last executing test programs: 2m40.982586475s ago: executing program 1 (id=1149): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x380000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0xc20}, r2}}, 0x48) 2m39.981538526s ago: executing program 1 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r3 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x80000000, &(0x7f0000001c00)) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000180)={&(0x7f0000000080)=""/103, 0x67}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.101459406s ago: executing program 1 (id=1156): mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000100)="a1984ec3aec3fc2e025f90ed", 0x0, 0xc}) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 2m38.703751299s ago: executing program 1 (id=1157): r0 = socket$inet(0x2, 0x3, 0x6) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) pread64(r1, &(0x7f0000000700)=""/207, 0xcf, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @broadcast}}}}) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x20, 0x40, 0xb0, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @local, @broadcast}}}}) 2m37.145549073s ago: executing program 1 (id=1163): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x265, 0xe29, 0x2, 0x3ff}, 0x1000, 0x0, 0x23, 0x2, 0x7, 0x12, 0x16, 0x19, 0x4, 0x7, {0xf66b, 0x8, 0x6, 0x5, 0x3, 0x400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) (async) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m36.3843966s ago: executing program 1 (id=1166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x400, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) r4 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x80000001, 0xa0000) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r4, 0x800a6f2f, &(0x7f0000000080)) fchdir(r3) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8045) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181440, 0x148) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000100)=[{0x80, 0x0, 0x2, 0xfffffffe}, {0x6}]}) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x2020) 2m35.639529105s ago: executing program 32 (id=1166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x400, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) r4 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x80000001, 0xa0000) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r4, 0x800a6f2f, &(0x7f0000000080)) fchdir(r3) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8045) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181440, 0x148) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000100)=[{0x80, 0x0, 0x2, 0xfffffffe}, {0x6}]}) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x2020) 50.318080719s ago: executing program 4 (id=1704): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbfb, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@mcast1, 0xa, 0x7, 0x10}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x10000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0xfc, 0x1000000, 0x0}) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000001a80)={&(0x7f0000001a00)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="e36a169e697e76de33472955e85b46e33afe02e2a2ea73dcbf1e4c1818b57cb1654092eee1d21880adaff96a5f268328ae5585fc693aa52375b160100954141a33ad7282efd0f3f028d78187d0b8572a449fd836d6088b83d95b94c2eb055d2ee5f89cc20515017384639fbd4f1512edd67b953385b9da3c2e1388f4583e410ac25a0c5ddb7c9b4fdd8adceb3ef0310278c7a5df8555b8504652f668aca043848ca31be9ac438705a3aba48bbc464edee94b49e805e417e698fb1efc7e05d191623ccaace794b33d20d0859ae4649cc9f1754c9a84a4752cef66ee79abf6fd2b46", 0xe1}, {&(0x7f0000001640)="94ba5cb8735a75fc304984d4f798ba7267604e8402e4bb4f5012f55cb5ddd9ce39f03c1a2a4170d2788d726fb28039c1afd2de6918bb168603dbd03150648f3f30adc9de0efc4eaa4eac8d0e3131fc792577d264f5d033a8227ffafee874414166ff613f950efe81e56af65ac53d6f99cad33165f5baa0dff49d773fc5e133e31116d630acacf0515e6cf52b5587d4e48591bfe7d82a23428893068a17c122cf", 0xa0}, {&(0x7f0000001700)="dcc5efb87c5052924e4561805e8c5a7537937d0210f090f8d488fa4fbf9a954985cd2a19e2b21615321893e8bf56c1f19f48dd796e50bd3525bea3e61994a4ddaca559dad44c1eec4821982f0436422ba570ac5222ec06fef9ee184adb6bc9d1e15d74c29e6317fcdee05d1a613af465a716e49c12fe0387f5cd1fad7c284988f97882256f6ca06b8f8d7e2f107750e07188b21aa0ea8d68b7aa252a2b553506cde83e86b5149014e7ce2a", 0xab}, {&(0x7f00000017c0)="13608c48deb17c1b83e3d0888c7aaf3df72af0ef3d83a82f6d4a28c5026e5557c0860bc9233e2b68334bdac4dcdcd91741b164ac1f10883b3a80b13ec7c3d5cd84f3954ef8c50806db1d5a6ce876b5b69e126c96d29482680b", 0x59}, {&(0x7f0000001840)="9dbd8c098cc5218d2500c1d0656cc5fbb8e36f2f804b9e0e1505d2c848ba3d73613126c8251922e162ed05e80f45fb2bb556edd557357603e79bc88462aa0ba153d66cd26fe00bc02d4e32138e28aea32ef60b81d29209304c9790131d0877c093f7d0312419173354dd6f3fa79c8981fc47c7a4c2f90953ba7059584ce271401607b260402f20f4967fa4753e31cdcc582a16a52a8e01410e4cff048656592df6c0afcfcb61f534d6b832ab12bb5a723dca901fb5cbd3e7bedbe2c6a058db6942ffe1108c7b2dd4ab8cd3bb24ca00069fd0a74594dbb14d39f6b7b9dba3fe5a", 0xe0}, {&(0x7f0000001940)="abf5abca1fc3a613640c6cd115cd07f483976301919da314b594ea4e8b68619b2c8902073cc97bb702630aa42921de248c6bcc5b2f8ba6e62bc7c032036b51ae4360e54158aef4f97040877f1ea645423d9f56c5cfd1b34c71de3b9a83ff99db7e943e0ea0262a235c8bedc2cdc422bd0e7e4ca5fb79aa9e84a5dc6e0f238d8366f7092586325c88200bf191", 0x8c}], 0x7, 0x6, 0x0, 0x38, 0x3, 0xb, 0x8, 0x399}) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="6e40986336c157ad79a957f357075f62d6bb1abda94467d9a8f68e10dc29396eb0e20c5280950d37d8352b92ae1c096572ef3c1616bb06dfb9df677df569b377fc58289155a5f607e86dc39de6d7b8251b6c50c34ef209e4560ecc6c85ae387ecc9b1f38c1e9fb1f9f22bd186e0f6920fcc2204772b73e5959737ffae710c63cd1e1665905eba11aa84897927d5f6d42c87ccc9cd1ab23418431b48ee557c7088e05e0e84dd5569d679a7c0bce51e8aaa5b9bf5e2d6cba0f5c14cc0c4779a2f6d45a892549aa62507859edd0e7f4b98e360f7b7f2f0356e7401a71624926bec2eef44f72806025e9f573a7adba2d", 0x44}], 0x1}, 0x200000040000010) 49.329058276s ago: executing program 4 (id=1709): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xfffffffe) 48.956510399s ago: executing program 4 (id=1713): openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x24048000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x40002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001c40)={'#! ', './file1/../file0', [{0x20, '\xce/d&6\xfa\x17o\x8e\xb1\xb3\xf7\xec\x1dev\x1e?kvm'}, {0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\xcfM\x00\x00\x00\x00\x7f|7\xf7\x10\x93\x85\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c26944"}, 0x8e) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b87816bd000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601"], 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r3, 0x34915000) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000083c0)={0x8b7, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001800)=ANY=[@ANYBLOB="66643927ef3b409e4f169837e523f1cd583f36ae0dd9ecb94e1eaed48b787b8e6ca8751acd5ef1d6c7078361c66882352b000000000000064bd35a1092d8bbdb2197d0e3978e4f5fdf6f2206a8e03b22499a9bf03c73aa75084d971707765f090bc97dcf7d7a0d74c971fcec72f44e7290c103fe728f0aedb2168be80824eae5167f253a78a6a9c6ec65f28ff6dcc1f16cb9c14e51ed699a28394353f686a3d2962c2964019d2989dccc078100694356876405650a6996e6", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2008000, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@allow_other}, {@allow_other}], [{@fowner_eq}, {@hash}, {@dont_measure}, {@appraise_type}, {@fsmagic}, {@smackfsdef={'smackfsdef', 0x3d, 'hash:ip,port\x00'}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000006c0)="16a7add76bcf2ee06420671bed5c448768a04b0bb79ca8d7f032c22379f653e0b2e5411c8f") 45.704404357s ago: executing program 4 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_proto_private(r2, 0x89e0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x2000000, 0x4000000080000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3502, 0x3, 0x3, 0x10, 0x9, 0x0, 0x10003}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r5 = socket$kcm(0xf, 0x3, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0, 0x7, 0x1, 0x605, 0x100, 0x401, 0x2a00000}) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x200040c4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_newrule={0x3c, 0x20, 0x100, 0x70bd25, 0x25dfdc00, {0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x3c}}, 0x0) 44.644670567s ago: executing program 4 (id=1736): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) 44.250923212s ago: executing program 4 (id=1742): ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r3 = socket(0x22, 0x6, 0xcc) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x2fa7, 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5b405ab9711654be) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7c, 0x44421c02, 0x8001, 0x7}, 0x4, 0xf251, &(0x7f0000000200)={{0x7, 0xfffffffa, 0x4, 0x7fff}}, 0x7c, 0x0, 0x1}}) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000", 0x45, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) syz_pidfd_open(0x0, 0x0) wait4(0x0, &(0x7f0000000100), 0x1, &(0x7f0000000140)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x6, 0x82) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000003c0)={0x2, 0x0, 0x1e, 0xe0, 0x0, 0xfffffdf6, 0x0}) 43.695765574s ago: executing program 33 (id=1742): ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r3 = socket(0x22, 0x6, 0xcc) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x2fa7, 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5b405ab9711654be) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7c, 0x44421c02, 0x8001, 0x7}, 0x4, 0xf251, &(0x7f0000000200)={{0x7, 0xfffffffa, 0x4, 0x7fff}}, 0x7c, 0x0, 0x1}}) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000", 0x45, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) syz_pidfd_open(0x0, 0x0) wait4(0x0, &(0x7f0000000100), 0x1, &(0x7f0000000140)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x6, 0x82) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000003c0)={0x2, 0x0, 0x1e, 0xe0, 0x0, 0xfffffdf6, 0x0}) 16.91740049s ago: executing program 5 (id=1842): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 15.321657374s ago: executing program 5 (id=1850): r0 = socket(0x10, 0x803, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0xa0, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x64040011) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8891}, 0x4008801) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f0000004a40)=[{&(0x7f0000000080)='y', 0x1}], 0x1, 0x3, 0x4, 0x0) eventfd2(0x6, 0x800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x5, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 14.831554669s ago: executing program 2 (id=1853): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r4}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000c, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000045) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc0702, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001100)={r5, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0x4c08, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0x4c08, &(0x7f00000001c0)={r6, 0x0, 0x420a02, 0x0, 0x5, 0x0, 0x0}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0xfffffffffffffffc) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x2, 0x3f}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, 0x0, 0x0) 14.686106674s ago: executing program 0 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000003540)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003500)={&(0x7f0000002380)=ANY=[@ANYBLOB="000000000000010007000000000000003d", @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf250500000008000300040000003c000680060005004e22000008000700", @ANYRES32=r5, @ANYBLOB="060005004e20000005000200020000000500020006000000060001000a000000060005004e22000008000400040000000800040085040000"], 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x4040) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800016adb2763fbb130282502200020000000080000000008000100ac1414"], 0x24}}, 0x0) read$FUSE(r7, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) r12 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101200, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r12, 0x8030942b, &(0x7f0000002240)={0x9, {0x21, 0xfff, 0x7, 0x4, 0xfffffffffffffffe}}) write$FUSE_INIT(r7, &(0x7f0000002180)={0x50, 0x0, r10, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000002140)={0x20, 0x0, r13, {0x402, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r7, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r14}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f000000c380)={0x2020, 0x0, 0x0}, 0x2020) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r16, &(0x7f0000000140)=[{&(0x7f0000003000)=""/4102, 0x1006}], 0x1, 0x600, 0x3) write$tun(r16, &(0x7f00000041c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a81900810026000004ab0165c2356a0a00eeb8fb9bc4afac385cc7e86b58896cceef9cef3ce74f5953fde4526bcfc5d5af96622e71b61cd094c02dac9226958b842448489b882af9ad0842e6a384d24cc8c75a8a6f7cca5e7b72cf2fae5a7709087427d0791e2af671804f779667fe2d88836e42b2667700404c97214407587166d5ec5203de92baac2ea8d81894224905da28d2688d9d9ee7ef976235fe7e2cd0e2af71c243c9c7f16d23f8a10c7326b7f287a9dd254c9f5e0e1529661115b5367ff0d74507886ce7c2cd20cebd"], 0xd6) getdents64(r8, &(0x7f00000024c0)=""/4096, 0x1000) r17 = syz_open_dev$ndb(&(0x7f0000004100), 0x0, 0x208280) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000004040)="dae1b0f64b8330a93a7f025acbad85ce87285daa698109a6262d48d9a1d57a9f1f4287a9f91e7d7385a74b3b38ffb2c23e7fef7f5296d64bd7e6bbc658185ec03c2b00ed742aea15a28f5272563d13fa23f465e455202ce046f34255d8dd6cb67ca1c492742e3bf5d880cee0961aa2a4c81c61a31a538b0c604dcbd135179ad1ec2343744d", 0x85, r17}, 0x68) write$FUSE_ENTRY(r7, &(0x7f000000e3c0)={0x90, 0x0, r15, {0x5, 0x2, 0x5, 0x6fbb, 0x0, 0x3, {0x6, 0xc5a, 0xe19, 0x53, 0x9, 0x7f, 0x6, 0x700000, 0x6, 0xa000, 0xfffffff8, r11, 0x0, 0x1, 0xffffff80}}}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="22032dbd7000f9dbdf2524000000"], 0x14}}, 0x0) 14.175026091s ago: executing program 0 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0xfffffff7, 0x0, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @end]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="161e2acf35a493f219d60391166ce3c81b78e47ef326d804c9706ebcddf924e4d882ecb72ee3873e34279e11ebe9351b1ead876b836c4549c48a851d0903fa1a97f50ef89a8e51d4ab2c26ff371a1dfd8fa36f79f01a97e84ae6", 0x5a}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000580)="fa78cdaeb29d434072ae69aaad34ca9de80ef58e3d62f18021bd2c9dcc34e4008204dad570", 0x25}], 0x3}, 0x8090) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8450}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 13.891925892s ago: executing program 3 (id=1859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13.856727207s ago: executing program 0 (id=1860): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 13.512280095s ago: executing program 3 (id=1861): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r2 = accept$alg(r1, 0x0, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/205, 0xcd}], 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000a40)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a80)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x4, 0x0, r5}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) r10 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r8, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000fec000/0x12000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000000)="dd982b1406719eca78d6d8a4eee04f2788a3", 0x12, r2}, 0x68) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0xfffffffc) sendmmsg$alg(r2, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="9cc9767f4e6f214f0000000000000000", 0x10}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) r11 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\b,'], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = socket(0x1a, 0xa, 0x6) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 13.381533428s ago: executing program 5 (id=1862): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1cc}], 0x1, 0x0, 0x0, 0x4040814}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r1, 0xffffffffffffffff, 0xff, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000640)=@buf={0x7a, &(0x7f00000005c0)="bcdfbe58b0658f43871665d43346eddbda18b161b4f2e58588709dfaf0db872a48284f9830597ddc5951e254fd42d3329bb15ff00aaeec42ffd3e2fdc851be764e0ce57520730c162a653a0ced5c115e4ac7240e090bed7fbb54b59904e6320a68fec8d947e3618694009a56c58c44c7b8172c69e04a8c6c306a"}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)={r10, 0x97, "35a36ac12439c24dd0d21baa0bc653048644fe6c6c9414334cc2c097b5bca4bf8139bcacf4ad3a53abb01870e30517ed4e4d23d1aec5f5e5ea9348e483c92eee61b519173d5c950e672d968be1413e30712957c570faa4d78bda73b9d060f963d7e0e87da8d04e1cb23ff3fb2d54b9054cb2649cedeb3c30c606180626ca4d68ff3ef36a4ed3bff96340396a0eca53cdddbe8f952a76e2"}, &(0x7f00000004c0)=0x9f) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\x00\x00\x00\x00\r\xcc:', 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000500)=0x8) 12.897598023s ago: executing program 5 (id=1865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064", 0x14}, {0x0}], 0x2}, 0xf5ffffff}], 0x1, 0x0) io_uring_enter(r1, 0x4b86, 0x7725, 0x35, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000080)) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 12.618476368s ago: executing program 0 (id=1867): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x194, 0x1a, 0x713, 0xfffffffd, 0x0, {{@in6=@local, @in6=@private1, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xa2, 0x1, {{'sha1\x00'}, 0x2d0, "8ad957b65964f40189fd88c98a3b09ecbd5b9eeb6c9c618b4cfc97232d64fae3bed9473088fa9693f7e6da8737ef7346f025cb9d2b4f66698b085be36c5d57f9f28cf59c15358459a1d8d6f320f4d93fc7dbe3dcad5bff276eb3"}}]}, 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) 12.346471338s ago: executing program 2 (id=1869): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x38, 0x400c0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r7, 0xc0305616, &(0x7f0000000000)={0x0, {0x55eeeb55, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x4, 0x0, 0x34325852, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x7, 0x1, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000003c0)={{0xff, @local, 0x4e24, 0x3, 'lblc\x00', 0x25, 0x4, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x1, 0x40000000, 0xfffffffa, 0x71}}, 0x44) pipe(0x0) 12.165661115s ago: executing program 2 (id=1870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0xfffffff7, 0x0, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @end]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="161e2acf35a493f219d60391166ce3c81b78e47ef326d804c9706ebcddf924e4d882ecb72ee3873e34279e11ebe9351b1ead876b836c4549c48a851d0903fa1a97f50ef89a8e51d4ab2c26ff371a1dfd8fa36f79f01a97e84ae6", 0x5a}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000580)="fa78cdaeb29d434072ae69aaad34ca9de80ef58e3d62f18021bd2c9dcc34e4008204dad570ddb04991c9af", 0x2b}], 0x3}, 0x8090) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8450}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12.044356025s