] tipc: Node identity 7f000001, cluster identity 4711 [ 1160.050673][ T5690] usb 5-1: USB disconnect, device number 83 [ 1160.105213][T21930] tipc: Enabling of bearer rejected, failed to enable media [ 1160.287879][T21930] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1160.310388][T21930] tipc: Enabled bearer , priority 10 [ 1160.497432][T21934] syz.6.5314 (21934): drop_caches: 2 [ 1160.657293][T20760] net_ratelimit: 32 callbacks suppressed [ 1160.657315][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.778850][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.875420][T21944] random: crng reseeded on system resumption [ 1160.877675][T15389] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1160.889303][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.999189][T15244] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.051677][T15389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1161.062962][T15389] usb 3-1: not running at top speed; connect to a high speed hub [ 1161.078228][T15389] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1161.100469][T15389] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1161.117632][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.134898][T15389] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1161.152764][T15389] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.173258][T21953] tap0: tun_chr_ioctl cmd 1074025677 [ 1161.180194][T21953] tap0: linktype set to 825 [ 1161.180268][T15389] usb 3-1: config 14 has no interface number 0 [ 1161.204731][T15389] usb 3-1: config 14 has no interface number 1 [ 1161.217081][T15389] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1161.228300][T15389] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1161.240434][T15389] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1161.251992][T15389] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1161.265949][T15389] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1161.274274][T15389] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1161.282034][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.302462][T15389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.311272][T15389] usb 3-1: Product: syz [ 1161.315652][T15389] usb 3-1: Manufacturer: syz [ 1161.320588][T15389] usb 3-1: SerialNumber: syz [ 1161.329630][ T5690] tipc: Node number set to 2130706433 [ 1161.399341][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.526850][T21958] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.530244][T21968] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1161.638309][T21960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.764305][T15389] legousbtower 3-1:14.57: interrupt endpoints not found [ 1161.785066][T21974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5326'. [ 1161.901485][ T5690] wiimote 0005:057E:0306.003F: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1161.914294][ T5690] wiimote 0005:057E:0306.003F: New device registered [ 1162.127027][ T188] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1162.165765][T15389] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1162.177549][T15389] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1162.287054][ T188] usb 5-1: Using ep0 maxpacket: 8 [ 1162.294670][ T188] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1162.308015][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.316501][ T188] usb 5-1: Product: syz [ 1162.321076][ T188] usb 5-1: Manufacturer: syz [ 1162.325746][ T188] usb 5-1: SerialNumber: syz [ 1162.545249][ T5730] wiimote 0005:057E:0306.003F: detected device: Nintendo Wii Remote (Gen 1) [ 1162.559009][T21975] wiimote 0005:057E:0306.003F: Device removed [ 1162.571614][ T188] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.601832][ T5730] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input126 [ 1162.657589][ T5730] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input127 [ 1162.702952][ T5730] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input125 [ 1162.740181][ T188] usb 5-1: USB disconnect, device number 84 [ 1162.863367][T17355] udevd[17355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.890959][T15389] usb 3-1: USB disconnect, device number 35 [ 1162.926118][T15389] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1163.169119][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 1163.278473][T21999] xt_nfacct: accounting object `' does not exist [ 1163.356175][T22002] FAULT_INJECTION: forcing a failure. [ 1163.356175][T22002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.376108][T22002] CPU: 0 UID: 0 PID: 22002 Comm: syz.3.5336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.376148][T22002] Tainted: [L]=SOFTLOCKUP [ 1163.376156][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.376168][T22002] Call Trace: [ 1163.376177][T22002] [ 1163.376186][T22002] dump_stack_lvl+0xe8/0x150 [ 1163.376220][T22002] should_fail_ex+0x410/0x560 [ 1163.376249][T22002] _copy_from_iter+0x1d3/0x1660 [ 1163.376271][T22002] ? skb_set_owner_w+0x263/0x3d0 [ 1163.376304][T22002] ? __pfx__copy_from_iter+0x10/0x10 [ 1163.376334][T22002] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1163.376361][T22002] skb_copy_datagram_from_iter+0xe6/0x720 [ 1163.376393][T22002] ? skb_put+0x112/0x210 [ 1163.376427][T22002] tun_get_user+0xc7f/0x44d0 [ 1163.376465][T22002] ? aa_file_perm+0x18b/0x15f0 [ 1163.376496][T22002] ? aa_file_perm+0x4ed/0x15f0 [ 1163.376520][T22002] ? __pfx_tun_get_user+0x10/0x10 [ 1163.376544][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5334'. [ 1163.376543][T22002] ? __lock_acquire+0x683/0x2cf0 [ 1163.376575][T22002] ? kstrtoull+0x12f/0x1d0 [ 1163.376598][T22002] ? ref_tracker_alloc+0x341/0x4b0 [ 1163.376616][T22002] ? get_pid_task+0x20/0x1f0 [ 1163.376642][T22002] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1163.376665][T22002] ? tun_get+0x1c/0x2f0 [ 1163.376684][T22002] ? tun_get+0x1c/0x2f0 [ 1163.376706][T22002] ? tun_get+0x1c/0x2f0 [ 1163.376724][T22002] ? tun_get+0x1c/0x2f0 [ 1163.376746][T22002] tun_chr_write_iter+0x113/0x200 [ 1163.376768][T22002] vfs_write+0x612/0xba0 [ 1163.376802][T22002] ? __pfx_vfs_write+0x10/0x10 [ 1163.376837][T22002] ? __fget_files+0x2a/0x420 [ 1163.376869][T22002] ksys_write+0x150/0x270 [ 1163.376897][T22002] ? __pfx_ksys_write+0x10/0x10 [ 1163.376934][T22002] do_syscall_64+0x166/0x520 [ 1163.376958][T22002] ? trace_irq_disable+0x3b/0x140 [ 1163.376983][T22002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.377002][T22002] ? clear_bhb_loop+0x70/0xc0 [ 1163.377024][T22002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.377042][T22002] RIP: 0033:0x7fd62179e0d9 [ 1163.377062][T22002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.377078][T22002] RSP: 002b:00007fd6225f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1163.377099][T22002] RAX: ffffffffffffffda RBX: 00007fd621a25fa0 RCX: 00007fd62179e0d9 [ 1163.377113][T22002] RDX: 000000000000004a RSI: 0000200000000200 RDI: 0000000000000003 [ 1163.377126][T22002] RBP: 00007fd6225f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.377138][T22002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.377150][T22002] R13: 00007fd621a26038 R14: 00007fd621a25fa0 R15: 00007fd621b4fa48 [ 1163.377179][T22002] [ 1163.653781][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5334'. [ 1163.662874][T21997] netlink: 'syz.2.5334': attribute type 15 has an invalid length. [ 1163.671205][T21997] netlink: 'syz.2.5334': attribute type 18 has an invalid length. [ 1163.865800][T22008] FAULT_INJECTION: forcing a failure. [ 1163.865800][T22008] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.890548][T22008] CPU: 0 UID: 0 PID: 22008 Comm: syz.2.5339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.890584][T22008] Tainted: [L]=SOFTLOCKUP [ 1163.890591][T22008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.890603][T22008] Call Trace: [ 1163.890611][T22008] [ 1163.890620][T22008] dump_stack_lvl+0xe8/0x150 [ 1163.890656][T22008] should_fail_ex+0x410/0x560 [ 1163.890682][T22008] should_failslab+0xa8/0x100 [ 1163.890712][T22008] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1163.890736][T22008] ? skb_clone+0x212/0x3a0 [ 1163.890761][T22008] ? skb_clone+0x212/0x3a0 [ 1163.890791][T22008] skb_clone+0x212/0x3a0 [ 1163.890819][T22008] __netlink_deliver_tap+0x413/0x860 [ 1163.890856][T22008] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.890882][T22008] netlink_deliver_tap+0x19c/0x1b0 [ 1163.890910][T22008] netlink_dump+0x95b/0xee0 [ 1163.890955][T22008] ? __pfx_netlink_dump+0x10/0x10 [ 1163.890994][T22008] ? netlink_recvmsg+0x5bf/0xa50 [ 1163.891018][T22008] ? kmem_cache_free+0x182/0x650 [ 1163.891052][T22008] netlink_recvmsg+0x683/0xa50 [ 1163.891089][T22008] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1163.891122][T22008] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1163.891150][T22008] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1163.891170][T22008] ? security_socket_recvmsg+0x7e/0x2c0 [ 1163.891197][T22008] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1163.891222][T22008] sock_recvmsg+0x196/0x1e0 [ 1163.891255][T22008] __sys_recvfrom+0x231/0x3a0 [ 1163.891283][T22008] ? __pfx___sys_recvfrom+0x10/0x10 [ 1163.891338][T22008] ? do_user_addr_fault+0xc4c/0x1340 [ 1163.891373][T22008] __x64_sys_recvfrom+0xde/0x100 [ 1163.891400][T22008] do_syscall_64+0x166/0x520 [ 1163.891428][T22008] ? trace_irq_disable+0x3b/0x140 [ 1163.891455][T22008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.891477][T22008] ? clear_bhb_loop+0x70/0xc0 [ 1163.891504][T22008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.891525][T22008] RIP: 0033:0x7fd174f5e90e [ 1163.891547][T22008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.891566][T22008] RSP: 002b:00007fd175f0ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1163.891590][T22008] RAX: ffffffffffffffda RBX: 00007fd175f0e6c0 RCX: 00007fd174f5e90e [ 1163.891611][T22008] RDX: 0000000000001000 RSI: 00007fd175f0d000 RDI: 0000000000000003 [ 1163.891625][T22008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.891638][T22008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1163.891651][T22008] R13: 00007fd175f0cf58 R14: 00007fd175f0d000 R15: 0000000000000000 [ 1163.891685][T22008] [ 1164.195999][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1164.196020][ T30] audit: type=1326 audit(1787272612.132:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.227523][ T30] audit: type=1326 audit(1787272612.132:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.260259][ T30] audit: type=1326 audit(1787272612.132:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.287321][ T30] audit: type=1326 audit(1787272612.132:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.312991][ T30] audit: type=1326 audit(1787272612.132:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.338776][ T30] audit: type=1326 audit(1787272612.132:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.363435][ T30] audit: type=1326 audit(1787272612.132:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.388344][ T30] audit: type=1326 audit(1787272612.132:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.413438][ T30] audit: type=1326 audit(1787272612.132:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.438773][ T30] audit: type=1326 audit(1787272612.132:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.6.