last executing test programs: 53m55.118942999s ago: executing program 0 (id=793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x6c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 53m51.75661151s ago: executing program 0 (id=803): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 53m50.608583918s ago: executing program 0 (id=806): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53m50.266865897s ago: executing program 0 (id=809): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 53m49.223897806s ago: executing program 0 (id=814): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r3, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 53m48.718841996s ago: executing program 0 (id=815): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x69c) semop(r0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4400, 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() syz_open_dev$evdev(0x0, 0x2, 0x963b01) 53m47.60794824s ago: executing program 32 (id=815): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x69c) semop(r0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4400, 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() syz_open_dev$evdev(0x0, 0x2, 0x963b01) 14m14.036967533s ago: executing program 5 (id=11384): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{0x0}], 0x1) 14m13.774545671s ago: executing program 5 (id=11387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 14m13.657150568s ago: executing program 5 (id=11389): eventfd2(0xe5c, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 14m12.729786s ago: executing program 5 (id=11404): mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000001c0)=0x6, 0x4) close(r0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00') r5 = inotify_init() r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x80000006) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u16=0x0}}) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000000)=0x8) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x1) 14m12.046472364s ago: executing program 5 (id=11407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) 14m9.907914038s ago: executing program 5 (id=11426): eventfd2(0xe5c, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 14m9.561883634s ago: executing program 33 (id=11426): eventfd2(0xe5c, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 12.901631648s ago: executing program 2 (id=14673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r4, 0x1, 0x100000000, 0x80000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x43) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="180003000714000127bd7000fddbdf250500540001000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40844) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x280, 0x3c0, &(0x7f0000000180)=[0x6bd1a30f, 0xec66, 0xace, 0x8, 0x98bf, 0x8, 0x7, 0x4, 0x4, 0x80000000, 0x0, 0x9, 0x6, 0x9, 0x5, 0x3f2, 0x3ff, 0x5, 0x101, 0x0, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x80000000000002, 0x800000006, 0x1000000000, 0x96, 0xffffffff, 0xffffffff00000000, 0x8, 0x5, 0x7, 0x4, 0x3541, 0x9, 0x888f, 0xf01, 0x8, 0x49, 0x6, 0x10000000000003, 0xa3df, 0x20000000006, 0x40, 0x5, 0x3fe, 0x10000003, 0xfffffffffffffff7, 0xd, 0x2, 0xe, 0x0, 0x4, 0xf5, 0xfd, 0x7, 0x9, 0x66, 0x9, 0x3, 0x40000005, 0xffffffff00000000, 0x9, 0xd, 0x10001, 0x6, 0x80000000, 0xffffffffffeffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x0, 0x8b, 0xfff, 0x6, 0x2, 0x1, 0xab6, 0xffffffff7ffffffc, 0x0, 0x0, 0xffffffffffffff84, 0x9, 0xff, 0x3, 0x28000000, 0x5, 0x8, 0xe239, 0x8, 0xf6, 0x40000004, 0x6, 0x203, 0x7, 0x5a3, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0x470ddba2, 0x8, 0x9, 0x5, 0x8, 0x1, 0x1, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0x142, 0x8, 0x1000003]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0xf, 'syz1\x00', 0x8}, 0x1, [0x7, 0xd4, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x4, 0x2002, 0xbe, 0x400000000008, 0x102d, 0x8, 0x1, 0x4, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x5, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x100000001, 0x2, 0x1, 0x4, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x9, 0x4, 0xaa, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0x9, 0x88b, 0x6, 0x10, 0xffffffffffffffff, 0x400, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x4, 0x82d, 0x9, 0x6, 0x0, 0x9, 0xfffffffffffffffa, 0x3ff, 0x4, 0x2, 0x2f, 0x0, 0x7, 0x40, 0x2, 0x42843379, 0x2, 0x7, 0x200, 0x77d, 0xb3, 0x4, 0xe, 0x80000000, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x80, 0x4, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff002, 0x10004, 0x7fff, 0xfffffffffffffff7, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x4, 0x0, 0x7f, 0xd1]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x420004) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, &(0x7f00000007c0)='net/snmp6\x00') 8.950684004s ago: executing program 2 (id=14690): epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) accept(r0, 0x0, 0x0) 8.950164148s ago: executing program 4 (id=14691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0xe, 0x6, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}]}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0200"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x35) r8 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4b, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 7.957301528s ago: executing program 2 (id=14694): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x1c) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x3000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x543200) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x7, 0x50, 0x0, 0xffffffff, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "342135dc7fec3f2114072e"}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9b, 0x1, 0x9, [{@empty, 0x7}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x2}]}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0xf4, @local, 0x800}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="7c8dd7b629a52afaddb8a4cb8b3cb5ac00d181f37b37300926b0e23f8763105ba8566414ef95622ae5972ceef2b37fec71db7281cb40795d91479de5efd80a422c281171f57be89e3b626203408a90d990381cf332c3b2710f95676ef76ba4c4ba38fb88297adc4a6b3e68bd5d7db7d9392b9bc8a0c4527eedf17c535ffa159a0cb17f01e020819733673d918de8f1", 0x8f}, {&(0x7f0000000340)="374307db40c3361f826d461a8891d5e58b181a88ded5dc6991ea7cc7dc70a8add605a13b0f46164830e6327060b9b84e11d919b55ab004dfd7858cf07462b71e75ef8d72acc07c6a37631a325f0ff137acdef74282db4150c0f9c82bffffa7f45adaa4f0354df7793fe5a96d00c0ac1fd76a0ba64428a4fc30a9f3b3b3f79437e0d40959", 0x84}], 0x2, &(0x7f0000000bc0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0x3c, 0x0, [@mcast1, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x68}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x4, @remote, 0x5}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000540)="9f25f50e4f", 0x5}, {&(0x7f0000000580)="98ee4ad95ffa0bb229e4b13d357f24b00f4c8309ace1aa303e5664a43923b7e0b9bc51d1b1622e27ed57afda0f5be97c09dbc62a27a45240cfebcbd38ef6aca5a9ca4bdbe0fd7feb9dcc9cffa1e495e15e9a9114320d3766d9a69f0929aa1be8fcbfaa007be7f3056f0f34429664a4df102bdb73", 0x74}, {&(0x7f0000000600)="b32da56f3b43c19c5d013d656101330d91a900b489fe26643f9b328d4c61882cb85b98bf3fb2bf626057dbfcc97695e40cd50a98a302cd4feb687b8dacbafa3f5c91c23afa92c35bea5a3511ead7aca4bdb255fbabb60dc50e21845a5b2444470cd5fa170e0934b702f15a693727a95a4eeb6d2175f06c2f9dd97e5790646be33500af3989404939f2293f11", 0x8c}, {&(0x7f00000006c0)="b55c4ce8da9c0f37770538c0ad87ca6b09466138ec41bac257dbd9b5777de6648676bc7b0b11a40aa4aa5bf1ed5af861446daf50670a8365bffe", 0x3a}], 0x4, &(0x7f00000007c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xe, 0x7, [0x0, 0x5]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x6c, 0xa, '\x00', [@generic={0xd, 0x51, "4910ab5d49746e5d64fdc58fe44ef2af61f0a3164f95afa56620bcb42480c8c5be4643897d6a37f7a668321bbfff95185252ef932a79e8586805f1596389248b29d8589faba33f9a618c9645580120dd8a"}, @enc_lim]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffc}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd8d}}], 0x110}}, {{0xfffffffffffffffc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)="b492e1bd691dcd316628190e941b0032d2b52bddfd2baf383034a314961a755feefa7a9a06b9e89a492e", 0x2a}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80000000000000000000000000001e", @ANYRES32=r3, @ANYBLOB="0000000050000000003cd03064000000c2046dcf040000005c06000000000000c204000000030001000401fac2040000292d582138288801818c2d7cc0999eb7c802c1cffeb614818922c7bb2d1111bca0382642fc0000001400000000000000290000003400000002000000000000001400000000000000290000000b0000000000020000000000"], 0xa8}}], 0x3, 0x4000040) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/51, 0x33}, 0x58}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000b5df1ca210a450235b563d00100000000000000700000a00020000050a03000000000000000000070000020800ff7f00000008140000001108000000000052415f", @ANYRESDEC=r2, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f00000002c0)=0x1) 7.503651296s ago: executing program 1 (id=14695): fsopen(&(0x7f0000000180)='dax\x00', 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0xe432386, r1}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000400)={0x3, "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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 6.444278171s ago: executing program 6 (id=14699): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) 6.200065829s ago: executing program 6 (id=14700): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4e20, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@rand_addr=0x64010101, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xffffffffffff0001, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x870bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.172478902s ago: executing program 1 (id=14701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001000401"], 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@broadcast, @empty, 0x0}, &(0x7f0000000340)=0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8c4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x890, 0x2, [@TCA_U32_POLICE={0x868, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_PEAKRATE64={0xffffffffffffff51, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'hsr0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="ce1796004c9900c12f2d40c31f0ca130ea1ac32d7e270eb25fb7cc38e90096c8af7b2f7527bbd1b551059daf315906b4335cf17f51bc99", 0x37}, {&(0x7f00000000c0)="a253eb0dd5407eaeafa860ed6f79e69d2f47ec00a5c374fb4ce88568ef6470baa275fafe5ab44869211b1f3bb83e72fc7e745d79a628833b70ee9b431cfb63d6dc03021436772c8db58daf36", 0x4c}, {&(0x7f0000000140)="d777ba764d0c2e0e159b4aa5d0e0f6fb1d4fb3471070e97cd43af72d", 0x1c}, {&(0x7f0000000180)="e6d761af8ef614dc78c48ef2fd579116075d04429c698ee207494941d212bef12d832468846d692fa7c46a0d9bebc0ac9118d0df0665c5da5bd11fd61878e8a21e4e2be066a2a096e685ec14da1b587b28f93ec831f88b8dd086be6f14438ec324e131259638fc79e26ffb6075df1cf63776ff25f70708074e4231d4c364583726c75e4981528a88", 0x88}], 0x4, &(0x7f0000000380)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r1}}}, @hopopts={{0x50, 0x29, 0x36, {0x2e, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x7, [0xffffffff80000001]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x73, 0xd, '\x00', [@pad1, @generic={0x9, 0x58, "ebcad2f5005ed94ce29a7b0ac61ddf33735809f7e4de8fc4af63cb7c28b69a423800a699b88693e40e131030117b04fba543db828f5ccb9243f1d6a559014c72953e0c35efed9600ff7f630099addae1d069916337a5f0ca"}, @hao={0xc9, 0x10, @private1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}], 0x128}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000500)="0ac1dfdafd0b292b2054fe0f99861c0771f4ccc7221c44682593018fa35518083faa7b3fab4326480e7b2411fe82904a1933cc6f2c4c29f617b31c673e339ce7c73b958fab3324db1b3314dd519cff698d27945b76821a7206c63ff3ebce4d6e3c27d5f60bb9a16e5147b99493e3", 0x6e}], 0x1, &(0x7f00000005c0)=[@hopopts_2292={{0xc0, 0x29, 0x36, {0x2b, 0x14, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x1, 0x8, 0xe, 0x7, [0x6, 0x4, 0xff, 0x7fffffff]}}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}], 0xf0}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x5, @private2, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000700)="b9401eab0b4a691ce18b55c425d9337c8f5d16e43aa959644524ccb0526e356adfcef27e87214c873a01670b7bdc360b5735262fa0a5513eb1c00beafd5a7ccefabff29ecfc2a6524880c4dca2d7009d55206401dbb09336031f3bac242f48a2d39136472e742596cc2b7ec296b6d5a96d23434db7", 0x75}, {&(0x7f0000000780)="c6ea3fdf8a5e2099292d4ca35cf82b9fffdfbab48b99a1ed893678563c80b0f6aeb182a34ae3f13f6dbaf4883c80de5569793cd4446bee06ea860db5703019fbc1664efb71ff024d06c3770c3fac1c0989be59dfefd42a6e4ffccdaed3f904a8871f568cc4aa8363985ad402c009fb57", 0x70}, {&(0x7f0000000800)="315b0ac127dc1bb6e6be262707a2c01cee94f774d807057a878642f0f904932ccecca2cbbfffc42873e2fc9edfaeca45a411fc0903c8a736c38ecd4225938a10acb330e6e26eaba3c594127c7c63a90c29eb55d9423482557b2eaf3fd75bb931ffb7c57d991363e5859f5f66fb6a51c06e57e28243c39d2edf25edaf16c64e386f78935b95cccaa8ea6396b35833b4f2ba57256108ce483e776294892d702f776674e6d5a3b39c3313e350e3faec6e1be28982a55a8ff887c00fd0139323153cf5bb354c9929e08818b1d142364e017c0461f04c723ca66d21cf9e26e57fbfc8cfc5db3f1e684a2acfff84ab7c13a7125786ba58608ec32d607efe1aec", 0xfd}], 0x3, &(0x7f0000000940)=[@hopopts={{0x40, 0x29, 0x36, {0x2f, 0x4, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x38}, @ra={0x5, 0x2, 0x40}, @padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x9, [0x62f]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0xf8, 0x29, 0x37, {0x8, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x1, 0xd3, "c9463bec562b69f8dc3d5c320345f220744ce532890b4df4d6d86589b26c14490c2f9f1972bbdfe4b3fddd3a36da310ff0d0087b4787bf15e6488b5e11a0da8169897f51f43a92ff8bddaefd3a63be492f0cb01ded5a9abf6d968e30b93ef477de1cb3d33bed7b1a75c1f0b4d062a63b02d689a22c7bb14abeb98a1ffa7bf3f96370a30617b35ec1612404d8202b5f27b78dd7680e61cdc412ba369ab9967ff32459600feccfbe9e522de574694bb5ee86c72b23aa5cce5c9ef127a7e297071a6ae02ff4c99d4aa9ac80765de1e8003607f915"}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0xc, 0x0, [@mcast1, @remote]}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="89d906e409e5313a97936280fc986000df03f9d08bc0000144ce0817b5224f1833432eed0a87f393e25305454c766aadc4b75a9936b57c5f345d58", 0x3b}, {&(0x7f0000001b40)="6c490ff13c13ed2920530b95926875a9aa8a14270658e6f876e41be677f2", 0x1e}], 0x3, &(0x7f0000001c00)=[@dstopts_2292={{0x158, 0x29, 0x4, {0xaa, 0x27, '\x00', [@generic={0xa6, 0x35, "450a7838871e9ee7b4707b501cf751af744db6c339603839334cd5fe124a5934cbab620963c9b9d05f9d329fa31e0b685d84fa582b"}, @generic={0x3, 0x33, "ad5b4c48ff7a64054e215b6b8993fc3b90e499c055c631ee1d844524b9f95bdbe7bb8e300fd334b0fe57d3930a922f33a1c69f"}, @generic={0x3, 0x6f, "d40731ad2587da38364c2ce78ac04d758258c26f47ba6bf081ecba54f7c8cbc2ee819e9502666140cc9b9c0301655789d272f827e63dcfc42f28d4293777dae5a33eb8eab86359377f9b0e259d8b0f46ceccae3ab2fee66117060e8739b0c56389a2ed77b3a54e379962211123d7dd"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x1, [0x2dbd3a7b, 0xe3, 0x5, 0x8, 0xd3e, 0x8]}}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x3b, 0x7, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0xef, 0x8000, [0x801, 0x7, 0xd]}}, @ra={0x5, 0x2, 0x5}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x32, 0x3, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x260}}, {{&(0x7f0000001e80)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001ec0)="de6cdd48aeabf976f20b2c4cccfb5977b4588252ee24185c22cb51c149c437d53f20a8a0a457df188d671da6483a8492d343f27d92f464d310535d87bfb0cf2a64bb165b5421bde8a33013c2076641fec5e8c82cf5c597741447349b8317bb465ecfa920c6b72483cdb76e7b5821a92b3a504e5ed1a28dbec37988b964d514d91992e5fc56c3ee957c8f2874c5de4d133b7aa41423a658b80de200684122c53b6e84407ac633be4ee0f9c69fe7d4b51a8f9131e6b14c45b0e0b2de47454af33ed64e0596b1aa2185862a9f2c401517e060e37223b3adb62e77d2943473261c486f63f9", 0xe3}, {&(0x7f0000001fc0)="cd0ad5e966d4fbe14f9f93fbac00c1f6718e49f8e81d8098971a984a9e128e717fda228dd4fa1179c858ac88741002694d1c640733f9b61b1a7a602d8ad21299beb9fd7c9d0e170e5860e95cc45795f86ebb94fd18655af3a9441e0031951e3f17f4709720aeca8f942714956714b660c276ac65a3ea6a0112595a8cbea3e5e35744cd38883337199d8b3cfc0880a38aba92ea140850650ba13588044f5a7c9e1cacde3f85bd063668fe14599094ef1fee35d47ae1e60a5c27bf8f4e195c9503fadd80cccb9db1d8548aebfe8e6049897e3232c6cae1f2a339b5f28899c7447fa2aa58b200d5e3508568d790a1083a1c70d2d47a", 0xf4}, {&(0x7f00000020c0)="c7bc99344e8bba1eb999f673f13a01cb08adb26b72010624b926e9e097c73172342701df92069539c6998d4fefa9e308cee0c7686c530d657bf7ec3f57dbaea134c79cf4412cbf3d5976c7b7", 0x4c}, {&(0x7f0000002140)="75ea512aa50157a7512b0035ccc89024cb946dd3a2f0dba1900c3283e7e98bb954bbe48873b2b29b696d99736dc7a00e8cc8727394f1dd16c0b0d6b481d8b16fe6c378c7b2dcdeacc7fe3f7a101efad2f86feeddace49cadd782a347fa08bb518be99d74797a82e24fe0722cff3cc6456dd561ccb92ab4e5b5ad089266e83ce84d4c5beda8577b0f212d770f25b5684eb56d1eb35a951e54176d0d4ceaa04122039cce740641e76a69d23e6524e16c65aaf8299efabc8df8cb29b2ed62fdee570399dbf814d863ae", 0xc8}], 0x4, &(0x7f0000002280)=[@dstopts={{0x20, 0x29, 0x37, {0xf, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts={{0x40, 0x29, 0x37, {0x6c, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x2e}, @hao={0xc9, 0x10, @loopback}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0xc}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6e}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002380)="1f35d51e329d8b061b3301cf4ef19c97019b7c7cd0070b52ecd67dd311c5400de947bc0141c1b28755201ffb0802e0800ecd3bbcb5d1688a003ed9f53caff14586b73cf7ae2d11e150cfd83a703c31a6463e3845126d1544342ebb74aa0fa12266d4e2c320ea91d502fd7561213f6b457724b4f709d3a7ea60a5b57966fb61f279714447aee9a06852f85baf6315c2dfd200f761f3f1a72ea4d156", 0x9b}, {&(0x7f0000002440)="6308867e1da4aa9f729b13f73ef78b507c18ba5e876743e3f9b32a596a472d35f8b25b55f273a4110b53791c2f1ac40c3651b9163acdad89295140de413f2cd8bc378429cf2c4003193fb264e446b7763d21295ad5f9a804cfe3805149760b21839806ebfbdfd54e68569b439e348fa53da1c108166ce6630fc02d1c1293d5e42a62318eeb6b25b30fda32b43ee9261f2abc05d68713dcef62e64f", 0x9b}, {&(0x7f0000002500)="28c7403af6d684a4977e4753dc2be3da4ce3001c46bb840487d2f9a54f2471c91511cc3ed8ca2622d0ccc2d128bca16e2746790ebcda41a9642e7659487591663f37001b1c2ca58da978b96a632758925713c35f31f382634280e10f5730a4404b", 0x61}, {&(0x7f0000002580)="831afa001c447c91cc184ad1fb38eb437ab27e596bf00d48fcdfb069ac70062a204dc56fa42c31450e1702c2c23c5626296b7aa7dcf3c679722c76c4381924a35e0501db0f", 0x45}, {&(0x7f0000002600)="20b5e4832697418f75ea4db198a6ae1269515ea1d3b04166d416bcd2e7ff0769be786522d9ba83fb0aadc46f395072fa99b7794a2156e020a9c8ebbea3946a380fe4b0230b8cc7a9d9abce19a114e00ce7e8c9acec2bd7b2bd84ed6697f8b31bfc77727bc6083434c2e470d140e56cd8869eb982f2347e1f521cdab6a113d814d850f3c0bab1a9cdda5546f629dc1eaea7a68fb3336754635679db826b16b6cc7a677199681fb70ee857e95b5f1203baa93c1c9541485949176eea3091536232de2f6a157c", 0xc5}, {&(0x7f0000002700)="84bb600d6d3289b1bf888df5e19d5b52185d769e43fdc50f457140d2a918b67d4ed544ce424b1791ebc49169bd232ecf986eb2", 0x33}, {&(0x7f0000002740)="5c1972cedcdad9fbf9f6a35667f4cdb7fe3097772e3a1e89a0c70d928ff8500b41c109a749e9f250c8fcc55b7e00b6e1b232c328c09357d26cdf50fc21698045a4eb16c9d13e5657a89937e4969847cde6aa165123ddfbc8c44bd2a9d80f1cbb539370cc2f81222a4d000c927d956a67db336d46ee7d9d4aa03b20be", 0x7c}], 0x7, &(0x7f0000002840)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x33, 0x10, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @generic={0x0, 0x6c, "a939b65062e58fb6d25e235939dd8db872cefd05be8ec89961a859aee46dfb80d9a666dfe58d16697942659f059b7271028af9b15650f87f2749bc8ffdaadd31d93004b16d61f6b43c5aab172c5907daccba560d84d7d87f09a933d2aaf462ee47fbb67ab84356e87c808260"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1, @pad1, @generic={0x5c, 0x6b, "7a8becfae85e543ea0ba11f65af87ae9498bca222de826c14ac5ea"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x10}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x2, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x178}}], 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 5.871179365s ago: executing program 1 (id=14703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1020000, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4d242, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r9, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xa3, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6828, 0x2000000e, 0x3, 0x1, 0xfffffff8, {0x5, 0x1, 0x97b4, 0x9, 0x2}, {0x6, 0x1, 0x7, 0x3, 0xfffc, 0x100}, 0x51ce, 0x7, 0xd}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 5.870642333s ago: executing program 6 (id=14704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006a40), 0x400, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x277, 0x0, 0x3}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x2000, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e00010000000000000000030006000000000002000000000000000000000000000000080012"], 0x80}}, 0x4008844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002280)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x1, 