ago: executing program 6 (id=1871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = io_uring_setup(0x6e90, &(0x7f0000000200)={0x0, 0xde4, 0x800, 0x0, 0x1f2}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)="82b77610"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 12.025786886s ago: executing program 2 (id=1872): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (fail_nth: 7) 11.393630522s ago: executing program 2 (id=1873): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa010fdde36600080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffff"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) memfd_create(0x0, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x220000, 0x0, 0x30}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11.390424653s ago: executing program 6 (id=1874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd70000000000014000000dffa38658652628600696d3672100000050018000100"/54], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00') setns(r3, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000300)=[{0xfffffffffffffffc, 0x101, 0x5afd29a0, {0xf, 0x6}, 0xd, 0x8, 0x402a}, {0xf90, 0x4, 0x7, {0x3, 0x2}, 0x1, 0x6, 0x8}, {0x5f, 0x3, 0x7b, {0x3, 0x8000000000000000}, 0xfffffffffffffff8, 0x3, 0x2}, {0x183, 0x7a6d534d, 0x81, {0x3, 0x7fffffffffffffff}, 0x4, 0x2, 0x4}, {0x9, 0xe0, 0x9, {0x4, 0x10}, 0x4, 0xffffffffffffff01, 0x81}], 0x5, 0x40, 0x1, 0x67c}, {&(0x7f0000000440)=[{0x5, 0x82}, {0xceaa, 0x4}, {0xf, 0x400}, {0x80000000, 0xf5}, {0x3, 0x2}], 0x5, 0x10, 0x7, 0xffff}, {&(0x7f00000004c0)=[0x97, 0x4, 0xe, 0x0, 0xfffffffffffffffd, 0x7, 0x8, 0x8000000000000000], 0x8, 0x8, 0x8, 0x9}, {&(0x7f0000000700)=[{0x40000, 0x7, 0xc9, 0x400, 0x40}, {0x8, 0x4, 0x0, 0x1000, 0xe}, {0x6, 0xa, 0x7, 0xd, 0x7}, {0x2, 0x9, 0x4, 0x6, 0x6}], 0x4, 0x28, 0xc, 0x8c}, {&(0x7f00000007c0)=[0x8, 0x1, 0xfffffffffffffff1], 0x3, 0x8, 0x2e, 0x5}}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4) 11.242695892s ago: executing program 6 (id=1875): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c0018800800024000000000080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa4}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 10.889817999s ago: executing program 6 (id=1876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r5, 0x4, 0x2400) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) shutdown(r5, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd65, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdb7c, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000010) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc141200004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.487082135s ago: executing program 0 (id=1877): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 8.021422096s ago: executing program 3 (id=1878): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="02", 0x1}, {&(0x7f0000000000)="94cc", 0x2}], 0x2}, 0x24009080) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x8}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="7f00", 0x2}], 0x1}, 0x20000000) 7.240093797s ago: executing program 3 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000002"], 0x50) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c045) r2 = io_uring_setup(0x3793, &(0x7f0000000040)={0x0, 0x100c89f, 0xc000, 0x7, 0x20002f9}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async, rerun: 64) r3 = socket$inet(0x2, 0x80001, 0x84) (rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (rerun: 64) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000280)='L', 0x1) (async) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async) syz_usb_disconnect(r4) read$char_usb(r5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x4, 0x4, 0xc, 0x15, r1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r6}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0x109, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0xe6, 0x20, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3d, 0xfff}, [@cluster_info_segment={0x6, 0x20, 0x2, 0x83, 0x40}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x100, 0x3, 0x3, 0xad, 0x1, 0x6, 0x8, 0x5}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x400, 0x3, 0x6, 0x6, 0x9, 0x7, 0x9f3, 0xc1ec}, @selector_unit={0x7, 0x24, 0xc, 0x3, 0x2, "8ca1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x40, 0x2, "10"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3, 0x5, "f3088e"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x48, "ee"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x401, 0xa, "b19469"}, @as_header={0x17, 0x24, 0x1, 0x1, 0x3, 0x10, 0x5, 0xf, 0x5, 0x5, 0x9e}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1ff, 0xc, 0x9, "96828f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x1, 0x3c, {0xa, 0x25, 0x25, 0x6, 0x38, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0x1000, 0xf, 0x59}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x2, 0x5, {0xa, 0x25, 0x25, 0x11, 0x4, 0x81}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0xbf, 0x7, 0x1, 0x40, 0x8}, 0xc5, &(0x7f0000000580)={0x5, 0xf, 0xc5, 0x2, [@generic={0xb6, 0x10, 0x1, "423ff9c0cda662e400ed33ed791c559cf1e83e447968fbd4f1aadafc82adfcc40ab12fdd447c09a6016c2f5b1f10eff0006af8c51a2fc86d3eb49b149774cb670131a3d79167c4ca35e9e4028dc5af144be8309e476caf0289d7cd8fb9e9d16fca4f5599e64fa1dca8e7973f54963f988225c179f0760d3a5fe637a47825e8283af624aa3e6d145f42d21180355003fe2286552f0b4cd226e2a936bda8c5063d0e50449204cc648a237642e0a4f7362b5a8776"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xc0, 0x13, 0x3e01}]}, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4ff}}, {0x52, &(0x7f00000006c0)=@string={0x52, 0x3, "01a23f4a4f259a273283251c82f5c736d7e65b2dd8268846b897c310ca1f46006b175c1394c9483bc91e9cfa2612110495e2695426fb3240fd46d787952ed2a6f9caf22759e241d9bedc7a1eaac12559"}}, {0x53, &(0x7f0000000740)=@string={0x53, 0x3, "d0fa6754eb6d2cf836f5b805571ca21ce62877852c4f7866d77c2e122423f4393118a17feb269e4424d33147e92c76f0e13abd8da1f687b32208bf1bc674b8e9ef9bfa637322e0b3ab98e081357f8d32d2"}}, {0x7f, &(0x7f0000000840)=@string={0x7f, 0x3, "39e21b39dd914415a34e685674b56563ad7126579d2e42b70a78da305556056c20f6a63935b856b00885217560eed23aa36449b012fccde365e0c79285aad146f1b04e052963e09324ea44f101e829e658a07b7b3188da0bfb968c1921b230de119ffcfd7f52ee53249d625c563127aad858f41d8ccaa5b81115a65822"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x411}}]}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@getchain={0x4c, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {0xffff, 0xfff2}, {0xffe0, 0xfff3}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffd3e}]}, 0x4c}}, 0x40000) 6.555685316s ago: executing program 3 (id=1880): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x38, 0x400c0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r7, 0xc0305616, &(0x7f0000000000)={0x0, {0x55eeeb55, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x4, 0x0, 0x34325852, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x7, 0x1, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000003c0)={{0xff, @local, 0x4e24, 0x3, 'lblc\x00', 0x25, 0x4, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x1, 0x40000000, 0xfffffffa, 0x71}}, 0x44) pipe(0x0) 5.044408835s ago: executing program 3 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000003540)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003500)={&(0x7f0000002380)=ANY=[@ANYBLOB="000000000000010007000000000000003d", @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf250500000008000300040000003c000680060005004e22000008000700", @ANYRES32=r5, @ANYBLOB="060005004e20000005000200020000000500020006000000060001000a000000060005004e22000008000400040000000800040085040000"], 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x4040) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800016adb2763fbb130282502200020000000080000000008000100ac1414"], 0x24}}, 0x0) read$FUSE(r7, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) r12 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101200, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r12, 0x8030942b, &(0x7f0000002240)={0x9, {0x21, 0xfff, 0x7, 0x4, 0xfffffffffffffffe}}) write$FUSE_INIT(r7, &(0x7f0000002180)={0x50, 0x0, r10, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000002140)={0x20, 0x0, r13, {0x402, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r7, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r14}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f000000c380)={0x2020, 0x0, 0x0}, 0x2020) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r16, &(0x7f0000000140)=[{&(0x7f0000003000)=""/4102, 0x1006}], 0x1, 0x600, 0x3) write$tun(r16, &(0x7f00000041c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a81900810026000004ab0165c2356a0a00eeb8fb9bc4afac385cc7e86b58896cceef9cef3ce74f5953fde4526bcfc5d5af96622e71b61cd094c02dac9226958b842448489b882af9ad0842e6a384d24cc8c75a8a6f7cca5e7b72cf2fae5a7709087427d0791e2af671804f779667fe2d88836e42b2667700404c97214407587166d5ec5203de92baac2ea8d81894224905da28d2688d9d9ee7ef976235fe7e2cd0e2af71c243c9c7f16d23f8a10c7326b7f287a9dd254c9f5e0e1529661115b5367ff0d74507886ce7c2cd20cebd"], 0xd6) getdents64(r8, &(0x7f00000024c0)=""/4096, 0x1000) r17 = syz_open_dev$ndb(&(0x7f0000004100), 0x0, 0x208280) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000004040)="dae1b0f64b8330a93a7f025acbad85ce87285daa698109a6262d48d9a1d57a9f1f4287a9f91e7d7385a74b3b38ffb2c23e7fef7f5296d64bd7e6bbc658185ec03c2b00ed742aea15a28f5272563d13fa23f465e455202ce046f34255d8dd6cb67ca1c492742e3bf5d880cee0961aa2a4c81c61a31a538b0c604dcbd135179ad1ec2343744d", 0x85, r17}, 0x68) write$FUSE_ENTRY(r7, &(0x7f000000e3c0)={0x90, 0x0, r15, {0x5, 0x2, 0x5, 0x6fbb, 0x0, 0x3, {0x6, 0xc5a, 0xe19, 0x53, 0x9, 0x7f, 0x6, 0x700000, 0x6, 0xa000, 0xfffffff8, r11, 0x0, 0x1, 0xffffff80}}}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="22032dbd7000f9dbdf2524000000"], 0x14}}, 0x0) 3.484619865s ago: executing program 5 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0xfffffff7, 0x0, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @end]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="161e2acf35a493f219d60391166ce3c81b78e47ef326d804c9706ebcddf924e4d882ecb72ee3873e34279e11ebe9351b1ead876b836c4549c48a851d0903fa1a97f50ef89a8e51d4ab2c26ff371a1dfd8fa36f79f01a97e84ae6", 0x5a}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000580)="fa78cdaeb29d434072ae69aaad34ca9de80ef58e3d62f18021bd2c9dcc34e4008204dad570ddb04991", 0x29}], 0x3}, 0x8090) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8450}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.274587065s ago: executing program 6 (id=1883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x3a, 0x2000000, @val=@iter={0x0}}, 0x20) 1.175536062s ago: executing program 0 (id=1884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0b000000000000001c001a821800000026fc01010000000000000000fcff02000000000f844b53218f356969fb44930531981079d1619a504e5c50e1e6d1eacf3032427041dcae7e71d437a7212013183ca909f7ff8f5f0554d9f69d0405a9707c8bf164af541b19b2bd3415f13d826c253b15bc43819ec95d9e983242be64ecfcaa91ad07cb35702c5f52bd6662e6e677fafcdb61f70488531be4c1f1aa8e063fbef8c5af", @ANYRESHEX=r8], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/126, 0x7e}], 0x2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/35, 0x23}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 813.751991ms ago: executing program 6 (id=1885): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000700000aa1021e8a5969224e110b0445eea88ad5c64ec985bcc3994e02cff67d83b2a2ac8535e6273692a371189614c4ef09548e97a0248957d90515e43dc622e9ddd7829bea29bc3b7b62b396a92eadfc2ac954b0a8aaa8d18d6ac66726041bf5d1a21315032eb0910045"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010100020073797a31000000000900010073797a3100000000040003", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) prlimit64(r7, 0xa, &(0x7f0000000340)={0x7fffffff, 0x11}, 0x0) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6f892dbd7000fbdbdf6b8100000008000300", @ANYRES32=r10], 0x34}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000fcff00180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e8e787915a44edf45b962020000"], 0x0) 461.153806ms ago: executing program 5 (id=1886): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x194, 0x1a, 0x713, 0xfffffffd, 0x0, {{@in6=@local, @in6=@private1, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xa2, 0x1, {{'sha1\x00'}, 0x2d0, "8ad957b65964f40189fd88c98a3b09ecbd5b9eeb6c9c618b4cfc97232d64fae3bed9473088fa9693f7e6da8737ef7346f025cb9d2b4f66698b085be36c5d57f9f28cf59c15358459a1d8d6f320f4d93fc7dbe3dcad5bff276eb3"}}]}, 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) 0s ago: executing program 2 (id=1887): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80940, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000180), &(0x7f00000002c0)="3bb51762a178e78d0104000031062601c2ce4edfde2e8f929acf4770d18d4ca35354b371b0d3273f5bcb748cbfd5a283e1baa5f9e330c87db4b97baf05ad618878bc8a1dc6ee64be6ccc8a5d181b932c0a55bbd49e4b63d5554659ba9f63045a925ccdb3e5bf928ed0da9adb37c64594f8fa302c4790b4c650e3b19c979a69bb2451834bcd51a54fbd18a0ab5cc005dc73bd1ebde9a59a31378f99c0bd85cf628128340be501d208263d0e08efc175a66b687defce0aebb356876c638913dff51a8c7ee93b", 0xc5, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f00000005c0)) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) kernel console output (not intermixed with test programs): nterface 141 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 396.421104][ T5725] usb 4-1: too many endpoints for config 128 interface 247 altsetting 156: 186, using maximum allowed: 30 [ 396.451650][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has a duplicate endpoint with address 0x2, skipping [ 396.464984][ T5690] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 396.491209][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has a duplicate endpoint with address 0x7, skipping [ 396.521478][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has an invalid descriptor for endpoint zero, skipping [ 396.554772][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has a duplicate endpoint with address 0xD, skipping [ 396.587624][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has a duplicate endpoint with address 0xD, skipping [ 396.624801][ T5725] usb 4-1: config 128 interface 247 altsetting 156 has 7 endpoint descriptors, different from the interface descriptor's value: 186 [ 396.633655][ T5690] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 396.661801][ T5690] usb 5-1: config 0 has no interface number 0 [ 396.679575][ T5725] usb 4-1: config 128 interface 202 has no altsetting 0 [ 396.689754][ T5690] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 396.715122][ T5725] usb 4-1: config 128 interface 247 has no altsetting 0 [ 396.732455][ T5690] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 396.756445][ T5725] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=4f.a8 [ 396.774841][ T5690] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 396.776125][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.807946][ T5690] usb 5-1: config 0 interface 11 has no altsetting 0 [ 396.832683][ T5725] usb 4-1: Product: 刴렊ዽ໨뷆枑霹ç·êŒ±æ°å…‘ç£ì‰£à¶ê€šà¾–í‰æ£©ä„²é²‘㿇䀹餟岌å¿ê»™áº–죾깞⧃훵○깛ï‚䛌᥇ì¢îª’뷩থҜℛ趱㤖í†â¨ˆï‘ˆé•¦ê¯†ì´¡í€‰á¹˜ì”•ç©³é¿¬á»¶äˆŽÈ췮ïœï™…엲̋ꇲ鸤í…쉹뉬낱ǣî¸äŽ™ì®ì™…ݫ黠㗸㦗拞駬嘕剤ง멲à©ï¨¬àµê–¼ç»¢ìª‡ï¿‹ãŠºë©‰î¯ƒæ—­ì‘ªï¼«ç½Žï´€ïšŠê”㎟ [ 396.868048][ T5690] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 396.918960][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.925308][ T5725] usb 4-1: Manufacturer: â˜à£¡ç¢·í…韮兗Í토肃î¶ã­“æ˜ë´šî¬¼í”ˆì¼œä³¾è»•Å‹ç‡´í‹èŠ­ä¨¯íš’藘剷䳇ꎂ薠ỷé”瓹呖╩㰴ᗟä‡î—ƒæ—†å•œì·½ä£‰î»·à¢­í›±ã¿•ä‘§ä£±à«ã‡å®‘攑Ṣࠩ퉸ꮤ䙥䱮è›î˜•é¿ã™ î¨®é‚ᛀﹸæ°é‰»ç¶ºã£ê˜µî°·è’šè‰¢è†«è®ºé—‹ç²µå™žç±½î…£ä›¬é”½ïˆç—€å‹€î¡‡î©˜â’蟜ꢭ䌧쿥 [ 396.994213][ T5690] usb 5-1: config 0 descriptor?? [ 397.022733][T10819] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 397.039785][T10819] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 397.075665][ T5690] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 397.113120][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 397.149378][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 397.173113][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 397.190279][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 397.210532][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 397.241010][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 397.278164][T10819] netlink: 'syz.4.1412': attribute type 3 has an invalid length. [ 397.291770][ T5690] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 397.312717][T10819] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1412'. [ 397.343326][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 397.360157][T10819] dlm: plock device version mismatch: kernel (1.2.0), user (1.28.0) [ 397.383991][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 397.414938][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 397.457530][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 397.475648][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 397.495030][ T5690] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 397.539250][ T5690] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 397.626951][ T5690] usb 5-1: USB disconnect, device number 59 [ 397.658618][ T5690] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 397.695285][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1413'. [ 397.719435][ T5690] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 397.755452][ T5690] keyspan 5-1:0.11: device disconnected [ 397.780190][T10824] binder: 10823:10824 ioctl c018620c 200000000000 returned -22 [ 397.997859][ T29] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 398.175284][ T29] usb 6-1: Invalid ep0 maxpacket: 32 [ 398.191388][T10831] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 398.325323][ T29] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 398.379467][ T5725] option 4-1:128.202: GSM modem (1-port) converter detected [ 398.466735][ T5725] usb 4-1: USB disconnect, device number 49 [ 398.501040][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1422'. [ 398.518828][ T29] usb 6-1: Invalid ep0 maxpacket: 32 [ 398.519674][ T5725] option 4-1:128.202: device disconnected [ 398.530200][ T29] usb usb6-port1: attempt power cycle [ 398.645064][ T807] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 398.785043][ T807] usb 5-1: device descriptor read/64, error -71 [ 398.915084][ T29] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 398.935628][ T29] usb 6-1: Invalid ep0 maxpacket: 32 [ 399.065044][ T29] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 399.086057][ T29] usb 6-1: Invalid ep0 maxpacket: 32 [ 399.095854][ T29] usb usb6-port1: unable to enumerate USB device [ 399.104982][ T807] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 399.255029][ T807] usb 5-1: device descriptor read/64, error -71 [ 399.375897][ T807] usb usb5-port1: attempt power cycle [ 399.425132][T10857] FAULT_INJECTION: forcing a failure. [ 399.425132][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 399.438542][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.0.1428 