last executing test programs: 5m31.179653101s ago: executing program 1 (id=1163): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000040000021907800000000ffffffff050090780a1101024a0000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) memfd_create(0x0, 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5m30.11843004s ago: executing program 1 (id=1166): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f000000a000)=@get={0x1, &(0x7f0000009000)=""/4096, 0x8}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = eventfd(0x8000) r6 = eventfd2(0x8001, 0x80800) io_submit(r4, 0x6, &(0x7f0000000640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="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", 0xfd, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000280)="f06e2c9560ba29033619767327f3466dabe4ba48744e3603595b5b776556bca9b9b63bc13818c1abc0d0670490868eab1f02066b7b6db6d6d6ee6bcc0ae1960bc6fe2d44eb2ae91c574df033cef99f88cf4c0fab366911c3fd", 0x59, 0x100000001}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f00000003c0)="37dbf4c0e13c1fffbb8e3a55f1d36b92748761be7faaf05fc8751a68c402e0e9898431936374131f0f225064c69abd0d1e435d5bd8c5045d7c66d74df8d03058281ef172312f5113ccbeefe902311a48ce45617f623d23bb0aadbb05b146efc9505c54c5406f1146e65e09fd37b11b44593f5c0032b186e35a2ba035abc19361c438ba72ac0377b482dd82cdcade40e7542bb62d0a89796e15418ce6c429647699e1f1987fe6bfa206e62c888c7573f4351ade7d29ade428a654", 0xba, 0x80, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000500)="7ca7e75da3fdab65d9fb900dacd19f3941e397c4dc3d07f9191f1a1c0a3e6ebc60f249e4f4fd789ad6ccabd15d52c28c573cdcd5d3f2b17da60208e5e6445ab80f49c6aff5062807676284d9f823ec2df1457256e5a85661cc90052ae5e58b63c2d8165cb49eb68b5ca0045dbf7939d1008de3ce6cacf005d9bb003ad13d03927bc69e18f0b9b34e27041a8228185ae8abd628ad4bc7822194f9072902b2cc2cd1", 0xa1, 0x1, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc7a3, r0, &(0x7f0000000340)="3019de7f9ea6511b96f46754091d246e9351aad45b85e8346fa653bcd6", 0x1d, 0x1, 0x0, 0x0, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000005c0)="cf5ca6aa1d761970d2591f693bf1661a148877e7f02038b56c50d6c8d3d245ff", 0x20, 0x1, 0x0, 0x1, r6}]) 5m30.02559871s ago: executing program 1 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (fail_nth: 9) 5m29.934004438s ago: executing program 1 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) (async) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r4, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000212000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x5, 0x2) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0\x00') 5m29.837999117s ago: executing program 1 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4, 0x7f, 0x2}, {0xfffffffffffffffe, 0x80000800, 0x9141, 0xa, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffdf81}, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in=@empty, 0x4, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x3507, 0x0, 0x0, 0x4, 0x2, 0x10000000, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x3, 0x2e1c, {{0x23, 0x4, 0x2, 0x2, 0x8c, 0x67, 0x0, 0x49, 0x2f, 0x0, @empty, @empty, {[@generic={0x7, 0xc, "56cf6f9473c8a602f4a1"}, @end, @lsrr={0x83, 0x1f, 0x18, [@rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0xb2, 0x1, 0xd, [{@multicast2, 0xe}, {@broadcast, 0x5}, {@loopback, 0x8}, {@empty, 0x8}, {@broadcast, 0x549d8e72}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xaeb}, {@rand_addr=0x64010100, 0x10000}, {@multicast1, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x9, 0x0, 0x10, @mcast1, @local, 0x0, 0x8000, 0xffffff63, 0x7}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x401, "bc21a2ac872e6026bc787711b1bf9f56"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000680)={@empty, 0x0}, &(0x7f00000006c0)=0x14) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x2a}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xffe, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0xfffffffffffffe14}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="60020000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf25150000004800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f000000000000000000000000000008000100", @ANYRESOCT, @ANYRES8=r12, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="502159ea990d8a84d734c35e74acb40c833cbbdc7fa676c49ce4ffc9f710668284090d692f879e0657d7d80b3e7deedc06b9c00cc93538d71f24313dc6675a3130600db70c3a50a06136a995ab51a10b20c6668574a1a8060e959a6cc863abd3f86c4781be9e0310b85d82e98bdfa211750b191f1ee6165bc7da72aecb236a8d21eaf1bb84124c0b720a1006fe08c504ac7b2a9b80ad28f484699777e99c231c522f69727a1fcf468ce505ffb3453bec41d0945ce2c2a70580a56350c7497588706a33ec39aa3f00c50d0663282f7eb559c9", @ANYRES64=r5, @ANYRES32=r4, @ANYBLOB="3c000180080003070000000003000000000000000014000200697036677265300000000000040000182000018014000200766c616e30000000000000000000000008000300010000006000017b14010200000108000300010000000800010054d19ee6eb1a57cbecd4fa843f3f22f7cf5446b20800876a0ffddd8abee6154368ee6864cdffd347aedc3f3bb76e931ab1520371ef6ce2f673fbb19a69765fdc1ad8b69d735c6c4a2339ea44b911007d2a3ff0a32e3e143fe59a74af28dff26da2657bf10d2ed44af4128b92661688825dac", @ANYRES32=r6, @ANYBLOB="1400020070696d72656731000000000000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300020000004800018008000100", @ANYRES32=r8, @ANYBLOB="1400020073697430000000000000000000000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="48000180140002006970766c616e300000000000000000001400020067656e65766530000000000000000000140002007465616d5f736c6176655f300000000008000300000000007000018008000100", @ANYRES32=r14, @ANYBLOB="140002006272696467655f736c6176655f30000014000200766c616e300000000000000000000000140002006e6963766630000000000000000000001400020064766d72703000000000000000000000140002006e696376663000"/100], 0x260}}, 0x810) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f41928b62b", 0xc}, {&(0x7f0000000240)="9f336d70bf411cd5ea2ba3b427045d1b787100d62df19e3be98b4015e3b0384d86a1ceb4e530554eb88154bf392bcf9ce0b09f879bd7aaf9d086e33e99d09af17b9a72b28eee407445252b7f5460999644cde36d2e2ad6004ed7fda795a1dd4fb1e465356103603cd831fbc2e40d0065d3dd6618addfed1d0074212fa0fad9b6e884d28797317a318c74d719a44249", 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r16, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60df) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88c1a3b73fad4a183ed0a49eedcda15715f24c836843bb2a9d84ad8f868e2f1409b0880c44b74342eb65b2191fb8b1cf90477718c0e15df524ad7f005f166029e7042f", @ANYRES16=r1, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r15, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) 5m29.170502472s ago: executing program 1 (id=1179): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030300f67058f8eb172d2f"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x0, 0x4, 0x1, 0x7ffe}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7690}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 5m28.825776881s ago: executing program 32 (id=1179): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030300f67058f8eb172d2f"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x0, 0x4, 0x1, 0x7ffe}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7690}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 2m34.160685127s ago: executing program 0 (id=2018): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x5}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x5}, 0x20) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x8, 0x0, 0x200, 0x9}}) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r8, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) 2m34.031198047s ago: executing program 0 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000780)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15.9\x8b|\xe9H\xa7a>\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\b\x00\x00\x00\x00\x00\x00\x00}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x02\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\x014g+\xbd\xd1\xe0R\x9d\x18\x19a:', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0xac, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0xac}, 0x1, 0xba01}, 0x810) 2m33.897316235s ago: executing program 0 (id=2023): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="75c1ccd07a5210ca6c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4361384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e0000000000", 