0xfffc, &(0x7f0000002180)='u'}) fspick(r5, &(0x7f0000000000)='./file0\x00', 0x0) epoll_create1(0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close(r0) 5.470153422s ago: executing program 4 (id=14705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001780)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r8, 0x0, 0x80, 0x8) vmsplice(r7, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0xfe0}], 0x1, 0x0) write(r5, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41970d", 0x5}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.080099048s ago: executing program 3 (id=14707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e220102030109022400010200"], 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioprio_get$pid(0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='\r', 0x1}, {&(0x7f0000000180)="332202f608fc6f70b6206dbe79", 0xd}], 0x2, 0x0, 0x0, 0x86dd}, 0x4) 4.857783634s ago: executing program 1 (id=14708): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="200180"], 0x0}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f00000029c0)={0x20000200, 0x0, 0x0, 0x0, {0x11}, &(0x7f0000002840), 0x0, 0x0, 0x0}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.76771281s ago: executing program 2 (id=14709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYBLOB], 0xb8}}, 0x4004) 4.676255328s ago: executing program 6 (id=14710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001000401"], 0x20) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) (fail_nth: 5) 4.59961175s ago: executing program 6 (id=14711): fsopen(&(0x7f0000000180)='dax\x00', 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0xe432386, r1}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000400)={0x3, "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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 4.298969881s ago: executing program 4 (id=14712): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) (fail_nth: 5) 3.771596755s ago: executing program 4 (id=14713): timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x300, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.599075868s ago: executing program 2 (id=14714): fsopen(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) (fail_nth: 5) 3.02536848s ago: executing program 2 (id=14715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0xe, 0x6, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}]}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0200"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x35) r8 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4b, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) 2.798575671s ago: executing program 4 (id=14716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000180)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0xfffffff8}, 0x1c) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) 2.681250658s ago: executing program 3 (id=14717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r1, 0x4b37) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.284232995s ago: executing program 3 (id=14718): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/4100, 0x1004}, {&(0x7f0000005740)=""/4057, 0xfd9}, {&(0x7f0000000300)=""/128, 0x80}], 0x3}, 0x10002) (fail_nth: 5) 2.058690107s ago: executing program 3 (id=14719): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) 1.870613866s ago: executing program 6 (id=14720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0xe, 0x6, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}]}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0200"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x35) r8 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4b, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 1.755516805s ago: executing program 3 (id=14721): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x1, 0x870, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xc6, 0x92, 0x40, 0x20, 0x711, 0x918, 0xdd61, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85e, 0x3, 0x2, 0x4, 0x80, 0xc2, "", [{{0x9, 0x4, 0x27, 0x9, 0xc, 0xf7, 0x69, 0x25, 0xe, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b141"}, {0x5, 0x24, 0x0, 0x123}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x6, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x9, 0x5, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x31}, @dmm={0x7, 0x24, 0x14, 0xe, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xd, 0x31, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x800, [0xffff, 0x54e, 0xe, 0x100, 0x2, 0xf308]}]}], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0xd, 0x3, [@generic={0xff, 0x8, "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"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x4, 0x4, 0x75, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6c, 0x7, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0x81, 0xf}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x5, 0x3, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x9, 0xf, 0x7f, [@generic={0x4a, 0xc, "3bc1e67c7aaa2b66fc9926c9cec55c4c4dc57e9182dc5880b2a2cc574bb931eb78cde9b42acdd65585e09419875c671af326a3fcfc5239308b722ef096954801e87aa73c2bbd43c6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x15}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x2, 0xd, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x2, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xfff}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x2, 0x2, [@generic={0x40, 0x21, "4f90885275027be9c923326b133205e143a0ed64b963e2034ab5c68003419af2362bcefdb23aa2a87b7ba9d5bc61df2f4ab01d8e3c1a04b6bfb58f91b349"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xd5, 0x0, 0x4, [@generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x9, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xf, 0x3, 0x40}}]}}, {{0x9, 0x4, 0x7e, 0x0, 0x4, 0x7e, 0xd1, 0xcf, 0xff, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xff, 0x4, 0x9, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x5, 0x8, 0xb7, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x2000, 0x5, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x8, 0x9, 0xd5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xe, 0x4, 0x4, "2e87bfb708eecd03"}]}], [{{0x9, 0x5, 0xe, 0x3, 0x200, 0x7, 0x22, 0x29, [@generic={0xfd, 0x5, "4e43b14ff833614f062a970ad5d08532761b5a841dfd7df47757702038e85698d2aa6ac18cdcda1cd1f37c5aefea0ae351ea2acc0aed20c49f53a6c45951f8bccf5a09a87a6191977b6c7b2aa6f8a7c9a9ab2edf3caddb331e31fcd6b4849fc8ea0f08021c4f90e87c4158a597788d41a90ef37cefbafd72cae9a2a7bfee568c4bb2bd91a23cf584f3dc66c7cba953c7037be0b582a6d681297887d90194cc69efb3549135dc44c4f6d6b05b43b0fa80418c0909a228d90671f9a0b5b944c880291128655adda51c3be483ecdd54d964061dca34473376970f8f6fdc7dbeb040f877c2e7f25f48559e60f4f38bbd1cbea9f4488c90301488f396ff"}, @generic={0x80, 0x2, "7201aceef98736f925d2aa16ab10ca2c7a732a9f75810b0cdbaac2343f95581ea53ae47e80351149a64b06e608d37552e53c36b2967eb022c70b0d7846fd55a1e9829a7fd40ed52b4771b9a87b5f9d62c9e4c6446d1f465572c3d5fccd8585189e6fe57978e914fb688de3d28f8fd75068109cd07b0408ef8dccb1becf4b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x420, 0x0, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}, @generic={0xf3, 0x21, "f9eec4c072d5011ccae9347ee2b0f1d33315f0a5a538dbf530113583b41d4ffb7898dd489db4fce788a9d8c9b94ad17a7d42e4ff48310d051401c80dc90d3e5610b5db04095157adbb0abe8ad3d4598b5f76943ca2187b5840cf462263e5af21f2d08a8adec1968e29e4c9c84cb6514f0cc3f0bcfe4c610c733ddfdfe3c9feca1fb737bf1c4ed4859efc36a7841e6219424eb19de1bc40feac800c0efce3174d0ba7c6f6be10ec5afc45154a98b6512a42490872e8e00a359cecdaf0cf59353351e37ca539fa99dd45ebb9a26e8163df77d79510b9760762e940ff4f775957021ece6ac8af524ee102234e5775fa95878c"}]}}, {{0x9, 0x5, 0x8, 0x8, 0xa00, 0xba, 0x83, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3, 0x94, 0xa2}}]}}, {{0x9, 0x4, 0xd4, 0xe9, 0xe, 0x3, 0x64, 0x2, 0xad, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "d635e5ec"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x6, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x12}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x2, 0x9, 0x0, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x2}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x5d, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x49, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4c8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xfffc}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x0, 0xfa, 0x7, [@generic={0xd5, 0xc, "9cf629bfaee76b68a09f55e249265214d245a4907d879b68362329361011f2bc4c1a42c6485534c85c8b7e2ecd3e634180320c12956f743d58fe970f9c8dbda30ed09fe76e11f1bcdd79f416fbba82ad31985679b5444d64074da7f49dbfdd3387eb2c13f982f9f950d900e4203971f6089def127ed24a9f0556b5aa8bbd9d8dff4fa5590b0a097611f13cf0ac7082bc08db526b1878bd902923eff5afa265fb7579d4c674a6e7bb02016093ddc15f73c8957eb10dfc1cc2a08fef5c485ada4110f0ae894ab22bd66468e91270fcc8838d3d2f"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0xc2, 0xfe, 0x0, [@generic={0x5, 0xa, "71e6e9"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0xff, 0x6, 0x3}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x87, 0xb8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x400}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4f, 0xf, 0x24}}, {{0x9, 0x5, 0xc, 0x10, 0x7ff, 0xe7, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x20f5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xad, 0x44, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x3df, 0x3, 0x40, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x6, 0x40, 0x1, [@generic={0x89, 0xa, "183630ca117719c397cd84c7e99046ccc38a4a5770ffa31c7365c1b3e9f13c7584361346d19e9020721a98fb5c88bd9e1318a794a7dedcc258f96a0bbbd8bdf749e4faf188f4160fe2aa0e67d5b47d7202b85664c8d09e2f85b77f0dc43c6faf7474982f59909638265076ecf9f5626217af1df6e06b7cf5f0d36d1cf73d183aa28dc252acc05a"}, @generic={0xb6, 0xa, "63d2be00221a3f0bb64d7e67f4270fa384abcadb631ce6c578bc4dc45c429029d92937f7b62250f34e6d3c0a71da04dd3a14f3652c2489c0be882167f1f4ccf7357328e8e06ccff5d951a2c83ae1a1cf730be70c0d6390594f0a8e4ab969dc633db8849e3b624b47b4f10c83099d5f64a7a153cda63d4a49bf94125fe4f7f642637be4c3e44d32b65c2769ef716856fc78c049fc31410f373d2ab8eac8a02afbb7efbc5b1c8f9b99b51f33c18acfd91d855a9888"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x78, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x6, 0x9, 0x35, 0x20}, 0x28, &(0x7f0000000e00)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3, 0xfffc}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x80, 0xf, 0x62b0, [0xf, 0xff, 0xdf8f, 0xffc0]}]}, 0x1, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2c01}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) r3 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000480)={&(0x7f00000002c0)=""/232, 0xe8}) sched_rr_get_interval(r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r6 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/28, @ANYRESDEC=r1, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRESDEC=r3, @ANYBLOB="01000d00000000004000020005000010410000003d490378c200000000000000076a773693d7be1869e98b786d33823e4c3512c5b91212c02d34e850bfd3820aaa98cf2bcfe305e4950266346d0093862d73e9a0bb296f6aef13cd6bcfcecf3bc04d63ff02e132d1992d90470b45b4a23b846c704044790f9242d2c5e9cccdf1f33d40610bc8b104d5c45dba7036b282b34dda3301e050d4f4def72de402a4df18726346507ed8183c275b92673de6f69ea4ff4696635cc6b49534"], 0x50) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.433399947s ago: executing program 1 (id=14722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001780)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r8, 0x0, 0x80, 0x8) vmsplice(r7, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0xfe0}], 0x1, 0x0) write(r5, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41970d", 0x5}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 387.509642ms ago: executing program 4 (id=14723): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000080)=0xb38) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdf9, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 216.224918ms ago: executing program 1 (id=14724): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000080000000a0482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000006c0)='P/') 0s ago: executing program 3 (id=14725): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0xffff, 0xa222209, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000006ac0)={&(0x7f0000004140)={0x50, 0xfffffffffffffffe, 0xfff, {0x7, 0x2d, 0x80000000, 0x0, 0x5, 0x4, 0x3, 0x1ff, 0x0, 0x0, 0x100}}, &(0x7f00000041c0)={0x18, 0xfffffffffffffffe, 0xf, {0x3}}, &(0x7f0000004200)={0x18, 0xb, 0x5, {0xfffffffffffffff9}}, &(0x7f0000004240)={0x18, 0x0, 0x9000, {0x1}}, &(0x7f00000063c0)={0x18, 0xfffffffffffffffe, 0x7, {0x3}}, &(0x7f0000006400)={0x28, 0x0, 0x100000000, {{0x3, 0xd, 0x2, r6}}}, &(0x7f0000006440)={0x60, 0x0, 0xffffffffffff064b, {{0x4, 0xa4f1, 0x0, 0x8, 0x780d, 0xfffffff7, 0x1, 0x5}}}, &(0x7f00000064c0)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000006500)={0x11, 0x0, 0x3, {'\x00'}}, &(0x7f0000006540)={0x20, 0x0, 0xa, {0x0, 0x6}}, &(0x7f0000006580)={0x78, 0xfffffffffffffffe, 0xaf3, {0x7, 0x4, 0x0, {0x0, 0x2ee, 0xfffffffffffff1f4, 0x8000000000000000, 0x43, 0xd, 0x0, 0x80000001, 0x5, 0x8f056c0d9dd88a51, 0x30000000, 0x0, 0xee00, 0x7, 0x1}}}, &(0x7f0000006600)={0x90, 0x0, 0x7, {0x3, 0x2, 0x9, 0x31, 0x23a5e5dd, 0x0, {0x4, 0x4, 0x2, 0xd, 0x3, 0x2, 0x5, 0xffffffff, 0xfffffffd, 0x2000, 0x5, r4, r5, 0x9, 0x2}}}, &(0x7f00000066c0)={0x90, 0x0, 0x8, [{0x4, 0xbdb, 0x5, 0xfffffff9, 'fuse\x00'}, {0x1, 0x68d9de7e, 0x4, 0x9c, '+&%\x9e'}, {0xffffffffffffffff, 0x9, 0xa, 0xe, '/dev/fuse\x00'}, {0x5, 0x4, 0x0, 0x6}]}, &(0x7f00000067c0)={0xb0, 0x0, 0xfffffffffffffc00, [{{0x4, 0x1, 0x9, 0x8, 0x39b, 0x49e, {0x6, 0x7, 0x52, 0x1000, 0x0, 0xdf, 0x3, 0x3ff, 0x2, 0xa000, 0x8, r4, 0x0, 0x9, 0x2}}, {0x6, 0x101, 0x1, 0x8, '$'}}]}, &(0x7f0000006880)={0xa0, 0xfffffffffffffff5, 0x9, {{0x2, 0x0, 0xbc, 0x1, 0x889, 0x7, {0x6, 0x6, 0x10, 0x2, 0xc, 0x0, 0x800, 0x40, 0x9, 0x1000, 0x101, r4, r5, 0x120000, 0x2}}, {0x0, 0x17}}}, &(0x7f0000006940)={0x20, 0xffffffffffffffda, 0x7fffffff, {0x1, 0x0, 0x1, 0x40}}, &(0x7f0000006980)={0x130, 0xffffffffffffffda, 0x0, {0x120000000, 0x24, 0x0, '\x00', {0x8000, 0xd, 0x4, 0x0, r4, r5, 0xa000, '\x00', 0x6, 0xf3, 0x9, 0x9, {0x2, 0x87c7}, {0x5, 0xdd}, {0x40, 0x8}, {0xa65, 0x5}, 0xffffffff, 0x5, 0x4, 0x9}}}}) getdents64(r7, 0x0, 0x20000) listen(r0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9, 0x7ffffffe}}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @empty, 0x9}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ][T23961] syzkaller0: entered promiscuous mode [ 3500.027531][T23961] syzkaller0: entered allmulticast mode [ 3500.036878][T23967] fuse: Unknown parameter 'use00000000000000000000' [ 3500.084276][T23965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3500.253978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3500.641519][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 3500.641537][ T30] audit: type=1326 audit(1781147777.961:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.714393][ T30] audit: type=1326 audit(1781147777.961:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.770000][ T30] audit: type=1326 audit(1781147777.961:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.838840][ T30] audit: type=1326 audit(1781147777.961:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.892879][ T30] audit: type=1326 audit(1781147777.961:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.931872][ T30] audit: type=1326 audit(1781147777.961:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3500.978092][ T30] audit: type=1326 audit(1781147778.001:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3501.050250][ T30] audit: type=1326 audit(1781147778.001:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3501.153617][ T30] audit: type=1326 audit(1781147778.001:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3501.183651][ T30] audit: type=1326 audit(1781147778.001:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.1.14425" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f1179ce59 code=0x7ffc0000 [ 3501.283955][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3501.694015][T17231] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3501.863996][T17231] usb 3-1: Using ep0 maxpacket: 32 [ 3501.876102][T17231] usb 3-1: config index 0 descriptor too short (expected 127, got 36) [ 3501.884642][T17231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3501.980193][T17231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 3502.022022][T17231] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3502.042133][T17231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3502.066477][T17231] usb 3-1: config 0 descriptor?? [ 3502.323991][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3502.336650][T23982] kvm: kvm [23981]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 3502.346250][T23982] kvm: kvm [23981]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 3502.366444][T23983] netlink: 56403 bytes leftover after parsing attributes in process `syz.2.14427'. [ 3502.577392][ T7838] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3502.755003][ T7838] usb 4-1: Using ep0 maxpacket: 16 [ 3502.777652][ T7838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3502.804535][ T7838] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 3502.813390][ T7838] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 3502.839763][ T7838] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 3502.848349][ T7838] usb 4-1: config 7 has an invalid interface number: 227 but max is 3 [ 3502.874771][ T7838] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 3502.901288][ T7838] usb 4-1: config 7 has no interface number 0 [ 3502.908057][ T7838] usb 4-1: config 7 has no interface number 1 [ 3502.915025][ T7838] usb 4-1: config 7 has no interface number 2 [ 3502.938742][ T7838] usb 4-1: config 7 has no interface number 3 [ 3502.945103][ T7838] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 3502.974254][ T7838] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 3502.985551][ T7838] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 3502.996710][ T7838] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 3503.025030][ T7838] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 3503.038916][ T7838] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3503.078925][ T7838] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 3503.090376][ T7838] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 3503.117050][ T7838] usb 4-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 3503.128671][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 3503.168829][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 3503.199293][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 3503.210329][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 3503.238319][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 3503.245217][T17231] usb 3-1: string descriptor 0 read error: -71 [ 3503.252220][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 3503.275944][T17231] usb 3-1: USB disconnect, device number 123 [ 3503.295144][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 3503.306173][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 3503.346139][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 3503.363989][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3503.375658][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 3503.388559][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 3503.412021][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 3503.435463][ T7838] usb 4-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 3503.449152][ T7838] usb 4-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3503.477502][ T7838] usb 4-1: config 7 interface 106 has no altsetting 0 [ 3503.496942][ T7838] usb 4-1: config 7 interface 182 has no altsetting 0 [ 3503.503950][ T7838] usb 4-1: config 7 interface 148 has no altsetting 0 [ 3503.523951][ T7838] usb 4-1: config 7 interface 227 has no altsetting 0 [ 3503.577604][ T7838] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 3503.587046][ T7838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3503.597364][ T7838] usb 4-1: Product: syz [ 3503.601566][ T7838] usb 4-1: Manufacturer: syz [ 3503.606252][ T7838] usb 4-1: SerialNumber: syz [ 3504.403960][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3505.435732][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3505.505910][T24004] overlayfs: missing 'lowerdir' [ 3505.638372][ T7838] usb 4-1: USB disconnect, device number 36 [ 3505.644046][T17231] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 3505.806911][T17231] usb 7-1: device descriptor read/64, error -71 [ 3505.813277][T31662] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3505.996142][T31662] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3506.006813][T31662] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3506.025267][ T7838] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3506.026883][T31662] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3506.046767][T31662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3506.060167][T31662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3506.073412][T31662] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3506.083700][T17231] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 3506.093255][T31662] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3506.094103][ T7839] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3506.114030][T31662] usb 5-1: Product: syz [ 3506.123663][T31662] usb 5-1: Manufacturer: syz [ 3506.141984][T31662] cdc_wdm 5-1:1.0: skipping garbage [ 3506.147942][T31662] cdc_wdm 5-1:1.0: skipping garbage [ 3506.155578][T31662] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3506.161675][T31662] cdc_wdm 5-1:1.0: Unknown control protocol [ 3506.190181][ T7838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3506.205991][T24024] netlink: 'syz.1.14440': attribute type 1 has an invalid length. [ 3506.208792][ T7838] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3506.215202][T24023] netlink: 'syz.1.14440': attribute type 1 has an invalid length. [ 3506.232291][ T7838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3506.244206][T17231] usb 7-1: device descriptor read/64, error -71 [ 3506.258763][ T7839] usb 3-1: config 0 has no interfaces? [ 3506.267450][ T7838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3506.278357][ T7838] usb 4-1: Product: syz [ 3506.283424][ T7839] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3506.293052][ T7839] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3506.301256][ T7838] usb 4-1: Manufacturer: syz [ 3506.306852][ T7838] usb 4-1: SerialNumber: syz [ 3506.311543][ T7839] usb 3-1: Product: syz [ 3506.322990][ T7839] usb 3-1: Manufacturer: syz [ 3506.333256][ T7838] cdc_mbim 4-1:1.0: skipping garbage [ 3506.342108][ T7839] usb 3-1: config 0 descriptor?? [ 3506.355034][T31665] usb 5-1: USB disconnect, device number 8 [ 3506.362006][T17231] usb usb7-port1: attempt power cycle [ 3506.473987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3506.536963][T24014] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3506.612218][T21500] usb 3-1: USB disconnect, device number 124 [ 3506.714009][T17231] usb 7-1: new low-speed USB device number 73 using dummy_hcd [ 3506.734609][T17231] usb 7-1: device descriptor read/8, error -71 [ 3506.948201][T24014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3506.958688][T24014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.974294][T17231] usb 7-1: new low-speed USB device number 74 using dummy_hcd [ 3506.994932][T17231] usb 7-1: device descriptor read/8, error -71 [ 3507.104783][T17231] usb usb7-port1: unable to enumerate USB device [ 3507.163972][T31665] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3507.235811][T24034] netlink: 'syz.1.14443': attribute type 1 has an invalid length. [ 3507.263754][T24034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3507.305496][T24034] bond6: (slave veth11): Enslaving as an active interface with a down link [ 3507.314303][T31665] usb 5-1: Using ep0 maxpacket: 8 [ 3507.321565][T31665] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 31, using maximum allowed: 30 [ 3507.334877][T24034] veth0_virt_wifi: entered promiscuous mode [ 3507.341069][T31665] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 3507.356425][T24034] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 3507.368146][T31665] usb 5-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 3507.390016][T24017] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 3507.400317][T31665] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 3507.410326][T24034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14443'. [ 3507.419512][T31665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.427858][T31665] usb 5-1: Product: syz [ 3507.432271][T31665] usb 5-1: Manufacturer: syz [ 3507.437441][T24034] syzkaller1: entered promiscuous mode [ 3507.442988][T31665] usb 5-1: SerialNumber: syz [ 3507.447775][T24034] syzkaller1: entered allmulticast mode [ 3507.454117][T24014] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3507.465555][ T7838] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 3507.476547][ T7838] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 3507.490019][ T7838] wwan wwan0: port wwan0mbim0 attached [ 3507.513933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3507.537654][ T7838] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 12:5f:fa:97:97:18 [ 3507.711809][ C0] wdm_int_callback: 1545 callbacks suppressed [ 3507.711835][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.724654][ C0] wdm_int_callback: 1545 callbacks suppressed [ 3507.724676][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.737311][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.744039][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.750910][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.757624][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.764413][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.771130][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.777996][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.784711][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.791547][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.798260][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.805054][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.811763][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.818494][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.825211][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.831972][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.838678][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.844926][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 3507.884308][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3507.891056][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3507.909734][T31665] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3507.932860][T31665] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 3507.952017][T31665] usb 5-1: USB disconnect, device number 9 [ 3508.096031][T24053] overlayfs: missing 'lowerdir' [ 3508.377403][ T7838] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 3508.412313][ T7838] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 3508.452666][ T7838] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 3508.501609][ T7838] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 3508.537508][ T7838] rtc rtc0: __rtc_set_alarm: err=-22 [ 3508.553948][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3508.800539][T24078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3508.807122][T24078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3508.819849][T24082] FAULT_INJECTION: forcing a failure. [ 3508.819849][T24082] name failslab, interval 1, probability 0, space 0, times 0 [ 3508.833140][T24082] CPU: 1 UID: 0 PID: 24082 Comm: syz.3.14454 Tainted: G L syzkaller #0 PREEMPT(full) [ 3508.833166][T24082] Tainted: [L]=SOFTLOCKUP [ 3508.833172][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3508.833183][T24082] Call Trace: [ 3508.833191][T24082] [ 3508.833206][T24082] dump_stack_lvl+0xe8/0x150 [ 3508.833233][T24082] should_fail_ex+0x412/0x560 [ 3508.833258][T24082] should_failslab+0xa8/0x100 [ 3508.833276][T24082] __kvmalloc_node_noprof+0x178/0x8a0 [ 3508.833300][T24082] ? ip_vs_rht_alloc+0x114/0x960 [ 3508.833413][T24082] ? ip_vs_rht_alloc+0x5e/0x960 [ 3508.833441][T24082] ip_vs_rht_alloc+0x114/0x960 [ 3508.833472][T24082] ip_vs_conn_tab_alloc+0x60/0x110 [ 3508.833514][T24082] start_sync_thread+0x187/0x2860 [ 3508.833594][T24082] ? __lock_acquire+0x6b5/0x2cf0 [ 3508.833622][T24082] ? look_up_lock_class+0x57/0x110 [ 3508.833662][T24082] ? register_lock_class+0x31/0x2e0 [ 3508.833690][T24082] ? __pfx_start_sync_thread+0x10/0x10 [ 3508.833725][T24082] ? __might_fault+0xaf/0x130 [ 3508.833764][T24082] ? __might_fault+0xaf/0x130 [ 3508.833809][T24082] do_ip_vs_set_ctl+0x497/0xb00 [ 3508.833836][T24082] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 3508.833875][T24082] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 3508.833894][T24082] ? nf_setsockopt+0x3a/0x290 [ 3508.833923][T24082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3508.833948][T24082] ? __pfx___mutex_lock+0x10/0x10 [ 3508.833980][T24082] nf_setsockopt+0x26f/0x290 [ 3508.834007][T24082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3508.834031][T24082] smc_setsockopt+0x224/0xad0 [ 3508.834091][T24082] ? __pfx_smc_setsockopt+0x10/0x10 [ 3508.834108][T24082] ? aa_sock_opt_perm+0xff/0x1a0 [ 3508.834138][T24082] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 3508.834162][T24082] ? __pfx_smc_setsockopt+0x10/0x10 [ 3508.834183][T24082] do_sock_setsockopt+0x17c/0x1b0 [ 3508.834220][T24082] __x64_sys_setsockopt+0x13d/0x1b0 [ 3508.834248][T24082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3508.834268][T24082] do_syscall_64+0x174/0x580 [ 3508.834285][T24082] ? trace_irq_disable+0x3b/0x140 [ 3508.834310][T24082] ? clear_bhb_loop+0x40/0x90 [ 3508.834331][T24082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3508.834348][T24082] RIP: 0033:0x7fad33d9ce59 [ 3508.834365][T24082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3508.834379][T24082] RSP: 002b:00007fad31ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3508.834398][T24082] RAX: ffffffffffffffda RBX: 00007fad34015fa0 RCX: 00007fad33d9ce59 [ 3508.834410][T24082] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000005 [ 3508.834421][T24082] RBP: 00007fad31ff6090 R08: 0000000000000018 R09: 0000000000000000 [ 3508.834431][T24082] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 3508.834442][T24082] R13: 00007fad34016038 R14: 00007fad34015fa0 R15: 00007fad3413fa48 [ 3508.834470][T24082] [ 3509.152079][ T5294] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 3509.179407][T24078] vhci_hcd vhci_hcd.0: Device attached [ 3509.306827][T24076] netlink: 14 bytes leftover after parsing attributes in process `syz.6.14452'. [ 3509.379562][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14455'. [ 3509.454019][ T7838] usb 38-1: SetAddress Request (46) to port 0 [ 3509.460229][ T7838] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 3509.593943][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3510.047506][T24080] vhci_hcd: connection reset by peer [ 3510.059740][T22033] vhci_hcd vhci_hcd.2: stop threads [ 3510.066500][T22033] vhci_hcd vhci_hcd.2: release socket [ 3510.079447][T22033] vhci_hcd vhci_hcd.2: disconnect device [ 3510.085493][T17231] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 3510.143281][T24125] bridge1: entered promiscuous mode [ 3510.166215][T24125] bridge1: entered allmulticast mode [ 3510.257274][T17231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3510.287139][T17231] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3510.343106][T17231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3510.362015][T17231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.383684][T17231] usb 7-1: Product: syz [ 3510.396100][T17231] usb 7-1: Manufacturer: syz [ 3510.410771][T17231] usb 7-1: SerialNumber: syz [ 3510.436913][T17231] cdc_mbim 7-1:1.0: skipping garbage [ 3510.635437][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3510.651314][T24112] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3511.089430][T24112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3511.138920][T24112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3511.296641][T24149] FAULT_INJECTION: forcing a failure. [ 3511.296641][T24149] name failslab, interval 1, probability 0, space 0, times 0 [ 3511.354662][T24149] CPU: 1 UID: 0 PID: 24149 Comm: syz.1.14469 Tainted: G L syzkaller #0 PREEMPT(full) [ 3511.354691][T24149] Tainted: [L]=SOFTLOCKUP [ 3511.354698][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3511.354709][T24149] Call Trace: [ 3511.354717][T24149] [ 3511.354725][T24149] dump_stack_lvl+0xe8/0x150 [ 3511.354750][T24149] should_fail_ex+0x412/0x560 [ 3511.354776][T24149] should_failslab+0xa8/0x100 [ 3511.354796][T24149] __kmalloc_noprof+0xe8/0x760 [ 3511.354821][T24149] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 3511.354851][T24149] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 3511.354883][T24149] genl_family_rcv_msg_doit+0xd9/0x330 [ 3511.354912][T24149] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3511.354940][T24149] ? apparmor_capable+0x126/0x170 [ 3511.354962][T24149] ? bpf_lsm_capable+0x9/0x20 [ 3511.354986][T24149] ? security_capable+0x7e/0x2c0 [ 3511.355016][T24149] genl_rcv_msg+0x61c/0x7a0 [ 3511.355043][T24149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3511.355064][T24149] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3511.355089][T24149] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 3511.355108][T24149] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3511.355146][T24149] netlink_rcv_skb+0x232/0x4b0 [ 3511.355172][T24149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3511.355194][T24149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3511.355235][T24149] ? down_read+0x270/0x2e0 [ 3511.355255][T24149] ? genl_rcv+0xd/0x40 [ 3511.355276][T24149] genl_rcv+0x28/0x40 [ 3511.355295][T24149] netlink_unicast+0x75c/0x8e0 [ 3511.355330][T24149] netlink_sendmsg+0x813/0xb40 [ 3511.355356][T24149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3511.355377][T24149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3511.355404][T24149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3511.355431][T24149] ____sys_sendmsg+0x972/0x9f0 [ 3511.355450][T24149] ? __might_fault+0xaf/0x130 [ 3511.355478][T24149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3511.355506][T24149] ? import_iovec+0x73/0xa0 [ 3511.355531][T24149] ___sys_sendmsg+0x2a5/0x360 [ 3511.355548][T24149] ? __lock_acquire+0x6b5/0x2cf0 [ 3511.355571][T24149] ? __pfx____sys_sendmsg+0x10/0x10 [ 3511.355621][T24149] ? __fget_files+0x2a/0x420 [ 3511.355643][T24149] ? __fget_files+0x3a0/0x420 [ 3511.355674][T24149] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3511.355695][T24149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3511.355722][T24149] ? __pfx_ksys_write+0x10/0x10 [ 3511.355753][T24149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3511.355773][T24149] do_syscall_64+0x174/0x580 [ 3511.355791][T24149] ? trace_irq_disable+0x3b/0x140 [ 3511.355818][T24149] ? clear_bhb_loop+0x40/0x90 [ 3511.355840][T24149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3511.355858][T24149] RIP: 0033:0x7f1f1179ce59 [ 3511.355875][T24149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3511.355890][T24149] RSP: 002b:00007f1f12625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3511.355909][T24149] RAX: ffffffffffffffda RBX: 00007f1f11a15fa0 RCX: 00007f1f1179ce59 [ 3511.355922][T24149] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 3511.355949][T24149] RBP: 00007f1f12625090 R08: 0000000000000000 R09: 0000000000000000 [ 3511.355960][T24149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3511.355971][T24149] R13: 00007f1f11a16038 R14: 00007f1f11a15fa0 R15: 00007f1f11b3fa48 [ 3511.356005][T24149] [ 3511.674088][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3511.919940][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.933630][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.194653][T24157] FAULT_INJECTION: forcing a failure. [ 3512.194653][T24157] name failslab, interval 1, probability 0, space 0, times 0 [ 3512.211259][T24157] CPU: 0 UID: 0 PID: 24157 Comm: syz.4.14471 Tainted: G L syzkaller #0 PREEMPT(full) [ 3512.211288][T24157] Tainted: [L]=SOFTLOCKUP [ 3512.211295][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3512.211306][T24157] Call Trace: [ 3512.211314][T24157] [ 3512.211322][T24157] dump_stack_lvl+0xe8/0x150 [ 3512.211347][T24157] should_fail_ex+0x412/0x560 [ 3512.211376][T24157] should_failslab+0xa8/0x100 [ 3512.211399][T24157] ? skb_clone+0x212/0x3a0 [ 3512.211419][T24157] kmem_cache_alloc_noprof+0x87/0x650 [ 3512.211444][T24157] ? __netlink_lookup+0xc6/0x8b0 [ 3512.211467][T24157] skb_clone+0x212/0x3a0 [ 3512.211488][T24157] __netlink_deliver_tap+0x404/0x850 [ 3512.211526][T24157] ? netlink_deliver_tap+0x2e/0x1b0 [ 3512.211554][T24157] netlink_deliver_tap+0x19c/0x1b0 [ 3512.211581][T24157] netlink_unicast+0x730/0x8e0 [ 3512.211615][T24157] netlink_sendmsg+0x813/0xb40 [ 3512.211640][T24157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3512.211661][T24157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3512.211688][T24157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3512.211715][T24157] ____sys_sendmsg+0x972/0x9f0 [ 3512.211732][T24157] ? __might_fault+0xaf/0x130 [ 3512.211761][T24157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3512.211787][T24157] ? import_iovec+0x73/0xa0 [ 3512.211812][T24157] ___sys_sendmsg+0x2a5/0x360 [ 3512.211829][T24157] ? __lock_acquire+0x6b5/0x2cf0 [ 3512.211851][T24157] ? __pfx____sys_sendmsg+0x10/0x10 [ 3512.211918][T24157] ? __fget_files+0x2a/0x420 [ 3512.211940][T24157] ? __fget_files+0x3a0/0x420 [ 3512.211973][T24157] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3512.211995][T24157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3512.212023][T24157] ? __pfx_ksys_write+0x10/0x10 [ 3512.212059][T24157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3512.212080][T24157] do_syscall_64+0x174/0x580 [ 3512.212099][T24157] ? trace_irq_disable+0x3b/0x140 [ 3512.212127][T24157] ? clear_bhb_loop+0x40/0x90 [ 3512.212150][T24157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3512.212169][T24157] RIP: 0033:0x7f880e39ce59 [ 3512.212187][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3512.212203][T24157] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3512.212223][T24157] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3512.212236][T24157] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3512.212249][T24157] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3512.212261][T24157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3512.212272][T24157] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3512.212303][T24157] [ 3512.713944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3512.951624][T24179] fuse: Unknown parameter '0xffffffffffffffff' [ 3513.684110][ T7839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3513.753956][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3513.845009][ T7839] usb 5-1: Using ep0 maxpacket: 32 [ 3513.871125][ T7839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3513.904880][ T7839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3513.941119][ T7839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.979441][ T7839] usb 5-1: Product: syz [ 3513.996969][ T7839] usb 5-1: Manufacturer: syz [ 3514.012916][ T7839] usb 5-1: SerialNumber: syz [ 3514.059631][ T7839] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3514.315152][ T7839] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3514.340870][ T7839] usb 5-1: 3:0: failed to get current value for ch 0 (-22) [ 3514.380667][ T7839] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 3514.403173][ T7839] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 3514.425391][ T7839] usb 5-1: [3] FU [Mic Playback Volume] ch = 1, val = 0/1/1 [ 3514.439854][ T7839] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 3514.468083][ T7839] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 3514.534821][ T7839] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 3514.554577][ T7838] usb 38-1: device descriptor read/8, error -110 [ 3514.611357][ T7839] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 3514.751559][ T7839] usb 5-1: USB disconnect, device number 10 [ 3514.793930][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3514.895514][T24212] bridge0: port 1(bridge_slave_0) entered listening state [ 3514.905980][T20232] udevd[20232]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3514.979225][ T7838] usb usb38-port1: attempt power cycle [ 3515.232151][T24221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3515.245735][T24221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3515.257793][ C0] wdm_int_callback: 307 callbacks suppressed [ 3515.257814][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.270507][ C0] wdm_int_callback: 307 callbacks suppressed [ 3515.270520][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.283700][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.290391][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.297488][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.304192][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.311505][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.318211][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.324941][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.331619][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.339741][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.346422][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.353121][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.359830][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.366239][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.372919][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.379262][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.385958][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.392272][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3515.398946][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3515.486396][T24223] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.14494'. [ 