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.438566][T10857] Tainted: [L]=SOFTLOCKUP [ 399.438572][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.438585][T10857] Call Trace: [ 399.438595][T10857] [ 399.438602][T10857] dump_stack_lvl+0xe8/0x150 [ 399.438629][T10857] should_fail_ex+0x412/0x560 [ 399.438655][T10857] should_failslab+0xa8/0x100 [ 399.438681][T10857] __kmalloc_noprof+0xe8/0x760 [ 399.438703][T10857] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 399.438823][T10857] tomoyo_realpath_from_path+0xe3/0x5d0 [ 399.438855][T10857] ? tomoyo_domain+0xd7/0x130 [ 399.438889][T10857] ? tomoyo_path_number_perm+0x219/0x630 [ 399.438915][T10857] tomoyo_path_number_perm+0x246/0x630 [ 399.438943][T10857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 399.438963][T10857] ? sb_end_write+0xe9/0x1c0 [ 399.438980][T10857] ? vfs_write+0x9bc/0xb90 [ 399.439024][T10857] ? ksys_write+0x1fc/0x270 [ 399.439050][T10857] security_file_ioctl+0xc3/0x2a0 [ 399.439108][T10857] __se_sys_ioctl+0x47/0x170 [ 399.439147][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.439175][T10857] do_syscall_64+0x15f/0xf80 [ 399.439205][T10857] ? trace_irq_disable+0x3b/0x140 [ 399.439229][T10857] ? clear_bhb_loop+0x40/0x90 [ 399.439247][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.439263][T10857] RIP: 0033:0x7f068719cdd9 [ 399.439278][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.439290][T10857] RSP: 002b:00007f0688007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.439306][T10857] RAX: ffffffffffffffda RBX: 00007f0687415fa0 RCX: 00007f068719cdd9 [ 399.439317][T10857] RDX: 0000200000000200 RSI: 00000000c0044dff RDI: 0000000000000003 [ 399.439326][T10857] RBP: 00007f0688007090 R08: 0000000000000000 R09: 0000000000000000 [ 399.439335][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.439343][T10857] R13: 00007f0687416038 R14: 00007f0687415fa0 R15: 00007f068753fa48 [ 399.439366][T10857] [ 399.439421][T10857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.924966][ T807] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 399.976042][ T807] usb 5-1: device descriptor read/8, error -71 [ 400.059250][T10866] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 400.229349][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.239791][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.246834][ T807] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 400.285895][ T807] usb 5-1: device descriptor read/8, error -71 [ 400.405789][ T807] usb usb5-port1: unable to enumerate USB device [ 400.845048][ T5691] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 401.007968][ T5691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.025016][ T5691] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.047295][ T5691] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.084724][ T5691] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 401.097493][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 401.117000][ T5691] usb 6-1: Product: syz [ 401.123024][ T5691] usb 6-1: Manufacturer: syz [ 401.129116][ T5691] usb 6-1: SerialNumber: syz [ 401.214011][T10879] hub 9-0:1.0: USB hub found [ 401.219968][T10879] hub 9-0:1.0: 1 port detected [ 401.364207][ T5691] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.568559][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1435'. [ 401.594730][ T5725] usb 6-1: USB disconnect, device number 14 [ 401.619982][ T5725] usblp0: removed [ 401.802369][T10893] program syz.2.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.805493][ T5691] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 402.025045][ T5691] usb 5-1: device descriptor read/64, error -71 [ 402.325792][ T5691] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 402.475001][ T5691] usb 5-1: device descriptor read/64, error -71 [ 402.595752][ T5691] usb usb5-port1: attempt power cycle [ 402.945052][ T5691] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 402.991833][ T5691] usb 5-1: device descriptor read/8, error -71 [ 403.214743][T10931] FAULT_INJECTION: forcing a failure. [ 403.214743][T10931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.244430][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.3.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.244464][T10931] Tainted: [L]=SOFTLOCKUP [ 403.244471][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.244483][T10931] Call Trace: [ 403.244491][T10931] [ 403.244499][T10931] dump_stack_lvl+0xe8/0x150 [ 403.244528][T10931] should_fail_ex+0x412/0x560 [ 403.244559][T10931] _copy_from_user+0x2d/0xb0 [ 403.244668][T10931] do_sock_getsockopt+0x200/0x7e0 [ 403.244702][T10931] ? __pfx_vfs_write+0x10/0x10 [ 403.244732][T10931] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 403.244759][T10931] ? do_sys_openat2+0x14c/0x200 [ 403.244781][T10931] ? kmem_cache_free+0x182/0x650 [ 403.244808][T10931] ? fd_install+0x94/0x3d0 [ 403.244850][T10931] ? ksys_write+0x1fc/0x270 [ 403.244882][T10931] __x64_sys_getsockopt+0x1a4/0x240 [ 403.244923][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.244946][T10931] do_syscall_64+0x15f/0xf80 [ 403.244974][T10931] ? trace_irq_disable+0x3b/0x140 [ 403.245004][T10931] ? clear_bhb_loop+0x40/0x90 [ 403.245029][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.245049][T10931] RIP: 0033:0x7f8e3c39cdd9 [ 403.245069][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.245085][T10931] RSP: 002b:00007f8e3d2d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 403.245105][T10931] RAX: ffffffffffffffda RBX: 00007f8e3c615fa0 RCX: 00007f8e3c39cdd9 [ 403.245120][T10931] RDX: 0000000000000007 RSI: 000000000000010e RDI: 0000000000000003 [ 403.245126][ T5691] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 403.245132][T10931] RBP: 00007f8e3d2d9090 R08: 0000200000001180 R09: 0000000000000000 [ 403.245146][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.245158][T10931] R13: 00007f8e3c616038 R14: 00007f8e3c615fa0 R15: 00007f8e3c73fa48 [ 403.245243][T10931] [ 403.536010][ T5691] usb 5-1: device descriptor read/8, error -71 [ 403.559971][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 403.645517][ T5691] usb usb5-port1: unable to enumerate USB device [ 403.793394][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.826499][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.835013][ T5690] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 403.985350][ T5690] usb 6-1: Invalid ep0 maxpacket: 32 [ 403.992822][T10938] hub 9-0:1.0: USB hub found [ 404.007562][T10938] hub 9-0:1.0: 1 port detected [ 404.128139][ T5690] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 404.208693][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 404.273912][T10946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1450'. [ 404.295285][ T5690] usb 6-1: Invalid ep0 maxpacket: 32 [ 404.301100][ T5690] usb usb6-port1: attempt power cycle [ 404.651471][ T5690] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 404.670721][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 404.695704][ T5690] usb 6-1: Invalid ep0 maxpacket: 32 [ 404.835737][ T5690] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 404.901596][ T5690] usb 6-1: Invalid ep0 maxpacket: 32 [ 404.944966][ T5690] usb usb6-port1: unable to enumerate USB device [ 405.280531][T10971] loop5: detected capacity change from 0 to 7 [ 405.303996][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.313297][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.323839][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.333075][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.342521][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.351754][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.361572][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.370850][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.381517][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.390811][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.400326][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.409521][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.420052][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.429275][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.437233][T10971] ldm_validate_partition_table(): Disk read failed. [ 405.444295][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.453542][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.463323][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.472545][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.496136][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.505408][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 405.514991][T10971] Dev loop5: unable to read RDB block 0 [ 405.524608][T10971] loop5: unable to read partition table [ 405.531757][T10971] loop5: partition table beyond EOD, truncated [ 405.546863][T10971] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 406.142918][T10990] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 406.401289][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.414802][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.465727][ T807] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 406.626275][ T807] usb 3-1: device descriptor read/64, error -71 [ 406.895062][ T807] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 407.054969][ T807] usb 3-1: device descriptor read/64, error -71 [ 407.168372][ T807] usb usb3-port1: attempt power cycle [ 407.178869][T11012] batman_adv: batadv0: Adding interface: ip6gretap1 [ 407.185780][T11012] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.213590][T11012] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 407.545028][ T807] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 407.576372][ T807] usb 3-1: device descriptor read/8, error -71 [ 407.814942][ T807] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 407.841310][ T807] usb 3-1: device descriptor read/8, error -71 [ 407.955200][ T807] usb usb3-port1: unable to enumerate USB device [ 408.235114][ T5691] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 408.385106][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 408.393014][ T5691] usb 6-1: unable to get BOS descriptor or descriptor too short [ 408.405787][ T5691] usb 6-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 408.416025][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.424247][ T5691] usb 6-1: Product: syz [ 408.429612][ T5691] usb 6-1: Manufacturer: syz [ 408.434333][ T5691] usb 6-1: SerialNumber: syz [ 408.672807][ T5691] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 408.685555][ T5691] usb 6-1: unit 0 not found! [ 408.774514][ T5691] usb 6-1: USB disconnect, device number 19 [ 408.826694][ T5704] udevd[5704]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.075004][ T5725] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 409.227244][ T5725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.254482][ T5725] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.279760][ T5725] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.320457][ T5725] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 409.330657][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 409.341688][ T5725] usb 5-1: Product: syz [ 409.349390][ T5725] usb 5-1: Manufacturer: syz [ 409.365563][ T5725] usb 5-1: SerialNumber: syz [ 409.439826][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 409.512903][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 409.532329][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 409.593047][ T5725] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 409.794361][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 409.811589][ T5725] usb 5-1: USB disconnect, device number 68 [ 409.833571][ T5725] usblp0: removed [ 409.878332][T11072] vivid-007: ================= START STATUS ================= [ 409.886725][T11072] vivid-007: Enable Output Cropping: true [ 409.892536][T11072] vivid-007: Enable Output Composing: true [ 409.899116][T11072] vivid-007: Enable Output Scaler: true [ 409.904783][T11072] vivid-007: Tx RGB Quantization Range: Automatic [ 409.911572][T11072] vivid-007: Transmit Mode: HDMI [ 409.916711][T11072] vivid-007: Hotplug Present: 0x00000000 [ 409.922459][T11072] vivid-007: RxSense Present: 0x00000000 [ 409.928346][T11072] vivid-007: EDID Present: 0x00000000 [ 409.934040][T11072] vivid-007: ================== END STATUS ================== [ 410.009728][T11074] FAULT_INJECTION: forcing a failure. [ 410.009728][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 410.026943][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.0.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.026974][T11074] Tainted: [L]=SOFTLOCKUP [ 410.026981][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.026991][T11074] Call Trace: [ 410.026999][T11074] [ 410.027006][T11074] dump_stack_lvl+0xe8/0x150 [ 410.027031][T11074] should_fail_ex+0x412/0x560 [ 410.027059][T11074] should_failslab+0xa8/0x100 [ 410.027085][T11074] ? skb_clone+0x212/0x3a0 [ 410.027111][T11074] kmem_cache_alloc_noprof+0x87/0x650 [ 410.027140][T11074] skb_clone+0x212/0x3a0 [ 410.027169][T11074] __netlink_deliver_tap+0x404/0x850 [ 410.027206][T11074] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.027234][T11074] netlink_deliver_tap+0x19c/0x1b0 [ 410.027274][T11074] netlink_sendskb+0x68/0x140 [ 410.027302][T11074] netlink_rcv_skb+0x2b6/0x4b0 [ 410.027330][T11074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.027351][T11074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.027387][T11074] ? down_read+0x270/0x2e0 [ 410.027404][T11074] ? genl_rcv+0xd/0x40 [ 410.027424][T11074] genl_rcv+0x28/0x40 [ 410.027441][T11074] netlink_unicast+0x75c/0x8e0 [ 410.027476][T11074] netlink_sendmsg+0x813/0xb40 [ 410.027513][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.027550][T11074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.027572][T11074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.027596][T11074] ____sys_sendmsg+0x972/0x9f0 [ 410.027617][T11074] ? __might_fault+0xaf/0x130 [ 410.027641][T11074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.027668][T11074] ? import_iovec+0x73/0xa0 [ 410.027692][T11074] ___sys_sendmsg+0x2a5/0x360 [ 410.027712][T11074] ? __lock_acquire+0x6b5/0x2cf0 [ 410.027732][T11074] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.027780][T11074] ? __fget_files+0x2a/0x420 [ 410.027798][T11074] ? __fget_files+0x3a0/0x420 [ 410.027823][T11074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.027847][T11074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.027876][T11074] ? __pfx_ksys_write+0x10/0x10 [ 410.027903][T11074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.027920][T11074] do_syscall_64+0x15f/0xf80 [ 410.027941][T11074] ? trace_irq_disable+0x3b/0x140 [ 410.027964][T11074] ? clear_bhb_loop+0x40/0x90 [ 410.027982][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.027998][T11074] RIP: 0033:0x7f068719cdd9 [ 410.028012][T11074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.028025][T11074] RSP: 002b:00007f0688007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.028042][T11074] RAX: ffffffffffffffda RBX: 00007f0687415fa0 RCX: 00007f068719cdd9 [ 410.028053][T11074] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003 [ 410.028063][T11074] RBP: 00007f0688007090 R08: 0000000000000000 R09: 0000000000000000 [ 410.028072][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.028081][T11074] R13: 00007f0687416038 R14: 00007f0687415fa0 R15: 00007f068753fa48 [ 410.028105][T11074] [ 410.375466][T11076] FAULT_INJECTION: forcing a failure. [ 410.375466][T11076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.388693][T11076] CPU: 1 UID: 0 PID: 11076 Comm: syz.0.1497 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.388727][T11076] Tainted: [L]=SOFTLOCKUP [ 410.388735][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.388748][T11076] Call Trace: [ 410.388757][T11076] [ 410.388766][T11076] dump_stack_lvl+0xe8/0x150 [ 410.388796][T11076] should_fail_ex+0x412/0x560 [ 410.388829][T11076] _copy_to_user+0x31/0xb0 [ 410.388866][T11076] simple_read_from_buffer+0xe1/0x170 [ 410.388890][T11076] proc_fail_nth_read+0x1bb/0x230 [ 410.388941][T11076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.388963][T11076] ? rw_verify_area+0x2a6/0x4d0 [ 410.388984][T11076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.389005][T11076] vfs_read+0x20c/0xa70 [ 410.389030][T11076] ? __pfx___mutex_lock+0x10/0x10 [ 410.389105][T11076] ? __pfx_vfs_read+0x10/0x10 [ 410.389127][T11076] ? __fget_files+0x2a/0x420 [ 410.389148][T11076] ? __fget_files+0x3a0/0x420 [ 410.389165][T11076] ? __fget_files+0x2a/0x420 [ 410.389190][T11076] ksys_read+0x150/0x270 [ 410.389212][T11076] ? __pfx_ksys_read+0x10/0x10 [ 410.389246][T11076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.389263][T11076] do_syscall_64+0x15f/0xf80 [ 410.389284][T11076] ? trace_irq_disable+0x3b/0x140 [ 410.389333][T11076] ? clear_bhb_loop+0x40/0x90 [ 410.389365][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.389381][T11076] RIP: 0033:0x7f068715d60e [ 410.389396][T11076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.389409][T11076] RSP: 002b:00007f0688006fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.389425][T11076] RAX: ffffffffffffffda RBX: 00007f06880076c0 RCX: 00007f068715d60e [ 410.389437][T11076] RDX: 000000000000000f RSI: 00007f06880070a0 RDI: 0000000000000006 [ 410.389447][T11076] RBP: 00007f0688007090 R08: 0000000000000000 R09: 0000000000000000 [ 410.389456][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.389465][T11076] R13: 00007f0687416038 R14: 00007f0687415fa0 R15: 00007f068753fa48 [ 410.389489][T11076] [ 410.999912][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1503'. [ 411.025253][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 411.038355][T11092] ip6gre1: entered promiscuous mode [ 411.051073][T11092] ip6gre1: entered allmulticast mode [ 411.087109][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 411.092926][ T56] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.105126][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 411.121730][ T56] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.131654][ T56] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.141182][ T56] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.287133][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 411.298158][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 411.334302][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 411.374517][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 411.417955][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 411.448463][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 411.462469][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 411.472866][ T29] usb 6-1: Product: syz [ 411.485961][ T29] usb 6-1: Manufacturer: syz [ 411.525698][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 411.545362][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 411.575557][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 411.592049][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 411.595363][ T9] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 