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1164.624055][T22022] syz.2.5345 (22022): drop_caches: 2 [ 1165.021906][T22032] fuse: Unknown parameter '000000000000000000030x0000000000000005' [ 1165.037803][T22032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.346875][T15389] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1165.496992][T15389] usb 4-1: Using ep0 maxpacket: 16 [ 1165.502940][T15389] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1165.513597][T15389] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.530061][T15389] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.541194][T15389] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1165.554817][T15389] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1165.561608][T15389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.572302][T15389] usb 4-1: config 0 descriptor?? [ 1165.679778][T22036] binder: 22035:22036 ioctl 59 200000001cc0 returned -22 [ 1165.718120][T15255] net_ratelimit: 31 callbacks suppressed [ 1165.718144][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.837251][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.946849][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.985251][T15389] usbhid 4-1:0.0: can't add hid device: -71 [ 1165.994416][T15389] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1166.008142][T15389] usb 4-1: USB disconnect, device number 67 [ 1166.056897][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.166893][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.286953][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.396869][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.507475][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.617479][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.640164][T22042] Invalid argument reading file caps for ./file0 [ 1166.651607][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 1166.748501][T20762] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.831069][T22039] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5352'. [ 1167.515705][T22048] netlink: 'syz.2.5354': attribute type 4 has an invalid length. [ 1167.524141][T22048] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 1167.532834][T22048] FAULT_INJECTION: forcing a failure. [ 1167.532834][T22048] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.545609][T22048] CPU: 0 UID: 0 PID: 22048 Comm: syz.2.5354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.545642][T22048] Tainted: [L]=SOFTLOCKUP [ 1167.545650][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.545662][T22048] Call Trace: [ 1167.545671][T22048] [ 1167.545680][T22048] dump_stack_lvl+0xe8/0x150 [ 1167.545720][T22048] should_fail_ex+0x410/0x560 [ 1167.545754][T22048] should_failslab+0xa8/0x100 [ 1167.545785][T22048] __kmalloc_noprof+0xfe/0x720 [ 1167.545809][T22048] ? queue_work_on+0x159/0x1d0 [ 1167.545835][T22048] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1167.545960][T22048] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1167.545994][T22048] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 1167.546023][T22048] switchdev_deferred_enqueue+0x2d/0x240 [ 1167.546057][T22048] br_set_state+0x38d/0x6f0 [ 1167.546118][T22048] ? __pfx_br_set_state+0x10/0x10 [ 1167.546141][T22048] ? do_raw_spin_lock+0x12b/0x2f0 [ 1167.546167][T22048] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1167.546192][T22048] ? kasan_save_track+0x4f/0x80 [ 1167.546218][T22048] ? br_setport+0xd77/0x17d0 [ 1167.546248][T22048] br_setport+0x13b0/0x17d0 [ 1167.546276][T22048] ? ____sys_sendmsg+0x54e/0x850 [ 1167.546307][T22048] ? __pfx_br_setport+0x10/0x10 [ 1167.546344][T22048] ? __nla_parse+0x40/0x60 [ 1167.546376][T22048] br_setlink+0x4d4/0x830 [ 1167.546411][T22048] ? __pfx_br_setlink+0x10/0x10 [ 1167.546487][T22048] ? __local_bh_enable_ip+0xd6/0x140 [ 1167.546517][T22048] ? mutex_is_locked+0x17/0x50 [ 1167.546543][T22048] rtnl_bridge_setlink+0x5b6/0x7e0 [ 1167.546576][T22048] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1167.546607][T22048] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1167.546628][T22048] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1167.546653][T22048] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1167.546677][T22048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1167.546695][T22048] ? ref_tracker_free+0x689/0x830 [ 1167.546721][T22048] ? __pfx_ref_tracker_free+0x10/0x10 [ 1167.546756][T22048] netlink_rcv_skb+0x226/0x4a0 [ 1167.546782][T22048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1167.546805][T22048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1167.546841][T22048] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.546865][T22048] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.546895][T22048] netlink_unicast+0x7bd/0x940 [ 1167.546930][T22048] netlink_sendmsg+0x813/0xb40 [ 1167.546965][T22048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.546995][T22048] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1167.547030][T22048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.547055][T22048] sock_sendmsg_nosec+0x13a/0x180 [ 1167.547087][T22048] ____sys_sendmsg+0x54e/0x850 [ 1167.547117][T22048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.547151][T22048] ? import_iovec+0x73/0xa0 [ 1167.547181][T22048] ___sys_sendmsg+0x2a5/0x360 [ 1167.547204][T22048] ? __lock_acquire+0x683/0x2cf0 [ 1167.547237][T22048] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.547296][T22048] ? __fget_files+0x2a/0x420 [ 1167.547323][T22048] ? __fget_files+0x3a2/0x420 [ 1167.547360][T22048] __x64_sys_sendmsg+0x1b1/0x290 [ 1167.547386][T22048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.547433][T22048] do_syscall_64+0x166/0x520 [ 1167.547474][T22048] ? trace_irq_disable+0x3b/0x140 [ 1167.547501][T22048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.547525][T22048] ? clear_bhb_loop+0x70/0xc0 [ 1167.547550][T22048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.547571][T22048] RIP: 0033:0x7fd174f9e0d9 [ 1167.547593][T22048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.547610][T22048] RSP: 002b:00007fd175f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.547632][T22048] RAX: ffffffffffffffda RBX: 00007fd175225fa0 RCX: 00007fd174f9e0d9 [ 1167.547646][T22048] RDX: 0000000000004054 RSI: 0000200000000000 RDI: 0000000000000003 [ 1167.547660][T22048] RBP: 00007fd175f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.547673][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.547686][T22048] R13: 00007fd175226038 R14: 00007fd175225fa0 R15: 00007fd17534fa48 [ 1167.547721][T22048] [ 1167.943695][T22048] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 1168.091595][T22056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1168.157249][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1168.173045][T22056] xt_bpf: check failed: parse error [ 1168.218480][T22064] netlink: 'syz.2.5359': attribute type 1 has an invalid length. [ 1168.289563][T22068] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5360'. [ 1168.718755][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5361'. [ 1168.975621][T22079] binder: 22078:22079 ioctl 59 200000001cc0 returned -22 [ 1169.724539][T22086] FAULT_INJECTION: forcing a failure. [ 1169.724539][T22086] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.738391][T22086] CPU: 0 UID: 0 PID: 22086 Comm: syz.2.5365 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.738426][T22086] Tainted: [L]=SOFTLOCKUP [ 1169.738433][T22086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1169.738445][T22086] Call Trace: [ 1169.738453][T22086] [ 1169.738462][T22086] dump_stack_lvl+0xe8/0x150 [ 1169.738499][T22086] should_fail_ex+0x410/0x560 [ 1169.738523][T22086] should_failslab+0xa8/0x100 [ 1169.738541][T22086] __kmalloc_noprof+0xfe/0x720 [ 1169.738556][T22086] ? tomoyo_encode+0x2ad/0x570 [ 1169.738571][T22086] ? tomoyo_encode+0x2ad/0x570 [ 1169.738589][T22086] tomoyo_encode+0x2ad/0x570 [ 1169.738608][T22086] tomoyo_realpath_from_path+0x5fa/0x640 [ 1169.738631][T22086] tomoyo_check_open_permission+0x229/0x470 [ 1169.738645][T22086] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1169.738658][T22086] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1169.738672][T22086] ? __asan_memset+0x22/0x50 [ 1169.738692][T22086] ? lockdep_hardirqs_on+0x7b/0x110 [ 1169.738724][T22086] ? tomoyo_file_open+0x163/0x220 [ 1169.738743][T22086] security_file_open+0xa9/0x240 [ 1169.738757][T22086] do_dentry_open+0x4a0/0x1380 [ 1169.738778][T22086] vfs_open+0x3b/0x340 [ 1169.738791][T22086] ? path_openat+0x1428/0x1d60 [ 1169.738805][T22086] path_openat+0x1443/0x1d60 [ 1169.738829][T22086] do_file_open+0x23e/0x4a0 [ 1169.738847][T22086] ? __pfx_do_file_open+0x10/0x10 [ 1169.738872][T22086] ? _raw_spin_unlock+0x28/0x50 [ 1169.738887][T22086] ? alloc_fd+0x651/0x6c0 [ 1169.738909][T22086] do_sys_openat2+0x115/0x200 [ 1169.738926][T22086] ? __pfx_do_sys_openat2+0x10/0x10 [ 1169.738942][T22086] ? ksys_write+0x242/0x270 [ 1169.738960][T22086] ? __pfx_ksys_write+0x10/0x10 [ 1169.738988][T22086] __x64_sys_openat+0x138/0x170 [ 1169.739018][T22086] do_syscall_64+0x166/0x520 [ 1169.739044][T22086] ? trace_irq_disable+0x3b/0x140 [ 1169.739067][T22086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.739079][T22086] ? clear_bhb_loop+0x70/0xc0 [ 1169.739094][T22086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.739107][T22086] RIP: 0033:0x7fd174f9e0d9 [ 1169.739120][T22086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.739131][T22086] RSP: 002b:00007fd175f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1169.739146][T22086] RAX: ffffffffffffffda RBX: 00007fd175225fa0 RCX: 00007fd174f9e0d9 [ 1169.739155][T22086] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1169.739164][T22086] RBP: 00007fd175f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.739172][T22086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.739180][T22086] R13: 00007fd175226038 R14: 00007fd175225fa0 R15: 00007fd17534fa48 [ 1169.739198][T22086] [ 1169.739235][T22086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1170.089218][T22086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1170.102633][T22086] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1170.236043][T22093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1170.321987][T22098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.331233][T22098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.556938][T15389] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1170.586857][ T5620] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1170.716974][T15389] usb 5-1: Using ep0 maxpacket: 8 [ 1170.722961][T15389] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 1170.750114][T15389] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1170.766923][ T5620] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1170.776858][T15389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.797117][T15389] usb 5-1: config 0 has no interface number 0 [ 1170.797471][T21723] net_ratelimit: 31 callbacks suppressed [ 1170.797487][T21723] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.807262][T15389] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1170.839369][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.847741][ T5620] usb 3-1: Product: syz [ 1170.851902][ T5620] usb 3-1: Manufacturer: syz [ 1170.856546][ T5620] usb 3-1: SerialNumber: syz [ 1170.876898][T15389] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1170.893719][ T5620] usb 3-1: config 0 descriptor?? [ 1170.902291][T15389] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1170.917261][T21723] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.921594][T15389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.933380][T15389] usb 5-1: Product: syz [ 1170.938014][T15389] usb 5-1: Manufacturer: syz [ 1170.942728][T15389] usb 5-1: SerialNumber: syz [ 1170.954112][T15389] usb 5-1: config 0 descriptor?? [ 1171.036846][T21723] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.157778][T21960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.174254][T15389] usb 5-1: USB disconnect, device number 85 [ 1171.276872][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.408318][T21723] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.537026][T21723] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.657288][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.670763][ T5620] mos7840 3-1:0.0: required endpoints missing [ 1171.710062][ T5620] usb 3-1: USB disconnect, device number 36 [ 1171.809214][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.886645][T22128] netlink: zone id is out of range [ 1172.092919][T22135] binfmt_misc: register: failed to install interpreter ./cgroup [ 1172.112898][T22136] fuse: Bad value for 'fd' [ 1172.136988][T15389] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1172.157112][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 1172.163628][T12870] Bluetooth: hci7: command 0x0c1a tx timeout [ 1172.287281][T15389] usb 5-1: Using ep0 maxpacket: 8 [ 1172.295860][T15389] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1172.307960][T15389] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.318954][T15389] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.334522][T15389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.343659][T15389] usb 5-1: Product: syz [ 1172.348603][T15389] usb 5-1: Manufacturer: syz [ 1172.353427][T15389] usb 5-1: SerialNumber: syz [ 1172.666030][T15389] usb 5-1: unit 6 not found! [ 1172.756200][T15389] usb 5-1: USB disconnect, device number 86 [ 1172.807700][T17139] udevd[17139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.552198][T22158] Invalid logical block size (50331648) [ 1173.647244][ T188] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1173.815993][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1173.816013][ T30] audit: type=1326 audit(1787272621.762:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1173.847658][ T188] usb 5-1: Using ep0 maxpacket: 8 [ 1173.854585][T22165] FAULT_INJECTION: forcing a failure. [ 1173.854585][T22165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.869146][ T188] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1173.883363][ T30] audit: type=1326 audit(1787272621.762:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1173.909475][ T188] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1173.915892][T22165] CPU: 1 UID: 0 PID: 22165 Comm: syz.6.5391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.915925][T22165] Tainted: [L]=SOFTLOCKUP [ 1173.915932][T22165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1173.915944][T22165] Call Trace: [ 1173.915952][T22165] [ 1173.915961][T22165] dump_stack_lvl+0xe8/0x150 [ 1173.915994][T22165] should_fail_ex+0x410/0x560 [ 1173.916021][T22165] _copy_to_user+0x31/0xb0 [ 1173.916048][T22165] simple_read_from_buffer+0xe1/0x170 [ 1173.916080][T22165] proc_fail_nth_read+0x1bb/0x230 [ 1173.916103][T22165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1173.916125][T22165] ? rw_verify_area+0x24a/0x4c0 [ 1173.916154][T22165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1173.916171][T22165] vfs_read+0x213/0xa80 [ 1173.916202][T22165] ? __pfx___mutex_lock+0x10/0x10 [ 1173.916229][T22165] ? __pfx_vfs_read+0x10/0x10 [ 1173.916257][T22165] ? __fget_files+0x2a/0x420 [ 1173.916285][T22165] ? __fget_files+0x3a2/0x420 [ 1173.916308][T22165] ? __fget_files+0x2a/0x420 [ 1173.916340][T22165] ksys_read+0x150/0x270 [ 1173.916368][T22165] ? __pfx_ksys_read+0x10/0x10 [ 1173.916398][T22165] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1173.916422][T22165] do_syscall_64+0x166/0x520 [ 1173.916446][T22165] ? trace_irq_disable+0x3b/0x140 [ 1173.916469][T22165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.916487][T22165] ? clear_bhb_loop+0x70/0xc0 [ 1173.916510][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.916528][T22165] RIP: 0033:0x7fd10af5e90e [ 1173.916546][T22165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1173.916563][T22165] RSP: 002b:00007fd10be16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1173.916585][T22165] RAX: ffffffffffffffda RBX: 00007fd10be176c0 RCX: 00007fd10af5e90e [ 1173.916599][T22165] RDX: 000000000000000f RSI: 00007fd10be170a0 RDI: 0000000000000003 [ 1173.916610][T22165] RBP: 00007fd10be17090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.916622][T22165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.916634][T22165] R13: 00007fd10b226038 R14: 00007fd10b225fa0 R15: 00007fd10b34fa48 [ 1173.916663][T22165] [ 1174.136953][ T30] audit: type=1326 audit(1787272621.802:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd10af5e90e code=0x7ffc0000 [ 1174.182066][ T30] audit: type=1326 audit(1787272621.802:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd10af5e90e code=0x7ffc0000 [ 1174.206421][ T30] audit: type=1326 audit(1787272621.802:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1174.237901][ T30] audit: type=1326 audit(1787272621.802:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd10af5e90e code=0x7ffc0000 [ 1174.265409][ T30] audit: type=1326 audit(1787272621.882:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd10af5e90e code=0x7ffc0000 [ 1174.291740][ T30] audit: type=1326 audit(1787272621.882:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd10af5e90e code=0x7ffc0000 [ 1174.318522][ T30] audit: type=1326 audit(1787272621.882:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22164 comm="syz.6.5391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd10af9e0d9 code=0x7ffc0000 [ 1174.351657][ T188] usb 5-1: config 179 has no interface number 0 [ 1174.362116][ T188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1174.374385][ T188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1174.386231][ T188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1174.398892][ T188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1174.409214][ T188] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1174.422884][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.443883][T22153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1174.461519][ T188] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 1174.669794][ T188] usb 5-1: USB disconnect, device number 87 [ 1174.746787][T15389] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1174.900946][T15389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1174.912614][T15389] usb 3-1: not running at top speed; connect to a high speed hub [ 1174.923522][T15389] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1174.934984][T15389] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1174.944838][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.955497][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.971125][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.982436][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.997458][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.008065][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.025432][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.036062][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.052225][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.064705][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.081596][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.093931][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.109318][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.121424][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.143340][T15389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.172679][T15389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.202956][T15389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.219382][T15389] usb 3-1: Product: syz [ 1175.230936][T15389] usb 3-1: Manufacturer: syz [ 1175.247221][T15389] usb 3-1: SerialNumber: syz [ 1175.352425][T22181] x_tables: duplicate underflow at hook 1 [ 1175.412331][T22184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5397'. [ 1175.533651][T15389] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.546061][T15389] usb 3-1: MIDIStreaming interface descriptor not found [ 1175.796919][T15389] usb 3-1: USB disconnect, device number 37 [ 1175.899642][T15255] net_ratelimit: 37 callbacks suppressed [ 1175.899665][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.017937][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.146814][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.268258][T15255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.337071][ T5620] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1176.386845][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.487648][ T5620] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1176.500229][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.506825][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.508946][ T5620] usb 4-1: Product: syz [ 1176.521525][ T5620] usb 4-1: Manufacturer: syz [ 1176.526242][ T5620] usb 4-1: SerialNumber: syz [ 1176.549281][T15389] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1176.616860][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.726847][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.836868][T21960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.946804][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.970877][ T5747] usb 4-1: USB disconnect, device number 68 [ 1177.077156][T22214] loop4: detected capacity change from 0 to 6 [ 1177.084252][T22214] Dev loop4: unable to read RDB block 6 [ 1177.091952][T22214] loop4: unable to read partition table [ 1177.098703][T22214] loop4: partition table beyond EOD, truncated [ 1177.105271][T22214] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ) failed (rc=-5) [ 1177.282974][T22219] FAULT_INJECTION: forcing a failure. [ 1177.282974][T22219] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.296597][T22219] CPU: 1 UID: 0 PID: 22219 Comm: syz.2.5411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.296621][T22219] Tainted: [L]=SOFTLOCKUP [ 1177.296626][T22219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.296633][T22219] Call Trace: [ 1177.296639][T22219] [ 1177.296644][T22219] dump_stack_lvl+0xe8/0x150 [ 1177.296681][T22219] should_fail_ex+0x410/0x560 [ 1177.296721][T22219] should_failslab+0xa8/0x100 [ 1177.296750][T22219] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1177.296776][T22219] ? skb_clone+0x212/0x3a0 [ 1177.296798][T22219] ? skb_clone+0x212/0x3a0 [ 1177.296827][T22219] skb_clone+0x212/0x3a0 [ 1177.296854][T22219] __netlink_deliver_tap+0x413/0x860 [ 1177.296890][T22219] ? netlink_deliver_tap+0x2e/0x1b0 [ 1177.296916][T22219] netlink_deliver_tap+0x19c/0x1b0 [ 1177.296942][T22219] netlink_dump+0x95b/0xee0 [ 1177.296977][T22219] ? __pfx_netlink_dump+0x10/0x10 [ 1177.297013][T22219] ? netlink_recvmsg+0x5bf/0xa50 [ 1177.297038][T22219] ? kmem_cache_free+0x182/0x650 [ 1177.297071][T22219] netlink_recvmsg+0x683/0xa50 [ 1177.297108][T22219] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1177.297137][T22219] ? __pfx___up_read+0x10/0x10 [ 1177.297160][T22219] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1177.297189][T22219] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1177.297212][T22219] ? security_socket_recvmsg+0x7e/0x2c0 [ 1177.297243][T22219] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1177.297270][T22219] sock_recvmsg+0x196/0x1e0 [ 1177.297303][T22219] ____sys_recvmsg+0x1e6/0x4a0 [ 1177.297338][T22219] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1177.297381][T22219] ? import_iovec+0x73/0xa0 [ 1177.297411][T22219] ___sys_recvmsg+0x213/0x5a0 [ 1177.297444][T22219] ? __pfx____sys_recvmsg+0x10/0x10 [ 1177.297475][T22219] ? __fget_files+0x2a/0x420 [ 1177.297522][T22219] ? __fget_files+0x3a2/0x420 [ 1177.297562][T22219] do_recvmmsg+0x31a/0x7f0 [ 1177.297598][T22219] ? __pfx_do_recvmmsg+0x10/0x10 [ 1177.297637][T22219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1177.297670][T22219] ? __fget_files+0x3a2/0x420 [ 1177.297752][T22219] __x64_sys_recvmmsg+0x198/0x250 [ 1177.297782][T22219] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1177.297821][T22219] do_syscall_64+0x166/0x520 [ 1177.297848][T22219] ? trace_irq_disable+0x3b/0x140 [ 1177.297874][T22219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.297894][T22219] ? clear_bhb_loop+0x70/0xc0 [ 1177.297919][T22219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.297939][T22219] RIP: 0033:0x7fd174f9e0d9 [ 1177.297957][T22219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.297968][T22219] RSP: 002b:00007fd175f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1177.297984][T22219] RAX: ffffffffffffffda RBX: 00007fd175225fa0 RCX: 00007fd174f9e0d9 [ 1177.297994][T22219] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1177.298002][T22219] RBP: 00007fd175f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.298010][T22219] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1177.298018][T22219] R13: 00007fd175226038 R14: 00007fd175225fa0 R15: 00007fd17534fa48 [ 1177.298036][T22219] [ 1177.611522][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.618032][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.624883][T15389] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1177.632094][T15389] ath9k_htc: Failed to initialize the device [ 1177.642638][ T5747] usb 4-1: ath9k_htc: USB layer deinitialized [ 1177.753258][T22223] use of bytesused == 0 is deprecated and will be removed in the future, [ 1177.763373][T22223] use the actual size instead. [ 1178.094937][T22236] bond4: entered promiscuous mode [ 1178.112762][T22236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1179.279151][ T188] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1179.456832][ T188] usb 4-1: Using ep0 maxpacket: 8 [ 1179.462506][ T188] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1179.473010][ T188] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1179.484428][ T188] usb 4-1: config 179 has no interface number 0 [ 1179.491844][ T188] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1179.503590][ T188] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1179.516035][ T188] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1179.528027][ T188] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1179.561755][T22272] program syz.7.5429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.585020][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.625540][T22254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1179.631349][T22276] rdma_op ffff88807a2c4a38 conn xmit_rdma 0000000000000000 [ 1180.207361][T22294] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1180.298056][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5437'. [ 1180.661411][T22303] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1180.913361][T20764] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1180.925158][T22307] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1180.933831][ T188] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1180.955313][T22301] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1180.975079][T22307] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1180.983415][T20764] net_ratelimit: 34 callbacks suppressed [ 1180.983437][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1180.997950][T22307] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1181.010337][T22307] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1181.030369][T22307] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 1181.039945][T22307] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1181.050276][T22307] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 1181.059147][T22307] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1181.067467][T22307] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 1181.109946][T20760] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.117678][ T188] usb 3-1: Using ep0 maxpacket: 8 [ 1181.148954][ T188] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1181.164145][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.175401][ T188] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1181.185302][ T188] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.201088][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.213331][ T188] usb 3-1: Product: syz [ 1181.219950][ T188] usb 3-1: Manufacturer: syz [ 1181.225214][ T188] usb 3-1: SerialNumber: syz [ 1181.230137][T21964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.357231][T21964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.388563][ T5690] usb 4-1: USB disconnect, device number 69 [ 1181.487051][T21964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.608920][T21964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.728619][T20757] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.757899][ T188] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1181.777363][ T188] usb 3-1: clock source 0 is not valid, cannot use [ 1181.790351][ T188] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1181.808001][ T188] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1181.876922][T20757] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.949821][ T188] usb 3-1: USB disconnect, device number 38 [ 1182.001281][T21964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.323833][T22328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1182.341109][T20764] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.350295][T22328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1182.363597][T22328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1182.595912][T22336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1182.607426][T22336] bond_slave_0: default FDB implementation only supports local addresses [ 1182.618248][T22336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1182.686847][ T5747] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1182.847099][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 1182.855512][ T5747] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1182.865774][ T5747] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 1182.878964][ T5747] usb 5-1: config 4 has an invalid interface number: 213 but max is 0 [ 1182.887969][ T5747] usb 5-1: config 4 has no interface number 0 [ 1182.894365][ T5747] usb 5-1: config 4 interface 213 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1182.906376][ T5747] usb 5-1: config 4 interface 213 has no altsetting 0 [ 1182.918761][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.928257][ T5747] usb 5-1: Product: syz [ 1182.932609][ T5747] usb 5-1: Manufacturer: syz [ 