0x5e}, {&(0x7f0000000380)="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", 0x24e}, {&(0x7f0000000f00)="b62314417a72e12a7ab7f5601b3b351333f3a3b13679144b7cd8a483d6dbc75ded58ba6875841285b877303e9500", 0x2e}], 0x3}, 0x8000) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) 2m30.565708503s ago: executing program 0 (id=2038): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0xfffffffffffffdd7, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x3, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x5, 0xffffffff}, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m29.447593271s ago: executing program 0 (id=2043): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a400000013002f0a2bbd70000000000007006800", @ANYRES32=r1, @ANYBLOB="400900006522020084001a8009000100766c616e000000007400048070"], 0xa4}, 0x1, 0x0, 0x0, 0x40944}, 0x0) 2m29.376618736s ago: executing program 0 (id=2044): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1001, 0x2, 0x4, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1001, 0x2, 0x4, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) landlock_create_ruleset(&(0x7f0000000040)={0x8008, 0x2, 0x4}, 0x18, 0x3) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8008, 0x2, 0x4}, 0x18, 0x3) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000000006"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) landlock_restrict_self(r3, 0x3) (async) landlock_restrict_self(r3, 0x3) landlock_restrict_self(r4, 0x9) (async) landlock_restrict_self(r4, 0x9) landlock_restrict_self(r3, 0xa) landlock_restrict_self(r4, 0x1) (async) landlock_restrict_self(r4, 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r4, 0x5) landlock_restrict_self(r4, 0xa) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r4, 0x2) landlock_restrict_self(r3, 0xa) (async) landlock_restrict_self(r3, 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x3d5e6974e55e2924, 0x0, {r1, r2/1000+10000}, {0x1, 0xc, 0x0, 0x0, 0x0, 0x0, "e77e00"}, 0x4, 0x1, {}, 0x8}) 2m14.336386396s ago: executing program 33 (id=2044): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1001, 0x2, 0x4, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1001, 0x2, 0x4, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) landlock_create_ruleset(&(0x7f0000000040)={0x8008, 0x2, 0x4}, 0x18, 0x3) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8008, 0x2, 0x4}, 0x18, 0x3) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000000006"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) landlock_restrict_self(r3, 0x3) (async) landlock_restrict_self(r3, 0x3) landlock_restrict_self(r4, 0x9) (async) landlock_restrict_self(r4, 0x9) landlock_restrict_self(r3, 0xa) landlock_restrict_self(r4, 0x1) (async) landlock_restrict_self(r4, 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r4, 0x5) landlock_restrict_self(r4, 0xa) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r4, 0x2) landlock_restrict_self(r3, 0xa) (async) landlock_restrict_self(r3, 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x3d5e6974e55e2924, 0x0, {r1, r2/1000+10000}, {0x1, 0xc, 0x0, 0x0, 0x0, 0x0, "e77e00"}, 0x4, 0x1, {}, 0x8}) 6.182731347s ago: executing program 4 (id=2691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902120001000020000904c40100fffd0180de3c2b"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x202, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) dup2(r6, r5) r8 = fsopen(&(0x7f0000000480)='rpc_pipefs\x00', 0x1) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_pressure(r9, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r9, &(0x7f0000003a80)={0x2020}, 0x2020) shutdown(r4, 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.878955491s ago: executing program 4 (id=2700): io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e3, &(0x7f00000003c0)={0x0, 0x898, 0x1000, 0x1, 0x398}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000140)=0x7) chdir(&(0x7f0000000540)='./cgroup\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) io_uring_enter(r2, 0xa3d, 0x0, 0x9, 0x0, 0x0) r6 = mq_open(&(0x7f000084dff0)='\xaa', 0x80, 0x12e, &(0x7f0000000300)={0x2, 0x1, 0x401, 0x1}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 4.367489032s ago: executing program 4 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x1, 0x401, 0xbb7, 0x40, {0x0, 0x1800000, 0x2, 0x49, 0x10, 0xef, 0xc, 0x7ff, 0x2, 0xf000, 0x3, r2, r3, 0x3, 0xd98}}, {0x0, 0x1, 0x1, 0x2, '\x00'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r4, 0xfffffffffffffffe, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a07f0ff000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593"], 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0xd8, r6, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x96e, 0x40}}}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0xc55) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8001, 0x0) 3.468806829s ago: executing program 3 (id=2707): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xe, 0x80, 0x3, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 2.808058596s ago: executing program 2 (id=2709): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x6558, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (fail_nth: 3) 2.681933523s ago: executing program 6 (id=2710): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x32}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) syz_emit_ethernet(0x82, &(0x7f00000011c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f004c330020010000000000000000000000000002000000000000000000390900000000012421"], 0x0) 2.679176533s ago: executing program 2 (id=2711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) 2.552380083s ago: executing program 6 (id=2713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000580)=""/28, 0x1c}], 0x2}, 0x102) 2.537270064s ago: executing program 2 (id=2714): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffa, 0x0) 2.487321709s ago: executing program 3 (id=2715): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000900)=0xffffff9c, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x200, 0x109) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x100, 0x0, 0x4, 0x7, 0x6, 0x0, 0x0, 0x94, 0xffffffff}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a240)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x90, 0x0, 0x80000001, {0x3, 0x0, 0x2a, 0x0, 0x203fc, 0x3b9, {0x1, 0xffdfffffffffff28, 0x1000000000d, 0x6, 0x80000000000, 0x5, 0x53, 0x1, 0x8, 0x6000, 0x4, r4, 0x0, 0x5, 0xe0000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8200, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8000, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x103, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb6, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0x4, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x200, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.38373238s ago: executing program 6 (id=2716): getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xfff3, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c0005000a5601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.30804345s ago: executing program 3 (id=2717): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14, 0x20}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2a, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0d"}}, 0x38) 2.218259072s ago: executing program 5 (id=2718): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000580)=""/28, 0x1c}], 0x2}, 0x102) (fail_nth: 3) 1.714149092s ago: executing program 5 (id=2719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="2600000022e80100000000000000000078cc6f920a97c99f494e07000000f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x10120, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x70000, 0x104000, 0x1}) close(r1) 1.643027773s ago: executing program 3 (id=2720): setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="807a326136a02220d5439f19e1933cfd42bd69c496a38a438dfe8fb20b026cdddb8ef98138e734af29f49a99854c85018a213143405983af5796d619fd84ae163bc93b3251f8c7df6c7f32df3167e0f02af52b31de7151fa816e7fb929d0d662015377d3689bf3cd0741eaa0819cd4a34f3028f061e2144ecbea1007ab118a3191e23556203e873de06119f88f52e9c84063452e15f9f874369b490811b71cc24a23c95c84881fd2bed787fd7f89f1c7ec3958c8c2d98207cd57c982564078624a38a52da7b0a2d0c4b3a3cd37", 0xcd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x105a00, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x2, 0x3, 0x0, 