411.732704][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.755548][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.777136][ T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 411.802791][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 411.824028][T11084] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 411.846617][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.875285][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 411.890755][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 411.909733][T11106] vivid-007: ================= START STATUS ================= [ 411.918359][ T9] usb 4-1: Product: syz [ 411.923815][ T9] usb 4-1: Manufacturer: syz [ 411.932337][ T9] usb 4-1: SerialNumber: syz [ 411.951726][ T9] usb 4-1: config 0 descriptor?? [ 411.960449][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 411.968166][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 411.981545][T11106] vivid-007: Enable Output Cropping: true [ 411.995938][ T9] usb 4-1: selecting invalid altsetting 0 [ 412.001778][T11106] vivid-007: Enable Output Composing: true [ 412.026818][T11106] vivid-007: Enable Output Scaler: true [ 412.048093][T11106] vivid-007: Tx RGB Quantization Range: Automatic [ 412.084635][T11106] vivid-007: Transmit Mode: HDMI [ 412.101215][T11106] vivid-007: Hotplug Present: 0x00000000 [ 412.132865][T11106] vivid-007: RxSense Present: 0x00000000 [ 412.152029][T11106] vivid-007: EDID Present: 0x00000000 [ 412.186226][T11106] vivid-007: ================== END STATUS ================== [ 412.306806][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.342785][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.416709][T11110] FAULT_INJECTION: forcing a failure. [ 412.416709][T11110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.452388][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.465021][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.2.1509 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.465054][T11110] Tainted: [L]=SOFTLOCKUP [ 412.465061][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.465070][T11110] Call Trace: [ 412.465077][T11110] [ 412.465090][T11110] dump_stack_lvl+0xe8/0x150 [ 412.465117][T11110] should_fail_ex+0x412/0x560 [ 412.465141][T11110] _copy_to_user+0x31/0xb0 [ 412.465166][T11110] simple_read_from_buffer+0xe1/0x170 [ 412.465189][T11110] proc_fail_nth_read+0x1bb/0x230 [ 412.465212][T11110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.465234][T11110] ? rw_verify_area+0x2a6/0x4d0 [ 412.465255][T11110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.465276][T11110] vfs_read+0x20c/0xa70 [ 412.465301][T11110] ? __pfx___mutex_lock+0x10/0x10 [ 412.465325][T11110] ? __pfx_vfs_read+0x10/0x10 [ 412.465347][T11110] ? __fget_files+0x2a/0x420 [ 412.465369][T11110] ? __fget_files+0x3a0/0x420 [ 412.465386][T11110] ? __fget_files+0x2a/0x420 [ 412.465410][T11110] ksys_read+0x150/0x270 [ 412.465434][T11110] ? __pfx_ksys_read+0x10/0x10 [ 412.465461][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.465478][T11110] do_syscall_64+0x15f/0xf80 [ 412.465502][T11110] ? clear_bhb_loop+0x40/0x90 [ 412.465521][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.465537][T11110] RIP: 0033:0x7f083855d60e [ 412.465552][T11110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.465566][T11110] RSP: 002b:00007f08394a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.465582][T11110] RAX: ffffffffffffffda RBX: 00007f08394a16c0 RCX: 00007f083855d60e [ 412.465596][T11110] RDX: 000000000000000f RSI: 00007f08394a10a0 RDI: 0000000000000004 [ 412.465606][T11110] RBP: 00007f08394a1090 R08: 0000000000000000 R09: 0000000000000000 [ 412.465616][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.465625][T11110] R13: 00007f0838816038 R14: 00007f0838815fa0 R15: 00007f083893fa48 [ 412.465649][T11110] [ 412.714999][ T5690] usb 6-1: USB disconnect, device number 20 [ 412.730604][ T29] usb 4-1: USB disconnect, device number 50 [ 413.069862][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 413.079615][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 413.299059][T11131] loop2: detected capacity change from 0 to 7 [ 413.336883][T11131] Dev loop2: unable to read RDB block 7 [ 413.343129][T11131] loop2: AHDI p1 p2 p3 [ 413.351743][T11131] loop2: partition table partially beyond EOD, truncated [ 413.364189][T11131] loop2: p1 start 1601398130 is beyond EOD, truncated [ 413.383614][T11131] loop2: p2 start 1702059890 is beyond EOD, truncated [ 413.771724][T11153] hub 9-0:1.0: USB hub found [ 413.814399][T11153] hub 9-0:1.0: 1 port detected [ 413.973601][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.011277][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.284953][ T5690] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 414.444982][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 414.459304][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.481745][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.514680][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.553186][ T5690] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.581904][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.621282][ T5690] usb 3-1: config 0 descriptor?? [ 414.887463][T11162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.908997][T11162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.054161][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 415.054181][ T30] audit: type=1326 audit(1778587989.871:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.122255][ T30] audit: type=1326 audit(1778587989.921:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.170205][ T5725] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 415.190684][ T30] audit: type=1326 audit(1778587989.921:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.248569][ T30] audit: type=1326 audit(1778587989.921:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.279915][ T5690] hid_parser_main: 455 callbacks suppressed [ 415.280007][ T5690] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 415.307411][ T5690] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 415.314833][ T30] audit: type=1326 audit(1778587989.931:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.363856][ T5690] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 415.365465][ T5725] usb 6-1: Using ep0 maxpacket: 8 [ 415.386251][ T30] audit: type=1326 audit(1778587989.931:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.422884][ T5690] microsoft 0003:045E:07DA.0008: no inputs found [ 415.438012][ T5725] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 415.440686][ T5690] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 415.457282][ T5725] usb 6-1: config 179 has no interface number 0 [ 415.479367][ T5725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 415.494541][ T30] audit: type=1326 audit(1778587989.931:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.534526][ T5725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 415.555411][ T5725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 415.568071][ T30] audit: type=1326 audit(1778587989.931:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.596830][ T5725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 415.623152][ T5725] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 415.638856][ T5690] usb 3-1: USB disconnect, device number 44 [ 415.644010][ T30] audit: type=1326 audit(1778587989.931:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.683103][ T5725] usb 6-1: config 179 interface 65 has no altsetting 0 [ 415.704763][ T5725] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 415.729178][ T30] audit: type=1326 audit(1778587989.931:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x7ffc0000 [ 415.761916][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.765670][T11177] fido_id[11177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 415.840348][ T5725] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 415.925798][ T4978] input input36: unable to receive magic message: -110 [ 415.947672][ T4978] input input36: unable to receive magic message: -32 [ 415.978740][ T4978] input input36: unable to receive magic message: -32 [ 416.006017][ T4978] input input36: unable to receive magic message: -32 [ 416.030074][ T4978] input input36: unable to receive magic message: -32 [ 416.052638][ T4978] input input36: unable to receive magic message: -32 [ 416.179117][T11188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.260142][T11188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.338676][T11188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.060328][T11199] binder: 11198:11199 ioctl 4018620d 0 returned -22 [ 417.092839][T11197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.192875][T11204] __nla_validate_parse: 1 callbacks suppressed [ 417.192912][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1540'. [ 417.322660][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 417.527390][T11211] input input36: unable to receive magic message: -32 [ 417.913707][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 417.963119][ T5690] usb 6-1: USB disconnect, device number 21 [ 417.963384][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 418.083636][T11221] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 418.192645][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.210745][T11224] caif0: tun_chr_ioctl cmd 1074812117 [ 418.218853][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.235079][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 418.395013][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 418.408652][ T9] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 418.417780][ T9] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 418.428700][ T9] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 418.449037][ T9] usb 4-1: config 250 has no interface number 0 [ 418.460235][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 418.486331][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1548'. [ 418.498586][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 418.511276][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1548'. [ 418.535132][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.556610][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 418.559291][T11234] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1548'. [ 418.588055][ T9] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 418.606545][ T9] usb 4-1: config 250 interface 228 has no altsetting 0 [ 418.616281][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 418.629342][ T9] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 418.645334][ T9] usb 4-1: Product: syz [ 418.651127][ T9] usb 4-1: SerialNumber: syz [ 418.680764][ T9] hub 4-1:250.228: bad descriptor, ignoring hub [ 418.687962][ T9] hub 4-1:250.228: probe with driver hub failed with error -5 [ 418.839457][T11242] binder: 11241:11242 ioctl 4018620d 0 returned -22 [ 418.853092][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 418.865044][ T5691] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 418.884594][ T9] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 419.079412][ T5691] usb 5-1: config 0 has no interfaces? [ 419.099864][ T5691] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.099899][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.106855][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.107288][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.112899][ T5691] usb 5-1: config 0 descriptor?? [ 419.130291][T11249] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 419.316002][ T9] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 419.331148][ T5691] usb 5-1: USB disconnect, device number 69 [ 419.362669][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1556'. [ 419.382253][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1556'. [ 420.152027][T11263] hub 9-0:1.0: USB hub found [ 420.183805][T11263] hub 9-0:1.0: 1 port detected [ 420.723241][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 420.871347][T11281] FAULT_INJECTION: forcing a failure. [ 420.871347][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.967271][T11281] CPU: 0 UID: 0 PID: 11281 Comm: syz.2.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.967305][T11281] Tainted: [L]=SOFTLOCKUP [ 420.967313][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.967329][T11281] Call Trace: [ 420.967339][T11281] [ 420.967349][T11281] dump_stack_lvl+0xe8/0x150 [ 420.967381][T11281] should_fail_ex+0x412/0x560 [ 420.967415][T11281] _copy_from_user+0x2d/0xb0 [ 420.967448][T11281] get_user_ifreq+0x6b/0x180 [ 420.967485][T11281] br_ioctl_stub+0x172/0xd60 [ 420.967615][T11281] ? do_vfs_ioctl+0x1166/0x1530 [ 420.967648][T11281] ? __pfx_br_ioctl_stub+0x10/0x10 [ 420.967669][T11281] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 420.967706][T11281] ? sock_ioctl+0x4fa/0x7f0 [ 420.967732][T11281] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 420.967780][T11281] ? __pfx_br_ioctl_stub+0x10/0x10 [ 420.967800][T11281] sock_ioctl+0x523/0x7f0 [ 420.967824][T11281] ? __pfx_sock_ioctl+0x10/0x10 [ 420.967846][T11281] ? __fget_files+0x2a/0x420 [ 420.967870][T11281] ? __fget_files+0x3a0/0x420 [ 420.967895][T11281] ? __fget_files+0x2a/0x420 [ 420.967924][T11281] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.967965][T11281] ? __pfx_sock_ioctl+0x10/0x10 [ 420.967986][T11281] __se_sys_ioctl+0xfc/0x170 [ 420.968016][T11281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.968039][T11281] do_syscall_64+0x15f/0xf80 [ 420.968069][T11281] ? trace_irq_disable+0x3b/0x140 [ 420.968100][T11281] ? clear_bhb_loop+0x40/0x90 [ 420.968126][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.968148][T11281] RIP: 0033:0x7f083859cdd9 [ 420.968168][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.968185][T11281] RSP: 002b:00007f0839480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.968208][T11281] RAX: ffffffffffffffda RBX: 00007f0838816090 RCX: 00007f083859cdd9 [ 420.968224][T11281] RDX: 0000200000000200 RSI: 00000000000089a2 RDI: 0000000000000007 [ 420.968237][T11281] RBP: 00007f0839480090 R08: 0000000000000000 R09: 0000000000000000 [ 420.968250][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.968264][T11281] R13: 00007f0838816128 R14: 00007f0838816090 R15: 00007f083893fa48 [ 420.968298][T11281] [ 421.210963][ T9] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71) [ 421.225196][ T9] usb 4-1: USB disconnect, device number 51 [ 421.239356][ T9] usblp0: removed [ 421.420635][T11289] binder: 11288:11289 ioctl 4018620d 0 returned -22 [ 421.669344][T11294] binder: 11293:11294 unknown command 0 [ 421.686804][T11294] binder: 11293:11294 ioctl c0306201 200000000080 returned -22 [ 422.107480][ T938] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.137965][ T938] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.161732][ T938] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.200360][ T938] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.247472][T11314] __nla_validate_parse: 6 callbacks suppressed [ 422.247488][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 422.535163][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 422.694988][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 422.713523][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 422.734684][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.759495][ T10] usb 3-1: Product: syz [ 422.779125][ T10] usb 3-1: Manufacturer: syz [ 422.789993][ T10] usb 3-1: SerialNumber: syz [ 422.827129][ T10] usb 3-1: config 0 descriptor?? [ 423.053718][ T10] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 423.090871][ T10] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 423.158430][ T10] usb 3-1: USB disconnect, device number 45 [ 423.547427][T11329] binder: 11326:11329 ioctl c0306201 0 returned -14 [ 423.835598][ T29] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 423.882232][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 423.917494][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 423.951606][T11336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1579'. [ 424.017001][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 424.035662][ T29] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 424.056935][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.089310][ T29] usb 3-1: config 0 has no interfaces? [ 424.107274][ T29] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 424.129362][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.163826][ T29] usb 3-1: config 0 descriptor?? [ 424.445373][T11339] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 424.547082][T11348] hub 9-0:1.0: USB hub found [ 424.576407][T11339] team0: Port device batadv1 added [ 424.656543][T11348] hub 9-0:1.0: 1 port detected [ 424.922245][T11353] netlink: 'syz.4.1581': attribute type 4 has an invalid length. [ 427.110708][T11379] syz.3.1588 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 427.187583][T11381] netlink: 'syz.5.1589': attribute type 10 has an invalid length. [ 427.262721][T11381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.301564][T11382] netlink: 'syz.5.1589': attribute type 10 has an invalid length. [ 427.362296][T11381] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 427.450846][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 427.473364][T11382] bond0: (slave netdevsim1): Releasing backup interface [ 427.489513][T11386] binder: 11384:11386 ioctl c0306201 0 returned -14 [ 427.504956][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 427.527200][T11382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.540120][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 427.551751][T11382] team0: Port device netdevsim1 added [ 427.565020][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 427.773084][ T10] usb 3-1: USB disconnect, device number 46 [ 427.915200][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1588'. [ 427.932786][T11398] FAULT_INJECTION: forcing a failure. [ 427.932786][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 427.958930][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.2.1595 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.958966][T11398] Tainted: [L]=SOFTLOCKUP [ 427.958976][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.958989][T11398] Call Trace: [ 427.958998][T11398] [ 427.959008][T11398] dump_stack_lvl+0xe8/0x150 [ 427.959041][T11398] should_fail_ex+0x412/0x560 [ 427.959075][T11398] should_failslab+0xa8/0x100 [ 427.959111][T11398] __kmalloc_cache_noprof+0x88/0x660 [ 427.959142][T11398] ? __tipc_nl_bearer_enable+0xb6b/0x14a0 [ 427.959291][T11398] __tipc_nl_bearer_enable+0xb6b/0x14a0 [ 427.959335][T11398] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 427.959366][T11398] ? __mutex_lock+0x319/0x1550 [ 427.959427][T11398] ? __pfx___mutex_lock+0x10/0x10 [ 427.959465][T11398] ? __nla_parse+0x40/0x60 [ 427.959501][T11398] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 427.959522][T11398] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 427.959549][T11398] tipc_nl_bearer_enable+0x22/0x40 [ 