3515.504007][ T7839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3515.635233][ T7838] usb usb38-port1: unable to enumerate USB device [ 3515.645053][T24232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3515.662265][T24232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3515.686324][ T7839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3515.697849][ T7839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3515.712705][ T7839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3515.722438][ T7839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.730738][ T7839] usb 5-1: Product: syz [ 3515.735582][ T7839] usb 5-1: Manufacturer: syz [ 3515.740297][ T7839] usb 5-1: SerialNumber: syz [ 3515.751940][ T7839] cdc_mbim 5-1:1.0: skipping garbage [ 3515.817041][ T7844] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3515.834033][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3515.916232][T17231] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 3515.922774][T17231] cdc_mbim 7-1:1.0: bind() failure [ 3515.935876][T17231] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 3515.942816][T17231] cdc_ncm 7-1:1.1: bind() failure [ 3515.947956][ C0] cdc_mbim 4-1:1.0 wwan0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 3515.953220][T24217] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 3515.975999][ T7844] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3515.986906][ T7844] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 3516.005884][ T7844] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 3516.017645][ T7844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3516.026988][ T7844] usb 2-1: Product: syz [ 3516.031335][ T7844] usb 2-1: Manufacturer: syz [ 3516.037893][ T7844] usb 2-1: SerialNumber: syz [ 3516.357923][T24217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3516.418827][T24217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3516.874074][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3517.913928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3518.006240][T24253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3518.052204][T24253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3518.416901][T24256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3518.432371][T24256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3518.509767][T17231] usb 2-1: USB disconnect, device number 39 [ 3518.954003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3519.558858][T24274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14508'. [ 3519.993996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3520.292570][T24269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3520.307404][T24269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3520.743119][T24301] FAULT_INJECTION: forcing a failure. [ 3520.743119][T24301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3520.743156][T24301] CPU: 0 UID: 0 PID: 24301 Comm: syz.6.14517 Tainted: G L syzkaller #0 PREEMPT(full) [ 3520.743184][T24301] Tainted: [L]=SOFTLOCKUP [ 3520.743192][T24301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3520.743203][T24301] Call Trace: [ 3520.743211][T24301] [ 3520.743221][T24301] dump_stack_lvl+0xe8/0x150 [ 3520.743250][T24301] should_fail_ex+0x412/0x560 [ 3520.743276][T24301] _copy_to_user+0x31/0xb0 [ 3520.743302][T24301] simple_read_from_buffer+0xe1/0x170 [ 3520.743331][T24301] proc_fail_nth_read+0x1bb/0x230 [ 3520.743360][T24301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3520.743389][T24301] ? rw_verify_area+0x2a6/0x4d0 [ 3520.743415][T24301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3520.743441][T24301] vfs_read+0x20c/0xa70 [ 3520.743491][T24301] ? __pfx___mutex_lock+0x10/0x10 [ 3520.743516][T24301] ? __pfx_vfs_read+0x10/0x10 [ 3520.743546][T24301] ? __fget_files+0x2a/0x420 [ 3520.743576][T24301] ? __fget_files+0x3a0/0x420 [ 3520.743599][T24301] ? __fget_files+0x2a/0x420 [ 3520.743632][T24301] ksys_read+0x150/0x270 [ 3520.743663][T24301] ? __pfx_ksys_read+0x10/0x10 [ 3520.743701][T24301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3520.743723][T24301] do_syscall_64+0x174/0x580 [ 3520.743743][T24301] ? trace_irq_disable+0x3b/0x140 [ 3520.743773][T24301] ? clear_bhb_loop+0x40/0x90 [ 3520.743799][T24301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3520.743819][T24301] RIP: 0033:0x7fb95415d68e [ 3520.743838][T24301] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3520.743854][T24301] RSP: 002b:00007fb954f78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3520.743876][T24301] RAX: ffffffffffffffda RBX: 00007fb954f796c0 RCX: 00007fb95415d68e [ 3520.743898][T24301] RDX: 000000000000000f RSI: 00007fb954f790a0 RDI: 0000000000000005 [ 3520.743910][T24301] RBP: 00007fb954f79090 R08: 0000000000000000 R09: 0000000000000000 [ 3520.743922][T24301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3520.743934][T24301] R13: 00007fb954416038 R14: 00007fb954415fa0 R15: 00007fb95453fa48 [ 3520.743966][T24301] [ 3521.003063][T24310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14519'. [ 3521.034012][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3521.197631][ T7839] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 3521.197699][ T7839] cdc_mbim 5-1:1.0: bind() failure [ 3521.212302][ T7839] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 3521.212348][ T7839] cdc_ncm 5-1:1.1: bind() failure [ 3521.251322][T24317] kvm: pic: non byte write [ 3521.251640][T24317] kvm: pic: non byte write [ 3521.251908][T24317] kvm: pic: non byte write [ 3521.252174][T24317] kvm: pic: non byte write [ 3521.260544][T24317] kvm: pic: non byte write [ 3521.260778][T24317] kvm: pic: non byte write [ 3521.261001][T24317] kvm: pic: non byte write [ 3521.261200][T24317] kvm: pic: non byte write [ 3521.266561][T24317] kvm: pic: non byte write [ 3521.272823][T24317] kvm: pic: non byte write [ 3521.676073][T24333] tc action pedit 'at' offset 46 out of bounds [ 3521.753886][ C0] cdc_mbim 4-1:1.0 wwan0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 3521.984053][ T7839] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3522.073929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3522.140729][ T7839] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3522.140755][ T7839] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 3522.147018][ T7839] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 3522.147043][ T7839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3522.147063][ T7839] usb 3-1: Product: syz [ 3522.147073][ T7839] usb 3-1: Manufacturer: syz [ 3522.147082][ T7839] usb 3-1: SerialNumber: syz [ 3522.384023][T24350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3522.384474][T24350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3523.074586][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14532'. [ 3523.113997][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3523.370614][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 3523.370633][ T30] audit: type=1326 audit(1781147800.691:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24363 comm="syz.6.14535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb95419ce59 code=0x0 [ 3523.916393][T17231] usb 3-1: USB disconnect, device number 125 [ 3523.998215][T24379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3524.000041][T24379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3524.156651][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3524.302918][T24388] syz_tun: entered allmulticast mode [ 3524.469752][T24396] netlink: 'syz.1.14545': attribute type 3 has an invalid length. [ 3524.502862][T24398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3524.535963][T24398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3524.914013][T17231] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3525.077638][T17231] usb 2-1: Using ep0 maxpacket: 8 [ 3525.194039][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3525.267261][T17231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3525.286438][T17231] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3525.295589][T17231] usb 2-1: can't read configurations, error -71 [ 3525.399002][T24435] FAULT_INJECTION: forcing a failure. [ 3525.399002][T24435] name failslab, interval 1, probability 0, space 0, times 0 [ 3525.413444][T24435] CPU: 0 UID: 0 PID: 24435 Comm: syz.6.14554 Tainted: G L syzkaller #0 PREEMPT(full) [ 3525.413492][T24435] Tainted: [L]=SOFTLOCKUP [ 3525.413500][T24435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3525.413513][T24435] Call Trace: [ 3525.413522][T24435] [ 3525.413531][T24435] dump_stack_lvl+0xe8/0x150 [ 3525.413570][T24435] should_fail_ex+0x412/0x560 [ 3525.413599][T24435] should_failslab+0xa8/0x100 [ 3525.413619][T24435] ? skb_clone+0x212/0x3a0 [ 3525.413640][T24435] kmem_cache_alloc_noprof+0x87/0x650 [ 3525.413668][T24435] ? __netlink_lookup+0xc6/0x8b0 [ 3525.413695][T24435] skb_clone+0x212/0x3a0 [ 3525.413719][T24435] __netlink_deliver_tap+0x404/0x850 [ 3525.413764][T24435] ? netlink_deliver_tap+0x2e/0x1b0 [ 3525.413796][T24435] netlink_deliver_tap+0x19c/0x1b0 [ 3525.413828][T24435] netlink_unicast+0x730/0x8e0 [ 3525.413866][T24435] netlink_sendmsg+0x813/0xb40 [ 3525.413895][T24435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3525.413917][T24435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3525.413949][T24435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3525.413979][T24435] ____sys_sendmsg+0x972/0x9f0 [ 3525.413998][T24435] ? __might_fault+0xaf/0x130 [ 3525.414030][T24435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3525.414062][T24435] ? import_iovec+0x73/0xa0 [ 3525.414091][T24435] ___sys_sendmsg+0x2a5/0x360 [ 3525.414110][T24435] ? __lock_acquire+0x6b5/0x2cf0 [ 3525.414137][T24435] ? __pfx____sys_sendmsg+0x10/0x10 [ 3525.414193][T24435] ? __fget_files+0x2a/0x420 [ 3525.414218][T24435] ? __fget_files+0x3a0/0x420 [ 3525.414252][T24435] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3525.414277][T24435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3525.414307][T24435] ? __pfx_ksys_write+0x10/0x10 [ 3525.414346][T24435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3525.414370][T24435] do_syscall_64+0x174/0x580 [ 3525.414386][T24435] ? trace_irq_disable+0x3b/0x140 [ 3525.414407][T24435] ? clear_bhb_loop+0x40/0x90 [ 3525.414425][T24435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3525.414439][T24435] RIP: 0033:0x7fb95419ce59 [ 3525.414454][T24435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3525.414466][T24435] RSP: 002b:00007fb954f79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3525.414482][T24435] RAX: ffffffffffffffda RBX: 00007fb954415fa0 RCX: 00007fb95419ce59 [ 3525.414493][T24435] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 3525.414503][T24435] RBP: 00007fb954f79090 R08: 0000000000000000 R09: 0000000000000000 [ 3525.414512][T24435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3525.414521][T24435] R13: 00007fb954416038 R14: 00007fb954415fa0 R15: 00007fb95453fa48 [ 3525.414549][T24435] [ 3525.591687][T24433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14553'. [ 3525.846470][T24441] usb usb7: usbfs: interface 0 claimed by hub while 'syz.6.14555' sets config #0 [ 3526.243933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3526.334072][T31662] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3526.348256][T24464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3526.362363][T24464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3526.362675][T24466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3526.414428][T24466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3526.439238][T24464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3526.448446][T24464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3526.514581][T31662] usb 3-1: Using ep0 maxpacket: 32 [ 3526.519867][T17231] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3526.531194][T31662] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 3526.546674][T31662] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3526.553525][T31662] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 3526.563051][T31662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3526.583571][T31662] usb 3-1: config 0 descriptor?? [ 3526.597899][T24452] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 3526.725725][T17231] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3526.736047][T17231] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 3526.747421][T17231] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 3526.756666][T17231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3526.764855][T17231] usb 2-1: Product: syz [ 3526.769089][T17231] usb 2-1: Manufacturer: syz [ 3526.773742][T17231] usb 2-1: SerialNumber: syz [ 3527.027650][T24475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3527.031679][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.044759][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.051915][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.059113][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.066490][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.073586][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.083300][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.094939][T24477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3527.101016][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.117544][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.122347][T24475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3527.134065][T31662] hid_mf 0003:0079:1801.0045: unknown main item tag 0x0 [ 3527.146274][T31662] hid_mf 0003:0079:1801.0045: unexpected long global item [ 3527.154544][T31662] hid_mf 0003:0079:1801.0045: HID parse failed. [ 3527.160921][T31662] hid_mf 0003:0079:1801.0045: probe with driver hid_mf failed with error -22 [ 3527.172060][T24477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3527.227678][T24480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3527.239501][T24480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3527.275286][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3527.526320][ T7839] usb 3-1: USB disconnect, device number 126 [ 3528.268118][ T7838] usb 2-1: USB disconnect, device number 41 [ 3528.313927][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3528.458348][ T5255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3528.470752][ T5255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3528.496939][ T5255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3528.510365][ T5255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3528.518943][ T5255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3528.895699][T24504] loop5: detected capacity change from 0 to 2015 [ 3528.970213][T24505] loop5: detected capacity change from 2015 to 2039 [ 3529.353962][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3529.614030][T31662] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3529.773047][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14578'. [ 3529.825651][T31662] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3529.875524][T31662] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3529.997965][T31662] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3530.052442][T31662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3530.099732][T24522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3530.108720][T24522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3530.130779][T31662] usb 2-1: Product: syz [ 3530.139102][T24151] syz_tun (unregistering): left allmulticast mode [ 3530.149064][T31662] usb 2-1: Manufacturer: syz [ 3530.159719][T31662] usb 2-1: SerialNumber: syz [ 3530.186353][T31662] cdc_mbim 2-1:1.0: skipping garbage [ 3530.208594][T17231] usb 7-1: USB disconnect, device number 75 [ 3530.283111][T24496] bridge0: port 1(bridge_slave_0) entered blocking state [ 3530.302378][T24496] bridge0: port 1(bridge_slave_0) entered disabled state [ 3530.317935][T24496] bridge_slave_0: entered allmulticast mode [ 3530.337485][T24496] bridge_slave_0: entered promiscuous mode [ 3530.356906][T24496] bridge0: port 2(bridge_slave_1) entered blocking state [ 3530.372143][T24496] bridge0: port 2(bridge_slave_1) entered disabled state [ 3530.390594][T24513] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 3530.394259][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3530.416012][T24496] bridge_slave_1: entered allmulticast mode [ 3530.424757][T24496] bridge_slave_1: entered promiscuous mode [ 3530.484459][T24496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3530.645265][ T597] Bluetooth: hci5: command tx timeout [ 3530.782465][T24496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3530.817209][T24513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3530.853356][T24513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3531.149013][T24496] team0: Port device team_slave_0 added [ 3531.178630][T24496] team0: Port device team_slave_1 added [ 3531.384142][T31661] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3531.418133][T24496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3531.428533][T24534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3531.434285][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3531.453595][T24496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3531.484804][T24496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3531.499788][T24534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3531.532626][ C0] wdm_int_callback: 13410 callbacks suppressed [ 3531.532653][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.545554][ C0] wdm_int_callback: 13410 callbacks suppressed [ 3531.545577][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.555975][T24534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3531.558954][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.572977][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.579441][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.586125][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.592495][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.592510][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.599313][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.599325][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.599547][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.599569][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.599805][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.599826][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.600045][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.600064][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.600294][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.600314][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.600527][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3531.600545][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3531.624726][T31661] usb 3-1: Using ep0 maxpacket: 32 [ 3531.629901][T31661] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3531.629921][T31661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3531.632952][T31661] usb 3-1: config 0 descriptor?? [ 3531.637514][T24534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3531.686193][T24513] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 3531.686932][T31662] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 3531.689350][T31662] cdc_mbim 2-1:1.0: cdc-wdm1: USB WDM device [ 3531.693583][T31662] wwan wwan1: port wwan1mbim0 attached [ 3531.780440][T24496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3531.780459][T24496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3531.780482][T24496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3531.827677][T31662] cdc_mbim 2-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 82:e6:6a:08:90:03 [ 3531.840316][T31661] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3531.845705][T31661] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3531.849034][T31661] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3531.849068][T31661] usb 3-1: media controller created [ 3531.911832][T31661] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3532.124714][T24496] hsr_slave_0: entered promiscuous mode [ 3532.156624][T24496] hsr_slave_1: entered promiscuous mode [ 3532.157341][T24496] debugfs: 'hsr0' already exists in 'hsr' [ 3532.157356][T24496] Cannot create hsr debugfs directory [ 3532.476516][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3532.632319][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3532.678213][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3532.714714][ T597] Bluetooth: hci5: command tx timeout [ 3532.873993][T31661] stb0899_attach: Driver disabled by Kconfig [ 3532.886930][T31661] az6027: no front-end attached [ 3532.886930][T31661] [ 3532.914476][T11762] bridge_slave_1: left allmulticast mode [ 3532.923380][T11762] bridge_slave_1: left promiscuous mode [ 3532.930758][T24559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3532.945940][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 3532.963778][T24559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3532.978710][T11762] bridge_slave_0: left allmulticast mode [ 3532.990917][T11762] bridge_slave_0: left promiscuous mode [ 3533.005952][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 3533.303761][T11762] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 3533.513934][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3533.672599][T11762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3533.691452][T11762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3533.701996][T11762] bond0 (unregistering): Released all slaves [ 3533.718508][T24575] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14588'. [ 3533.727960][T11762] bond1 (unregistering): Released all slaves [ 3533.751343][T11762] bond2 (unregistering): Released all slaves [ 3533.787853][T11762] bond3 (unregistering): Released all slaves [ 3533.813402][T11762] bond4 (unregistering): (slave bond5): Releasing backup interface [ 3533.825306][T11762] bond4 (unregistering): Released all slaves [ 3533.861265][T11762] bond5 (unregistering): Released all slaves [ 3533.886704][T11762] bond6 (unregistering): (slave bond7): Releasing backup interface [ 3533.896161][T11762] bond6 (unregistering): Released all slaves [ 3533.926909][T11762] bond7 (unregistering): Released all slaves [ 3533.955178][T31661] az6027: usb out operation failed. (-71) [ 3533.977885][T31661] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3534.027874][T31661] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input139 [ 3534.045012][T24566] syzkaller0: entered promiscuous mode [ 3534.057557][T31661] dvb-usb: schedule remote query interval to 400 msecs. [ 3534.062033][T24566] syzkaller0: entered allmulticast mode [ 3534.086764][T31661] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3534.097853][T31661] usb 3-1: USB disconnect, device number 127 [ 3534.304496][T31661] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3534.441624][T11762] tipc: Left network mode [ 3534.554014][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3534.794454][ T597] Bluetooth: hci5: command tx timeout [ 3535.501393][T24602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3535.531682][T24602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3535.557248][T11762] hsr_slave_0: left promiscuous mode [ 3535.584886][T24602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3535.593957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3535.622643][T24602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3535.635982][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 3535.662707][T11762] hsr_slave_1: left promiscuous mode [ 3535.682955][T11762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3535.700660][T11762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3535.719960][T11762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3535.733526][T11762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3536.633910][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3536.669556][T11762] team0 (unregistering): Port device team_slave_1 removed [ 3536.752767][T11762] team0 (unregistering): Port device team_slave_0 removed [ 3536.874198][ T597] Bluetooth: hci5: command tx timeout [ 3537.012549][T24627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3537.023066][T24627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.041631][ C0] wdm_int_callback: 485 callbacks suppressed [ 3537.041654][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.054410][ C0] wdm_int_callback: 485 callbacks suppressed [ 3537.054425][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.067414][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.074112][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.080670][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.087364][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.094638][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.101334][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.108506][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.115187][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.121663][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.128359][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.134841][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.141515][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.147876][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.154556][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.160875][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.167543][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.173916][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3537.180607][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3537.284029][T24627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3537.338845][T24627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.430763][ T5294] 8021q: adding VLAN 0 to HW filter on device wwan1 [ 3537.582729][T24635] program syz.3.14598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3537.673929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3538.492629][T11762] IPVS: stop unused estimator thread 0... [ 3538.713942][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3539.381373][T24661] FAULT_INJECTION: forcing a failure. [ 3539.381373][T24661] name failslab, interval 1, probability 0, space 0, times 0 [ 3539.429335][T24661] CPU: 1 UID: 0 PID: 24661 Comm: syz.3.14603 Tainted: G L syzkaller #0 PREEMPT(full) [ 3539.429360][T24661] Tainted: [L]=SOFTLOCKUP [ 3539.429365][T24661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3539.429374][T24661] Call Trace: [ 3539.429381][T24661] [ 3539.429388][T24661] dump_stack_lvl+0xe8/0x150 [ 3539.429409][T24661] should_fail_ex+0x412/0x560 [ 3539.429429][T24661] should_failslab+0xa8/0x100 [ 3539.429445][T24661] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 3539.429465][T24661] ? __alloc_skb+0x186/0x7d0 [ 3539.429485][T24661] ? __alloc_skb+0x1d0/0x7d0 [ 3539.429503][T24661] ? __local_bh_enable_ip+0xd0/0x130 [ 3539.429521][T24661] __alloc_skb+0x1d0/0x7d0 [ 3539.429541][T24661] ? netlink_ack_tlv_len+0x6c/0x210 [ 3539.429565][T24661] netlink_ack+0x146/0xa50 [ 3539.429584][T24661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3539.429624][T24661] ? __lock_acquire+0x6b5/0x2cf0 [ 3539.429653][T24661] netlink_rcv_skb+0x2b6/0x4b0 [ 3539.429678][T24661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3539.429702][T24661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3539.429736][T24661] ? netlink_deliver_tap+0x2e/0x1b0 [ 3539.429760][T24661] ? netlink_deliver_tap+0x2e/0x1b0 [ 3539.429788][T24661] netlink_unicast+0x75c/0x8e0 [ 3539.429818][T24661] netlink_sendmsg+0x813/0xb40 [ 3539.429842][T24661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3539.429859][T24661] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3539.429886][T24661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3539.429911][T24661] ____sys_sendmsg+0x972/0x9f0 [ 3539.429928][T24661] ? __might_fault+0xaf/0x130 [ 3539.429954][T24661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3539.429978][T24661] ? import_iovec+0x73/0xa0 [ 3539.430003][T24661] ___sys_sendmsg+0x2a5/0x360 [ 3539.430017][T24661] ? __lock_acquire+0x6b5/0x2cf0 [ 3539.430036][T24661] ? __pfx____sys_sendmsg+0x10/0x10 [ 3539.430078][T24661] ? __fget_files+0x2a/0x420 [ 3539.430096][T24661] ? __fget_files+0x3a0/0x420 [ 3539.430124][T24661] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3539.430153][T24661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3539.430179][T24661] ? __pfx_ksys_write+0x10/0x10 [ 3539.430215][T24661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3539.430236][T24661] do_syscall_64+0x174/0x580 [ 3539.430255][T24661] ? trace_irq_disable+0x3b/0x140 [ 3539.430281][T24661] ? clear_bhb_loop+0x40/0x90 [ 3539.430301][T24661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3539.430318][T24661] RIP: 0033:0x7fad33d9ce59 [ 3539.430335][T24661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3539.430347][T24661] RSP: 002b:00007fad31ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3539.430366][T24661] RAX: ffffffffffffffda RBX: 00007fad34015fa0 RCX: 00007fad33d9ce59 [ 3539.430377][T24661] RDX: 0000000000040040 RSI: 0000200000000080 RDI: 0000000000000004 [ 3539.430387][T24661] RBP: 00007fad31ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 3539.430396][T24661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3539.430405][T24661] R13: 00007fad34016038 R14: 00007fad34015fa0 R15: 00007fad3413fa48 [ 3539.430427][T24661] [ 3539.754022][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3539.822877][T24496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3539.933111][T24496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3540.006693][T24496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3540.034871][T24496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3540.070869][T24674] fuse: Unknown parameter 'fd0x0000000000000003' [ 3540.141127][T24496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3540.159899][T24496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3540.260438][T24496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3540.281719][T24496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3540.620491][T24496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3540.666465][T24496] 8021q: adding VLAN 0 to HW filter on device team0 [ 3540.709540][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 3540.716750][T11762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3540.791259][T21910] bridge0: port 2(bridge_slave_1) entered blocking state [ 3540.794159][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3540.798728][T21910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3541.185819][T24496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3541.362071][T24496] veth0_vlan: entered promiscuous mode [ 3541.447787][T24496] veth1_vlan: entered promiscuous mode [ 3541.609047][T24496] veth0_macvtap: entered promiscuous mode [ 3541.647716][T24496] veth1_macvtap: entered promiscuous mode [ 3541.699236][T24496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3541.771943][T24496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3541.834014][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3541.872502][T11363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3541.899453][T11363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3541.945602][T11363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3541.981050][T11363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3542.374691][T29631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3542.413551][T29631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3542.510418][T29631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3542.538243][T29631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3542.874038][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3542.898760][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14620'. [ 3542.918301][T24753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14621'. [ 3543.053353][T24753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14621'. [ 3543.064210][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14621'. [ 3543.374567][ T7832] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 3543.450821][T24764] fuse: Unknown parameter 'fd0x0000000000000003' [ 3543.546418][ T7832] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3543.578438][ T7832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3543.611640][ T7832] usb 7-1: config 0 descriptor?? [ 3543.633583][ T7832] cp210x 7-1:0.0: cp210x converter detected [ 3543.674591][ T7839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3543.841899][ T7832] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 3543.865584][ T7832] cp210x 7-1:0.0: querying part number failed [ 3543.873980][ T7839] usb 3-1: Using ep0 maxpacket: 8 [ 3543.903739][ T7839] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3543.913946][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3543.949583][ T7839] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3543.950972][ T7832] usb 7-1: cp210x converter now attached to ttyUSB0 [ 3544.030250][ T7832] usb 7-1: USB disconnect, device number 76 [ 3544.053879][ T7839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3544.090408][ T7832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3544.125212][ T7832] cp210x 7-1:0.0: device disconnected [ 3544.127889][ T7839] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 29984, setting to 1024 [ 3544.196315][ T7839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3544.232734][ T7839] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3544.292924][ T7839] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3544.352982][ T7839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3544.628577][ T7839] usb 3-1: usb_control_msg returned -32 [ 3544.649060][ T7839] usbtmc 3-1:16.0: can't read capabilities [ 3544.933874][ C0] cdc_mbim 4-1:1.0 wwan0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 3544.953999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3545.100165][T24786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3545.121006][T24786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3545.141615][ C0] wdm_int_callback: 10723 callbacks suppressed [ 3545.141641][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.154646][ C0] wdm_int_callback: 10723 callbacks suppressed [ 3545.154667][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.170419][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.177129][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.183971][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.190665][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.199541][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.206241][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.212772][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.219448][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.225829][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.232534][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.238936][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.245669][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.251979][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.258656][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.264984][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.271655][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.278774][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3545.285451][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3545.339603][ T30] audit: type=1326 audit(1781147822.661:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.364575][ T30] audit: type=1326 audit(1781147822.661:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.432637][ T30] audit: type=1326 audit(1781147822.661:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.459876][ T30] audit: type=1326 audit(1781147822.661:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.524291][ T30] audit: type=1326 audit(1781147822.661:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.552286][ T30] audit: type=1326 audit(1781147822.661:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.580540][ T30] audit: type=1326 audit(1781147822.661:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.606952][ T30] audit: type=1326 audit(1781147822.691:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.632072][ T30] audit: type=1326 audit(1781147822.691:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.658896][ T30] audit: type=1326 audit(1781147822.691:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.4.14629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e39ce59 code=0x7ffc0000 [ 3545.664623][ T7839] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 3545.889650][T24799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3545.906651][T24799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3545.940643][ T7839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3545.955318][ T7839] usb 7-1: not running at top speed; connect to a high speed hub [ 3545.991523][ T7839] usb 7-1: config 9 has an invalid interface number: 108 but max is 0 [ 3545.994094][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3546.033853][ T7839] usb 7-1: config 9 has no interface number 0 [ 3546.050389][T24799] fuse: Bad value for 'fd' [ 3546.068659][ T7839] usb 7-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=4f.5a [ 3546.102468][ T7839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3546.117434][ T7839] usb 7-1: Product: syz [ 3546.122185][ T7839] usb 7-1: Manufacturer: syz [ 3546.127975][ T7839] usb 7-1: SerialNumber: syz [ 3546.362166][ T7839] gspca_main: finepix-2.14.0 probing 04cb:010b [ 3546.383586][ T7839] usb 7-1: USB disconnect, device number 77 [ 3546.509761][T24805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 3546.516345][T24805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3546.582807][ T7832] usb 3-1: USB disconnect, device number 2 [ 3546.694847][T24812] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14633'. [ 3546.740636][T24814] fuse: Unknown parameter 'fd0x0000000000000003' [ 3546.850269][T24805] vhci_hcd vhci_hcd.0: Device attached [ 3546.866766][T29631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3546.887023][T29631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3546.945660][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14636'. [ 3547.034159][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3547.134725][ T7839] usb 40-1: SetAddress Request (26) to port 0 [ 3547.141197][ T7839] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 3547.349886][ T7844] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 3547.539231][ T7844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 3547.597429][ T7844] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3547.631993][T24831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3547.655012][T24831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3547.708592][ T7844] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 3547.769203][T24806] vhci_hcd: connection reset by peer [ 3547.788972][ T7844] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 145, changing to 11 [ 3547.821914][T24831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3547.832270][T24831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3547.846965][T29631] vhci_hcd vhci_hcd.3: stop threads [ 3547.859126][T29631] vhci_hcd vhci_hcd.3: release socket [ 3547.871463][T29631] vhci_hcd vhci_hcd.3: disconnect device [ 3547.915326][ T7844] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 3548.019361][ T7844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3548.038241][ T7844] usb 7-1: Product: syz [ 3548.074039][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3548.088342][ T7844] usb 7-1: Manufacturer: syz [ 3548.093031][ T7844] usb 7-1: SerialNumber: syz [ 3548.361089][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14641'. [ 3548.749401][ T7844] cdc_ncm 7-1:1.0: bind() failure [ 3548.760134][ T7844] usbtest 7-1:1.0: Linux gadget zero [ 3548.818138][ T7844] usbtest 7-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 3548.838307][ T7844] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 3548.863157][ T7844] cdc_ncm 7-1:1.1: bind() failure [ 3548.919476][ T7844] usbtest 7-1:1.1: couldn't get endpoints, -71 [ 3548.935557][ T7844] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 3548.959584][ T7844] usb 7-1: USB disconnect, device number 78 [ 3549.033863][ C1] cdc_mbim 2-1:1.0 wwan1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6070 ms [ 3549.113919][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3549.357357][T24848] FAULT_INJECTION: forcing a failure. [ 3549.357357][T24848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3549.424448][T24848] CPU: 0 UID: 0 PID: 24848 Comm: syz.4.14643 Tainted: G L syzkaller #0 PREEMPT(full) [ 3549.424490][T24848] Tainted: [L]=SOFTLOCKUP [ 3549.424499][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3549.424512][T24848] Call Trace: [ 3549.424521][T24848] [ 3549.424529][T24848] dump_stack_lvl+0xe8/0x150 [ 3549.424556][T24848] should_fail_ex+0x412/0x560 [ 3549.424585][T24848] prepare_alloc_pages+0x22a/0x650 [ 3549.424613][T24848] __alloc_frozen_pages_noprof+0x12f/0x380 [ 3549.424661][T24848] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3549.424705][T24848] ? __pfx_policy_nodemask+0x10/0x10 [ 3549.424727][T24848] ? trace_kmem_cache_alloc+0x29/0xe0 [ 3549.424747][T24848] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 3549.424768][T24848] alloc_pages_mpol+0x235/0x490 [ 3549.424800][T24848] alloc_pages_noprof+0xac/0x2a0 [ 3549.424822][T24848] alloc_skb_with_frags+0x265/0x760 [ 3549.424860][T24848] sock_alloc_send_pskb+0x878/0x990 [ 3549.424899][T24848] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 3549.424921][T24848] ? iov_iter_advance+0x8b/0x1c0 [ 3549.424953][T24848] tun_get_user+0x5df/0x43e0 [ 3549.424987][T24848] ? aa_file_perm+0x192/0x15e0 [ 3549.425011][T24848] ? aa_file_perm+0x50e/0x15e0 [ 3549.425029][T24848] ? __pfx_tun_get_user+0x10/0x10 [ 3549.425049][T24848] ? __lock_acquire+0x6b5/0x2cf0 [ 3549.425071][T24848] ? kstrtoull+0x12f/0x1d0 [ 3549.425123][T24848] ? ref_tracker_alloc+0x35c/0x4c0 [ 3549.425149][T24848] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 3549.425172][T24848] ? tun_get+0x1c/0x2f0 [ 3549.425189][T24848] ? tun_get+0x1c/0x2f0 [ 3549.425213][T24848] ? tun_get+0x1c/0x2f0 [ 3549.425226][T24848] ? tun_get+0x1c/0x2f0 [ 3549.425241][T24848] tun_chr_write_iter+0x113/0x200 [ 3549.425256][T24848] vfs_write+0x61d/0xb90 [ 3549.425303][T24848] ? __pfx_vfs_write+0x10/0x10 [ 3549.425337][T24848] ? __fget_files+0x2a/0x420 [ 3549.425369][T24848] ksys_write+0x150/0x270 [ 3549.425395][T24848] ? __pfx_ksys_write+0x10/0x10 [ 3549.425435][T24848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3549.425457][T24848] do_syscall_64+0x174/0x580 [ 3549.425480][T24848] ? clear_bhb_loop+0x40/0x90 [ 3549.425502][T24848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3549.425523][T24848] RIP: 0033:0x7f880e39ce59 [ 3549.425536][T24848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3549.425547][T24848] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3549.425562][T24848] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3549.425586][T24848] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000004 [ 3549.425599][T24848] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3549.425611][T24848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3549.425622][T24848] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3549.425650][T24848] [ 3549.880027][T24852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3549.890551][T24852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3549.900386][T24852] FAULT_INJECTION: forcing a failure. [ 3549.900386][T24852] name failslab, interval 1, probability 0, space 0, times 0 [ 3549.913283][T24852] CPU: 0 UID: 0 PID: 24852 Comm: syz.4.14645 Tainted: G L syzkaller #0 PREEMPT(full) [ 3549.913312][T24852] Tainted: [L]=SOFTLOCKUP [ 3549.913317][T24852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3549.913326][T24852] Call Trace: [ 3549.913332][T24852] [ 3549.913339][T24852] dump_stack_lvl+0xe8/0x150 [ 3549.913378][T24852] should_fail_ex+0x412/0x560 [ 3549.913406][T24852] should_failslab+0xa8/0x100 [ 3549.913426][T24852] __kmalloc_noprof+0xe8/0x760 [ 3549.913457][T24852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3549.913493][T24852] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3549.913536][T24852] tomoyo_check_open_permission+0x229/0x470 [ 3549.913566][T24852] ? tomoyo_check_open_permission+0x1d3/0x470 [ 3549.913592][T24852] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 3549.913622][T24852] ? __asan_memset+0x22/0x50 [ 3549.913676][T24852] ? tomoyo_file_open+0x163/0x220 [ 3549.913704][T24852] security_file_open+0xa9/0x240 [ 3549.913730][T24852] do_dentry_open+0x4a8/0x13a0 [ 3549.913762][T24852] ? vfs_open+0x31/0x340 [ 3549.913782][T24852] vfs_open+0x3b/0x340 [ 3549.913828][T24852] ? path_openat+0x2df0/0x3860 [ 3549.913863][T24852] path_openat+0x2e08/0x3860 [ 3549.913903][T24852] ? __pfx_stack_trace_save+0x10/0x10 [ 3549.913934][T24852] ? stack_depot_save_flags+0x33/0x810 [ 3549.913966][T24852] ? __pfx_path_openat+0x10/0x10 [ 3549.913984][T24852] ? __x64_sys_openat+0x138/0x170 [ 3549.914003][T24852] ? __lock_acquire+0x6b5/0x2cf0 [ 3549.914045][T24852] do_file_open+0x23e/0x4a0 [ 3549.914076][T24852] ? __pfx_do_file_open+0x10/0x10 [ 3549.914123][T24852] ? _raw_spin_unlock+0x28/0x50 [ 3549.914143][T24852] ? alloc_fd+0x64b/0x6c0 [ 3549.914166][T24852] do_sys_openat2+0x113/0x200 [ 3549.914203][T24852] ? __pfx_do_sys_openat2+0x10/0x10 [ 3549.914226][T24852] ? ksys_write+0x242/0x270 [ 3549.914254][T24852] ? __pfx_ksys_write+0x10/0x10 [ 3549.914283][T24852] __x64_sys_openat+0x138/0x170 [ 3549.914301][T24852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3549.914315][T24852] do_syscall_64+0x174/0x580 [ 3549.914347][T24852] ? trace_irq_disable+0x3b/0x140 [ 3549.914375][T24852] ? clear_bhb_loop+0x40/0x90 [ 3549.914397][T24852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3549.914417][T24852] RIP: 0033:0x7f880e35d68e [ 3549.914436][T24852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3549.914448][T24852] RSP: 002b:00007f880f202b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3549.914463][T24852] RAX: ffffffffffffffda RBX: 00007f880f2036c0 RCX: 00007f880e35d68e [ 3549.914473][T24852] RDX: 0000000000000002 RSI: 00007f880f202c00 RDI: ffffffffffffff9c [ 3549.914497][T24852] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3549.914510][T24852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3549.914521][T24852] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3549.914550][T24852] [ 3550.202808][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3550.210008][ C0] wdm_int_callback: 4589 callbacks suppressed [ 3550.210028][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.222792][ C0] wdm_int_callback: 4589 callbacks suppressed [ 3550.222818][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.239028][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.245788][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.261145][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.267877][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.274297][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.281003][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.287518][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.294213][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.300598][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.307293][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.313659][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.320368][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.326916][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.333607][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.340395][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.347105][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.353753][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3550.360450][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3550.573029][T24852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3551.266389][T24869] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 3551.272954][T24869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3551.274108][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3551.292637][T24869] vhci_hcd vhci_hcd.0: Device attached [ 3551.543582][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14650'. [ 3551.586301][T21500] usb 46-1: SetAddress Request (34) to port 0 [ 3551.586366][T21500] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 3551.590396][T24829] Set syz1 is full, maxelem 65536 reached [ 3552.055261][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3552.110485][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3552.146860][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3552.189374][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3552.234368][ T7839] usb 40-1: device descriptor read/8, error -110 [ 3552.313935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3552.660616][ T7839] usb usb40-port1: attempt power cycle [ 3552.698680][T24870] vhci_hcd: connection reset by peer [ 3552.699056][T11363] vhci_hcd vhci_hcd.6: stop threads [ 3552.699081][T11363] vhci_hcd vhci_hcd.6: release socket [ 3552.699132][T11363] vhci_hcd vhci_hcd.6: disconnect device [ 3553.005579][T17231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3553.165674][T17231] usb 3-1: Using ep0 maxpacket: 32 [ 3553.167538][T17231] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3553.167569][T17231] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3553.167600][T17231] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3553.167632][T17231] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3553.169940][T17231] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3553.169960][T17231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3553.170048][T17231] usb 3-1: Product: syz [ 3553.170063][T17231] usb 3-1: Manufacturer: syz [ 3553.170082][T17231] usb 3-1: SerialNumber: syz [ 3553.201185][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3553.216073][T17231] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input141 [ 3553.242766][ T7839] usb usb40-port1: unable to enumerate USB device [ 3553.353972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3553.494253][T17231] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3553.772038][T17231] (id 0x00) [ 3554.044336][T17231] rc_core: IR keymap rc-imon-pad not found [ 3554.106965][T17231] Registered IR keymap rc-empty [ 3554.149736][T17231] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3554.204189][T17231] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3554.266516][T17231] imon:send_packet: packet tx failed (-71) [ 3554.273350][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 3554.323982][T17231] imon 3-1:155.0: remote input dev register failed [ 3554.340866][T24897] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 3554.359589][T17231] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 3554.385555][T24897] program syz.4.14656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3554.395072][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3554.499643][T24916] program syz.1.14660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3554.528436][T17231] imon 3-1:155.0: unable to initialize intf0, err 0 [ 3554.565265][T24897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.581007][T17231] imon:imon_probe: failed to initialize context! [ 3554.606726][T17231] imon 3-1:155.0: unable to register, err -19 [ 3554.623655][T24897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.659540][T17231] usb 3-1: USB disconnect, device number 3 [ 3554.803983][ C1] cdc_mbim 2-1:1.0 wwan1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 3555.434943][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3555.574163][T17231] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 3555.789153][T17231] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3555.852959][T17231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 3555.883570][T24942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3555.894436][T17231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 3555.928031][T24942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3555.936301][T17231] usb 7-1: Product: syz [ 3555.950974][T17231] usb 7-1: Manufacturer: syz [ 3555.980670][ C0] wdm_int_callback: 3806 callbacks suppressed [ 3555.980694][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3555.993502][ C0] wdm_int_callback: 3806 callbacks suppressed [ 3555.993541][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.006349][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.013065][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.019986][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.026709][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.033994][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.040736][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.047370][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.054092][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.060591][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.067304][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.074887][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.081598][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.088282][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.095007][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.101365][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.108065][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.114757][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3556.121482][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3556.128053][T17231] usb 7-1: SerialNumber: syz [ 3556.192975][T24942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3556.271458][T24942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.352086][T24947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3556.408292][T24947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.446713][T24949] netlink: 'syz.1.14668': attribute type 5 has an invalid length. [ 3556.473933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3556.634136][T21500] usb 46-1: device descriptor read/8, error -110 [ 3557.048635][T21500] usb usb46-port1: attempt power cycle [ 3557.067231][T24954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3557.095004][T24954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3557.153130][T24954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14671'. [ 3557.442592][T24959] program syz.4.14672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3557.523906][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3557.638267][T21500] usb usb46-port1: unable to enumerate USB device [ 3557.918154][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3557.940655][T24969] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14674'. [ 3557.959603][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3558.006414][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14675'. [ 3558.321703][T24978] FAULT_INJECTION: forcing a failure. [ 3558.321703][T24978] name failslab, interval 1, probability 0, space 0, times 0 [ 3558.360197][T24978] CPU: 0 UID: 0 PID: 24978 Comm: syz.1.14677 Tainted: G L syzkaller #0 PREEMPT(full) [ 3558.360224][T24978] Tainted: [L]=SOFTLOCKUP [ 3558.360232][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3558.360248][T24978] Call Trace: [ 3558.360253][T24978] [ 3558.360260][T24978] dump_stack_lvl+0xe8/0x150 [ 3558.360282][T24978] should_fail_ex+0x412/0x560 [ 3558.360316][T24978] should_failslab+0xa8/0x100 [ 3558.360336][T24978] ? sctp_chunkify+0x5a/0x260 [ 3558.360431][T24978] kmem_cache_alloc_noprof+0x87/0x650 [ 3558.360453][T24978] sctp_chunkify+0x5a/0x260 [ 3558.360489][T24978] _sctp_make_chunk+0x122/0x290 [ 3558.360511][T24978] sctp_make_heartbeat+0xc5/0x4c0 [ 3558.360531][T24978] ? is_bpf_text_address+0x26/0x2b0 [ 3558.360553][T24978] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 3558.360575][T24978] ? is_bpf_text_address+0x26/0x2b0 [ 3558.360593][T24978] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 3558.360680][T24978] sctp_do_sm+0x238/0x5cf0 [ 3558.360705][T24978] ? __pfx_sctp_pname+0x10/0x10 [ 3558.360750][T24978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3558.360791][T24978] ? arch_stack_walk+0xfb/0x150 [ 3558.360826][T24978] ? __pfx_sctp_do_sm+0x10/0x10 [ 3558.360851][T24978] ? __lock_acquire+0x6b5/0x2cf0 [ 3558.360901][T24978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3558.360920][T24978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3558.360949][T24978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3558.360977][T24978] ? sctp_v6_addr_to_user+0x217/0x420 [ 3558.361018][T24978] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 3558.361049][T24978] sctp_apply_peer_addr_params+0xdf/0x1880 [ 3558.361063][T24978] ? __pfx_sctp_addr_id2transport+0x10/0x10 [ 3558.361083][T24978] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 3558.361132][T24978] sctp_setsockopt+0x752/0x12c0 [ 3558.361154][T24978] ? sock_common_setsockopt+0x36/0xc0 [ 3558.361180][T24978] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3558.361208][T24978] do_sock_setsockopt+0x17c/0x1b0 [ 3558.361232][T24978] __x64_sys_setsockopt+0x13d/0x1b0 [ 3558.361272][T24978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3558.361295][T24978] do_syscall_64+0x174/0x580 [ 3558.361315][T24978] ? trace_irq_disable+0x3b/0x140 [ 3558.361341][T24978] ? clear_bhb_loop+0x40/0x90 [ 3558.361366][T24978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3558.361379][T24978] RIP: 0033:0x7f1f1179ce59 [ 3558.361393][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3558.361405][T24978] RSP: 002b:00007f1f12625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3558.361435][T24978] RAX: ffffffffffffffda RBX: 00007f1f11a15fa0 RCX: 00007f1f1179ce59 [ 3558.361449][T24978] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 3558.361460][T24978] RBP: 00007f1f12625090 R08: 000000000000009c R09: 0000000000000000 [ 3558.361471][T24978] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 3558.361483][T24978] R13: 00007f1f11a16038 R14: 00007f1f11a15fa0 R15: 00007f1f11b3fa48 [ 3558.361516][T24978] [ 3558.661742][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3559.022098][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 3559.036726][T17231] usblp 7-1:1.0: usblp2: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3559.050089][T17231] usb 7-1: USB disconnect, device number 79 [ 3559.059044][T17231] usblp2: removed [ 3559.289885][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14679'. [ 3559.408357][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.458145][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3559.501929][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.563145][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3559.594280][T31658] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 3559.616596][T25000] FAULT_INJECTION: forcing a failure. [ 3559.616596][T25000] name failslab, interval 1, probability 0, space 0, times 0 [ 3559.656813][T25000] CPU: 1 UID: 0 PID: 25000 Comm: syz.4.14681 Tainted: G L syzkaller #0 PREEMPT(full) [ 3559.656844][T25000] Tainted: [L]=SOFTLOCKUP [ 3559.656851][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3559.656863][T25000] Call Trace: [ 3559.656871][T25000] [ 3559.656880][T25000] dump_stack_lvl+0xe8/0x150 [ 3559.656908][T25000] should_fail_ex+0x412/0x560 [ 3559.656934][T25000] should_failslab+0xa8/0x100 [ 3559.656952][T25000] ? xfrm_state_alloc+0x24/0x2f0 [ 3559.656972][T25000] kmem_cache_alloc_noprof+0x87/0x650 [ 3559.656998][T25000] ? __pfx___nla_validate_parse+0x10/0x10 [ 3559.657029][T25000] xfrm_state_alloc+0x24/0x2f0 [ 3559.657047][T25000] xfrm_add_sa+0x17ed/0x4230 [ 3559.657163][T25000] ? __pfx_xfrm_add_sa+0x10/0x10 [ 3559.657185][T25000] ? apparmor_capable+0x126/0x170 [ 3559.657211][T25000] ? __nla_parse+0x40/0x60 [ 3559.657240][T25000] xfrm_user_rcv_msg+0x7ae/0xc40 [ 3559.657269][T25000] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 3559.657324][T25000] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3559.657353][T25000] ? rcu_is_watching+0x15/0xb0 [ 3559.657375][T25000] ? trace_contention_end+0x3d/0x140 [ 3559.657402][T25000] ? __mutex_lock+0x319/0x1550 [ 3559.657439][T25000] netlink_rcv_skb+0x232/0x4b0 [ 3559.657466][T25000] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 3559.657490][T25000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3559.657531][T25000] ? netlink_deliver_tap+0x2e/0x1b0 [ 3559.657557][T25000] ? netlink_deliver_tap+0x2e/0x1b0 [ 3559.657585][T25000] xfrm_netlink_rcv+0x79/0x90 [ 3559.657607][T25000] netlink_unicast+0x75c/0x8e0 [ 3559.657641][T25000] netlink_sendmsg+0x813/0xb40 [ 3559.657666][T25000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3559.657687][T25000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3559.657722][T25000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3559.657749][T25000] ____sys_sendmsg+0x972/0x9f0 [ 3559.657766][T25000] ? __might_fault+0xaf/0x130 [ 3559.657795][T25000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3559.657821][T25000] ? import_iovec+0x73/0xa0 [ 3559.657847][T25000] ___sys_sendmsg+0x2a5/0x360 [ 3559.657864][T25000] ? __lock_acquire+0x6b5/0x2cf0 [ 3559.657886][T25000] ? __pfx____sys_sendmsg+0x10/0x10 [ 3559.657934][T25000] ? __fget_files+0x2a/0x420 [ 3559.657956][T25000] ? __fget_files+0x3a0/0x420 [ 3559.657986][T25000] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3559.658007][T25000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3559.658033][T25000] ? __pfx_ksys_write+0x10/0x10 [ 3559.658065][T25000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3559.658084][T25000] do_syscall_64+0x174/0x580 [ 3559.658102][T25000] ? trace_irq_disable+0x3b/0x140 [ 3559.658128][T25000] ? clear_bhb_loop+0x40/0x90 [ 3559.658149][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3559.658167][T25000] RIP: 0033:0x7f880e39ce59 [ 