0x4, 0x3, 0x4}, @ipv6=@tipc_packet={0x7, 0x6, "3214eb", 0x105, 0x6, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x62, 0x19, '\x00', [@pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x10, 0x0, [0x7, 0x2, 0x80000000, 0x8000, 0x10, 0x0, 0x80, 0x9, 0x11]}}, @hao={0xc9, 0x10, @private2}, @generic={0x8, 0x62, "acba98e2a89a7fbe7088273e6b2d048fad61fc6cfe390e7c6e25730b510e6d74a47cfc061ec15a51ed5b56f2462343cbecf812199a01af0626be457e9590b10caa0bf23933beb5ec60bfbf43fd5e288208e76a1b6e26137009d0aec5fbf8177b32ce"}, @enc_lim={0x4, 0x1, 0x4}]}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x2, 0x8, 0x0, 0x3, 0x3, 0x0, 0x2, 0x3, 0xa0, 0x3, 0x4e22, 0x4e22}, 0x4, 0x2}, 0x0, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x137) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x254, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "567db6cfd81917672bb32fbd01e97a8ee022539e65ac64f6cdf2e2154c4dee1c"}]}, {0x114, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc475edfa9084c94dc6fda880d4e40a72231a4d593917f6f0952df15c671cc6b"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x80000001, @empty, 0x8}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x254}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000780)={0xffffffffffffffff}) write$UHID_INPUT(r6, &(0x7f0000000800)={0x8, {"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", 0x1000}}, 0x1006) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001840)=0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x180, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "32f4ee529d7f3df480c8035ba6847308dc6aee27d05b63c3c870344fdbcaa6d2f83f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "2491c9cb5783c7de44e1e9aba2c5ccf446e2e3aa40db556e7dccac7b2947457e0ae6c1fc7b5a298079f11236f388beb9b6a97b1b0bc8aa5ee14e6fb2d66e01263b786e3e7ad4b7340e410e1dc378c9485a0882c5b12aa64956a13c38edb3972cf62d2f3bc39496fffe6b35795109cc5828068c63cd666f8eb488e685b9f91a0ae67fe68bd72e1e58350d0aa8e670bba731973eaee182a2440e19bdb4c03edf1a"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "56f398cd982b12c963b78e7fe211c8d7a60fd4a5226591e44c"}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000004}, 0x24001804) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001b80)={0x1, &(0x7f0000001b40)=[{0x0, 0xf, &(0x7f0000001b00)="3f9acddb4c5062239660eef3fb9feb", 0x1, 0x1}]}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) write$vga_arbiter(r6, &(0x7f0000001c40)=@unlock_all, 0xb) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r3, 0x601, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000001d80)={0xc}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xb, 0xa}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x810) sendfile(r1, r6, &(0x7f0000001f80)=0x8, 0x0) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000001fc0)={0x6, 0xffffffffffffff90, 0x2, 0x9, 0x200, 0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x90602, 0x0) syz_clone(0x20000000, &(0x7f0000002040)="acf6ad90e2a1034c988b04987a7ede571e73945a8a8474300c848a3e95ca60f7e6eef540faa95857a7dfc5a0ad89a10170d2d77d2e223ea105d1a8c83235bd7f52820eeebdba62cb217547694d1eb07c69063ad2cd2d853cf230f1642f48454b7a342f9653c154bde8694f09231f4cf4bf6aa7573b895df5ffe697be71ab", 0x7e, &(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)="d20922f8735d9ef7fadce9b769a19d6e48cd43a5779158efad90ac0449b53bfc2f6b3942987ef8beb3466727c984887146a66aa204b63ff04aa964eb616a7c72aa7fafdd4b9ab93e84889d837565ef5b5692c3ffcfd10bf2a03f6aad451055c80843ef493668a281222bb9704088e8aa263a444b25c07fca75f465cbd1014aa761e41fc1491a6c9ddef2efee3714293edb9f4ad9") r10 = dup(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002340)={@cgroup=r10, r10, 0x1f, 0x2024}, 0x20) 1.486620147s ago: executing program 3 (id=2721): futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x225c17d03, &(0x7f0000000240)={0x0, 0x989680}, 0x1) 1.483225328s ago: executing program 5 (id=2722): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0xc226}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="8d889bb885fea547593caf480109f0a1b35c70b4dfc79bcf3f02138ec3da63ebae35fbfc6611784c8e7e27667c4a6ae81be7c2fffdef57c0391d727a4381be6ad423c18dd6e0976e03f20c357c2b84d61481d648ffab6e6d7e56884ca9cb0612c2cf5044ee198dba91b00373309d26294790414658f3b61319a5910f2d85ff25cbee749d333f0e8f6b1684702227365fc311f994d6b32dc7b947470254d125ba4a00000000", @ANYRES16=r7, @ANYBLOB="000126bd7000fddbdf2501000000080001003500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0)={0xffffffffffffffff}, 0x3, r8, 0x1c, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000280), r9}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r8, 0x7ffe}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.389258066s ago: executing program 6 (id=2723): syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.287651369s ago: executing program 3 (id=2724): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r3, 0x1) flock(r3, 0x2) close(0x3) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x8040) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ee1, 0x4) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x40, 0x24, 0x6e, {0x6e, 0x24, "dc722c0d791ba4d017eceb4471586c5ab58bdce2ac27c2dadc946381df572be7c34d4f648477f0f8d3b16c09e5aa48ee7c4de38ab62e9df0146bb954f773f792c2c2dff6c641c98e4bec266a7048fea664bea65ed52c730e3f06e12269b50550ec4eeb0287af38eb8d026975"}}, &(0x7f0000000340)={0x0, 0x3, 0x75, @string={0x75, 0x3, "445ccc7fe68a48d51437ef76ee8bc02601053a652a2cf5386946a1238a3b7b1cd71e1f8c5f05e24060ee9788e53c29d06f3f9d7e63cfbf0918af6c93967ef7aa7b9879f893981d27218be96e3b6fa63f4fdddb949f12970008544c4b7425457977a284965db96bce4c8b53c936d1d812983dc2"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000440)={0x20, 0x1c, 0x6d, "418866950a1be75c9a5a862c0c315632c2696daa37df6daa0e21ea462d4bf7a5b24167d512362ae55bc2d538eff9a683e2de771f09df64eed639c2da6a09dca55a12b24997c9cbd57a215e515a80d675a28f5b5fd35b674d8f88424393d0b09919366f818f6f592f03969cb243"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "40b148"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "6aa3"}, &(0x7f0000000500)={0x20, 0x83, 0x2, "9bd8"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "1fca27"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "1a38ea"}}) syz_usb_connect(0x0, 0x440, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r4], 0x0) 1.217939214s ago: executing program 4 (id=2725): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xe, 0x80, 0x3, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 1.217449026s ago: executing program 6 (id=2726): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', 0x0}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 1.177397561s ago: executing program 5 (id=2727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001500010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0040000000000000070000000000000000000000000000008e0808000000000000000000000000002d00000000000000000000000000000000000000000000000700000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000003000000000a00100011"], 0xc4}}, 0x0) 1.059185667s ago: executing program 5 (id=2728): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000186000/0x1000)=nil, 0x400000, 0x3, 0x2}) (fail_nth: 39) 979.719268ms ago: executing program 6 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x42080, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x281, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) 558.150754ms ago: executing program 2 (id=2730): symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000020000, 0xb, 0xffff, 0x4000000000000e51, 0x102, 0x200, 0x103d, 0x200000000006, 0x20020000000000, 0x3aa, 0x4, 0x1, 0x3, 0x40000000009, 0x40000000080a8c, 0x800000064], 0x8000000, 0x100100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) syz_clone3(&(0x7f0000001880)={0x40000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x58) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2077) r8 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x2, r6}, {0x2, 0x4, r6}, {0x2, 0x3, r6}], {0x4, 0x5}, [{0x8, 0x2, r7}, {0x8, 0x3, r7}, {0x8, 0x1, r8}, {0x8, 0x6, r7}], {}, {0x20, 0x3}}, 0x5c, 0x3) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0xb7f40}]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r11, &(0x7f0000002080)={0x29, 0x4, 0x0, {0x1, 0x7f, 0x1, 0x0, [0x0]}}, 0x29) syz_fuse_handle_req(r11, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000002300)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x9f53, 