427.959580][T11398] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.959604][T11398] ? __asan_memcpy+0x40/0x70 [ 427.959634][T11398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.959680][T11398] genl_rcv_msg+0x61c/0x7a0 [ 427.959708][T11398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.959729][T11398] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 427.959763][T11398] ? __pfx_ref_tracker_free+0x10/0x10 [ 427.959852][T11398] netlink_rcv_skb+0x232/0x4b0 [ 427.959882][T11398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.959906][T11398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.959951][T11398] ? down_read+0x270/0x2e0 [ 427.959969][T11398] ? genl_rcv+0xd/0x40 [ 427.959991][T11398] genl_rcv+0x28/0x40 [ 427.960010][T11398] netlink_unicast+0x75c/0x8e0 [ 427.960047][T11398] netlink_sendmsg+0x813/0xb40 [ 427.960088][T11398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.960121][T11398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.960152][T11398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.960185][T11398] ____sys_sendmsg+0x972/0x9f0 [ 427.960214][T11398] ? __might_fault+0xaf/0x130 [ 427.960247][T11398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.960288][T11398] ? import_iovec+0x73/0xa0 [ 427.960322][T11398] ___sys_sendmsg+0x2a5/0x360 [ 427.960351][T11398] ? __lock_acquire+0x6b5/0x2cf0 [ 427.960378][T11398] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.960454][T11398] ? __fget_files+0x2a/0x420 [ 427.960480][T11398] ? __fget_files+0x3a0/0x420 [ 427.960516][T11398] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.960550][T11398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.960592][T11398] ? __pfx_ksys_write+0x10/0x10 [ 427.960631][T11398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.960654][T11398] do_syscall_64+0x15f/0xf80 [ 427.960683][T11398] ? trace_irq_disable+0x3b/0x140 [ 427.960714][T11398] ? clear_bhb_loop+0x40/0x90 [ 427.960740][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.960762][T11398] RIP: 0033:0x7f083859cdd9 [ 427.960782][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.960799][T11398] RSP: 002b:00007f08394a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.960821][T11398] RAX: ffffffffffffffda RBX: 00007f0838815fa0 RCX: 00007f083859cdd9 [ 427.960837][T11398] RDX: 0000000000000080 RSI: 00002000000010c0 RDI: 0000000000000003 [ 427.960850][T11398] RBP: 00007f08394a1090 R08: 0000000000000000 R09: 0000000000000000 [ 427.960863][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.960876][T11398] R13: 00007f0838816038 R14: 00007f0838815fa0 R15: 00007f083893fa48 [ 427.960910][T11398] [ 428.485219][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 428.639147][ T9] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 428.648516][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.656845][ T9] usb 4-1: Product: syz [ 428.661062][ T9] usb 4-1: Manufacturer: syz [ 428.665765][ T9] usb 4-1: SerialNumber: syz [ 428.675355][ T5359] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 428.675374][ T9] usb 4-1: config 0 descriptor?? [ 428.684319][ T9] usb 4-1: selecting invalid altsetting 1 [ 428.693810][ T9] technisat-usb2: could not set alternate setting to 0 [ 428.753569][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.786647][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.875375][ T5359] usb 5-1: Using ep0 maxpacket: 8 [ 428.883169][ T5359] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 428.897832][ T5359] usb 5-1: config 179 has no interface number 0 [ 428.904706][T11419] binder: 11418:11419 ioctl c0306201 0 returned -14 [ 428.904753][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 428.913387][ T5359] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 428.939585][ T5359] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 428.955877][ T5359] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 428.972013][ T5359] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 428.984166][ T5359] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 429.026542][ T5359] usb 5-1: config 179 interface 65 has no altsetting 0 [ 429.043288][ T5359] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 429.064614][ T9] usb 4-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 429.078980][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.097779][ T9] usb 4-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 429.201876][ T5359] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 429.276229][ T4978] input input38: unable to receive magic message: -110 [ 429.292316][ T4978] input input38: unable to receive magic message: -32 [ 429.323437][ T4978] input input38: unable to receive magic message: -32 [ 429.346745][ T4978] input input38: unable to receive magic message: -32 [ 429.451482][ T5682] input input38: unable to receive magic message: -32 [ 429.508026][ T4978] input input38: unable to receive magic message: -32 [ 429.570642][ T4978] input input38: unable to receive magic message: -32 [ 429.780796][ T29] usb 5-1: USB disconnect, device number 70 [ 429.786921][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.191250][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 430.223044][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 430.252260][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 430.263717][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1606'. [ 430.518248][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1608'. [ 430.772593][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.812332][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.015247][ T5359] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 431.075240][ T10] hid-generic 9100:9000000:1000000.0009: reserved main item tag 0xd [ 431.111878][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.156486][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.185115][ T5359] usb 3-1: Using ep0 maxpacket: 16 [ 431.186452][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.200644][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.211351][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.219607][ T5359] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 431.219640][ T5359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.257604][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.291857][ T5359] usb 3-1: config 0 descriptor?? [ 431.302583][ T5359] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 431.314134][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.327295][ T5359] usb 3-1: Detected FT4232H [ 431.348314][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.394277][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.451313][ T10] hid-generic 9100:9000000:1000000.0009: unknown main item tag 0x0 [ 431.552254][ T5359] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 431.570252][ T5359] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 431.604589][ T5359] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 431.604798][ T10] hid-generic 9100:9000000:1000000.0009: hidraw0: HID v8000.00 Device [syz0] on syz1 [ 431.643582][ T5359] usb 3-1: USB disconnect, device number 47 [ 431.731541][ T5359] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 431.737125][ T5359] ftdi_sio 3-1:0.0: device disconnected [ 432.653614][T11491] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 432.711756][T11491] team0: Port device batadv2 added [ 432.813365][T11485] hub 9-0:1.0: USB hub found [ 432.815996][T11485] hub 9-0:1.0: 1 port detected [ 433.110152][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 433.110167][ T30] audit: type=1326 audit(1778588007.931:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.198914][T11503] __nla_validate_parse: 5 callbacks suppressed [ 433.198929][T11503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1627'. [ 433.219853][ T30] audit: type=1326 audit(1778588007.961:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.293840][ T30] audit: type=1326 audit(1778588007.961:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.372015][ T30] audit: type=1326 audit(1778588007.961:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.446265][ T30] audit: type=1326 audit(1778588007.961:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.553163][ T30] audit: type=1326 audit(1778588007.971:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.622611][ T30] audit: type=1326 audit(1778588007.971:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.692579][ T30] audit: type=1326 audit(1778588007.971:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.760981][ T30] audit: type=1326 audit(1778588007.971:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 433.837206][ T30] audit: type=1326 audit(1778588007.971:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.5.1627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 434.039783][T11514] binder: 11513:11514 ioctl c0306201 0 returned -14 [ 434.318180][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 434.392431][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 434.420303][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 434.449789][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 434.484980][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 434.500935][ T29] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 434.518733][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 434.529475][ T29] usb 6-1: Product: syz [ 434.535965][ T29] usb 6-1: Manufacturer: syz [ 434.550683][ T29] usb 6-1: SerialNumber: syz [ 434.564368][ T29] usb 6-1: config 0 descriptor?? [ 434.586469][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 435.053947][T11535] fuse: Unknown parameter '`d' [ 435.105339][ T29] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 435.123401][ T29] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 435.315124][ T5691] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 435.326209][ T29] usb 6-1: USB disconnect, device number 22 [ 435.498257][ T5691] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 435.512086][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.543226][ T5691] usb-storage 3-1:32.0: USB Mass Storage device detected [ 435.563950][ T5691] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 435.654507][T11549] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 435.663778][T11549] team_slave_0: left promiscuous mode [ 435.674732][T11549] team_slave_1: left promiscuous mode [ 435.681042][T11549] batadv1: left promiscuous mode [ 435.688138][T11549] batadv2: left promiscuous mode [ 435.700982][T11549] batadv3: left promiscuous mode [ 435.763135][ T5725] usb 3-1: USB disconnect, device number 48 [ 435.961885][T11546] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.337221][T11549] team0 (unregistering): Port device team_slave_0 removed [ 436.384489][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 436.403134][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 436.420089][T11549] team0 (unregistering): Port device team_slave_1 removed [ 436.431346][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 436.463590][T11549] team0 (unregistering): Port device batadv1 removed [ 436.503994][T11549] team0 (unregistering): Port device batadv2 removed [ 436.515578][ T5752] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 436.533072][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.540901][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.561174][T11549] team0 (unregistering): Port device bridge0 removed [ 436.574508][T11549] team0 (unregistering): Port device batadv3 removed [ 436.587096][T11549] team0 (unregistering): Port device netdevsim1 removed [ 436.675029][ T5752] usb 6-1: Using ep0 maxpacket: 32 [ 436.681928][ T5752] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.703703][ T5752] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.721160][ T5752] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 436.742684][ T5752] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 436.760991][ T5752] usb 6-1: Product: syz [ 436.774756][ T5752] usb 6-1: Manufacturer: syz [ 436.845265][ T5752] hub 6-1:4.0: USB hub found [ 437.016150][ T5752] hub 6-1:4.0: 5 ports detected [ 437.023326][ T5752] hub 6-1:4.0: insufficient power available to use all downstream ports [ 437.218107][ T5752] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 437.257223][ T5752] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 437.315674][ T5752] usb 6-1: USB disconnect, device number 23 [ 437.832350][T11584] xt_hashlimit: size too large, truncated to 1048576 [ 438.390619][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.449699][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.628056][ T5752] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 438.733398][T11606] libceph: resolve '96' (ret=-3): failed [ 438.787268][ T5752] usb 6-1: device descriptor read/64, error -71 [ 439.044971][ T5752] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 439.125440][ T5691] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 439.194945][ T5752] usb 6-1: device descriptor read/64, error -71 [ 439.252472][T11613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1657'. [ 439.285301][T11613] team0: entered promiscuous mode [ 439.304463][T11613] team0: entered allmulticast mode [ 439.317332][ T5752] usb usb6-port1: attempt power cycle [ 439.326258][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.339125][T11613] team_slave_0: entered allmulticast mode [ 439.357208][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.371057][T11613] team_slave_1: entered allmulticast mode [ 439.380535][ T5691] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 439.394718][T11613] vxlan0: entered allmulticast mode [ 439.408242][T11613] batadv1: entered allmulticast mode [ 439.410897][ T5691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 439.438714][T11613] batadv2: entered allmulticast mode [ 439.456555][ T5691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 439.488834][ T5691] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.500164][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.522572][ T5691] usb 5-1: Product: syz [ 439.534221][ T5691] usb 5-1: Manufacturer: syz [ 439.548615][ T5691] usb 5-1: SerialNumber: syz [ 439.696040][ T5752] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 439.707426][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 439.734591][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 439.748226][ T5752] usb 6-1: device descriptor read/8, error -71 [ 439.756388][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 439.804219][ T5691] usb 5-1: 0:2 : does not exist [ 439.903094][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.916241][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.934211][ T5691] usb 5-1: USB disconnect, device number 71 [ 439.978817][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.005208][ T5752] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 440.051951][ T5752] usb 6-1: device descriptor read/8, error -71 [ 440.097696][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.105208][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.165273][ T5752] usb usb6-port1: unable to enumerate USB device [ 440.763483][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.774696][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.790175][T11649] FAULT_INJECTION: forcing a failure. [ 440.790175][T11649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.805090][T11649] CPU: 0 UID: 0 PID: 11649 Comm: syz.0.1669 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.805124][T11649] Tainted: [L]=SOFTLOCKUP [ 440.805132][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.805146][T11649] Call Trace: [ 440.805155][T11649] [ 440.805164][T11649] dump_stack_lvl+0xe8/0x150 [ 440.805195][T11649] should_fail_ex+0x412/0x560 [ 440.805228][T11649] prepare_alloc_pages+0x22a/0x650 [ 440.805277][T11649] __alloc_frozen_pages_noprof+0x12f/0x380 [ 440.805314][T11649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.805351][T11649] ? __pfx_policy_nodemask+0x10/0x10 [ 440.805383][T11649] ? __fget_files+0x3a0/0x420 [ 440.805416][T11649] alloc_pages_mpol+0x235/0x490 [ 440.805453][T11649] alloc_pages_noprof+0xac/0x2a0 [ 440.805488][T11649] get_free_pages_noprof+0xf/0x80 [ 440.805520][T11649] __se_sys_mincore+0xda/0x5d0 [ 440.805555][T11649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.805578][T11649] do_syscall_64+0x15f/0xf80 [ 440.805608][T11649] ? trace_irq_disable+0x3b/0x140 [ 440.805640][T11649] ? clear_bhb_loop+0x40/0x90 [ 440.805666][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.805686][T11649] RIP: 0033:0x7f068719cdd9 [ 440.805707][T11649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.805725][T11649] RSP: 002b:00007f0688007028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 440.805748][T11649] RAX: ffffffffffffffda RBX: 00007f0687415fa0 RCX: 00007f068719cdd9 [ 440.805764][T11649] RDX: 0000200000000080 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 440.805778][T11649] RBP: 00007f0688007090 R08: 0000000000000000 R09: 0000000000000000 [ 440.805792][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.805806][T11649] R13: 00007f0687416038 R14: 00007f0687415fa0 R15: 00007f068753fa48 [ 440.805839][T11649] [ 440.845488][ T5359] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 441.207018][ T5359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.217478][ T5359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.226954][ T5359] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.237532][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.260775][ T5359] usb 5-1: config 0 descriptor?? [ 441.275520][ T5359] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.282259][ T5359] dvb-usb: bulk message failed: -22 (3/0) [ 441.299499][ T5359] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.316609][ T5359] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.323768][ T5359] usb 5-1: media controller created [ 441.330655][ T5359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.354127][ T5359] dvb-usb: bulk message failed: -22 (6/0) [ 441.362019][ T5359] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 441.377917][ T5359] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 441.413633][ T5359] dvb-usb: schedule remote query interval to 150 msecs. [ 441.435471][ T5359] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 441.489933][ T5690] usb 5-1: USB disconnect, device number 72 [ 441.543453][ T5690] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 442.096221][T11670] program syz.4.1675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.347019][T11691] binder: 11690:11691 ioctl c0306201 0 returned -14 [ 443.592400][T11697] netlink: 'syz.4.1684': attribute type 13 has an invalid length. [ 443.724197][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 443.738082][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 443.749094][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 444.816347][T11734] fuse: Unknown parameter 'r' [ 444.827163][T11729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1692'. [ 445.135261][ T5690] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 445.307285][ T5690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.355006][ T5690] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 445.386911][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.428405][ T5690] usb 6-1: config 0 descriptor?? [ 445.865554][ T5690] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 446.106280][T11734] fuse: Bad value for 'group_id' [ 446.136472][T11734] fuse: Bad value for 'group_id' [ 446.522124][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 446.535959][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 446.568398][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 446.870586][T11753] binder: 11752:11753 ioctl c0306201 0 returned -14 [ 447.074657][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 447.125916][T11764] binder: 11761:11764 ioctl 80809440 200000001a80 returned -22 [ 447.252591][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 447.252614][ T30] audit: type=1326 audit(1778588022.061:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.315609][ T30] audit: type=1326 audit(1778588022.061:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.404957][ T30] audit: type=1326 audit(1778588022.061:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.452665][ T30] audit: type=1326 audit(1778588022.061:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.547723][ T30] audit: type=1326 audit(1778588022.061:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.601454][ T30] audit: type=1326 audit(1778588022.061:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.652609][ T30] audit: type=1326 audit(1778588022.061:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.746988][ T30] audit: type=1326 audit(1778588022.061:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.839613][ T30] audit: type=1326 audit(1778588022.061:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 447.868552][ T5359] usb 6-1: USB disconnect, device number 28 [ 447.938987][ T30] audit: type=1326 audit(1778588022.111:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x7ffc0000 [ 448.563445][T11793] loop4: detected capacity change from 0 to 8 [ 448.587131][T11793] Dev loop4: unable to read RDB block 8 [ 448.607976][T11793] loop4: unable to read partition table [ 448.637093][T11793] loop4: partition table beyond EOD, truncated [ 448.645792][T11796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1713'. [ 448.662469][T11793] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 448.685144][ T5752] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 448.743256][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 448.858601][T11794] hub 9-0:1.0: USB hub found [ 448.871142][T11794] hub 9-0:1.0: 1 port detected [ 448.878609][ T5752] usb 3-1: Using ep0 maxpacket: 8 [ 448.890447][ T5752] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 448.912261][ T5752] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 448.931458][ T5752] usb 3-1: Product: syz [ 448.938132][ T5752] usb 3-1: Manufacturer: syz [ 448.950494][ T5752] usb 3-1: SerialNumber: syz [ 448.955373][ T5691] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 448.971052][ T5752] usb 3-1: config 0 descriptor?? [ 449.008003][ T5752] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 449.145223][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 449.169168][ T5691] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 449.193286][ T5691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.215839][ T5691] usb 5-1: config 0 has no interface number 0 [ 449.236263][ T5691] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 449.246884][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.268328][ T5691] usb 5-1: Product: syz [ 449.282835][ T5691] usb 5-1: Manufacturer: syz [ 449.303855][ T5691] usb 5-1: SerialNumber: syz [ 449.331322][ T5691] usb 5-1: config 0 descriptor?? [ 449.369544][ T5691] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 449.379861][ T5691] uvcvideo 5-1:0.31: No valid video chain found. [ 449.634190][T11796] fuse: Bad value for 'fd' [ 449.715235][ T5752] gspca_zc3xx: reg_r err -110 [ 449.729503][ T5752] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 449.853053][T11817] binder: 11816:11817 ioctl c0306201 0 returned -14 [ 450.138344][T11821] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1720'. [ 450.214410][T11825] FAULT_INJECTION: forcing a failure. [ 450.214410][T11825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.228264][T11825] CPU: 1 UID: 0 PID: 11825 Comm: syz.5.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.228298][T11825] Tainted: [L]=SOFTLOCKUP [ 450.228307][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.228321][T11825] Call Trace: [ 450.228330][T11825] [ 450.228339][T11825] dump_stack_lvl+0xe8/0x150 [ 450.228371][T11825] should_fail_ex+0x412/0x560 [ 450.228405][T11825] _copy_to_user+0x31/0xb0 [ 450.228439][T11825] simple_read_from_buffer+0xe1/0x170 [ 450.228470][T11825] proc_fail_nth_read+0x1bb/0x230 [ 450.228501][T11825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.228532][T11825] ? rw_verify_area+0x2a6/0x4d0 [ 450.228561][T11825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.228590][T11825] vfs_read+0x20c/0xa70 [ 450.228625][T11825] ? __pfx___mutex_lock+0x10/0x10 [ 450.228657][T11825] ? __pfx_vfs_read+0x10/0x10 [ 450.228689][T11825] ? __fget_files+0x2a/0x420 [ 450.228719][T11825] ? __fget_files+0x3a0/0x420 [ 450.228743][T11825] ? __fget_files+0x2a/0x420 [ 450.228777][T11825] ksys_read+0x150/0x270 [ 450.228808][T11825] ? __pfx_ksys_read+0x10/0x10 [ 450.228847][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.228871][T11825] do_syscall_64+0x15f/0xf80 [ 450.228902][T11825] ? clear_bhb_loop+0x40/0x90 [ 450.228928][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.228950][T11825] RIP: 0033:0x7fa5b795d60e [ 450.228972][T11825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.228990][T11825] RSP: 002b:00007fa5b8782fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.229012][T11825] RAX: ffffffffffffffda RBX: 00007fa5b87836c0 RCX: 00007fa5b795d60e [ 450.229028][T11825] RDX: 000000000000000f RSI: 00007fa5b87830a0 RDI: 0000000000000004 [ 450.229041][T11825] RBP: 00007fa5b8783090 R08: 0000000000000000 R09: 0000000000000000 [ 450.229055][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.229072][T11825] R13: 00007fa5b7c16038 R14: 00007fa5b7c15fa0 R15: 00007fa5b7d3fa48 [ 450.229106][T11825] [ 450.479908][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.560229][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.413855][ T5691] usb 3-1: USB disconnect, device number 49 [ 451.589542][ T5725] usb 5-1: USB disconnect, device number 73 [ 452.000139][ T5636] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 452.086050][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1733'. [ 452.103667][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1733'. [ 452.120116][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 453.000166][T11905] loop4: detected capacity change from 0 to 8 [ 453.032196][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 453.032215][ T30] audit: type=1326 audit(1778588027.851:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.0.1740" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f068719cdd9 code=0x0 [ 453.061624][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1739'. [ 453.073473][T11905] Dev loop4: unable to read RDB block 8 [ 453.080156][T11905] loop4: unable to read partition table [ 453.092369][T11905] loop4: partition table beyond EOD, truncated [ 453.123398][T11905] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 453.211741][ T3256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.344966][ T5725] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 453.427140][ T3256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.507014][ T5725] usb 6-1: Using ep0 maxpacket: 8 [ 453.522073][ T5725] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 453.542612][ T5725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.567121][ T5725] usb 6-1: config 0 has no interface number 0 [ 453.591114][ T5725] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 453.629299][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.655632][ T5725] usb 6-1: Product: syz [ 453.660124][ T5725] usb 6-1: Manufacturer: syz [ 453.666741][ T5725] usb 6-1: SerialNumber: syz [ 453.689285][ T5725] usb 6-1: config 0 descriptor?? [ 453.721069][ T5725] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 453.731993][ T5725] uvcvideo 6-1:0.31: No valid video chain found. [ 453.800797][ T3256] team0: Port device netdevsim1 removed [ 453.869894][ T3256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.983555][T11908] fuse: Bad value for 'fd' [ 454.108265][T11925] Invalid logical block size (1540) [ 454.149734][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.163034][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.175215][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.188603][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.198103][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.213973][ T3256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.100553][ T5725] usb 6-1: USB disconnect, device number 29 [ 456.109442][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 456.200985][ T3256] tipc: Left network mode [ 456.255296][ T5636] Bluetooth: hci1: command tx timeout [ 456.382708][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.416482][ T5725] IPVS: starting estimator thread 0... [ 456.459151][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.586304][T11966] IPVS: using max 38 ests per chain, 91200 per kthread [ 456.726514][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 457.099979][T11980] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 457.549913][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 457.637853][T11928] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.652309][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.663616][T11928] bridge_slave_0: entered allmulticast mode [ 457.726656][T11994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.754581][T11928] bridge_slave_0: entered promiscuous mode [ 457.869154][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1756'. [ 457.937515][T11928] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.968129][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.989179][T11928] bridge_slave_1: entered allmulticast mode [ 458.078851][T11928] bridge_slave_1: entered promiscuous mode [ 458.316578][T12009] loop4: detected capacity change from 0 to 8 [ 458.335879][ T50] Bluetooth: hci1: command tx timeout [ 458.346900][T12009] Dev loop4: unable to read RDB block 8 [ 458.362499][T11928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.373248][T12010] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1759'. [ 458.391791][T12009] loop4: unable to read partition table [ 458.436452][T12009] loop4: partition table beyond EOD, truncated [ 458.474352][T12009] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 458.530137][T11928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.558823][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 458.695060][ T5690] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 458.724165][T11928] team0: Port device team_slave_0 added [ 458.755843][T11928] team0: Port device team_slave_1 added [ 458.855023][ T5690] usb 6-1: Using ep0 maxpacket: 8 [ 458.875762][ T5690] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 458.921526][ T5690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.939818][ T5690] usb 6-1: config 0 has no interface number 0 [ 458.952569][ T5690] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 458.963609][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.001537][ T5690] usb 6-1: Product: syz [ 459.014570][ T5690] usb 6-1: Manufacturer: syz [ 459.026622][ T5690] usb 6-1: SerialNumber: syz [ 459.071121][ T3256] hsr_slave_0: left promiscuous mode [ 459.074579][ T5690] usb 6-1: config 0 descriptor?? [ 459.101445][ T5690] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 459.111354][ T5690] uvcvideo 6-1:0.31: No valid video chain found. [ 459.118596][ T3256] hsr_slave_1: left promiscuous mode [ 459.137682][ T3256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.171541][ T3256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.231042][ T3256] team0 (unregistering): Port device batadv2 removed [ 459.278276][ T3256] team0 (unregistering): Port device batadv1 removed [ 459.359438][T12010] fuse: Bad value for 'fd' [ 459.891818][ T3256] team0 (unregistering): Port device team_slave_1 removed [ 459.958167][ T3256] team0 (unregistering): Port device team_slave_0 removed [ 460.415207][ T50] Bluetooth: hci1: command tx timeout [ 460.442311][T11928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.472930][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.540518][T11928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.590930][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 460.604961][T11928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.628019][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.695282][T11928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.033576][T11928] hsr_slave_0: entered promiscuous mode [ 461.063643][T11928] hsr_slave_1: entered promiscuous mode [ 461.096121][ T3256] IPVS: stop unused estimator thread 0... [ 461.332189][ T5359] usb 6-1: USB disconnect, device number 30 [ 461.567199][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1766'. [ 461.689997][T12045] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314142, 4, 0, 0, 0) [ 461.846193][ T30] audit: type=1326 audit(1778588036.661:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.3.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c39cdd9 code=0x0 [ 462.262481][T12060] kvm: pic: level sensitive irq not supported [ 462.262846][T12060] kvm: pic: non byte read [ 462.311736][T12060] kvm: pic: level sensitive irq not supported [ 462.311816][T12060] kvm: pic: non byte read [ 462.347342][T12060] kvm: pic: level sensitive irq not supported [ 462.348708][T12060] kvm: pic: non byte read [ 462.373737][T12060] kvm: pic: level sensitive irq not supported [ 462.373847][T12060] kvm: pic: non byte read [ 462.389298][T12060] kvm: pic: level sensitive irq not supported [ 462.389374][T12060] kvm: pic: non byte read [ 462.422701][T12060] kvm: pic: level sensitive irq not supported [ 462.422792][T12060] kvm: pic: non byte read [ 462.435519][T12060] kvm: pic: level sensitive irq not supported [ 462.435593][T12060] kvm: pic: non byte read [ 462.453128][T12060] kvm: pic: level sensitive irq not supported [ 462.453203][T12060] kvm: pic: non byte read [ 462.474191][T12060] kvm: pic: level sensitive irq not supported [ 462.474472][T12060] kvm: pic: non byte read [ 462.480122][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 462.495306][ T50] Bluetooth: hci1: command tx timeout [ 462.543078][T12060] kvm: pic: level sensitive irq not supported [ 462.543131][T12060] kvm: pic: non byte read [ 462.571481][T11928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.605961][T11928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.618387][T11928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.656305][T11928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.672085][T11928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.714452][T11928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.753512][T11928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.797016][T11928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.907440][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1770'. [ 462.936141][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1770'. [ 463.166541][ T5690] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 463.184674][T11928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.215637][T11928] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.240115][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.247361][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.292617][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.299853][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.335170][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 463.346497][ T5690] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 463.356704][ T5690] usb 3-1: config 179 has no interface number 0 [ 463.376227][ T5690] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 463.398485][ T5690] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 463.411551][ T5690] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 463.459508][ T5690] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 463.535907][ T5690] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 463.574641][T11928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.585631][ T5690] usb 3-1: config 179 interface 65 has no altsetting 0 [ 463.592636][ T5690] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 463.602510][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.693560][ T5690] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input40 [ 463.805833][ T4978] input input40: unable to receive magic message: -110 [ 463.828372][ T4978] input input40: unable to receive magic message: -32 [ 463.844563][T11928] veth0_vlan: entered promiscuous mode [ 463.881386][ T4978] input input40: unable to receive magic message: -32 [ 463.920743][T11928] veth1_vlan: entered promiscuous mode [ 463.929423][ T4978] input input40: unable to receive magic message: -32 [ 464.009258][ T4978] input input40: unable to receive magic message: -32 [ 464.090937][T11928] veth0_macvtap: entered promiscuous mode [ 464.125563][ T5690] usb 3-1: USB disconnect, device number 50 [ 464.125646][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 464.127726][T11928] veth1_macvtap: entered promiscuous mode [ 464.131905][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 464.188670][ T4978] input input40: unable to receive magic message: -19 [ 464.309177][T11928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.351607][T11928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.401446][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.433448][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.456574][ T3256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.493542][ T3256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.928584][ T8192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.961646][ T8192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.980803][T12105] loop4: detected capacity change from 0 to 8 [ 465.013845][T12105] Dev loop4: unable to read RDB block 8 [ 465.054785][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.073653][T12105] loop4: unable to read partition table [ 465.094008][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.103620][T12105] loop4: partition table beyond EOD, truncated [ 465.127884][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.163232][T12105] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 465.248727][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 465.262362][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.379756][T12108] fuse: Bad value for 'fd' [ 466.113845][T12124] xt_CT: No such helper "pptp" [ 466.370216][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 466.648559][ T30] audit: type=1326 audit(1778588041.471:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.2.