1182.938745][ T5747] usb 5-1: SerialNumber: syz [ 1183.213429][ T5747] ushc 5-1:4.213: probe with driver ushc failed with error -71 [ 1183.272360][ T5747] usb 5-1: USB disconnect, device number 88 [ 1183.977387][ T188] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1184.018547][T22368] loop4: detected capacity change from 0 to 6 [ 1184.047348][T22368] Dev loop4: unable to read RDB block 6 [ 1184.055855][T22368] loop4: unable to read partition table [ 1184.076372][T22368] loop4: partition table beyond EOD, truncated [ 1184.104038][T22368] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ) failed (rc=-5) [ 1184.166816][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 1184.179272][ T188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1184.195136][ T188] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1184.222232][ T188] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1184.234645][ T4979] Dev loop4: unable to read RDB block 6 [ 1184.244294][ T188] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1184.255215][ T4979] loop4: unable to read partition table [ 1184.268813][ T4979] loop4: partition table beyond EOD, truncated [ 1184.277111][ T188] usb 3-1: config 14 has no interface number 0 [ 1184.296542][ T188] usb 3-1: config 14 has no interface number 1 [ 1184.313835][ T188] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1184.341762][ T188] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1184.391897][ T188] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1184.445233][ T188] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1184.465399][ T188] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1184.485298][ T188] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.503164][ T188] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1184.516626][ T188] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1184.530078][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.545033][ T188] usb 3-1: Product: syz [ 1184.552283][ T188] usb 3-1: Manufacturer: syz [ 1184.563082][ T188] usb 3-1: SerialNumber: syz [ 1184.999600][ T188] legousbtower 3-1:14.57: interrupt endpoints not found [ 1185.304681][T22403] binder: 22402:22403 ioctl c0306201 200000000040 returned -14 [ 1185.323043][T22403] binder: 22402:22403 ioctl c0306201 200000000640 returned -22 [ 1185.343970][T22403] FAULT_INJECTION: forcing a failure. [ 1185.343970][T22403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.379516][T22403] CPU: 1 UID: 0 PID: 22403 Comm: syz.4.5474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.379551][T22403] Tainted: [L]=SOFTLOCKUP [ 1185.379559][T22403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.379571][T22403] Call Trace: [ 1185.379580][T22403] [ 1185.379591][T22403] dump_stack_lvl+0xe8/0x150 [ 1185.379623][T22403] should_fail_ex+0x410/0x560 [ 1185.379654][T22403] _copy_to_user+0x31/0xb0 [ 1185.379673][T22403] simple_read_from_buffer+0xe1/0x170 [ 1185.379693][T22403] proc_fail_nth_read+0x1bb/0x230 [ 1185.379712][T22403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1185.379737][T22403] ? rw_verify_area+0x24a/0x4c0 [ 1185.379767][T22403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1185.379786][T22403] vfs_read+0x213/0xa80 [ 1185.379815][T22403] ? __pfx___mutex_lock+0x10/0x10 [ 1185.379834][T22403] ? __pfx_vfs_read+0x10/0x10 [ 1185.379853][T22403] ? __fget_files+0x2a/0x420 [ 1185.379878][T22403] ? __fget_files+0x3a2/0x420 [ 1185.379904][T22403] ? __fget_files+0x2a/0x420 [ 1185.379938][T22403] ksys_read+0x150/0x270 [ 1185.379968][T22403] ? __pfx_ksys_read+0x10/0x10 [ 1185.379992][T22403] do_syscall_64+0x166/0x520 [ 1185.380009][T22403] ? trace_irq_disable+0x3b/0x140 [ 1185.380029][T22403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.380058][T22403] ? clear_bhb_loop+0x70/0xc0 [ 1185.380082][T22403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.380101][T22403] RIP: 0033:0x7f10cdb5e90e [ 1185.380121][T22403] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.380134][T22403] RSP: 002b:00007f10ce984fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1185.380148][T22403] RAX: ffffffffffffffda RBX: 00007f10ce9856c0 RCX: 00007f10cdb5e90e [ 1185.380158][T22403] RDX: 000000000000000f RSI: 00007f10ce9850a0 RDI: 0000000000000006 [ 1185.380165][T22403] RBP: 00007f10ce985090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.380173][T22403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.380183][T22403] R13: 00007f10cde26038 R14: 00007f10cde25fa0 R15: 00007f10cdf4fa48 [ 1185.380214][T22403] [ 1185.616051][ T5697] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1185.667995][ T188] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1185.718043][ T188] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1185.779424][ T5697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1185.787710][ T5697] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 1185.798240][ T5697] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.811029][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.819308][ T5697] usb 4-1: Product: syz [ 1185.823511][ T5697] usb 4-1: Manufacturer: syz [ 1185.828628][ T5697] usb 4-1: SerialNumber: syz [ 1185.909526][ T5697] comedi comedi5: Wrong number of endpoints [ 1185.942415][ T5697] dt9812 4-1:5.0: driver 'dt9812' failed to auto-configure device. [ 1186.050177][T21956] net_ratelimit: 31 callbacks suppressed [ 1186.050201][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.179725][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.226897][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.255071][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.273322][T22404] usb 3-1: LEGO USB Tower reset control request failed [ 1186.306892][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.438868][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.487818][ T188] usb 3-1: USB disconnect, device number 39 [ 1186.530412][ T188] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1186.557582][T22384] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.687031][T22387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.817274][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.938360][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.066938][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.296880][T22387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.976908][T15389] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1188.167020][T15389] usb 3-1: Using ep0 maxpacket: 16 [ 1188.179930][T15389] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1188.191584][T15389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.303354][T15389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.303407][T15389] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1188.303460][T15389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.363289][T15389] usb 3-1: config 0 descriptor?? [ 1188.376858][ T5690] usb 4-1: USB disconnect, device number 70 [ 1189.176797][ T188] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1189.337875][T22486] fuse: Bad value for 'group_id' [ 1189.347784][ T188] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1189.352312][T22486] fuse: Bad value for 'group_id' [ 1189.371074][ T188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.386752][ T188] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.401459][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1189.417014][ T188] usb 5-1: SerialNumber: syz [ 1189.707703][ T188] usb 5-1: 0:2 : does not exist [ 1189.715967][ T188] usb 5-1: unit 5 not found! [ 1189.785037][ T188] usb 5-1: USB disconnect, device number 89 [ 1189.839686][T17139] udevd[17139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.136961][ T5697] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1190.296591][ T5697] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1190.319383][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.322732][T22492] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5502'. [ 1190.340859][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1190.340951][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.348662][ T5697] usb 4-1: config 0 descriptor?? [ 1190.737925][T15389] usbhid 3-1:0.0: can't add hid device: -71 [ 1190.757724][T15389] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1190.778334][T15389] usb 3-1: USB disconnect, device number 40 [ 1190.803091][ T5697] hid_parser_main: 207 callbacks suppressed [ 1190.803128][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.817165][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.823010][T22498] usb usb9: usbfs: process 22498 (syz.2.5505) did not claim interface 0 before use [ 1190.824296][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.837890][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'. [ 1190.843864][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.861057][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.868407][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.875750][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.883631][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.883779][ T30] audit: type=1326 audit(1787272638.842:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.2.5505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd174f9e0d9 code=0x0 [ 1190.891041][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.915466][ T188] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1190.922970][ T5697] itetech 0003:258A:6A88.0040: unknown main item tag 0x0 [ 1190.937517][ T5697] itetech 0003:258A:6A88.0040: unbalanced collection at end of report description [ 1190.948385][ T5697] itetech 0003:258A:6A88.0040: probe with driver itetech failed with error -22 [ 1191.034531][T22490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1191.045334][T22490] unsupported nla_type 255 [ 1191.051913][T22490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1191.077695][T22384] net_ratelimit: 30 callbacks suppressed [ 1191.077712][T22384] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.113715][T22500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1191.123204][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 1191.130975][ T188] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.141762][ T188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.153134][ T188] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1191.162538][ T188] usb 5-1: config 1 has no interface number 1 [ 1191.169425][ T188] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.183014][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.191541][ T188] usb 5-1: Product: syz [ 1191.195889][ T188] usb 5-1: Manufacturer: syz [ 1191.200904][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.201049][ T188] usb 5-1: SerialNumber: syz [ 1191.223693][ T188] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1191.231663][ T188] usb 5-1: 2:1 : format type 6 is not supported yet [ 1191.316881][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.422831][T22494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.431913][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.433788][T22494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.546977][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.656936][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.753539][ T188] usb 5-1: USB disconnect, device number 90 [ 1191.777207][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.907675][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.970978][T22509] binder: 22507:22509 ioctl c0306201 200000000080 returned -22 [ 1192.036854][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1192.159640][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1192.656930][ T188] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1192.728892][T22521] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1192.752208][T22521] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1192.765582][T22521] tipc: Enabled bearer , priority 10 [ 1192.817821][ T188] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1192.832516][ T188] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1192.857230][ T188] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1192.869387][ T188] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x7A, changing to 0xA [ 1192.882691][ T10] usb 4-1: USB disconnect, device number 71 [ 1192.929386][ T188] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0xA has an invalid bInterval 108, changing to 10 [ 1192.940845][ T188] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0xA has invalid maxpacket 25697, setting to 1024 [ 1192.979714][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.988882][ T188] usb 5-1: Product: syz [ 1193.008100][ T188] usb 5-1: Manufacturer: syz [ 1193.012844][ T188] usb 5-1: SerialNumber: syz [ 1193.245805][ T188] usb 5-1: 0:2 : does not exist [ 1193.317861][ T188] usb 5-1: USB disconnect, device number 91 [ 1193.355121][T17139] udevd[17139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.557935][T22535] netlink: 'syz.7.5518': attribute type 3 has an invalid length. [ 1193.566142][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5518'. [ 1193.686549][T22543] Invalid logical block size (50331648) [ 1193.736104][T22545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1193.798667][ T188] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1193.949154][T22548] could not allocate digest TFM handle sha384-ssse3 [ 1193.960456][T22557] loop4: detected capacity change from 0 to 6 [ 1193.975118][T22557] Dev loop4: unable to read RDB block 6 [ 1193.988194][ T188] usb 4-1: not running at top speed; connect to a high speed hub [ 1193.998115][T22557] loop4: unable to read partition table [ 1194.001557][ T188] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 1194.004310][T22557] loop4: partition table beyond EOD, truncated [ 1194.023956][T22557] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ) failed (rc=-5) [ 1194.026537][ T188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.067867][ T4979] Dev loop4: unable to read RDB block 6 [ 1194.078503][ T4979] loop4: unable to read partition table [ 1194.084407][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.094715][ T4979] loop4: partition table beyond EOD, truncated [ 1194.109473][ T188] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1194.131149][T22561] netlink: 'syz.4.5526': attribute type 1 has an invalid length. [ 1194.253404][T22561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5526'. [ 1194.290363][T22563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1194.311116][T22563] bond4: (slave bond5): making interface the new active one [ 1194.324061][T22563] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1194.341893][T22561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1194.463650][T22571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1194.480181][T22571] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1194.495543][T22571] bond6: (slave batadv5): Enslaving as an active interface with an up link [ 1194.507377][T22571] FAULT_INJECTION: forcing a failure. [ 1194.507377][T22571] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.520301][T22571] CPU: 0 UID: 0 PID: 22571 Comm: syz.4.5529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1194.520335][T22571] Tainted: [L]=SOFTLOCKUP [ 1194.520342][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1194.520351][T22571] Call Trace: [ 1194.520357][T22571] [ 1194.520362][T22571] dump_stack_lvl+0xe8/0x150 [ 1194.520387][T22571] should_fail_ex+0x410/0x560 [ 1194.520411][T22571] should_failslab+0xa8/0x100 [ 1194.520430][T22571] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 1194.520443][T22571] ? local_lock_release+0x9c/0x160 [ 1194.520458][T22571] ? __alloc_skb+0x1db/0x7a0 [ 1194.520469][T22571] ? __alloc_skb+0x1db/0x7a0 [ 1194.520484][T22571] __alloc_skb+0x1db/0x7a0 [ 1194.520499][T22571] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 1194.520521][T22571] rtmsg_ifinfo+0x8c/0x1a0 [ 1194.520542][T22571] netif_close_many+0x42f/0x660 [ 1194.520564][T22571] ? __pfx_netif_close_many+0x10/0x10 [ 1194.520581][T22571] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.520599][T22571] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1194.520617][T22571] unregister_netdevice_many_notify+0xb76/0x2140 [ 1194.520641][T22571] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1194.520659][T22571] ? unregister_netdevice_queue+0x17d/0x340 [ 1194.520676][T22571] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1194.520693][T22571] ? __nla_parse+0x40/0x60 [ 1194.520709][T22571] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1194.520725][T22571] rtnl_dellink+0x5be/0x810 [ 1194.520739][T22571] ? __pfx_rtnl_dellink+0x10/0x10 [ 1194.520757][T22571] ? is_bpf_text_address+0x26/0x2b0 [ 1194.520779][T22571] ? unwind_next_frame+0x8f/0x2550 [ 1194.520852][T22571] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1194.520867][T22571] ? __pfx_rtnl_dellink+0x10/0x10 [ 1194.520886][T22571] ? __pfx_rtnl_dellink+0x10/0x10 [ 1194.520905][T22571] rtnetlink_rcv_msg+0x802/0xc00 [ 1194.520917][T22571] ? netlink_sendmsg+0x5d4/0xb40 [ 1194.520935][T22571] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1194.520947][T22571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1194.520960][T22571] ? __lock_acquire+0x683/0x2cf0 [ 1194.520984][T22571] netlink_rcv_skb+0x226/0x4a0 [ 1194.520999][T22571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1194.521013][T22571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.521036][T22571] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.521050][T22571] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.521068][T22571] netlink_unicast+0x7bd/0x940 [ 1194.521088][T22571] netlink_sendmsg+0x813/0xb40 [ 1194.521108][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.521125][T22571] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1194.521144][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.521158][T22571] sock_sendmsg_nosec+0x13a/0x180 [ 1194.521177][T22571] ____sys_sendmsg+0x54e/0x850 [ 1194.521195][T22571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.521213][T22571] ? import_iovec+0x73/0xa0 [ 1194.521232][T22571] ___sys_sendmsg+0x2a5/0x360 [ 1194.521245][T22571] ? __lock_acquire+0x683/0x2cf0 [ 1194.521264][T22571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.521298][T22571] ? __fget_files+0x2a/0x420 [ 1194.521314][T22571] ? __fget_files+0x3a2/0x420 [ 1194.521336][T22571] __x64_sys_sendmsg+0x1b1/0x290 [ 1194.521352][T22571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1194.521378][T22571] do_syscall_64+0x166/0x520 [ 1194.521395][T22571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.521411][T22571] ? clear_bhb_loop+0x70/0xc0 [ 1194.521425][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.521438][T22571] RIP: 0033:0x7f10cdb9e0d9 [ 1194.521452][T22571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.521462][T22571] RSP: 002b:00007f10ce985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.521478][T22571] RAX: ffffffffffffffda RBX: 00007f10cde25fa0 RCX: 00007f10cdb9e0d9 [ 1194.521487][T22571] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1194.521495][T22571] RBP: 00007f10ce985090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.521503][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.521510][T22571] R13: 00007f10cde26038 R14: 00007f10cde25fa0 R15: 00007f10cdf4fa48 [ 1194.521529][T22571] [ 1194.522660][T22536] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 1194.944214][T22571] bond6 (unregistering): (slave batadv5): Releasing backup interface [ 1194.969387][T22571] bond6 (unregistering): Released all slaves [ 1195.146457][T22579] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1195.280400][T22584] netlink: 'syz.6.5533': attribute type 2 has an invalid length. [ 1195.326823][T14225] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1195.442732][T22588] __nla_validate_parse: 3 callbacks suppressed [ 1195.442748][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5535'. [ 1195.464901][T22588] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5535'. [ 1195.489649][ T188] gspca_vc032x: reg_w err -71 [ 1195.497483][ T188] vc032x 4-1:1.0: probe with driver vc032x failed with error -71 [ 1195.505946][T14225] usb 3-1: Using ep0 maxpacket: 32 [ 1195.519453][T14225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1195.532546][ T188] usb 4-1: USB disconnect, device number 72 [ 1195.538902][T14225] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1195.569842][T14225] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1195.578400][T14225] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1195.590441][T14225] usb 3-1: config 14 has no interface number 0 [ 1195.603396][T14225] usb 3-1: config 14 has no interface number 1 [ 