0x0, 0x691a, 0x48e, 0x1001000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r9, r4, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 470.992612ms ago: executing program 5 (id=2731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2, 0x0, 0x0, 0x100000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 230.76375ms ago: executing program 4 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000880) 86.605552ms ago: executing program 2 (id=2733): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) 85.918956ms ago: executing program 4 (id=2734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000180)=0xffff0018) close_range(r1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f20d835200000000f22d8400fae4faa0f5cdd0f1f0066baf80cb814ba9788ef66bafc0c66b8040066ef66baf80cb863d1f685ef66bafc0cec0f350fc75e0848b802cb5dd5699e6f180f23c00f21f83503000d000f23f8b9630001c0b800780000ba000000000f30", 0x68}], 0x1, 0x43, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x5c, r6, 0x800, 0x70bd2b, 0x25dfdc01, {{}, {@void, @val={0xc, 0x99, {0x3d09, 0x4008}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "0648450a37b067f4f5f1f500"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e40a3521ded66c0f59263b9623cac839"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "785e854f739f1802829a5b75f9ef4d71"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_TDX_GET_CPUID(r5, 0xc008aeba, &(0x7f0000000340)={0x5, 0x0, &(0x7f00000005c0)={0x7, 0x0, [{0x7, 0x6, 0x7, 0xffffffff, 0x8, 0x7, 0xfffffff9}, {0x40000001, 0xcf1, 0x1, 0x9, 0x0, 0x8000, 0xfffeffff}, {0xb, 0x9, 0x2, 0x6, 0xbc, 0xed, 0x1}, {0x80000019, 0x5, 0x1, 0x7, 0xffffffff, 0x7}, {0x2, 0x80000001, 0x2, 0x800, 0x5, 0x8, 0x3}, {0x80000008, 0xbe91, 0x7, 0x9, 0x800, 0xd, 0x6}, {0x4, 0x9, 0x3, 0x0, 0x6697, 0x8, 0x7}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x4, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x8b, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0xff, 0x5, 0xf5, '\x00', 0xf}, {0x8, 0x9, 0x8, '\x00', 0x94}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x2, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x8}, {0xcf, 0x5, 0x8, '\x00', 0x3}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0xf}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x0, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x15, 0x12, '\x00', 0x50}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 0s ago: executing program 2 (id=2735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x800, 0x1) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='vegas', 0x5) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4080080}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x3c, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$rds(0x15, 0x5, 0x0) unshare(0x6020400) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, 0x0) kernel console output (not intermixed with test programs): C or it's busy [ 557.728649][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.739393][ T24] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 557.765161][ T5921] ipheth 3-1:8.39: Unable to find endpoints [ 557.792921][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 557.806861][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 557.813069][ T5921] usb 3-1: USB disconnect, device number 70 [ 557.821400][ T24] usb 5-1: media controller created [ 557.892677][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.958245][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 558.056479][ T24] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 558.089124][ T24] usb 5-1: USB disconnect, device number 83 [ 559.151556][T13882] nfs: Unknown parameter 'ÿÿÿÿÿÿÿÿQ' [ 559.534234][T12060] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 559.676326][T12060] usb 6-1: device descriptor read/64, error -71 [ 559.884460][T13905] netlink: 'syz.3.2182': attribute type 5 has an invalid length. [ 559.924256][T12060] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 559.966875][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 560.090452][T12060] usb 6-1: device descriptor read/64, error -71 [ 560.205338][T12060] usb usb6-port1: attempt power cycle [ 560.545452][T12060] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 560.597061][T12060] usb 6-1: device descriptor read/8, error -71 [ 560.632415][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 560.793455][T13914] syzkaller0: entered promiscuous mode [ 560.804380][T13914] syzkaller0: entered allmulticast mode [ 560.833868][T12060] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 560.856393][T12060] usb 6-1: device descriptor read/8, error -71 [ 560.894620][ T24] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 560.965125][T12060] usb usb6-port1: unable to enumerate USB device [ 561.075540][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 561.088855][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 561.103445][ T24] usb 4-1: config 1 has no interface number 1 [ 561.111228][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.154370][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.174242][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.199558][ T24] usb 4-1: Product: syz [ 561.206265][ T24] usb 4-1: Manufacturer: syz [ 561.211773][ T24] usb 4-1: SerialNumber: syz [ 561.451804][ T24] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 561.505973][ T24] usb 4-1: failed to enable PITCH for EP 0x82 [ 561.701118][ T24] usb 4-1: USB disconnect, device number 82 [ 562.534826][T12060] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 562.549107][T13935] netem: change failed [ 562.713865][T12060] usb 5-1: Using ep0 maxpacket: 32 [ 562.739316][T12060] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.757625][T12060] usb 5-1: config 0 has no interface number 0 [ 562.777348][T12060] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.788906][T12060] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.809353][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.815986][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.825098][T12060] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 562.835259][T12060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.848374][T12060] usb 5-1: config 0 descriptor?? [ 563.523868][T12060] usbhid 5-1:0.1: can't add hid device: -71 [ 563.535800][T12060] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 563.574365][T12060] usb 5-1: USB disconnect, device number 84 [ 564.169479][T13980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2208'. [ 564.189882][T13980] x_tables: ip_tables: udp match: only valid for protocol 17 [ 564.310601][T13984] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 564.347002][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 564.449156][T13984] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 564.742988][ T29] audit: type=1326 audit(1771860329.349:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 564.809191][ T29] audit: type=1326 audit(1771860329.349:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 564.882077][ T29] audit: type=1326 audit(1771860329.349:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 564.977865][ T29] audit: type=1326 audit(1771860329.349:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.109821][ T29] audit: type=1326 audit(1771860329.349:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.246251][ T29] audit: type=1326 audit(1771860329.349:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.352072][ T29] audit: type=1326 audit(1771860329.349:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.493182][ T29] audit: type=1326 audit(1771860329.349:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.723720][ T29] audit: type=1326 audit(1771860329.349:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.748861][ T29] audit: type=1326 audit(1771860329.409:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.4.