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f083859cdd9 code=0x0 [ 467.006421][ T30] audit: type=1326 audit(1778588041.831:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.058798][ T30] audit: type=1326 audit(1778588041.861:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.097104][ T30] audit: type=1326 audit(1778588041.861:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.123967][ T30] audit: type=1326 audit(1778588041.861:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.151214][ T30] audit: type=1326 audit(1778588041.861:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b795d60e code=0x7ffc0000 [ 467.177307][ T30] audit: type=1326 audit(1778588041.861:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.203795][ T30] audit: type=1326 audit(1778588041.861:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.229912][ T30] audit: type=1326 audit(1778588041.861:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.257543][ T30] audit: type=1326 audit(1778588041.861:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.283165][ T30] audit: type=1326 audit(1778588041.861:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.5.1784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b799cdd9 code=0x7ffc0000 [ 467.310765][T12150] tipc: Started in network mode [ 467.322276][T12150] tipc: Node identity 963886f40e62, cluster identity 4711 [ 467.340057][T12150] tipc: Enabled bearer , priority 0 [ 467.346870][ T5752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 467.515527][ T5752] usb 7-1: Using ep0 maxpacket: 8 [ 467.529467][ T5752] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 467.555983][ T5752] usb 7-1: config 179 has no interface number 0 [ 467.575566][ T5752] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 467.600772][ T5752] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 467.638969][ T5752] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 467.663581][ T5752] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 467.690314][ T5752] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 467.720305][ T5752] usb 7-1: config 179 interface 65 has no altsetting 0 [ 467.744038][ T5752] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 467.774292][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.776610][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 467.869285][ T5752] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input41 [ 467.915142][ T4978] input input41: unable to receive magic message: -110 [ 467.940162][ T4978] input input41: unable to receive magic message: -32 [ 467.966584][ T4978] input input41: unable to receive magic message: -32 [ 467.983376][ T4978] input input41: unable to receive magic message: -32 [ 468.196149][T12145] tipc: Disabling bearer [ 468.202887][ T5796] input input41: unable to receive magic message: -32 [ 468.247936][ T4978] input input41: unable to receive magic message: -32 [ 468.273611][ T4978] input input41: unable to receive magic message: -32 [ 468.300263][ T5690] usb 7-1: USB disconnect, device number 2 [ 468.300277][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 468.984406][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1792'. [ 470.057034][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1796'. [ 470.855124][ T5722] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 471.026522][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 471.047173][ T5722] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 471.082288][ T5722] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 471.119289][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.148892][ T5722] usb 3-1: Product: syz [ 471.162921][ T5722] usb 3-1: Manufacturer: syz [ 471.182284][ T5722] usb 3-1: SerialNumber: syz [ 471.210282][ T5722] usb 3-1: config 0 descriptor?? [ 471.234617][ T5722] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 471.265017][ T5722] usb 3-1: setting power ON [ 471.288012][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 471.388115][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.429269][ T5722] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 471.439050][T12197] FAULT_INJECTION: forcing a failure. [ 471.439050][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.468012][ T5722] usb 3-1: media controller created [ 471.473409][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.2.1798 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.473441][T12197] Tainted: [L]=SOFTLOCKUP [ 471.473449][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.473461][T12197] Call Trace: [ 471.473471][T12197] [ 471.473480][T12197] dump_stack_lvl+0xe8/0x150 [ 471.473510][T12197] should_fail_ex+0x412/0x560 [ 471.473544][T12197] _copy_from_user+0x2d/0xb0 [ 471.473577][T12197] memdup_user+0x5e/0xd0 [ 471.473627][T12197] i2cdev_ioctl+0x656/0x880 [ 471.473731][T12197] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 471.473755][T12197] ? __fget_files+0x3a0/0x420 [ 471.473779][T12197] ? __fget_files+0x2a/0x420 [ 471.473808][T12197] ? bpf_lsm_file_ioctl+0x9/0x20 [ 471.473840][T12197] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 471.473860][T12197] __se_sys_ioctl+0xfc/0x170 [ 471.473892][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.473915][T12197] do_syscall_64+0x15f/0xf80 [ 471.473945][T12197] ? trace_irq_disable+0x3b/0x140 [ 471.473977][T12197] ? clear_bhb_loop+0x40/0x90 [ 471.474003][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.474025][T12197] RIP: 0033:0x7f083859cdd9 [ 471.474045][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.474063][T12197] RSP: 002b:00007f08394a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.474085][T12197] RAX: ffffffffffffffda RBX: 00007f0838815fa0 RCX: 00007f083859cdd9 [ 471.474101][T12197] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 471.474115][T12197] RBP: 00007f08394a1090 R08: 0000000000000000 R09: 0000000000000000 [ 471.474129][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.474141][T12197] R13: 00007f0838816038 R14: 00007f0838815fa0 R15: 00007f083893fa48 [ 471.474174][T12197] [ 471.675372][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.732020][ T5722] usb 3-1: selecting invalid altsetting 6 [ 471.737887][ T5722] usb 3-1: digital interface selection failed (-22) [ 471.746333][ T5722] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 471.813166][ T5722] usb 3-1: setting power OFF [ 471.820645][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 471.826717][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 471.836106][ T5722] (NULL device *): no alternate interface [ 471.893949][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 471.912807][ T5722] usb 3-1: USB disconnect, device number 51 [ 472.089342][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1800'. [ 472.393722][T12222] hub 9-0:1.0: USB hub found [ 472.470309][T12222] hub 9-0:1.0: 1 port detected [ 472.571372][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1806'. [ 472.580789][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1806'. [ 472.744624][T12237] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 472.789258][T12233] IPVS: stopping backup sync thread 12237 ... [ 473.739561][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'. [ 473.953213][T12260] hub 9-0:1.0: USB hub found [ 473.979535][T12260] hub 9-0:1.0: 1 port detected [ 474.559638][ T5752] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 474.735466][ T5752] usb 7-1: Using ep0 maxpacket: 32 [ 474.750502][ T5752] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.775818][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 474.787197][ T5752] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.809887][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 474.825492][ T5752] usb 7-1: config 0 interface 0 has no altsetting 0 [ 474.840111][ T5752] usb 7-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 474.877107][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.918564][ T5752] usb 7-1: config 0 descriptor?? [ 475.334571][ T5752] usbhid 7-1:0.0: can't add hid device: -71 [ 475.359266][ T5752] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 475.422672][ T5752] usb 7-1: USB disconnect, device number 3 [ 476.005196][ T50] Bluetooth: hci3: hardware error 0x02 [ 476.005240][ T5636] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 476.033428][T12296] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 476.058698][T12296] netlink: 'syz.2.1823': attribute type 39 has an invalid length. [ 476.118986][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.170391][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.979206][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 477.002084][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 477.115794][ T5722] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 477.297082][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 477.321723][ T5722] usb 3-1: config index 0 descriptor too short (expected 34834, got 121) [ 477.354111][ T5722] usb 3-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 477.410404][ T5722] usb 3-1: config 208 has 1 interface, different from the descriptor's value: 4 [ 477.458588][ T5722] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 477.491890][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.518452][ T5722] usb 3-1: Product: syz [ 477.522906][ T5722] usb 3-1: Manufacturer: syz [ 477.528094][ T5722] usb 3-1: SerialNumber: syz [ 477.595212][ T5690] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 477.777185][ T5722] usb 3-1: Fast Track Pro config OK [ 477.778207][ T5690] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 477.796355][ T5722] usb 3-1: cannot find UAC_HEADER [ 477.813674][ T5690] usb 6-1: can't read configurations, error -61 [ 477.933309][ T5722] snd-usb-audio 3-1:208.0: probe with driver snd-usb-audio failed with error -22 [ 477.962462][ T5722] usb 3-1: USB disconnect, device number 52 [ 477.965197][ T5690] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 478.033722][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:208.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.095941][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 478.137455][ T5690] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 478.155228][ T5690] usb 6-1: can't read configurations, error -61 [ 478.163924][ T5690] usb usb6-port1: attempt power cycle [ 478.516979][ T5690] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 478.584755][ T5690] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 478.625688][ T5690] usb 6-1: can't read configurations, error -61 [ 478.775310][ T5690] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 478.822099][ T5690] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 478.849530][ T5690] usb 6-1: can't read configurations, error -61 [ 478.872700][ T5690] usb usb6-port1: unable to enumerate USB device [ 478.904756][T12370] kAFS: unable to lookup cell 'ÿ' [ 478.935484][T12102] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 478.968819][T12370] kAFS: unable to lookup cell '(,c¾Ì' [ 479.118232][T12102] usb 3-1: Using ep0 maxpacket: 32 [ 479.150950][T12102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 479.172568][T12102] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 479.188808][T12102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 479.203139][T12102] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 479.228547][T12102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.236813][T12102] usb 3-1: Product: syz [ 479.241073][T12102] usb 3-1: Manufacturer: syz [ 479.245976][T12102] usb 3-1: SerialNumber: syz [ 479.254111][T12102] usb 3-1: config 0 descriptor?? [ 479.275007][T12102] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 479.848344][ T5722] usb 3-1: USB disconnect, device number 53 [ 479.848401][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 479.848436][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 480.380256][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 480.418293][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 481.072836][T12409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1845'. [ 481.519536][T12421] FAULT_INJECTION: forcing a failure. [ 481.519536][T12421] name failslab, interval 1, probability 0, space 0, times 0 [ 481.591829][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.6.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.591866][T12421] Tainted: [L]=SOFTLOCKUP [ 481.591875][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.591889][T12421] Call Trace: [ 481.591897][T12421] [ 481.591907][T12421] dump_stack_lvl+0xe8/0x150 [ 481.591936][T12421] should_fail_ex+0x412/0x560 [ 481.591967][T12421] should_failslab+0xa8/0x100 [ 481.592000][T12421] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 481.592032][T12421] ? kasprintf+0xe2/0x140 [ 481.592158][T12421] kvasprintf+0xeb/0x1a0 [ 481.592187][T12421] ? nf_tables_newset+0x1393/0x2580 [ 481.592253][T12421] ? nfnetlink_rcv+0x123e/0x27b0 [ 481.592306][T12421] ? netlink_unicast+0x75c/0x8e0 [ 481.592332][T12421] ? __pfx_kvasprintf+0x10/0x10 [ 481.592361][T12421] ? do_syscall_64+0x15f/0xf80 [ 481.592407][T12421] kasprintf+0xe2/0x140 [ 481.592443][T12421] ? __pfx_kasprintf+0x10/0x10 [ 481.592486][T12421] nf_tables_set_alloc_name+0x109/0x710 [ 481.592518][T12421] ? trace_kmalloc+0x2a/0xf0 [ 481.592550][T12421] ? __kmalloc_noprof+0x37d/0x760 [ 481.592588][T12421] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 481.592616][T12421] ? nla_strdup+0xb8/0x140 [ 481.592657][T12421] nf_tables_newset+0x13b4/0x2580 [ 481.592694][T12421] ? __pfx_nf_tables_newset+0x10/0x10 [ 481.592738][T12421] ? __nla_parse+0x40/0x60 [ 481.592774][T12421] nfnetlink_rcv+0x123e/0x27b0 [ 481.592838][T12421] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 481.592888][T12421] ? ref_tracker_free+0x693/0x840 [ 481.592949][T12421] ? __netlink_deliver_tap+0x807/0x850 [ 481.592987][T12421] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.593016][T12421] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.593050][T12421] netlink_unicast+0x75c/0x8e0 [ 481.593088][T12421] netlink_sendmsg+0x813/0xb40 [ 481.593128][T12421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.593160][T12421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.593191][T12421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.593225][T12421] ____sys_sendmsg+0x972/0x9f0 [ 481.593255][T12421] ? __might_fault+0xaf/0x130 [ 481.593288][T12421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.593327][T12421] ? import_iovec+0x73/0xa0 [ 481.593361][T12421] ___sys_sendmsg+0x2a5/0x360 [ 481.593389][T12421] ? __lock_acquire+0x6b5/0x2cf0 [ 481.593416][T12421] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.593483][T12421] ? __fget_files+0x2a/0x420 [ 481.593507][T12421] ? __fget_files+0x3a0/0x420 [ 481.593543][T12421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.593585][T12421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.593625][T12421] ? __pfx_ksys_write+0x10/0x10 [ 481.593664][T12421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.593688][T12421] do_syscall_64+0x15f/0xf80 [ 481.593715][T12421] ? trace_irq_disable+0x3b/0x140 [ 481.593747][T12421] ? clear_bhb_loop+0x40/0x90 [ 481.593774][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.593795][T12421] RIP: 0033:0x7f3bee39cdd9 [ 481.593816][T12421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.593835][T12421] RSP: 002b:00007f3bef305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.593858][T12421] RAX: ffffffffffffffda RBX: 00007f3bee615fa0 RCX: 00007f3bee39cdd9 [ 481.593874][T12421] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 481.593888][T12421] RBP: 00007f3bef305090 R08: 0000000000000000 R09: 0000000000000000 [ 481.593902][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.593914][T12421] R13: 00007f3bee616038 R14: 00007f3bee615fa0 R15: 00007f3bee73fa48 [ 481.593949][T12421] [ 482.248158][T12435] tipc: Started in network mode [ 482.312334][T12435] tipc: Node identity -, cluster identity 4711 [ 482.339627][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 482.575432][ T56] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.594936][ T5690] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 482.606862][ T56] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.641952][ T56] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.669115][ T56] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.731041][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 482.741246][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 482.770470][ T5690] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 482.779033][ T5690] usb 6-1: config 0 has no interface number 0 [ 482.795965][ T5690] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.818834][T12457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.836894][ T5690] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 482.846740][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.854913][ T5690] usb 6-1: Product: syz [ 482.877304][ T5690] usb 6-1: Manufacturer: syz [ 482.911798][ T5690] usb 6-1: SerialNumber: syz [ 482.938717][T12460] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 482.965984][ T5690] usb 6-1: config 0 descriptor?? [ 483.007497][ T5690] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 483.037569][T12457] loop9: detected capacity change from 0 to 524287936 [ 483.222559][T12437] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 483.312904][ T5690] usb 6-1: USB disconnect, device number 35 [ 483.353238][T12466] misc userio: No port type given on /dev/userio [ 483.370696][ T5690] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 484.942199][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1868'. [ 484.996957][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1868'. [ 485.447199][T12518] FAULT_INJECTION: forcing a failure. [ 485.447199][T12518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.472253][T12518] CPU: 1 UID: 0 PID: 12518 Comm: syz.2.