3559.658183][T25000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3559.658198][T25000] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3559.658217][T25000] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3559.658230][T25000] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3559.658241][T25000] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3559.658252][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3559.658263][T25000] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3559.658291][T25000] [ 3559.714102][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3559.843513][T31658] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 3560.039868][T31658] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3560.095800][T31658] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3560.117153][T31658] usb 7-1: Product: syz [ 3560.132909][T31658] usb 7-1: Manufacturer: syz [ 3560.140945][T25008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.149558][T31658] usb 7-1: SerialNumber: syz [ 3560.157681][T31658] usb 7-1: config 0 descriptor?? [ 3560.163494][T25008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.190980][T25007] FAULT_INJECTION: forcing a failure. [ 3560.190980][T25007] name failslab, interval 1, probability 0, space 0, times 0 [ 3560.225490][T25007] CPU: 0 UID: 0 PID: 25007 Comm: syz.4.14683 Tainted: G L syzkaller #0 PREEMPT(full) [ 3560.225519][T25007] Tainted: [L]=SOFTLOCKUP [ 3560.225526][T25007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3560.225537][T25007] Call Trace: [ 3560.225545][T25007] [ 3560.225553][T25007] dump_stack_lvl+0xe8/0x150 [ 3560.225580][T25007] should_fail_ex+0x412/0x560 [ 3560.225608][T25007] should_failslab+0xa8/0x100 [ 3560.225625][T25007] ? skb_clone+0x212/0x3a0 [ 3560.225647][T25007] kmem_cache_alloc_noprof+0x87/0x650 [ 3560.225666][T25007] ? __netlink_lookup+0xc6/0x8b0 [ 3560.225709][T25007] skb_clone+0x212/0x3a0 [ 3560.225732][T25007] __netlink_deliver_tap+0x404/0x850 [ 3560.225768][T25007] ? netlink_deliver_tap+0x2e/0x1b0 [ 3560.225799][T25007] netlink_deliver_tap+0x19c/0x1b0 [ 3560.225819][T25007] netlink_unicast+0x730/0x8e0 [ 3560.225844][T25007] netlink_sendmsg+0x813/0xb40 [ 3560.225882][T25007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3560.225902][T25007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3560.225928][T25007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3560.225957][T25007] ____sys_sendmsg+0x972/0x9f0 [ 3560.225970][T25007] ? __might_fault+0xaf/0x130 [ 3560.225990][T25007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3560.226026][T25007] ? import_iovec+0x73/0xa0 [ 3560.226052][T25007] ___sys_sendmsg+0x2a5/0x360 [ 3560.226068][T25007] ? __lock_acquire+0x6b5/0x2cf0 [ 3560.226090][T25007] ? __pfx____sys_sendmsg+0x10/0x10 [ 3560.226131][T25007] ? __fget_files+0x2a/0x420 [ 3560.226146][T25007] ? __fget_files+0x3a0/0x420 [ 3560.226192][T25007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3560.226213][T25007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3560.226238][T25007] ? __pfx_ksys_write+0x10/0x10 [ 3560.226270][T25007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3560.226284][T25007] do_syscall_64+0x174/0x580 [ 3560.226298][T25007] ? trace_irq_disable+0x3b/0x140 [ 3560.226334][T25007] ? clear_bhb_loop+0x40/0x90 [ 3560.226356][T25007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3560.226373][T25007] RIP: 0033:0x7f880e39ce59 [ 3560.226389][T25007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3560.226409][T25007] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3560.226422][T25007] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3560.226432][T25007] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004 [ 3560.226440][T25007] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3560.226448][T25007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3560.226455][T25007] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3560.226495][T25007] [ 3560.549679][T31658] usb 7-1: USB disconnect, device number 80 [ 3560.615855][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.646965][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.703131][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.744889][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.792473][T25018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.801064][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3560.812342][T25018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.958067][T25023] FAULT_INJECTION: forcing a failure. [ 3560.958067][T25023] name failslab, interval 1, probability 0, space 0, times 0 [ 3561.003980][T25023] CPU: 1 UID: 0 PID: 25023 Comm: syz.4.14688 Tainted: G L syzkaller #0 PREEMPT(full) [ 3561.004012][T25023] Tainted: [L]=SOFTLOCKUP [ 3561.004021][T25023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3561.004033][T25023] Call Trace: [ 3561.004041][T25023] [ 3561.004051][T25023] dump_stack_lvl+0xe8/0x150 [ 3561.004084][T25023] should_fail_ex+0x412/0x560 [ 3561.004113][T25023] should_failslab+0xa8/0x100 [ 3561.004136][T25023] __kmalloc_cache_noprof+0x88/0x660 [ 3561.004166][T25023] ? ip_set_pernet+0x23/0x240 [ 3561.004191][T25023] ? ip_set_create+0x391/0x1a40 [ 3561.004223][T25023] ip_set_create+0x391/0x1a40 [ 3561.004254][T25023] ? trace_contention_end+0x3d/0x140 [ 3561.004290][T25023] ? __pfx_ip_set_create+0x10/0x10 [ 3561.004352][T25023] nfnetlink_rcv_msg+0xc03/0x12c0 [ 3561.004381][T25023] ? unwind_get_return_address+0x4d/0x90 [ 3561.004408][T25023] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 3561.004455][T25023] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3561.004516][T25023] ? irqentry_exit+0x218/0x8b0 [ 3561.004541][T25023] ? irqentry_exit+0x218/0x8b0 [ 3561.004560][T25023] ? trace_irq_disable+0x3b/0x140 [ 3561.004608][T25023] netlink_rcv_skb+0x232/0x4b0 [ 3561.004641][T25023] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3561.004672][T25023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3561.004724][T25023] ? bpf_lsm_capable+0x9/0x20 [ 3561.004743][T25023] ? security_capable+0x7e/0x2c0 [ 3561.004777][T25023] nfnetlink_rcv+0x2c0/0x27b0 [ 3561.004812][T25023] ? __local_bh_enable_ip+0xd0/0x130 [ 3561.004833][T25023] ? lockdep_hardirqs_on+0x7a/0x110 [ 3561.004851][T25023] ? __dev_queue_xmit+0x2b6/0x3950 [ 3561.004871][T25023] ? __local_bh_enable_ip+0xd0/0x130 [ 3561.004888][T25023] ? __dev_queue_xmit+0x2b6/0x3950 [ 3561.004908][T25023] ? __dev_queue_xmit+0x1fe5/0x3950 [ 3561.004927][T25023] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 3561.004953][T25023] ? __dev_queue_xmit+0x2b6/0x3950 [ 3561.004979][T25023] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3561.005022][T25023] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3561.005049][T25023] ? ref_tracker_free+0x693/0x840 [ 3561.005073][T25023] ? __pfx_ref_tracker_free+0x10/0x10 [ 3561.005109][T25023] ? skb_clone+0x246/0x3a0 [ 3561.005131][T25023] ? __netlink_deliver_tap+0x807/0x850 [ 3561.005159][T25023] ? netlink_deliver_tap+0x2e/0x1b0 [ 3561.005191][T25023] ? netlink_deliver_tap+0x2e/0x1b0 [ 3561.005218][T25023] ? netlink_deliver_tap+0x2e/0x1b0 [ 3561.005249][T25023] netlink_unicast+0x75c/0x8e0 [ 3561.005284][T25023] netlink_sendmsg+0x813/0xb40 [ 3561.005309][T25023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3561.005330][T25023] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3561.005358][T25023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3561.005383][T25023] ____sys_sendmsg+0x972/0x9f0 [ 3561.005400][T25023] ? __might_fault+0xaf/0x130 [ 3561.005426][T25023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3561.005449][T25023] ? import_iovec+0x73/0xa0 [ 3561.005474][T25023] ___sys_sendmsg+0x2a5/0x360 [ 3561.005490][T25023] ? __lock_acquire+0x6b5/0x2cf0 [ 3561.005511][T25023] ? __pfx____sys_sendmsg+0x10/0x10 [ 3561.005557][T25023] ? __fget_files+0x2a/0x420 [ 3561.005587][T25023] ? __fget_files+0x3a0/0x420 [ 3561.005617][T25023] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3561.005637][T25023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3561.005665][T25023] ? __pfx_ksys_write+0x10/0x10 [ 3561.005698][T25023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3561.005717][T25023] do_syscall_64+0x174/0x580 [ 3561.005735][T25023] ? trace_irq_disable+0x3b/0x140 [ 3561.005760][T25023] ? clear_bhb_loop+0x40/0x90 [ 3561.005782][T25023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3561.005800][T25023] RIP: 0033:0x7f880e39ce59 [ 3561.005817][T25023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3561.005833][T25023] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3561.005852][T25023] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3561.005864][T25023] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 3561.005876][T25023] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3561.005887][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3561.005898][T25023] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3561.005925][T25023] [ 3561.834629][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3562.873907][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3563.189265][T25052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3563.224599][T25052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3563.354754][ C1] wdm_int_callback: 12528 callbacks suppressed [ 3563.354780][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.367703][ C1] wdm_int_callback: 12528 callbacks suppressed [ 3563.367726][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.380593][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.387308][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.394064][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.400782][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.410082][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.416797][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.424482][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.431194][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.438441][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.445155][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.451581][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.458269][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.464928][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.471607][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.478510][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.485197][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.491842][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 3563.498518][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 3563.519139][T25052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3563.601810][T25052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3563.668894][T25057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3563.712843][T25057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3563.913933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3564.397943][T25069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14701'. [ 3564.849707][T25076] kvm: pic: single mode not supported [ 3564.849728][T25076] kvm: pic: level sensitive irq not supported [ 3564.913194][T25076] kvm: pic: single mode not supported [ 3564.920378][T25076] kvm: pic: level sensitive irq not supported [ 3564.933849][ C1] cdc_mbim 2-1:1.0 wwan1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 3564.953900][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3565.086888][T25081] loop6: detected capacity change from 0 to 2640 [ 3565.110974][T25081] buffer_io_error: 27 callbacks suppressed [ 3565.110991][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.126066][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.134219][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.149071][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.199977][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.224561][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.234939][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.247010][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.257867][T25081] ldm_validate_partition_table(): Disk read failed. [ 3565.265057][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.273395][T25081] Buffer I/O error on dev loop6, logical block 0, async page read [ 3565.287376][T25081] Dev loop6: unable to read RDB block 0 [ 3565.293540][T25081] loop6: unable to read partition table [ 3565.306331][T25081] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 3565.494705][T25091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3565.505800][T25091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3565.698048][T29255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 3565.718787][T25096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3565.742067][T29255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 3565.783958][T29255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 3565.786335][T25096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3565.807049][T29255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 3565.836619][T25096] netlink: 'syz.1.14708': attribute type 1 has an invalid length. [ 3565.993906][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3566.220899][T25107] FAULT_INJECTION: forcing a failure. [ 3566.220899][T25107] name failslab, interval 1, probability 0, space 0, times 0 [ 3566.254064][T25107] CPU: 0 UID: 0 PID: 25107 Comm: syz.4.14712 Tainted: G L syzkaller #0 PREEMPT(full) [ 3566.254096][T25107] Tainted: [L]=SOFTLOCKUP [ 3566.254104][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3566.254115][T25107] Call Trace: [ 3566.254124][T25107] [ 3566.254132][T25107] dump_stack_lvl+0xe8/0x150 [ 3566.254160][T25107] should_fail_ex+0x412/0x560 [ 3566.254186][T25107] should_failslab+0xa8/0x100 [ 3566.254205][T25107] ? skb_clone+0x212/0x3a0 [ 3566.254223][T25107] kmem_cache_alloc_noprof+0x87/0x650 [ 3566.254250][T25107] ? __netlink_lookup+0xc6/0x8b0 [ 3566.254275][T25107] skb_clone+0x212/0x3a0 [ 3566.254298][T25107] __netlink_deliver_tap+0x404/0x850 [ 3566.254338][T25107] ? netlink_deliver_tap+0x2e/0x1b0 [ 3566.254368][T25107] netlink_deliver_tap+0x19c/0x1b0 [ 3566.254397][T25107] netlink_unicast+0x730/0x8e0 [ 3566.254434][T25107] netlink_sendmsg+0x813/0xb40 [ 3566.254462][T25107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3566.254483][T25107] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3566.254513][T25107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3566.254542][T25107] ____sys_sendmsg+0x972/0x9f0 [ 3566.254561][T25107] ? __might_fault+0xaf/0x130 [ 3566.254592][T25107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3566.254624][T25107] ? import_iovec+0x73/0xa0 [ 3566.254650][T25107] ___sys_sendmsg+0x2a5/0x360 [ 3566.254669][T25107] ? __lock_acquire+0x6b5/0x2cf0 [ 3566.254693][T25107] ? __pfx____sys_sendmsg+0x10/0x10 [ 3566.254754][T25107] ? __fget_files+0x2a/0x420 [ 3566.254777][T25107] ? __fget_files+0x3a0/0x420 [ 3566.254810][T25107] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3566.254833][T25107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3566.254861][T25107] ? __pfx_ksys_write+0x10/0x10 [ 3566.254898][T25107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3566.254918][T25107] do_syscall_64+0x174/0x580 [ 3566.254939][T25107] ? trace_irq_disable+0x3b/0x140 [ 3566.254967][T25107] ? clear_bhb_loop+0x40/0x90 [ 3566.254991][T25107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3566.255010][T25107] RIP: 0033:0x7f880e39ce59 [ 3566.255028][T25107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3566.255043][T25107] RSP: 002b:00007f880f203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3566.255064][T25107] RAX: ffffffffffffffda RBX: 00007f880e615fa0 RCX: 00007f880e39ce59 [ 3566.255078][T25107] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 3566.255091][T25107] RBP: 00007f880f203090 R08: 0000000000000000 R09: 0000000000000000 [ 3566.255103][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3566.255115][T25107] R13: 00007f880e616038 R14: 00007f880e615fa0 R15: 00007f880e73fa48 [ 3566.255146][T25107] [ 3566.727569][T31661] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 3566.903920][T31661] usb 7-1: Using ep0 maxpacket: 32 [ 3566.928958][T31661] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 3566.940541][T31661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3566.991274][T31661] usb 7-1: config 0 descriptor?? [ 3567.012743][T31661] as10x_usb: device has been detected [ 3567.040660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3567.054936][T31661] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 3567.085862][T31661] usb 7-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)... [ 3567.138690][T25115] FAULT_INJECTION: forcing a failure. [ 3567.138690][T25115] name failslab, interval 1, probability 0, space 0, times 0 [ 3567.152652][T25115] CPU: 1 UID: 0 PID: 25115 Comm: syz.2.14714 Tainted: G L syzkaller #0 PREEMPT(full) [ 3567.152686][T25115] Tainted: [L]=SOFTLOCKUP [ 3567.152693][T25115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3567.152705][T25115] Call Trace: [ 3567.152712][T25115] [ 3567.152721][T25115] dump_stack_lvl+0xe8/0x150 [ 3567.152746][T25115] should_fail_ex+0x412/0x560 [ 3567.152769][T25115] should_failslab+0xa8/0x100 [ 3567.152789][T25115] __kmalloc_noprof+0xe8/0x760 [ 3567.152814][T25115] ? io_cache_alloc_new+0x40/0x100 [ 3567.152838][T25115] io_cache_alloc_new+0x40/0x100 [ 3567.152856][T25115] io_sqe_buffer_register+0x32c/0x1870 [ 3567.152881][T25115] ? __lock_acquire+0x6b5/0x2cf0 [ 3567.152909][T25115] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 3567.152923][T25115] ? __lock_acquire+0x6b5/0x2cf0 [ 3567.152944][T25115] ? iovec_from_user+0x1ba/0x250 [ 3567.152968][T25115] __io_register_rsrc_update+0x4e1/0x1280 [ 3567.153006][T25115] ? __might_fault+0xaf/0x130 [ 3567.153031][T25115] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 3567.153075][T25115] io_register_rsrc_update+0x1b1/0x1c0 [ 3567.153105][T25115] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 3567.153134][T25115] ? __fget_files+0x2a/0x420 [ 3567.153163][T25115] __se_sys_io_uring_register+0xfb4/0x1ac0 [ 3567.153197][T25115] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 3567.153226][T25115] ? ksys_write+0x242/0x270 [ 3567.153251][T25115] ? __pfx_ksys_write+0x10/0x10 [ 3567.153284][T25115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3567.153303][T25115] do_syscall_64+0x174/0x580 [ 3567.153321][T25115] ? trace_irq_disable+0x3b/0x140 [ 3567.153346][T25115] ? clear_bhb_loop+0x40/0x90 [ 3567.153367][T25115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3567.153385][T25115] RIP: 0033:0x7fd2b219ce59 [ 3567.153401][T25115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3567.153416][T25115] RSP: 002b:00007fd2b2fb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3567.153434][T25115] RAX: ffffffffffffffda RBX: 00007fd2b2416090 RCX: 00007fd2b219ce59 [ 3567.153446][T25115] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000004 [ 3567.153458][T25115] RBP: 00007fd2b2fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 3567.153468][T25115] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 3567.153495][T25115] R13: 00007fd2b2416128 R14: 00007fd2b2416090 R15: 00007fd2b253fa48 [ 3567.153524][T25115] [ 3567.396452][T31661] as10x_usb: error during firmware upload part1 [ 3567.403394][T31661] Registered device nBox DVB-T Dongle [ 3567.573006][T25100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3567.694779][T25100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3567.897434][T25125] bond_slave_0: entered allmulticast mode [ 3567.930211][T25125] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3568.054209][ T7839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3568.073944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3568.234567][ T7839] usb 3-1: Using ep0 maxpacket: 16 [ 3568.250584][T31658] usb 7-1: USB disconnect, device number 81 [ 3568.265934][ T7839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3568.290946][ T7839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3568.320273][ T7839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3568.356364][T31658] Unregistered device nBox DVB-T Dongle [ 3568.362997][ T7839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3568.380204][T31658] as10x_usb: device has been disconnected [ 3568.436666][ T7839] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3568.510360][ T7839] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3568.540149][ T7839] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3568.561268][ T7839] usb 3-1: Manufacturer: syz [ 3568.590338][ T7839] usb 3-1: config 0 descriptor?? [ 3568.826456][T25137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3568.850183][T25137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3568.915170][T25137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3568.970483][T25137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3569.114072][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3570.154786][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3570.260581][T25152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14723'. [ 3570.282258][T25152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14723'. [ 3570.301949][T25154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3570.313146][T25152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14723'. [ 3570.323367][T25154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3570.564478][T25157] [ 3570.566863][T25157] ===================================================== [ 3570.573864][T25157] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3570.581430][T25157] syzkaller #0 Tainted: G L [ 3570.587394][T25157] ----------------------------------------------------- [ 3570.594345][T25157] syz.3.14725/25157 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3570.602191][T25157] ffff8880831ecb40 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3570.610928][T25157] [ 3570.610928][T25157] and this task is already holding: [ 3570.618283][T25157] ffff888031ae1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3570.628074][T25157] which would create a new lock dependency: [ 3570.633954][T25157] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 3570.642088][T25157] [ 3570.642088][T25157] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3570.651526][T25157] (&client->buffer_lock){..