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 565.906584][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'. [ 566.759333][T14022] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2220'. [ 567.102429][T14040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.221393][T14043] tipc: Enabling of bearer rejected, failed to enable media [ 567.251045][T12060] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 567.266789][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2224'. [ 567.483129][T14043] fuse: Bad value for 'group_id' [ 567.488441][T14043] fuse: Bad value for 'group_id' [ 567.532376][T12060] usb 3-1: Using ep0 maxpacket: 32 [ 567.571462][T12060] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 567.640111][T12060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.735323][T12060] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 568.991388][T14057] FAULT_INJECTION: forcing a failure. [ 568.991388][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 568.991503][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.5.2229 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.991529][T14057] Tainted: [L]=SOFTLOCKUP [ 568.991537][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.991548][T14057] Call Trace: [ 568.991556][T14057] [ 568.991565][T14057] dump_stack_lvl+0xe8/0x150 [ 568.991595][T14057] should_fail_ex+0x412/0x560 [ 568.991623][T14057] should_failslab+0xa8/0x100 [ 568.991648][T14057] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 568.991678][T14057] ? __alloc_skb+0x1d0/0x7d0 [ 568.991700][T14057] ? __local_bh_enable_ip+0xd0/0x130 [ 568.991727][T14057] __alloc_skb+0x1d0/0x7d0 [ 568.991755][T14057] fdb_notify+0xa6/0x160 [ 568.991784][T14057] fdb_delete+0xd51/0xfb0 [ 568.991811][T14057] ? fdb_delete+0x2aa/0xfb0 [ 568.991843][T14057] br_fdb_find_delete_local+0x122/0x140 [ 568.991874][T14057] br_vlan_delete+0x1ac/0x220 [ 568.991904][T14057] __br_vlan_set_default_pvid+0x4f0/0xed0 [ 568.991930][T14057] ? __pfx___mutex_trylock_common+0x10/0x10 [ 568.991960][T14057] ? rcu_is_watching+0x15/0xb0 [ 568.991990][T14057] br_changelink+0x475/0x16b0 [ 568.992020][T14057] ? __pfx_br_changelink+0x10/0x10 [ 568.992052][T14057] ? rtnl_newlink+0x8a1/0x1be0 [ 568.992079][T14057] ? __pfx___mutex_lock+0x10/0x10 [ 568.992108][T14057] ? ns_capable+0x89/0xe0 [ 568.992138][T14057] rtnl_newlink+0x1603/0x1be0 [ 568.992170][T14057] ? __pfx_rtnl_newlink+0x10/0x10 [ 568.992191][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.992243][T14057] ? kasan_quarantine_put+0xbb/0x1f0 [ 568.992263][T14057] ? lockdep_hardirqs_on+0x7a/0x110 [ 568.992292][T14057] ? kmem_cache_free+0x187/0x630 [ 568.992312][T14057] ? nlmon_xmit+0xb0/0x100 [ 568.992348][T14057] ? __lock_acquire+0x6b5/0x2cf0 [ 568.992378][T14057] ? __local_bh_enable_ip+0xd0/0x130 [ 568.992401][T14057] ? lockdep_hardirqs_on+0x7a/0x110 [ 568.992433][T14057] ? __dev_queue_xmit+0x274/0x38a0 [ 568.992460][T14057] ? __local_bh_enable_ip+0xd0/0x130 [ 568.992482][T14057] ? __dev_queue_xmit+0x274/0x38a0 [ 568.992531][T14057] ? __pfx_rtnl_newlink+0x10/0x10 [ 568.992554][T14057] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 568.992581][T14057] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 568.992604][T14057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.992625][T14057] ? ref_tracker_free+0x693/0x840 [ 568.992646][T14057] ? __copy_skb_header+0xa3/0x4a0 [ 568.992674][T14057] ? __pfx_ref_tracker_free+0x10/0x10 [ 568.992706][T14057] netlink_rcv_skb+0x232/0x4b0 [ 568.992730][T14057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.992755][T14057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.992787][T14057] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.992817][T14057] netlink_unicast+0x80f/0x9b0 [ 568.992845][T14057] ? __pfx_netlink_unicast+0x10/0x10 [ 568.992867][T14057] ? netlink_sendmsg+0x650/0xb40 [ 568.992888][T14057] ? skb_put+0x11b/0x210 [ 568.992915][T14057] netlink_sendmsg+0x813/0xb40 [ 568.992946][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.992972][T14057] ? aa_sock_msg_perm+0xf1/0x1b0 [ 568.992996][T14057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.993016][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.993035][T14057] ____sys_sendmsg+0xa68/0xad0 [ 568.993068][T14057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.993103][T14057] ? import_iovec+0x73/0xa0 [ 568.993131][T14057] ___sys_sendmsg+0x2a5/0x360 [ 568.993161][T14057] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.993216][T14057] ? __fget_files+0x2a/0x420 [ 568.993240][T14057] ? __fget_files+0x3a0/0x420 [ 568.993272][T14057] __x64_sys_sendmsg+0x1bd/0x2a0 [ 568.993299][T14057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.993331][T14057] ? __pfx_ksys_write+0x10/0x10 [ 568.993359][T14057] do_syscall_64+0x14d/0xf80 [ 568.993385][T14057] ? trace_irq_disable+0x3b/0x150 [ 568.993410][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.993436][T14057] ? clear_bhb_loop+0x40/0x90 [ 568.993457][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.993475][T14057] RIP: 0033:0x7f19b9f9c629 [ 568.993493][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.993508][T14057] RSP: 002b:00007f19baecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.993527][T14057] RAX: ffffffffffffffda RBX: 00007f19ba215fa0 RCX: 00007f19b9f9c629 [ 568.993541][T14057] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 568.993553][T14057] RBP: 00007f19baecd090 R08: 0000000000000000 R09: 0000000000000000 [ 568.993564][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.993575][T14057] R13: 00007f19ba216038 R14: 00007f19ba215fa0 R15: 00007f19ba33fa48 [ 568.993603][T14057] [ 569.161056][ T5895] usb 3-1: USB disconnect, device number 71 [ 571.404289][T14081] xt_hashlimit: max too large, truncated to 1048576 [ 571.514216][ T5903] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 571.606588][ T5895] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 571.653728][ T5903] usb 6-1: device descriptor read/64, error -71 [ 571.784208][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 571.808919][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 571.839933][ T5895] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 571.863208][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.886030][ T5895] usb 5-1: Product: syz [ 571.904805][ T5895] usb 5-1: Manufacturer: syz [ 571.913769][ T5903] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 571.934458][ T5895] usb 5-1: SerialNumber: syz [ 571.954708][ T5895] usb 5-1: config 0 descriptor?? [ 572.055202][ T5903] usb 6-1: device descriptor read/64, error -71 [ 572.184747][ T5903] usb usb6-port1: attempt power cycle [ 572.380192][ T5895] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 572.388166][ T5895] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 572.553830][ T5903] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 572.574353][ T5903] usb 6-1: device descriptor read/8, error -71 [ 572.834584][ T5903] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 572.867752][ T5903] usb 6-1: device descriptor read/8, error -71 [ 572.997132][ T5903] usb usb6-port1: unable to enumerate USB device [ 573.298017][T14101] program syz.2.2242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.417238][ T5895] usb 5-1: USB disconnect, device number 85 [ 574.614849][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 574.985211][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 575.069943][T14130] vlan2: entered promiscuous mode [ 575.094115][T14130] dummy0: entered promiscuous mode [ 575.422016][T14138] loop4: detected capacity change from 0 to 7 [ 575.452277][T14138] Dev loop4: unable to read RDB block 7 [ 575.467912][T14138] loop4: unable to read partition table [ 575.480100][T14138] loop4: partition table beyond EOD, truncated [ 575.502032][T14138] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.603835][ T5903] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 576.317197][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 576.317216][ T29] audit: type=1326 audit(1771860340.929:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.397721][ T29] audit: type=1326 audit(1771860340.929:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.456028][ T29] audit: type=1326 audit(1771860340.929:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.490795][ T29] audit: type=1326 audit(1771860340.929:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.515282][ T5903] usb 4-1: device descriptor read/64, error -71 [ 576.527991][ T29] audit: type=1326 audit(1771860340.929:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.554826][ T29] audit: type=1326 audit(1771860340.929:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.669788][ T29] audit: type=1326 audit(1771860340.929:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.669820][ T29] audit: type=1326 