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.472290][T12518] Tainted: [L]=SOFTLOCKUP [ 485.472299][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.472312][T12518] Call Trace: [ 485.472321][T12518] [ 485.472330][T12518] dump_stack_lvl+0xe8/0x150 [ 485.472362][T12518] should_fail_ex+0x412/0x560 [ 485.472395][T12518] _copy_to_user+0x31/0xb0 [ 485.472429][T12518] simple_read_from_buffer+0xe1/0x170 [ 485.472460][T12518] proc_fail_nth_read+0x1bb/0x230 [ 485.472492][T12518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.472524][T12518] ? rw_verify_area+0x2a6/0x4d0 [ 485.472552][T12518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.472581][T12518] vfs_read+0x20c/0xa70 [ 485.472616][T12518] ? __pfx___mutex_lock+0x10/0x10 [ 485.472650][T12518] ? __pfx_vfs_read+0x10/0x10 [ 485.472681][T12518] ? __fget_files+0x2a/0x420 [ 485.472720][T12518] ? __fget_files+0x3a0/0x420 [ 485.472744][T12518] ? __fget_files+0x2a/0x420 [ 485.472779][T12518] ksys_read+0x150/0x270 [ 485.472812][T12518] ? __pfx_ksys_read+0x10/0x10 [ 485.472840][T12518] ? __pfx_uinput_ioctl+0x10/0x10 [ 485.472970][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.472995][T12518] do_syscall_64+0x15f/0xf80 [ 485.473024][T12518] ? trace_irq_disable+0x3b/0x140 [ 485.473056][T12518] ? clear_bhb_loop+0x40/0x90 [ 485.473083][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.473105][T12518] RIP: 0033:0x7f083855d60e [ 485.473124][T12518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.473143][T12518] RSP: 002b:00007f08394a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.473166][T12518] RAX: ffffffffffffffda RBX: 00007f08394a16c0 RCX: 00007f083855d60e [ 485.473181][T12518] RDX: 000000000000000f RSI: 00007f08394a10a0 RDI: 0000000000000004 [ 485.473194][T12518] RBP: 00007f08394a1090 R08: 0000000000000000 R09: 0000000000000000 [ 485.473207][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.473220][T12518] R13: 00007f0838816038 R14: 00007f0838815fa0 R15: 00007f083893fa48 [ 485.473255][T12518] [ 485.797265][T12520] binder: 12516:12520 ioctl c0306201 200000000480 returned -14 [ 486.061968][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1874'. [ 486.264784][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1875'. [ 486.319058][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1875'. [ 486.346711][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1875'. [ 486.450078][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 486.542487][T12537] syzkaller0: entered promiscuous mode [ 486.559546][T12537] syzkaller0: entered allmulticast mode [ 486.569458][T12526] hub 9-0:1.0: USB hub found [ 486.576156][T12526] hub 9-0:1.0: 1 port detected [ 491.909656][ T9] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 492.110458][ T9] usb 4-1: USB disconnect, device number 52 [ 494.949161][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 495.850558][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 497.497614][T12571] [ 497.500011][T12571] ===================================================== [ 497.507047][T12571] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 497.514669][T12571] syzkaller #0 Tainted: G L [ 497.520683][T12571] ----------------------------------------------------- [ 497.527690][T12571] syz.6.1885/12571 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 497.535500][T12571] ffff88807f703210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 497.544329][T12571] [ 497.544329][T12571] and this task is already holding: [ 497.551726][T12571] ffff88805f0bc028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 497.561733][T12571] which would create a new lock dependency: [ 497.567648][T12571] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 497.575878][T12571] [ 497.575878][T12571] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 497.585374][T12571] (&client->buffer_lock){..-.}-{3:3} [ 497.585413][T12571] [ 497.585413][T12571] ... which became SOFTIRQ-irq-safe at: [ 497.598548][T12571] lock_acquire+0x106/0x350 [ 497.603178][T12571] _raw_spin_lock+0x2e/0x40 [ 497.607806][T12571] evdev_pass_values+0xb9/0xbd0 [ 497.612787][T12571] evdev_events+0x1e6/0x340 [ 497.617419][T12571] input_pass_values+0x288/0x890 [ 497.622560][T12571] input_event_dispose+0x330/0x6b0 [ 497.627796][T12571] input_event+0x84/0xc0 [ 497.632167][T12571] xpad360_process_packet+0x641/0xdc0 [ 497.637730][T12571] xpad_irq_in+0x14e/0x25c0 [ 497.642376][T12571] __usb_hcd_giveback_urb+0x376/0x540 [ 497.647964][T12571] dummy_timer+0xbc0/0x4650 [ 497.652865][T12571] __hrtimer_run_queues+0x3c0/0xa20 [ 497.658213][T12571] hrtimer_run_softirq+0x17a/0x240 [ 497.663449][T12571] handle_softirqs+0x22a/0x840 [ 497.668382][T12571] __irq_exit_rcu+0xca/0x220 [ 497.673098][T12571] irq_exit_rcu+0x9/0x30 [ 497.677468][T12571] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 497.683231][T12571] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.689335][T12571] __sanitizer_cov_trace_pc+0x8/0x70 [ 497.694775][T12571] page_ext_lookup+0x127/0x180 [ 497.699685][T12571] page_table_check_clear+0x212/0x4f0 [ 497.705188][T12571] __zap_vma_range+0x3641/0x4b40 [ 497.710258][T12571] unmap_vmas+0x379/0x530 [ 497.714713][T12571] exit_mmap+0x280/0x9e0 [ 497.719129][T12571] __mmput+0x118/0x430 [ 497.723319][T12571] exit_mm+0x18e/0x250 [ 497.727511][T12571] do_exit+0x6a2/0x22c0 [ 497.731794][T12571] do_group_exit+0x21b/0x2d0 [ 497.736506][T12571] get_signal+0x1284/0x1330 [ 497.741129][T12571] arch_do_signal_or_restart+0xbc/0x840 [ 497.746838][T12571] exit_to_user_mode_loop+0x8c/0x4d0 [ 497.752243][T12571] do_syscall_64+0x33e/0xf80 [ 497.756958][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.762976][T12571] [ 497.762976][T12571] to a SOFTIRQ-irq-unsafe lock: [ 497.770102][T12571] (tasklist_lock){.+.+}-{3:3} [ 497.770140][T12571] [ 497.770140][T12571] ... which became SOFTIRQ-irq-unsafe at: [ 497.782813][T12571] ... [ 497.782887][T12571] lock_acquire+0x106/0x350 [ 497.790286][T12571] _raw_read_lock+0x36/0x50 [ 497.794914][T12571] __do_wait+0xde/0x740 [ 497.799202][T12571] do_wait+0x1e7/0x510 [ 497.803397][T12571] kernel_wait+0xd6/0x1c0 [ 497.807853][T12571] call_usermodehelper_exec_work+0xbe/0x230 [ 497.813897][T12571] process_scheduled_works+0xb5d/0x1860 [ 497.819565][T12571] worker_thread+0xa53/0xfc0 [ 497.824277][T12571] kthread+0x388/0x470 [ 497.828516][T12571] ret_from_fork+0x514/0xb70 [ 497.833231][T12571] ret_from_fork_asm+0x1a/0x30 [ 497.838114][T12571] [ 497.838114][T12571] other info that might help us debug this: [ 497.838114][T12571] [ 497.848368][T12571] Chain exists of: [ 497.848368][T12571] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 497.848368][T12571] [ 497.861615][T12571] Possible interrupt unsafe locking scenario: [ 497.861615][T12571] [ 497.870017][T12571] CPU0 CPU1 [ 497.875556][T12571] ---- ---- [ 497.880972][T12571] lock(tasklist_lock); [ 497.885254][T12571] local_irq_disable(); [ 497.892035][T12571] lock(&client->buffer_lock); [ 497.899602][T12571] lock(&new->fa_lock); [ 497.906410][T12571] [ 497.909913][T12571] lock(&client->buffer_lock); [ 497.915031][T12571] [ 497.915031][T12571] *** DEADLOCK *** [ 497.915031][T12571] [ 497.923221][T12571] 7 locks held by syz.6.1885/12571: [ 497.928445][T12571] #0: ffff88802bced110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 497.937762][T12571] #1: ffff88802035a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 497.947925][T12571] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 497.957656][T12571] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 497.967295][T12571] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 497.976498][T12571] #5: ffff88805f0bc028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 497.986763][T12571] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 497.995883][T12571] [ 497.995883][T12571] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 498.006415][T12571] -> (&client->buffer_lock){..-.}-{3:3} { [ 498.012204][T12571] IN-SOFTIRQ-W at: [ 498.016315][T12571] lock_acquire+0x106/0x350 [ 498.022513][T12571] _raw_spin_lock+0x2e/0x40 [ 498.028727][T12571] evdev_pass_values+0xb9/0xbd0 [ 498.035281][T12571] evdev_events+0x1e6/0x340 [ 498.041483][T12571] input_pass_values+0x288/0x890 [ 498.048121][T12571] input_event_dispose+0x330/0x6b0 [ 498.054933][T12571] input_event+0x84/0xc0 [ 498.060864][T12571] xpad360_process_packet+0x641/0xdc0 [ 498.068017][T12571] xpad_irq_in+0x14e/0x25c0 [ 498.074213][T12571] __usb_hcd_giveback_urb+0x376/0x540 [ 498.081880][T12571] dummy_timer+0xbc0/0x4650 [ 498.088083][T12571] __hrtimer_run_queues+0x3c0/0xa20 [ 498.094986][T12571] hrtimer_run_softirq+0x17a/0x240 [ 498.101789][T12571] handle_softirqs+0x22a/0x840 [ 498.108234][T12571] __irq_exit_rcu+0xca/0x220 [ 498.114511][T12571] irq_exit_rcu+0x9/0x30 [ 498.120435][T12571] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 498.127748][T12571] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.135447][T12571] __sanitizer_cov_trace_pc+0x8/0x70 [ 498.142420][T12571] page_ext_lookup+0x127/0x180 [ 498.148871][T12571] page_table_check_clear+0x212/0x4f0 [ 498.155936][T12571] __zap_vma_range+0x3641/0x4b40 [ 498.162573][T12571] unmap_vmas+0x379/0x530 [ 498.168588][T12571] exit_mmap+0x280/0x9e0 [ 498.174527][T12571] __mmput+0x118/0x430 [ 498.180282][T12571] exit_mm+0x18e/0x250 [ 498.186040][T12571] do_exit+0x6a2/0x22c0 [ 498.191895][T12571] do_group_exit+0x21b/0x2d0 [ 498.198172][T12571] get_signal+0x1284/0x1330 [ 498.204354][T12571] arch_do_signal_or_restart+0xbc/0x840 [ 498.211579][T12571] exit_to_user_mode_loop+0x8c/0x4d0 [ 498.218723][T12571] do_syscall_64+0x33e/0xf80 [ 498.225194][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.232767][T12571] INITIAL USE at: [ 498.236715][T12571] lock_acquire+0x106/0x350 [ 498.242813][T12571] _raw_spin_lock+0x2e/0x40 [ 498.248916][T12571] evdev_handle_get_val+0x70/0x9f0 [ 498.255628][T12571] evdev_ioctl_handler+0x127b/0x1fe0 [ 498.262513][T12571] __se_sys_ioctl+0xfc/0x170 [ 498.268722][T12571] do_syscall_64+0x15f/0xf80 [ 498.275017][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.282512][T12571] } [ 498.285050][T12571] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 498.293577][T12571] [ 498.293577][T12571] the dependencies between the lock to be acquired [ 498.293593][T12571] and SOFTIRQ-irq-unsafe lock: [ 498.307153][T12571] -> (tasklist_lock){.+.+}-{3:3} { [ 498.312498][T12571] HARDIRQ-ON-R at: [ 498.316701][T12571] lock_acquire+0x106/0x350 [ 498.323248][T12571] _raw_read_lock+0x36/0x50 [ 498.329782][T12571] __do_wait+0xde/0x740 [ 498.335978][T12571] do_wait+0x1e7/0x510 [ 498.342167][T12571] kernel_wait+0xd6/0x1c0 [ 498.348533][T12571] call_usermodehelper_exec_work+0xbe/0x230 [ 498.356475][T12571] process_scheduled_works+0xb5d/0x1860 [ 498.364063][T12571] worker_thread+0xa53/0xfc0 [ 498.370690][T12571] kthread+0x388/0x470 [ 498.376815][T12571] ret_from_fork+0x514/0xb70 [ 498.383438][T12571] ret_from_fork_asm+0x1a/0x30 [ 498.390252][T12571] SOFTIRQ-ON-R at: [ 498.394441][T12571] lock_acquire+0x106/0x350 [ 498.400983][T12571] _raw_read_lock+0x36/0x50 [ 498.407526][T12571] __do_wait+0xde/0x740 [ 498.413724][T12571] do_wait+0x1e7/0x510 [ 498.419834][T12571] kernel_wait+0xd6/0x1c0 [ 498.426291][T12571] call_usermodehelper_exec_work+0xbe/0x230 [ 498.434215][T12571] process_scheduled_works+0xb5d/0x1860 [ 498.441842][T12571] worker_thread+0xa53/0xfc0 [ 498.448472][T12571] kthread+0x388/0x470 [ 498.454661][T12571] ret_from_fork+0x514/0xb70 [ 498.461287][T12571] ret_from_fork_asm+0x1a/0x30 [ 498.468096][T12571] INITIAL USE at: [ 498.472201][T12571] lock_acquire+0x106/0x350 [ 498.478670][T12571] _raw_write_lock_irq+0x3d/0x50 [ 498.485551][T12571] copy_process+0x2b4c/0x4440 [ 498.492174][T12571] kernel_clone+0x284/0x8f0 [ 498.498713][T12571] user_mode_thread+0x110/0x180 [ 498.505509][T12571] rest_init+0x23/0x300 [ 498.511621][T12571] start_kernel+0x38a/0x3e0 [ 498.518179][T12571] x86_64_start_reservations+0x24/0x30 [ 498.525640][T12571] x86_64_start_kernel+0x143/0x1c0 [ 498.532702][T12571] common_startup_64+0x13e/0x147 [ 498.539598][T12571] INITIAL READ USE at: [ 498.544135][T12571] lock_acquire+0x106/0x350 [ 498.551018][T12571] _raw_read_lock+0x36/0x50 [ 498.557904][T12571] __do_wait+0xde/0x740 [ 498.564528][T12571] do_wait+0x1e7/0x510 [ 498.570972][T12571] kernel_wait+0xd6/0x1c0 [ 498.577687][T12571] call_usermodehelper_exec_work+0xbe/0x230 [ 498.585962][T12571] process_scheduled_works+0xb5d/0x1860 [ 498.593892][T12571] worker_thread+0xa53/0xfc0 [ 498.600869][T12571] kthread+0x388/0x470 [ 498.607314][T12571] ret_from_fork+0x514/0xb70 [ 498.614285][T12571] ret_from_fork_asm+0x1a/0x30 [ 498.621437][T12571] } [ 498.624231][T12571] ... key at: [] tasklist_lock+0x18/0x40 [ 498.632286][T12571] ... acquired at: [ 498.636286][T12571] _raw_read_lock+0x36/0x50 [ 498.641015][T12571] send_sigio+0x101/0x370 [ 498.645557][T12571] kill_fasync+0x24d/0x4d0 [ 498.650184][T12571] lease_break_callback+0x26/0x30 [ 498.655462][T12571] __break_lease+0x81f/0x1ea0 [ 498.660356][T12571] vfs_truncate+0x449/0x540 [ 498.665070][T12571] ksys_truncate+0xf3/0x1c0 [ 498.669783][T12571] __x64_sys_truncate+0x5b/0x70 [ 498.674848][T12571] do_syscall_64+0x15f/0xf80 [ 498.679646][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.685732][T12571] [ 498.688078][T12571] -> (&f_owner->lock){....}-{3:3} { [ 498.693417][T12571] INITIAL USE at: [ 498.697437][T12571] lock_acquire+0x106/0x350 [ 498.703721][T12571] _raw_write_lock_irq+0x3d/0x50 [ 498.710433][T12571] __f_setown+0x67/0x370 [ 498.716467][T12571] tty_fasync+0x2db/0x350 [ 498.722764][T12571] do_vfs_ioctl+0x1117/0x1530 [ 498.729210][T12571] __se_sys_ioctl+0x82/0x170 [ 498.735732][T12571] do_syscall_64+0x15f/0xf80 [ 498.742115][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.749786][T12571] INITIAL READ USE at: [ 498.754245][T12571] lock_acquire+0x106/0x350 [ 498.760965][T12571] _raw_read_lock_irqsave+0x48/0x60 [ 498.768375][T12571] send_sigio+0x38/0x370 [ 498.774835][T12571] dnotify_handle_event+0x169/0x440 [ 498.782241][T12571] fsnotify+0x1831/0x1ae0 [ 498.788784][T12571] path_openat+0x15c2/0x3860 [ 498.795590][T12571] do_file_open+0x23e/0x4a0 [ 498.802305][T12571] do_sys_openat2+0x113/0x200 [ 498.809189][T12571] __x64_sys_openat+0x138/0x170 [ 498.816252][T12571] do_syscall_64+0x15f/0xf80 [ 498.823061][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.831166][T12571] } [ 498.833866][T12571] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 498.842978][T12571] ... acquired at: [ 498.846900][T12571] _raw_read_lock_irqsave+0x48/0x60 [ 498.852335][T12571] send_sigio+0x38/0x370 [ 498.856799][T12571] kill_fasync+0x24d/0x4d0 [ 498.861430][T12571] lease_break_callback+0x26/0x30 [ 498.866672][T12571] __break_lease+0x81f/0x1ea0 [ 498.871560][T12571] do_dentry_open+0x1010/0x14e0 [ 498.876645][T12571] vfs_open+0x3b/0x340 [ 498.880919][T12571] path_openat+0x2e08/0x3860 [ 498.885719][T12571] do_file_open+0x23e/0x4a0 [ 498.890483][T12571] do_sys_openat2+0x113/0x200 [ 498.895379][T12571] __x64_sys_open+0x11e/0x150 [ 498.900265][T12571] do_syscall_64+0x15f/0xf80 [ 498.905071][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.911172][T12571] [ 498.913519][T12571] -> (&new->fa_lock){....}-{3:3} { [ 498.918691][T12571] INITIAL USE at: [ 498.922616][T12571] lock_acquire+0x106/0x350 [ 498.928808][T12571] _raw_write_lock_irq+0x3d/0x50 [ 498.935353][T12571] fasync_remove_entry+0xf1/0x1c0 [ 498.942073][T12571] tty_fasync+0x13c/0x350 [ 498.948008][T12571] __fput+0x890/0xa60 [ 498.953605][T12571] task_work_run+0x1d9/0x270 [ 498.959811][T12571] exit_to_user_mode_loop+0xf3/0x4d0 [ 498.966703][T12571] do_syscall_64+0x33e/0xf80 [ 498.972905][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.980408][T12571] INITIAL READ USE at: [ 498.984769][T12571] lock_acquire+0x106/0x350 [ 498.991304][T12571] _raw_read_lock_irqsave+0x48/0x60 [ 498.998634][T12571] kill_fasync+0x199/0x4d0 [ 499.005180][T12571] lease_break_callback+0x26/0x30 [ 499.012249][T12571] __break_lease+0x81f/0x1ea0 [ 499.019061][T12571] do_dentry_open+0x1010/0x14e0 [ 499.026038][T12571] vfs_open+0x3b/0x340 [ 499.032138][T12571] path_openat+0x2e08/0x3860 [ 499.038858][T12571] do_file_open+0x23e/0x4a0 [ 499.045415][T12571] do_sys_openat2+0x113/0x200 [ 499.052135][T12571] __x64_sys_open+0x11e/0x150 [ 499.058848][T12571] do_syscall_64+0x15f/0xf80 [ 499.065486][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.073502][T12571] } [ 499.076632][T12571] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 499.085350][T12571] ... acquired at: [ 499.089184][T12571] _raw_read_lock_irqsave+0x48/0x60 [ 499.094614][T12571] kill_fasync+0x199/0x4d0 [ 499.099257][T12571] evdev_pass_values+0x627/0xbd0 [ 499.104432][T12571] evdev_events+0x1e6/0x340 [ 499.109168][T12571] input_pass_values+0x288/0x890 [ 499.114336][T12571] input_event_dispose+0x330/0x6b0 [ 499.119661][T12571] input_inject_event+0x1dc/0x330 [ 499.124895][T12571] evdev_write+0x325/0x4c0 [ 499.129549][T12571] vfs_write+0x29a/0xb90 [ 499.134007][T12571] ksys_write+0x150/0x270 [ 499.138557][T12571] do_syscall_64+0x15f/0xf80 [ 499.143358][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.149491][T12571] [ 499.151847][T12571] [ 499.151847][T12571] stack backtrace: [ 499.157762][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.6.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.157793][T12571] Tainted: [L]=SOFTLOCKUP [ 499.157802][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.157816][T12571] Call Trace: [ 499.157825][T12571] [ 499.157834][T12571] dump_stack_lvl+0xe8/0x150 [ 499.157863][T12571] __lock_acquire+0x2a94/0x2cf0 [ 499.157899][T12571] ? kill_fasync+0x199/0x4d0 [ 499.157929][T12571] lock_acquire+0x106/0x350 [ 499.157950][T12571] ? kill_fasync+0x199/0x4d0 [ 499.157981][T12571] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.158021][T12571] _raw_read_lock_irqsave+0x48/0x60 [ 499.158050][T12571] ? kill_fasync+0x199/0x4d0 [ 499.158079][T12571] kill_fasync+0x199/0x4d0 [ 499.158109][T12571] ? kill_fasync+0x53/0x4d0 [ 499.158139][T12571] evdev_pass_values+0x627/0xbd0 [ 499.158175][T12571] ? evdev_pass_values+0x611/0xbd0 [ 499.158211][T12571] evdev_events+0x1e6/0x340 [ 499.158241][T12571] ? evdev_events+0x79/0x340 [ 499.158272][T12571] ? input_pass_values+0x8d/0x890 [ 499.158299][T12571] input_pass_values+0x288/0x890 [ 499.158330][T12571] ? input_handle_event+0x70c/0xf30 [ 499.158356][T12571] input_event_dispose+0x330/0x6b0 [ 499.158382][T12571] input_inject_event+0x1dc/0x330 [ 499.158407][T12571] ? input_inject_event+0xb5/0x330 [ 499.158431][T12571] evdev_write+0x325/0x4c0 [ 499.158449][T12571] ? __lock_acquire+0x6b5/0x2cf0 [ 499.158474][T12571] ? __pfx_evdev_write+0x10/0x10 [ 499.158493][T12571] ? bpf_lsm_file_permission+0x9/0x20 [ 499.158525][T12571] ? security_file_permission+0x75/0x260 [ 499.158550][T12571] ? rw_verify_area+0x255/0x4d0 [ 499.158579][T12571] ? __pfx_evdev_write+0x10/0x10 [ 499.158598][T12571] vfs_write+0x29a/0xb90 [ 499.158630][T12571] ? __pfx_vfs_write+0x10/0x10 [ 499.158656][T12571] ? __fget_files+0x2a/0x420 [ 499.158677][T12571] ? __fget_files+0x2a/0x420 [ 499.158696][T12571] ? __fget_files+0x3a0/0x420 [ 499.158715][T12571] ? __fget_files+0x2a/0x420 [ 499.158738][T12571] ksys_write+0x150/0x270 [ 499.158762][T12571] ? __pfx_ksys_write+0x10/0x10 [ 499.158789][T12571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.158807][T12571] do_syscall_64+0x15f/0xf80 [ 499.158831][T12571] ? trace_irq_disable+0x3b/0x140 [ 499.158858][T12571] ? clear_bhb_loop+0x40/0x90 [ 499.158878][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.158894][T12571] RIP: 0033:0x7f3bee39cdd9 [ 499.158911][T12571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.158926][T12571] RSP: 002b:00007f3bef305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.158945][T12571] RAX: ffffffffffffffda RBX: 00007f3bee615fa0 RCX: 00007f3bee39cdd9 [ 499.158958][T12571] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000007 [ 499.158969][T12571] RBP: 00007f3bee432d69 R08: 0000000000000000 R09: 0000000000000000 [ 499.158980][T12571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.158990][T12571] R13: 00007f3bee616038 R14: 00007f3bee615fa0 R15: 00007f3bee73fa48 [ 499.159018][T12571]