-.}-{3:3} [ 3570.651546][T25157] [ 3570.651546][T25157] ... which became SOFTIRQ-irq-safe at: [ 3570.664613][T25157] lock_acquire+0x106/0x350 [ 3570.669232][T25157] _raw_spin_lock+0x2e/0x40 [ 3570.673845][T25157] evdev_pass_values+0xb9/0xbd0 [ 3570.678813][T25157] evdev_events+0x1e6/0x340 [ 3570.683397][T25157] input_pass_values+0x288/0x890 [ 3570.688488][T25157] input_event_dispose+0x330/0x6b0 [ 3570.693692][T25157] input_event+0x84/0xc0 [ 3570.698022][T25157] aiptek_irq+0x191b/0x28e0 [ 3570.702656][T25157] __usb_hcd_giveback_urb+0x376/0x540 [ 3570.708108][T25157] dummy_timer+0xbc0/0x4650 [ 3570.712691][T25157] __hrtimer_run_queues+0x3c0/0xa20 [ 3570.717980][T25157] hrtimer_run_softirq+0x17a/0x240 [ 3570.723176][T25157] handle_softirqs+0x22a/0x840 [ 3570.728016][T25157] do_softirq+0x76/0xd0 [ 3570.732246][T25157] __local_bh_enable_ip+0xf8/0x130 [ 3570.737433][T25157] __dev_queue_xmit+0x1fe5/0x3950 [ 3570.742538][T25157] batadv_send_skb_packet+0x418/0x690 [ 3570.748048][T25157] batadv_iv_send_outstanding_bat_ogm_packet+0x5fe/0x7a0 [ 3570.755199][T25157] process_scheduled_works+0xb5d/0x1860 [ 3570.760826][T25157] worker_thread+0xa53/0xfc0 [ 3570.765496][T25157] kthread+0x389/0x470 [ 3570.769647][T25157] ret_from_fork+0x514/0xb70 [ 3570.774318][T25157] ret_from_fork_asm+0x1a/0x30 [ 3570.779170][T25157] [ 3570.779170][T25157] to a SOFTIRQ-irq-unsafe lock: [ 3570.786227][T25157] (tasklist_lock){.+.+}-{3:3} [ 3570.786248][T25157] [ 3570.786248][T25157] ... which became SOFTIRQ-irq-unsafe at: [ 3570.798866][T25157] ... [ 3570.798873][T25157] lock_acquire+0x106/0x350 [ 3570.806043][T25157] _raw_read_lock+0x36/0x50 [ 3570.810710][T25157] __do_wait+0xde/0x740 [ 3570.814958][T25157] do_wait+0x1e7/0x510 [ 3570.819137][T25157] kernel_wait+0xd6/0x1c0 [ 3570.823572][T25157] call_usermodehelper_exec_work+0xbe/0x230 [ 3570.829562][T25157] process_scheduled_works+0xb5d/0x1860 [ 3570.835186][T25157] worker_thread+0xa53/0xfc0 [ 3570.839869][T25157] kthread+0x389/0x470 [ 3570.844042][T25157] ret_from_fork+0x514/0xb70 [ 3570.848712][T25157] ret_from_fork_asm+0x1a/0x30 [ 3570.853554][T25157] [ 3570.853554][T25157] other info that might help us debug this: [ 3570.853554][T25157] [ 3570.863776][T25157] Chain exists of: [ 3570.863776][T25157] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 3570.863776][T25157] [ 3570.876963][T25157] Possible interrupt unsafe locking scenario: [ 3570.876963][T25157] [ 3570.885327][T25157] CPU0 CPU1 [ 3570.890685][T25157] ---- ---- [ 3570.896127][T25157] lock(tasklist_lock); [ 3570.900370][T25157] local_irq_disable(); [ 3570.907113][T25157] lock(&client->buffer_lock); [ 3570.914539][T25157] lock(&new->fa_lock); [ 3570.921299][T25157] [ 3570.924796][T25157] lock(&client->buffer_lock); [ 3570.929826][T25157] [ 3570.929826][T25157] *** DEADLOCK *** [ 3570.929826][T25157] [ 3570.937958][T25157] 7 locks held by syz.3.14725/25157: [ 3570.943232][T25157] #0: ffff88802d684110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 3570.952375][T25157] #1: ffff88801ff98230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 3570.962471][T25157] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 3570.972131][T25157] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 3570.981700][T25157] #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 3570.990840][T25157] #5: ffff888031ae1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3571.001014][T25157] #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 3571.010079][T25157] [ 3571.010079][T25157] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3571.020480][T25157] -> (&client->buffer_lock){..-.}-{3:3} { [ 3571.026214][T25157] IN-SOFTIRQ-W at: [ 3571.030250][T25157] lock_acquire+0x106/0x350 [ 3571.036397][T25157] _raw_spin_lock+0x2e/0x40 [ 3571.042567][T25157] evdev_pass_values+0xb9/0xbd0 [ 3571.049062][T25157] evdev_events+0x1e6/0x340 [ 3571.055211][T25157] input_pass_values+0x288/0x890 [ 3571.061807][T25157] input_event_dispose+0x330/0x6b0 [ 3571.068576][T25157] input_event+0x84/0xc0 [ 3571.074474][T25157] aiptek_irq+0x191b/0x28e0 [ 3571.080639][T25157] __usb_hcd_giveback_urb+0x376/0x540 [ 3571.087658][T25157] dummy_timer+0xbc0/0x4650 [ 3571.093826][T25157] __hrtimer_run_queues+0x3c0/0xa20 [ 3571.100688][T25157] hrtimer_run_softirq+0x17a/0x240 [ 3571.107450][T25157] handle_softirqs+0x22a/0x840 [ 3571.113868][T25157] do_softirq+0x76/0xd0 [ 3571.119688][T25157] __local_bh_enable_ip+0xf8/0x130 [ 3571.126457][T25157] __dev_queue_xmit+0x1fe5/0x3950 [ 3571.133158][T25157] batadv_send_skb_packet+0x418/0x690 [ 3571.140177][T25157] batadv_iv_send_outstanding_bat_ogm_packet+0x5fe/0x7a0 [ 3571.148850][T25157] process_scheduled_works+0xb5d/0x1860 [ 3571.156037][T25157] worker_thread+0xa53/0xfc0 [ 3571.162283][T25157] kthread+0x389/0x470 [ 3571.168005][T25157] ret_from_fork+0x514/0xb70 [ 3571.174248][T25157] ret_from_fork_asm+0x1a/0x30 [ 3571.180659][T25157] INITIAL USE at: [ 3571.184545][T25157] lock_acquire+0x106/0x350 [ 3571.190605][T25157] _raw_spin_lock+0x2e/0x40 [ 3571.196669][T25157] evdev_pass_values+0xb9/0xbd0 [ 3571.203086][T25157] evdev_events+0x1e6/0x340 [ 3571.209164][T25157] input_pass_values+0x288/0x890 [ 3571.214118][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3571.215668][T25157] input_event_dispose+0x330/0x6b0 [ 3571.229276][T25157] input_inject_event+0x1dc/0x330 [ 3571.235891][T25157] evdev_write+0x325/0x4c0 [ 3571.241885][T25157] vfs_write+0x29a/0xb90 [ 3571.247691][T25157] ksys_write+0x150/0x270 [ 3571.253588][T25157] do_syscall_64+0x174/0x580 [ 3571.259738][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3571.267209][T25157] } [ 3571.269731][T25157] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 3571.277985][T25157] [ 3571.277985][T25157] the dependencies between the lock to be acquired [ 3571.277994][T25157] and SOFTIRQ-irq-unsafe lock: [ 3571.291491][T25157] -> (tasklist_lock){.+.+}-{3:3} { [ 3571.296781][T25157] HARDIRQ-ON-R at: [ 3571.300924][T25157] lock_acquire+0x106/0x350 [ 3571.307425][T25157] _raw_read_lock+0x36/0x50 [ 3571.313934][T25157] __do_wait+0xde/0x740 [ 3571.320107][T25157] do_wait+0x1e7/0x510 [ 3571.326171][T25157] kernel_wait+0xd6/0x1c0 [ 3571.332497][T25157] call_usermodehelper_exec_work+0xbe/0x230 [ 3571.340386][T25157] process_scheduled_works+0xb5d/0x1860 [ 3571.347926][T25157] worker_thread+0xa53/0xfc0 [ 3571.354505][T25157] kthread+0x389/0x470 [ 3571.360572][T25157] ret_from_fork+0x514/0xb70 [ 3571.367164][T25157] ret_from_fork_asm+0x1a/0x30 [ 3571.373942][T25157] SOFTIRQ-ON-R at: [ 3571.378090][T25157] lock_acquire+0x106/0x350 [ 3571.384585][T25157] _raw_read_lock+0x36/0x50 [ 3571.391099][T25157] __do_wait+0xde/0x740 [ 3571.397246][T25157] do_wait+0x1e7/0x510 [ 3571.403305][T25157] kernel_wait+0xd6/0x1c0 [ 3571.409626][T25157] call_usermodehelper_exec_work+0xbe/0x230 [ 3571.417543][T25157] process_scheduled_works+0xb5d/0x1860 [ 3571.425103][T25157] worker_thread+0xa53/0xfc0 [ 3571.431683][T25157] kthread+0x389/0x470 [ 3571.437738][T25157] ret_from_fork+0x514/0xb70 [ 3571.444315][T25157] ret_from_fork_asm+0x1a/0x30 [ 3571.451073][T25157] INITIAL USE at: [ 3571.455131][T25157] lock_acquire+0x106/0x350 [ 3571.461534][T25157] _raw_write_lock_irq+0x3d/0x50 [ 3571.468374][T25157] copy_process+0x2b4c/0x4440 [ 3571.474953][T25157] kernel_clone+0x2d7/0x940 [ 3571.481357][T25157] user_mode_thread+0x110/0x180 [ 3571.488107][T25157] rest_init+0x23/0x300 [ 3571.494171][T25157] start_kernel+0x38a/0x3e0 [ 3571.500738][T25157] x86_64_start_reservations+0x24/0x30 [ 3571.508135][T25157] x86_64_start_kernel+0x143/0x1c0 [ 3571.515158][T25157] common_startup_64+0x13e/0x147 [ 3571.522006][T25157] INITIAL READ USE at: [ 3571.526509][T25157] lock_acquire+0x106/0x350 [ 3571.533382][T25157] _raw_read_lock+0x36/0x50 [ 3571.540248][T25157] __do_wait+0xde/0x740 [ 3571.546748][T25157] do_wait+0x1e7/0x510 [ 3571.553162][T25157] kernel_wait+0xd6/0x1c0 [ 3571.559832][T25157] call_usermodehelper_exec_work+0xbe/0x230 [ 3571.568108][T25157] process_scheduled_works+0xb5d/0x1860 [ 3571.576021][T25157] worker_thread+0xa53/0xfc0 [ 3571.582959][T25157] kthread+0x389/0x470 [ 3571.589369][T25157] ret_from_fork+0x514/0xb70 [ 3571.596296][T25157] ret_from_fork_asm+0x1a/0x30 [ 3571.603402][T25157] } [ 3571.606093][T25157] ... key at: [] tasklist_lock+0x18/0x40 [ 3571.614084][T25157] ... acquired at: [ 3571.618071][T25157] _raw_read_lock+0x36/0x50 [ 3571.622751][T25157] send_sigurg+0x12b/0x420 [ 3571.627341][T25157] sk_send_sigurg+0x6c/0x2e0 [ 3571.632105][T25157] queue_oob+0x42c/0x4f0 [ 3571.636517][T25157] unix_stream_sendmsg+0xcb1/0xe80 [ 3571.641796][T25157] ____sys_sendmsg+0x972/0x9f0 [ 3571.646729][T25157] ___sys_sendmsg+0x2a5/0x360 [ 3571.651620][T25157] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3571.656724][T25157] do_syscall_64+0x174/0x580 [ 3571.661478][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3571.667536][T25157] [ 3571.669849][T25157] -> (&f_owner->lock){....}-{3:3} { [ 3571.675156][T25157] INITIAL USE at: [ 3571.679130][T25157] lock_acquire+0x106/0x350 [ 3571.685365][T25157] _raw_write_lock_irq+0x3d/0x50 [ 3571.692033][T25157] __f_setown+0x67/0x370 [ 3571.698003][T25157] generic_setlease+0xacf/0xfd0 [ 3571.704587][T25157] do_fcntl_add_lease+0x35e/0x470 [ 3571.711347][T25157] fcntl_setlease+0x123/0x180 [ 3571.717775][T25157] do_fcntl+0x8b3/0x1a20 [ 3571.723774][T25157] __se_sys_fcntl+0xc8/0x150 [ 3571.730132][T25157] do_syscall_64+0x174/0x580 [ 3571.736460][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3571.744086][T25157] INITIAL READ USE at: [ 3571.748498][T25157] lock_acquire+0x106/0x350 [ 3571.755187][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3571.762576][T25157] send_sigio+0x38/0x370 [ 3571.768990][T25157] kill_fasync+0x24d/0x4d0 [ 3571.775578][T25157] sock_wake_async+0x137/0x160 [ 3571.782510][T25157] sk_wake_async+0x184/0x280 [ 3571.789266][T25157] unix_release_sock+0x74f/0xc80 [ 3571.796371][T25157] unix_release+0x92/0xd0 [ 3571.802883][T25157] sock_close+0xc3/0x240 [ 3571.809290][T25157] __fput+0x44f/0xa60 [ 3571.815438][T25157] task_work_run+0x1d9/0x270 [ 3571.822199][T25157] exit_to_user_mode_loop+0x193/0x680 [ 3571.829734][T25157] do_syscall_64+0x353/0x580 [ 3571.836492][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3571.844552][T25157] } [ 3571.847133][T25157] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3571.856173][T25157] ... acquired at: [ 3571.860057][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3571.865457][T25157] send_sigio+0x38/0x370 [ 3571.869895][T25157] kill_fasync+0x24d/0x4d0 [ 3571.874501][T25157] sock_wake_async+0x137/0x160 [ 3571.879443][T25157] sk_wake_async+0x184/0x280 [ 3571.884210][T25157] unix_release_sock+0x74f/0xc80 [ 3571.889324][T25157] unix_release+0x92/0xd0 [ 3571.893830][T25157] sock_close+0xc3/0x240 [ 3571.898271][T25157] __fput+0x44f/0xa60 [ 3571.902423][T25157] task_work_run+0x1d9/0x270 [ 3571.907191][T25157] exit_to_user_mode_loop+0x193/0x680 [ 3571.912725][T25157] do_syscall_64+0x353/0x580 [ 3571.917478][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3571.923541][T25157] [ 3571.925860][T25157] -> (&new->fa_lock){...-}-{3:3} { [ 3571.930977][T25157] IN-SOFTIRQ-R at: [ 3571.934944][T25157] lock_acquire+0x106/0x350 [ 3571.941089][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3571.947935][T25157] kill_fasync+0x199/0x4d0 [ 3571.953997][T25157] sock_wake_async+0x137/0x160 [ 3571.960417][T25157] sock_def_readable+0x3c1/0x550 [ 3571.966998][T25157] tcp_child_process+0x4d7/0x960 [ 3571.973576][T25157] tcp_v6_rcv+0x1d6c/0x2fa0 [ 3571.979786][T25157] ip6_protocol_deliver_rcu+0xd95/0x1740 [ 3571.987088][T25157] ip6_input_finish+0x191/0x370 [ 3571.993601][T25157] NF_HOOK+0x336/0x3c0 [ 3571.999334][T25157] ip6_input+0x16a/0x270 [ 3572.005223][T25157] NF_HOOK+0x336/0x3c0 [ 3572.010932][T25157] process_backlog+0x7dd/0x1950 [ 3572.017507][T25157] __napi_poll+0xae/0x340 [ 3572.023521][T25157] net_rx_action+0x627/0xf70 [ 3572.029767][T25157] handle_softirqs+0x22a/0x840 [ 3572.036179][T25157] do_softirq+0x76/0xd0 [ 3572.041976][T25157] __local_bh_enable_ip+0xf8/0x130 [ 3572.048733][T25157] __dev_queue_xmit+0x1fe5/0x3950 [ 3572.055402][T25157] ip6_output+0x340/0x550 [ 3572.061382][T25157] ip6_xmit+0x11e2/0x1af0 [ 3572.067362][T25157] inet6_csk_xmit+0x3bd/0x6c0 [ 3572.073753][T25157] __tcp_transmit_skb+0x26dd/0x4790 [ 3572.080726][T25157] tcp_write_xmit+0x1be0/0x6540 [ 3572.087226][T25157] __tcp_push_pending_frames+0x97/0x380 [ 3572.094434][T25157] __tcp_close+0x617/0xfe0 [ 3572.100562][T25157] tcp_close+0x28/0x110 [ 3572.106367][T25157] inet_release+0x143/0x190 [ 3572.112517][T25157] sock_close+0xc3/0x240 [ 3572.118409][T25157] __fput+0x44f/0xa60 [ 3572.124043][T25157] task_work_run+0x1d9/0x270 [ 3572.130289][T25157] exit_to_user_mode_loop+0x193/0x680 [ 3572.137339][T25157] do_syscall_64+0x353/0x580 [ 3572.143584][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.151134][T25157] INITIAL USE at: [ 3572.155031][T25157] lock_acquire+0x106/0x350 [ 3572.161112][T25157] _raw_write_lock_irq+0x3d/0x50 [ 3572.167624][T25157] fasync_remove_entry+0xf1/0x1c0 [ 3572.174258][T25157] sock_fasync+0x85/0xf0 [ 3572.180065][T25157] __fput+0x890/0xa60 [ 3572.185614][T25157] task_work_run+0x1d9/0x270 [ 3572.191766][T25157] do_exit+0x70f/0x22c0 [ 3572.197487][T25157] do_group_exit+0x21b/0x2d0 [ 3572.203636][T25157] get_signal+0x1284/0x1330 [ 3572.209698][T25157] arch_do_signal_or_restart+0xbc/0x840 [ 3572.216808][T25157] exit_to_user_mode_loop+0xa9/0x680 [ 3572.223653][T25157] do_syscall_64+0x353/0x580 [ 3572.229805][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.237358][T25157] INITIAL READ USE at: [ 3572.241695][T25157] lock_acquire+0x106/0x350 [ 3572.248193][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3572.255389][T25157] kill_fasync+0x199/0x4d0 [ 3572.261805][T25157] sock_wake_async+0x137/0x160 [ 3572.264105][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3572.268582][T25157] sk_wake_async+0x184/0x280 [ 3572.282109][T25157] unix_release_sock+0x74f/0xc80 [ 3572.289042][T25157] unix_release+0x92/0xd0 [ 3572.295367][T25157] sock_close+0xc3/0x240 [ 3572.301606][T25157] __fput+0x44f/0xa60 [ 3572.307585][T25157] task_work_run+0x1d9/0x270 [ 3572.314176][T25157] exit_to_user_mode_loop+0x193/0x680 [ 3572.321564][T25157] do_syscall_64+0x353/0x580 [ 3572.328158][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.336045][T25157] } [ 3572.338539][T25157] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3572.347211][T25157] ... acquired at: [ 3572.351000][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3572.356371][T25157] kill_fasync+0x199/0x4d0 [ 3572.360960][T25157] evdev_pass_values+0x627/0xbd0 [ 3572.366065][T25157] evdev_events+0x1e6/0x340 [ 3572.370729][T25157] input_pass_values+0x288/0x890 [ 3572.375837][T25157] input_event_dispose+0x330/0x6b0 [ 3572.381131][T25157] input_inject_event+0x1dc/0x330 [ 3572.386325][T25157] evdev_write+0x325/0x4c0 [ 3572.390923][T25157] vfs_write+0x29a/0xb90 [ 3572.395348][T25157] ksys_write+0x150/0x270 [ 3572.399853][T25157] do_syscall_64+0x174/0x580 [ 3572.404608][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.410681][T25157] [ 3572.412996][T25157] [ 3572.412996][T25157] stack backtrace: [ 3572.418892][T25157] CPU: 1 UID: 0 PID: 25157 Comm: syz.3.14725 Tainted: G L syzkaller #0 PREEMPT(full) [ 3572.418911][T25157] Tainted: [L]=SOFTLOCKUP [ 3572.418916][T25157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3572.418924][T25157] Call Trace: [ 3572.418931][T25157] [ 3572.418937][T25157] dump_stack_lvl+0xe8/0x150 [ 3572.418953][T25157] __lock_acquire+0x2a94/0x2cf0 [ 3572.418974][T25157] ? kill_fasync+0x199/0x4d0 [ 3572.418993][T25157] lock_acquire+0x106/0x350 [ 3572.419005][T25157] ? kill_fasync+0x199/0x4d0 [ 3572.419025][T25157] ? do_raw_spin_lock+0x12b/0x2f0 [ 3572.419044][T25157] _raw_read_lock_irqsave+0x48/0x60 [ 3572.419066][T25157] ? kill_fasync+0x199/0x4d0 [ 3572.419083][T25157] kill_fasync+0x199/0x4d0 [ 3572.419101][T25157] ? kill_fasync+0x53/0x4d0 [ 3572.419119][T25157] evdev_pass_values+0x627/0xbd0 [ 3572.419135][T25157] ? evdev_pass_values+0x671/0xbd0 [ 3572.419150][T25157] evdev_events+0x1e6/0x340 [ 3572.419162][T25157] ? evdev_events+0x79/0x340 [ 3572.419174][T25157] ? input_pass_values+0x8d/0x890 [ 3572.419185][T25157] input_pass_values+0x288/0x890 [ 3572.419200][T25157] ? input_handle_event+0x70c/0xf30 [ 3572.419218][T25157] input_event_dispose+0x330/0x6b0 [ 3572.419236][T25157] input_inject_event+0x1dc/0x330 [ 3572.419253][T25157] ? input_inject_event+0xb5/0x330 [ 3572.419270][T25157] evdev_write+0x325/0x4c0 [ 3572.419283][T25157] ? __lock_acquire+0x6b5/0x2cf0 [ 3572.419297][T25157] ? __pfx_evdev_write+0x10/0x10 [ 3572.419310][T25157] ? bpf_lsm_file_permission+0x9/0x20 [ 3572.419330][T25157] ? security_file_permission+0x75/0x260 [ 3572.419347][T25157] ? rw_verify_area+0x255/0x4d0 [ 3572.419364][T25157] ? __pfx_evdev_write+0x10/0x10 [ 3572.419377][T25157] vfs_write+0x29a/0xb90 [ 3572.419397][T25157] ? __pfx_vfs_write+0x10/0x10 [ 3572.419416][T25157] ? __fget_files+0x2a/0x420 [ 3572.419432][T25157] ? __fget_files+0x2a/0x420 [ 3572.419446][T25157] ? __fget_files+0x3a0/0x420 [ 3572.419467][T25157] ? __fget_files+0x2a/0x420 [ 3572.419484][T25157] ksys_write+0x150/0x270 [ 3572.419503][T25157] ? __pfx_ksys_write+0x10/0x10 [ 3572.419523][T25157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.419536][T25157] do_syscall_64+0x174/0x580 [ 3572.419550][T25157] ? clear_bhb_loop+0x40/0x90 [ 3572.419564][T25157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3572.419577][T25157] RIP: 0033:0x7fad33d9ce59 [ 3572.419590][T25157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3572.419602][T25157] RSP: 002b:00007fad31ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3572.419616][T25157] RAX: ffffffffffffffda RBX: 00007fad34015fa0 RCX: 00007fad33d9ce59 [ 3572.419625][T25157] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 3572.419634][T25157] RBP: 00007fad33e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 3572.419642][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3572.419650][T25157] R13: 00007fad34016038 R14: 00007fad34015fa0 R15: 00007fad3413fa48 [ 3572.419664][T25157] [ 3573.214263][ T7839] rc_core: IR keymap rc-hauppauge not found [ 3573.220293][ T7839] Registered IR keymap rc-empty [ 3573.225395][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.243937][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.264893][ T7839] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3573.277868][ T7839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input143 [ 3573.283994][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3573.298887][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.323920][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.344306][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.363955][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.371564][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.377980][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.404268][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.423932][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.443922][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.463990][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.483934][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.503949][ T7839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3573.525080][ T7839] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 3573.533107][ T7839] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3573.544465][ T7839] usb 3-1: USB disconnect, device number 4 [ 3574.313896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3575.353888][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3576.393902][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3577.433890][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3578.473986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3579.513895][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3580.553904][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available