audit(1771860340.929:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.669842][ T29] audit: type=1326 audit(1771860340.929:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.669864][ T29] audit: type=1326 audit(1771860340.929:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14156 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 576.755961][ T5903] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 576.927296][T14177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 576.940404][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.977606][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 577.001306][ T5903] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 577.010102][ T5903] usb 4-1: config 0 has no interface number 0 [ 577.020089][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 577.043471][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 577.065385][T14179] loop4: detected capacity change from 0 to 7 [ 577.072289][ T5903] usb 4-1: config 0 interface 41 has no altsetting 0 [ 577.081597][T14179] Dev loop4: unable to read RDB block 7 [ 577.094519][T14179] loop4: unable to read partition table [ 577.102550][ T5903] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 577.120399][T14179] loop4: partition table beyond EOD, truncated [ 577.129273][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.150605][T14179] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.169710][ T5903] usb 4-1: Product: syz [ 577.183336][ T5903] usb 4-1: Manufacturer: syz [ 577.198456][ T5903] usb 4-1: SerialNumber: syz [ 577.214240][ T5895] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 577.240622][ T5903] usb 4-1: config 0 descriptor?? [ 577.260318][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.284225][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.503907][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 577.538782][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.576909][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.223569][ T5903] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 578.760196][T14214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2277'. [ 578.793676][T14214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2277'. [ 578.823860][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 578.882080][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2277'. [ 578.902747][T14216] bridge0: port 3(syz_tun) entered blocking state [ 578.914096][T14216] bridge0: port 3(syz_tun) entered disabled state [ 578.936904][T14216] syz_tun: entered promiscuous mode [ 578.948988][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2276'. [ 579.018391][T14218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.926176][T14240] syz_tun: entered allmulticast mode [ 580.040264][ T5903] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 580.081463][ T5903] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 580.102168][ T5903] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 580.138434][ T5903] usb 4-1: USB disconnect, device number 84 [ 580.169692][T14238] syz_tun: left allmulticast mode [ 580.231927][T14243] syzkaller0: entered promiscuous mode [ 580.271357][T14243] syzkaller0: entered allmulticast mode [ 580.743155][T14259] misc userio: The device must be registered before sending interrupts [ 580.934468][ T5895] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 581.096153][ T5895] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 581.105587][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.123596][ T5895] usb 5-1: config 0 has no interface number 0 [ 581.144902][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 581.158608][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.182690][ T5895] usb 5-1: Product: syz [ 581.195243][ T5895] usb 5-1: Manufacturer: syz [ 581.206594][ T5895] usb 5-1: SerialNumber: syz [ 581.239680][ T5895] usb 5-1: config 0 descriptor?? [ 581.257993][ T5895] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 581.520240][ T5895] usb 5-1: USB disconnect, device number 86 [ 581.683858][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2293'. [ 581.709443][T14268] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2293'. [ 582.158026][T14286] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2299'. [ 582.250076][T14287] fuse: Unknown parameter '0xffffffffffffffff' [ 584.190501][T14305] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 584.211331][T14305] FAULT_INJECTION: forcing a failure. [ 584.211331][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 584.223073][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2302'. [ 584.257629][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.3.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.257661][T14305] Tainted: [L]=SOFTLOCKUP [ 584.257669][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.257681][T14305] Call Trace: [ 584.257688][T14305] [ 584.257695][T14305] dump_stack_lvl+0xe8/0x150 [ 584.257716][T14305] should_fail_ex+0x412/0x560 [ 584.257731][T14305] should_failslab+0xa8/0x100 [ 584.257748][T14305] __kmalloc_cache_noprof+0x88/0x660 [ 584.257761][T14305] ? netdevice_event+0x3cb/0x8f0 [ 584.257775][T14305] netdevice_event+0x3cb/0x8f0 [ 584.257788][T14305] ? __up_read+0x291/0x6b0 [ 584.257798][T14305] ? __pfx_netdevice_event+0x10/0x10 [ 584.257809][T14305] ? __pfx_del_netdev_ips+0x10/0x10 [ 584.257820][T14305] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 584.257831][T14305] ? __pfx_add_default_gids+0x10/0x10 [ 584.257841][T14305] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 584.257853][T14305] ? __pfx_add_netdev_ips+0x10/0x10 [ 584.257864][T14305] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 584.257878][T14305] ? cfg802154_netdev_notifier_call+0x136/0x8f0 [ 584.257895][T14305] notifier_call_chain+0x1be/0x400 [ 584.257915][T14305] call_netdevice_notifiers+0x90/0xd0 [ 584.257929][T14305] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 584.257941][T14305] ? dev_addr_mod+0x354/0x520 [ 584.257960][T14305] bond_set_dev_addr+0xd6/0x1b0 [ 584.257978][T14305] bond_enslave+0x9d3/0x3c40 [ 584.258004][T14305] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 584.258022][T14305] ? nlmsg_notify+0xf0/0x1a0 [ 584.258034][T14305] ? __pfx_bond_enslave+0x10/0x10 [ 584.258055][T14305] ? __pfx___dev_change_flags+0x10/0x10 [ 584.258069][T14305] ? __irq_work_queue_local+0x1f2/0x590 [ 584.258087][T14305] ? mutex_is_locked+0x17/0x50 [ 584.258104][T14305] do_set_master+0x533/0x6d0 [ 584.258121][T14305] do_setlink+0x1018/0x4590 [ 584.258135][T14305] ? __wake_up_klogd+0xe6/0x120 [ 584.258148][T14305] ? __pfx_vprintk_emit+0x10/0x10 [ 584.258167][T14305] ? __pfx_do_setlink+0x10/0x10 [ 584.258181][T14305] ? __lock_acquire+0x6b5/0x2cf0 [ 584.258199][T14305] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.258214][T14305] ? ___ratelimit+0x58c/0x8d0 [ 584.258231][T14305] ? __mutex_trylock_common+0x158/0x260 [ 584.258248][T14305] ? __pfx___mutex_trylock_common+0x10/0x10 [ 584.258265][T14305] ? rcu_is_watching+0x15/0xb0 [ 584.258279][T14305] ? trace_contention_end+0x3d/0x150 [ 584.258295][T14305] ? __mutex_lock+0x319/0x1300 [ 584.258308][T14305] ? __pfx___nla_validate_parse+0x10/0x10 [ 584.258326][T14305] ? rtnl_newlink+0x8a1/0x1be0 [ 584.258341][T14305] ? __pfx___mutex_lock+0x10/0x10 [ 584.258354][T14305] ? ns_capable+0x89/0xe0 [ 584.258371][T14305] rtnl_newlink+0x15a9/0x1be0 [ 584.258397][T14305] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.258416][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.258465][T14305] ? kasan_quarantine_put+0xbb/0x1f0 [ 584.258484][T14305] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.258513][T14305] ? kmem_cache_free+0x187/0x630 [ 584.258524][T14305] ? nlmon_xmit+0xb0/0x100 [ 584.258544][T14305] ? __lock_acquire+0x6b5/0x2cf0 [ 584.258559][T14305] ? __local_bh_enable_ip+0xd0/0x130 [ 584.258573][T14305] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.258587][T14305] ? __dev_queue_xmit+0x274/0x38a0 [ 584.258602][T14305] ? __local_bh_enable_ip+0xd0/0x130 [ 584.258614][T14305] ? __dev_queue_xmit+0x274/0x38a0 [ 584.258641][T14305] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.258654][T14305] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 584.258668][T14305] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 584.258681][T14305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.258692][T14305] ? ref_tracker_free+0x693/0x840 [ 