1195.609996][T14225] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1195.629095][T14225] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1195.641427][T14225] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1195.652972][T14225] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1195.667897][T14225] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1195.680623][T14225] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.693857][T14225] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1195.700748][T14225] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1195.710066][T14225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.719004][T14225] usb 3-1: Product: syz [ 1195.723249][T14225] usb 3-1: Manufacturer: syz [ 1195.728106][T14225] usb 3-1: SerialNumber: syz [ 1196.087477][T21956] net_ratelimit: 28 callbacks suppressed [ 1196.087501][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.207746][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.330384][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.342509][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1196.386085][T22602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1196.415455][T22602] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1196.425250][T22602] bond6: (slave batadv6): Enslaving as an active interface with an up link [ 1196.462966][T22602] bond6 (unregistering): (slave batadv6): Releasing backup interface [ 1196.474872][T22602] bond6 (unregistering): Released all slaves [ 1196.526969][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.552736][T22611] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 1196.645596][T22611] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1196.668310][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.798069][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.908720][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.028098][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.029085][ T30] audit: type=1326 audit(1787272644.972:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.4.5546" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1197.066015][ T30] audit: type=1326 audit(1787272644.982:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.4.5546" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1197.091813][ T30] audit: type=1326 audit(1787272645.022:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.4.5546" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1197.117262][ T30] audit: type=1326 audit(1787272645.022:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.4.5546" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cdb9e0d9 code=0x7ffc0000 [ 1197.163656][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.298781][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.446853][ T188] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1197.597904][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 1197.612521][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1197.625734][ T188] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1197.645845][ T188] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1197.666805][ T188] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1197.680089][ T188] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 202, changing to 7 [ 1197.705873][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.721620][ T188] usb 5-1: Product: syz [ 1197.727174][ T188] usb 5-1: Manufacturer: syz [ 1197.735690][ T188] usb 5-1: SerialNumber: syz [ 1197.969778][T22630] bond0: entered promiscuous mode [ 1197.974872][T22630] bond_slave_0: entered promiscuous mode [ 1197.981237][T22630] bond_slave_1: entered promiscuous mode [ 1197.987568][T22630] bond2: entered promiscuous mode [ 1198.012639][T22630] gretap0: entered promiscuous mode [ 1198.022360][T22630] dummy0: entered promiscuous mode [ 1198.050065][T22630] debugfs: 'hsr0' already exists in 'hsr' [ 1198.072557][T22630] Cannot create hsr debugfs directory [ 1198.206949][T14225] legousbtower 3-1:14.57: interrupt endpoints not found [ 1198.273803][T14225] legousbtower 3-1:14.228: get version request failed: -71 [ 1198.306433][ T188] usb 5-1: 1:1 : bogus bTerminalLink 5 [ 1198.319567][T14225] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1198.334198][ T188] usb 5-1: unit 5 not found! [ 1198.347258][ T188] usb 5-1: unit 0 not found! [ 1198.364579][T22387] IPVS: starting estimator thread 0... [ 1198.385971][T14225] usb 3-1: USB disconnect, device number 41 [ 1198.461307][T22642] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1198.479161][T22643] IPVS: using max 50 ests per chain, 120000 per kthread [ 1198.648875][ T188] usb 5-1: USB disconnect, device number 92 [ 1198.729534][T17139] udevd[17139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1198.969955][ T30] audit: type=1400 audit(1787272646.912:2874): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22656 comm="syz.4.5557" [ 1199.345165][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1199.533648][T22666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1199.915890][T22668] bond5 (unregistering): Released all slaves [ 1200.356866][T15389] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1200.516856][T15389] usb 5-1: Using ep0 maxpacket: 8 [ 1200.528042][T15389] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 1200.546039][T15389] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7 [ 1200.564951][T15389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.573991][T15389] usb 5-1: Product: syz [ 1200.579905][T15389] usb 5-1: Manufacturer: syz [ 1200.584820][T15389] usb 5-1: SerialNumber: syz [ 1200.611790][T22681] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.5565'. [ 1200.756786][ T188] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1200.805110][T22670] tipc: Started in network mode [ 1200.813692][T22670] tipc: Node identity dae62763270f, cluster identity 4711 [ 1200.827587][T22670] tipc: Enabled bearer , priority 0 [ 1200.848528][T22670] syzkaller0: entered promiscuous mode [ 1200.857249][T22670] syzkaller0: entered allmulticast mode [ 1200.873863][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.888000][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.910087][T22670] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1200.927406][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 1200.955651][ T188] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1200.972619][ T188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.984511][ T188] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1200.994274][ T188] usb 4-1: config 1 has no interface number 1 [ 1201.003619][T22670] tipc: Resetting bearer [ 1201.020535][ T188] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1201.032936][T22687] CUSE: unknown device info "n|zQC*" [ 1201.044129][T15389] usb 5-1: Invalid firmware size=96. [ 1201.046094][T22669] tipc: Resetting bearer [ 1201.059448][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.072420][T15389] usb 5-1: Invalid firmware size=96. [ 1201.074738][ T188] usb 4-1: Product: syz [ 1201.083898][ T188] usb 4-1: Manufacturer: syz [ 1201.121998][ T188] usb 4-1: SerialNumber: syz [ 1201.124461][T22687] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 1201.142171][T22669] tipc: Disabling bearer [ 1201.147065][T15389] usb 5-1: Invalid firmware size=96. [ 1201.163074][ T188] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1201.165757][T15389] usb 5-1: USB disconnect, device number 93 [ 1201.179794][ T188] usb 4-1: 2:1 : format type 6 is not supported yet [ 1201.201184][T22687] CUSE: unknown device info "" [ 1201.219112][T22687] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨gIPYV" [ 1201.238785][T21956] net_ratelimit: 27 callbacks suppressed [ 1201.238807][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.267087][T22687] CUSE: DEVNAME unspecified [ 1201.380822][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.399270][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.425099][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.517106][T22387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.649180][T21963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.778221][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.868460][ T188] usb 4-1: USB disconnect, device number 73 [ 1201.919183][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.956055][T17139] udevd[17139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.097246][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.229185][T21956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.372329][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.479889][ T31] INFO: task syz.5.4791:20292 blocked for more than 143 seconds. [ 1202.510407][ T31] Tainted: G L syzkaller #0 [ 1202.520995][T15389] wiimote 0005:057E:0306.0041: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1202.530679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.540418][T15389] wiimote 0005:057E:0306.0041: New device registered [ 1202.545799][T20759] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.547761][ T31] task:syz.5.4791 state:D stack:27200 pid:20292 tgid:20289 ppid:13235 task_flags:0x400140 flags:0x00080002 [ 1202.570776][ T31] Call Trace: [ 1202.574210][ T31] [ 1202.578127][ T31] __schedule+0x17d4/0x5820 [ 1202.582952][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.590083][ T31] ? schedule+0x90/0x2b0 [ 1202.595478][ T31] schedule+0x164/0x2b0 [ 1202.603868][T22710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1202.616826][ T31] cgroup_lock_and_drain_offline+0x51a/0x650 [ 1202.630733][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1202.644935][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1202.658152][ T31] ? apparmor_capable+0x126/0x170 [ 1202.671083][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1202.682076][ T31] cgroup1_get_tree+0x9d/0x890 [ 1202.694360][ T31] ? apparmor_capable+0x126/0x170 [ 1202.706340][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1202.711727][ T31] vfs_get_tree+0x92/0x2a0 [ 1202.716245][ T31] vfs_cmd_create+0xa2/0x200 [ 1202.725329][ T31] __se_sys_fsconfig+0x6b9/0x810 [ 1202.736831][ T31] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1202.748579][ T31] ? rcu_is_watching+0x16/0xb0 [ 1202.757036][ T5747] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1202.767088][ T31] ? __x64_sys_fsconfig+0x20/0xc0 [ 1202.787911][ T31] do_syscall_64+0x166/0x520 [ 1202.797451][ T31] ? trace_irq_disable+0x3b/0x140 [ 1202.803653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.812968][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1202.819506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.825748][ T31] RIP: 0033:0x7f9901b9e0d9 [ 1202.831742][ T31] RSP: 002b:00007f9902b32028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1202.840912][ T31] RAX: ffffffffffffffda RBX: 00007f9901e26090 RCX: 00007f9901b9e0d9 [ 1202.850182][ T31] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000009 [ 1202.859932][ T31] RBP: 00007f9901c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1202.868130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.877778][ T31] R13: 00007f9901e26128 R14: 00007f9901e26090 R15: 00007f9901f4fa48 [ 1202.886836][ T31] [ 1202.891097][ T31] [ 1202.891097][ T31] Showing all locks held in the system: [ 1202.900158][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1202.920557][ T31] #0: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1202.932467][ T31] locks held by getty/5368: 2, on CPU#1: [ 1202.940441][ T5747] usb 4-1: Using ep0 maxpacket: 8 [ 1202.945669][ T31] #0: ffff8880354cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1202.955972][ T31] #1: [ 1202.956298][ T5747] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1202.969777][ T31] ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1202.980524][ T5747] usb 4-1: config 0 has no interfaces? [ 1202.986375][ T31] locks held by kworker/1:9/5747: 3, last CPU#1: [ 1202.993582][ T31] #0: ffff88801eea9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.007317][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.016435][ T31] #1: ffffc900048bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.030638][ T5747] usb 4-1: Product: syz [ 1203.035551][ T5747] usb 4-1: Manufacturer: syz [ 1203.041423][ T5747] usb 4-1: SerialNumber: syz [ 1203.046165][ T31] #2: ffff88802a0031d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1203.059449][ T31] locks held by kworker/1:0/15389: 3, on CPU#1: [ 1203.066510][ T5747] usb 4-1: config 0 descriptor?? [ 1203.080567][ T31] #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.097214][ T31] #1: ffffc900057afc40 ((work_completion)(&wdata->init_worker)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.111192][ T31] #2: ffff888093a80388 (&wdata->state.sync){+.+.}-{4:4}, at: wiimote_init_worker+0x595/0x2f00 [ 1203.129138][ T31] locks held by syz.5.4791/20292: 1, on CPU#1: [ 1203.136556][ T31] #0: ffff88807e070868 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x68d/0x810 [ 1203.150736][ T31] locks held by syz.1.4933/20748: 3, on CPU#0: [ 1203.159448][ T31] #0: ffff888031898470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1203.172826][ T31] #1: ffff88807fd6a460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1203.182757][ T31] #2: ffff8880393c6480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1203.193555][ T31] locks held by kworker/u8:15/20759: 4, last CPU#0: [ 1203.200517][ T31] #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1203.210715][ T31] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1203.219860][ T31] #2: ffff8880b8626018 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x904/0xed0 [ 1203.229206][ T31] #3: ffffffff9aa78398 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 1203.240552][ T31] locks held by kworker/u8:39/21963: 2, on CPU#0: [ 1203.247260][ T31] #0: ffff88801e32f140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.258747][ T31] #1: ffffc90003e17c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1203.271061][ T31] [ 1203.273408][ T31] ============================================= [ 1203.273408][ T31] [ 1203.283019][ T31] NMI backtrace for cpu 1 [ 1203.283042][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.283069][ T31] Tainted: [L]=SOFTLOCKUP [ 1203.283077][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.283089][ T31] Call Trace: [ 1203.283097][ T31] [ 1203.283105][ T31] dump_stack_lvl+0xe8/0x150 [ 1203.283130][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1203.283219][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1203.283246][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1203.283280][ T31] sys_info+0x135/0x170 [ 1203.283293][ T31] watchdog+0xfd7/0x1030 [ 1203.283313][ T31] ? watchdog+0x1c7/0x1030 [ 1203.283332][ T31] kthread+0x38b/0x480 [ 1203.283349][ T31] ? __pfx_watchdog+0x10/0x10 [ 1203.283364][ T31] ? __pfx_kthread+0x10/0x10 [ 1203.283382][ T31] ret_from_fork+0x514/0xb70 [ 1203.283400][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.283426][ T31] ? __switch_to+0xc89/0x1420 [ 1203.283442][ T31] ? __pfx_kthread+0x10/0x10 [ 1203.283458][ T31] ret_from_fork_asm+0x1a/0x30 [ 1203.283483][ T31] [ 1203.283499][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1203.373494][ T188] usb 4-1: USB disconnect, device number 74 [ 1203.374268][ C0] NMI backtrace for cpu 0 [ 1203.374287][ C0] CPU: 0 UID: 0 PID: 188 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.374317][ C0] Tainted: [L]=SOFTLOCKUP [ 1203.374324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.374336][ C0] Workqueue: usb_hub_wq hub_event [ 1203.374363][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x8/0x110 [ 1203.374392][ C0] Code: 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 46 08 <48> 8d 48 ff 48 89 c2 48 31 ca 48 39 ca 0f 86 e6 00 00 00 f3 48 0f [ 1203.374408][ C0] RSP: 0018:ffffc90002f1ebc0 EFLAGS: 00000246 [ 1203.374424][ C0] RAX: 0000000000000008 RBX: ffffffff8beda7a5 RCX: dffffc0000000000 [ 1203.374438][ C0] RDX: ffffffff8bd6081f RSI: ffffffff903ec570 RDI: 000000000000002e [ 1203.374451][ C0] RBP: ffffc90082f1eeff R08: ffff88801ffd9f40 R09: 0000000000000002 [ 1203.374464][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff8beda7a5 [ 1203.374476][ C0] R13: 000000000000002e R14: 0000000000000000 R15: ffffc90002f1ec78 [ 1203.374489][ C0] FS: 0000000000000000(0000) GS:ffff888124f1a000(0000) knlGS:0000000000000000 [ 1203.374504][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.374518][ C0] CR2: 0000001b3131bff8 CR3: 000000007be52000 CR4: 00000000003526f0 [ 1203.374535][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000020 [ 1203.374546][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1203.374558][ C0] Call Trace: [ 1203.374566][ C0] [ 1203.374573][ C0] format_decode+0x83/0xda0 [ 1203.374600][ C0] vsnprintf+0xff/0xef0 [ 1203.374625][ C0] sprintf+0xe7/0x140 [ 1203.374647][ C0] ? __pfx_sprintf+0x10/0x10 [ 1203.374668][ C0] ? desc_read+0x16d/0x3f0 [ 1203.374689][ C0] info_print_prefix+0x16b/0x360 [ 1203.374713][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 1203.374736][ C0] ? _prb_read_valid+0xa40/0xa50 [ 1203.374757][ C0] record_print_text+0x181/0x4b0 [ 1203.374781][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 1203.374799][ C0] ? __pfx_record_print_text+0x10/0x10 [ 1203.374826][ C0] printk_get_next_message+0x297/0x880 [ 1203.374852][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 1203.374873][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 1203.374896][ C0] ? console_flush_all+0x123/0xaf0 [ 1203.374919][ C0] ? console_flush_all+0x493/0xaf0 [ 1203.374941][ C0] console_flush_all+0x4e3/0xaf0 [ 1203.374964][ C0] ? console_flush_all+0x123/0xaf0 [ 1203.374986][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1203.375009][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1203.375034][ C0] console_unlock+0xd1/0x1c0 [ 1203.375052][ C0] ? vprintk_emit+0x2cf/0x560 [ 1203.375071][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1203.375091][ C0] ? vprintk_emit+0x2cf/0x560 [ 1203.375109][ C0] ? vprintk_emit+0x2cf/0x560 [ 1203.375128][ C0] vprintk_emit+0x485/0x560 [ 1203.375147][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1203.375170][ C0] dev_vprintk_emit+0x338/0x400 [ 1203.375198][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1203.375230][ C0] dev_printk_emit+0xee/0x140 [ 1203.375266][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1203.375294][ C0] ? __queue_work+0xc73/0x10d0 [ 1203.375316][ C0] ? __dev_printk+0x131/0x190 [ 1203.375419][ C0] _dev_info+0x11e/0x180 [ 1203.375443][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1203.375466][ C0] ? __pfx__dev_info+0x10/0x10 [ 1203.375495][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1203.375521][ C0] usb_disconnect+0xe1/0x9a0 [ 1203.375542][ C0] hub_event+0x1bbb/0x4d30 [ 1203.375561][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1203.375592][ C0] ? register_lock_class+0x31/0x2e0 [ 1203.375620][ C0] ? rcu_is_watching+0x16/0xb0 [ 1203.375646][ C0] ? __pfx_hub_event+0x10/0x10 [ 1203.375666][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1203.375690][ C0] ? rcu_is_watching+0x16/0xb0 [ 1203.375708][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1203.375728][ C0] process_scheduled_works+0xc3d/0x1630 [ 1203.375762][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1203.375786][ C0] ? assign_work+0x3cf/0x5d0 [ 1203.375807][ C0] worker_thread+0xa47/0xfb0 [ 1203.375841][ C0] kthread+0x38b/0x480 [ 1203.375866][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1203.375886][ C0] ? __pfx_kthread+0x10/0x10 [ 1203.375911][ C0] ret_from_fork+0x514/0xb70 [ 1203.375936][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.375960][ C0] ? __switch_to+0xc89/0x1420 [ 1203.375982][ C0] ? __pfx_kthread+0x10/0x10 [ 1203.376007][ C0] ret_from_fork_asm+0x1a/0x30 [ 1203.376040][ C0] [ 1203.376367][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1203.376387][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.376413][ T31] Tainted: [L]=SOFTLOCKUP [ 1203.376421][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.376433][ T31] Call Trace: [ 1203.376441][ T31] [ 1203.376450][ T31] vpanic+0x56d/0xa60 [ 1203.376478][ T31] ? __pfx___schedule+0x10/0x10 [ 1203.376503][ T31] ? __pfx_vpanic+0x10/0x10 [ 1203.376536][ T31] panic+0xc5/0xd0 [ 1203.376560][ T31] ? __pfx_panic+0x10/0x10 [ 1203.376583][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1203.376608][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1203.376630][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1203.376663][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1203.376688][ T31] watchdog+0x1030/0x1030 [ 1203.376720][ T31] ? watchdog+0x1c7/0x1030 [ 1203.376749][ T31] kthread+0x38b/0x480 [ 1203.376782][ T31] ? __pfx_watchdog+0x10/0x10 [ 1203.376805][ T31] ? __pfx_kthread+0x10/0x10 [ 1203.376832][ T31] ret_from_fork+0x514/0xb70 [ 1203.376860][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.376884][ T31] ? __switch_to+0xc89/0x1420 [ 1203.376909][ T31] ? __pfx_kthread+0x10/0x10 [ 1203.376936][ T31] ret_from_fork_asm+0x1a/0x30 [ 1203.376975][ T31] [ 1203.381482][ T31] Kernel Offset: disabled