584.258704][T14305] ? __copy_skb_header+0xa3/0x4a0 [ 584.258720][T14305] ? __pfx_ref_tracker_free+0x10/0x10 [ 584.258737][T14305] netlink_rcv_skb+0x232/0x4b0 [ 584.258753][T14305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.258766][T14305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.258783][T14305] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.258799][T14305] netlink_unicast+0x80f/0x9b0 [ 584.258814][T14305] ? __pfx_netlink_unicast+0x10/0x10 [ 584.258825][T14305] ? netlink_sendmsg+0x650/0xb40 [ 584.258837][T14305] ? skb_put+0x11b/0x210 [ 584.258852][T14305] netlink_sendmsg+0x813/0xb40 [ 584.258869][T14305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.258883][T14305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 584.258896][T14305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.258908][T14305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.258920][T14305] ____sys_sendmsg+0xa68/0xad0 [ 584.258940][T14305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.258959][T14305] ? import_iovec+0x73/0xa0 [ 584.258976][T14305] ___sys_sendmsg+0x2a5/0x360 [ 584.258998][T14305] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.259030][T14305] ? __fget_files+0x2a/0x420 [ 584.259044][T14305] ? __fget_files+0x3a0/0x420 [ 584.259063][T14305] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.259079][T14305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.259099][T14305] ? __pfx_ksys_write+0x10/0x10 [ 584.259115][T14305] do_syscall_64+0x14d/0xf80 [ 584.259131][T14305] ? trace_irq_disable+0x3b/0x150 [ 584.259145][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.259155][T14305] ? clear_bhb_loop+0x40/0x90 [ 584.259168][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.259179][T14305] RIP: 0033:0x7fdb17b9c629 [ 584.259190][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.259199][T14305] RSP: 002b:00007fdb189f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.259212][T14305] RAX: ffffffffffffffda RBX: 00007fdb17e15fa0 RCX: 00007fdb17b9c629 [ 584.259219][T14305] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 584.259226][T14305] RBP: 00007fdb189f8090 R08: 0000000000000000 R09: 0000000000000000 [ 584.259233][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.259239][T14305] R13: 00007fdb17e16038 R14: 00007fdb17e15fa0 R15: 00007fdb17f3fa48 [ 584.259254][T14305] [ 584.970889][T14305] bond0: (slave wlan1): Opening slave failed [ 585.697074][T14323] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2310'. [ 585.727824][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 585.727842][ T29] audit: type=1326 audit(1771860350.339:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 585.819226][T14326] FAULT_INJECTION: forcing a failure. [ 585.819226][T14326] name failslab, interval 1, probability 0, space 0, times 0 [ 585.832720][T14326] CPU: 1 UID: 0 PID: 14326 Comm: syz.6.2311 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.832752][T14326] Tainted: [L]=SOFTLOCKUP [ 585.832759][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.832771][T14326] Call Trace: [ 585.832788][T14326] [ 585.832796][T14326] dump_stack_lvl+0xe8/0x150 [ 585.832829][T14326] should_fail_ex+0x412/0x560 [ 585.832856][T14326] should_failslab+0xa8/0x100 [ 585.832879][T14326] ? skb_clone+0x212/0x3a0 [ 585.832906][T14326] kmem_cache_alloc_noprof+0x87/0x650 [ 585.832943][T14326] skb_clone+0x212/0x3a0 [ 585.832974][T14326] __netlink_deliver_tap+0x404/0x850 [ 585.833009][T14326] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.833033][T14326] netlink_deliver_tap+0x19c/0x1b0 [ 585.833057][T14326] netlink_sendskb+0x68/0x140 [ 585.833079][T14326] netlink_unicast+0x3a3/0x9b0 [ 585.833107][T14326] ? __pfx_netlink_unicast+0x10/0x10 [ 585.833137][T14326] netlink_rcv_skb+0x2b6/0x4b0 [ 585.833160][T14326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.833189][T14326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.833226][T14326] ? down_read+0x272/0x2e0 [ 585.833243][T14326] ? genl_rcv+0xd/0x40 [ 585.833270][T14326] genl_rcv+0x28/0x40 [ 585.833294][T14326] netlink_unicast+0x80f/0x9b0 [ 585.833322][T14326] ? __pfx_netlink_unicast+0x10/0x10 [ 585.833344][T14326] ? netlink_sendmsg+0x650/0xb40 [ 585.833364][T14326] ? skb_put+0x11b/0x210 [ 585.833392][T14326] netlink_sendmsg+0x813/0xb40 [ 585.833424][T14326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.833450][T14326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.833474][T14326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.833496][T14326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.833518][T14326] ____sys_sendmsg+0xa68/0xad0 [ 585.833553][T14326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.833588][T14326] ? import_iovec+0x73/0xa0 [ 585.833620][T14326] ___sys_sendmsg+0x2a5/0x360 [ 585.833648][T14326] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.833701][T14326] ? __fget_files+0x2a/0x420 [ 585.833726][T14326] ? __fget_files+0x3a0/0x420 [ 585.833760][T14326] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.833795][T14326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.833830][T14326] ? __pfx_ksys_write+0x10/0x10 [ 585.833859][T14326] do_syscall_64+0x14d/0xf80 [ 585.833885][T14326] ? trace_irq_disable+0x3b/0x150 [ 585.833910][T14326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.833929][T14326] ? clear_bhb_loop+0x40/0x90 [ 585.833950][T14326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.833969][T14326] RIP: 0033:0x7f88cd79c629 [ 585.833987][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.834003][T14326] RSP: 002b:00007f88ce708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.834024][T14326] RAX: ffffffffffffffda RBX: 00007f88cda15fa0 RCX: 00007f88cd79c629 [ 585.834038][T14326] RDX: 0000000020000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 585.834051][T14326] RBP: 00007f88ce708090 R08: 0000000000000000 R09: 0000000000000000 [ 585.834063][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.834074][T14326] R13: 00007f88cda16038 R14: 00007f88cda15fa0 R15: 00007f88cdb3fa48 [ 585.834104][T14326] [ 586.156480][ T29] audit: type=1326 audit(1771860350.339:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.180146][ T29] audit: type=1326 audit(1771860350.339:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.203056][ T29] audit: type=1326 audit(1771860350.339:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.225803][ T29] audit: type=1326 audit(1771860350.339:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.248551][ T29] audit: type=1326 audit(1771860350.339:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.271537][ T29] audit: type=1326 audit(1771860350.339:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.294509][ T29] audit: type=1326 audit(1771860350.339:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.317253][ T29] audit: type=1326 audit(1771860350.339:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 586.339806][ T29] audit: type=1326 audit(1771860350.339:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x7ffc0000 [ 589.370948][T14381] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 589.433559][T14381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.505761][T14383] bond5: (slave geneve3): making interface the new active one [ 589.548281][T14383] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 589.776932][T14388] FAULT_INJECTION: forcing a failure. [ 589.776932][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 589.796571][T14388] CPU: 0 UID: 0 PID: 14388 Comm: syz.5.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.796600][T14388] Tainted: [L]=SOFTLOCKUP [ 589.796604][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.796611][T14388] Call Trace: [ 589.796616][T14388] [ 589.796621][T14388] dump_stack_lvl+0xe8/0x150 [ 589.796641][T14388] should_fail_ex+0x412/0x560 [ 589.796657][T14388] should_failslab+0xa8/0x100 [ 589.796670][T14388] ? dst_alloc+0x105/0x170 [ 589.796680][T14388] kmem_cache_alloc_noprof+0x87/0x650 [ 589.796698][T14388] ? __pfx_find_exception+0x10/0x10 [ 589.796715][T14388] dst_alloc+0x105/0x170 [ 589.796727][T14388] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 589.796746][T14388] ? ip_route_output_key_hash+0xd8/0x2a0 [ 589.796761][T14388] ip_route_output_key_hash+0x18d/0x2a0 [ 589.796777][T14388] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 589.796799][T14388] tcp_v4_connect+0x716/0x1a90 [ 589.796820][T14388] ? __pfx_tcp_v4_connect+0x10/0x10 [ 589.796831][T14388] ? __local_bh_enable_ip+0xd0/0x130 [ 589.796847][T14388] mptcp_connect+0x56b/0x830 [ 589.796865][T14388] __inet_stream_connect+0x25a/0xdd0 [ 589.796884][T14388] ? do_raw_spin_lock+0x12b/0x2f0 [ 589.796896][T14388] ? __pfx___inet_stream_connect+0x10/0x10 [ 589.796914][T14388] ? inet_stream_connect+0x51/0xa0 [ 589.796930][T14388] ? __local_bh_enable_ip+0xd0/0x130 [ 589.796945][T14388] inet_stream_connect+0x66/0xa0 [ 589.796962][T14388] __sys_connect+0x312/0x450 [ 589.796977][T14388] ? __pfx___sys_connect+0x10/0x10 [ 589.796996][T14388] ? __pfx_ksys_write+0x10/0x10 [ 589.797011][T14388] __x64_sys_connect+0x7a/0x90 [ 589.797025][T14388] do_syscall_64+0x14d/0xf80 [ 589.797040][T14388] ? trace_irq_disable+0x3b/0x150 [ 589.797056][T14388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.797067][T14388] ? clear_bhb_loop+0x40/0x90 [ 589.797080][T14388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.797090][T14388] RIP: 0033:0x7f19b9f9c629 [ 589.797101][T14388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.797110][T14388] RSP: 002b:00007f19baecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 589.797122][T14388] RAX: ffffffffffffffda RBX: 00007f19ba215fa0 RCX: 00007f19b9f9c629 [ 589.797130][T14388] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 589.797137][T14388] RBP: 00007f19baecd090 R08: 0000000000000000 R09: 0000000000000000 [ 589.797143][T14388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.797150][T14388] R13: 00007f19ba216038 R14: 00007f19ba215fa0 R15: 00007f19ba33fa48 [ 589.797168][T14388] [ 591.557582][T14417] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 592.700827][T14445] xt_hashlimit: size too large, truncated to 1048576 [ 593.773730][T12060] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 593.944533][T12060] usb 6-1: Using ep0 maxpacket: 16 [ 593.966114][T12060] usb 6-1: config 0 has no interfaces? [ 593.973035][T12060] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.986158][T12060] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.000710][T12060] usb 6-1: Manufacturer: syz [ 594.024504][T12060] usb 6-1: config 0 descriptor?? [ 594.060666][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2349'. [ 594.128471][T14471] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1œ*ø$pOcÚÉ”ÎÜr$åG—•µ [ 594.215944][T14473] netdevsim netdevsim2: Direct firmware load for . [ 594.215944][T14473] failed with error -2 [ 594.227324][T14473] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 594.227324][T14473] [ 594.295969][T12060] usb 6-1: USB disconnect, device number 47 [ 595.377129][T14489] FAULT_INJECTION: forcing a failure. [ 595.377129][T14489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.401148][T14489] CPU: 1 UID: 0 PID: 14489 Comm: syz.2.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.401178][T14489] Tainted: [L]=SOFTLOCKUP [ 595.401185][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.401197][T14489] Call Trace: [ 595.401205][T14489] [ 595.401213][T14489] dump_stack_lvl+0xe8/0x150 [ 595.401242][T14489] should_fail_ex+0x412/0x560 [ 595.401264][T14489] _copy_from_user+0x2d/0xb0 [ 595.401291][T14489] kstrtouint_from_user+0xd6/0x180 [ 595.401314][T14489] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 595.401350][T14489] proc_fail_nth_write+0x8e/0x210 [ 595.401373][T14489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 595.401397][T14489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 595.401418][T14489] vfs_write+0x29a/0xb90 [ 595.401441][T14489] ? __pfx_vfs_write+0x10/0x10 [ 595.401457][T14489] ? __fget_files+0x2a/0x420 [ 595.401482][T14489] ? __fget_files+0x3a0/0x420 [ 595.401501][T14489] ? __fget_files+0x2a/0x420 [ 595.401527][T14489] ksys_write+0x150/0x270 [ 595.401545][T14489] ? __pfx_ksys_write+0x10/0x10 [ 595.401568][T14489] do_syscall_64+0x14d/0xf80 [ 595.401590][T14489] ? trace_irq_disable+0x3b/0x150 [ 595.401611][T14489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.401628][T14489] ? clear_bhb_loop+0x40/0x90 [ 595.401646][T14489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.401662][T14489] RIP: 0033:0x7fab7cf5cece [ 595.401677][T14489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 595.401691][T14489] RSP: 002b:00007fab7b1d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.401716][T14489] RAX: ffffffffffffffda RBX: 00007fab7b1d56c0 RCX: 00007fab7cf5cece [ 595.401728][T14489] RDX: 0000000000000001 RSI: 00007fab7b1d50a0 RDI: 0000000000000006 [ 595.401737][T14489] RBP: 00007fab7b1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 595.401747][T14489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.401756][T14489] R13: 00007fab7d216218 R14: 00007fab7d216180 R15: 00007fab7d33fa48 [ 595.401780][T14489] [ 596.574191][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 596.744294][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 596.780991][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 596.794171][ T5921] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 596.813159][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2362'. [ 596.826924][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 596.836443][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.847690][ T24] usb 4-1: Product: syz [ 596.851910][ T24] usb 4-1: Manufacturer: syz [ 596.857171][ T24] usb 4-1: SerialNumber: syz [ 596.868908][ T24] usb 4-1: config 0 descriptor?? [ 596.876372][T14493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.885147][T14493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.953994][ T5921] usb 5-1: device descriptor read/64, error -71 [ 596.989909][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2360'. [ 597.105336][T14493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.123194][T14493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.213714][ T5921] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 597.343781][ T5921] usb 5-1: device descriptor read/64, error -71 [ 597.455978][ T5921] usb usb5-port1: attempt power cycle [ 597.548774][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 597.781697][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 597.781733][ T29] audit: type=1326 audit(1771860362.389:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.814157][ T5921] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 597.814189][ T29] audit: type=1326 audit(1771860362.409:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.848470][ T29] audit: type=1326 audit(1771860362.429:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.876058][ T29] audit: type=1326 audit(1771860362.429:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.900143][ T29] audit: type=1326 audit(1771860362.429:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.905973][ T5921] usb 5-1: device descriptor read/8, error -71 [ 597.925774][ T29] audit: type=1326 audit(1771860362.429:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.956999][ T29] audit: type=1326 audit(1771860362.429:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 597.981665][ T29] audit: type=1326 audit(1771860362.429:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 598.006080][ T29] audit: type=1326 audit(1771860362.459:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 598.029550][ T29] audit: type=1326 audit(1771860362.459:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.2.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9c629 code=0x7ffc0000 [ 598.183918][ T5921] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 598.214717][ T5921] usb 5-1: device descriptor read/8, error -71 [ 598.324356][ T5921] usb usb5-port1: unable to enumerate USB device [ 598.470848][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 598.511889][ T24] usb 4-1: USB disconnect, device number 85 [ 598.584056][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.598020][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.620517][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.660058][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.820518][T14533] binder: 14532:14533 ioctl c0306201 2000000001c0 returned -14 [ 599.060431][T14542] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2374'. [ 599.137076][ T5921] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 599.183257][T14544] program syz.5.2375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.299429][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.319349][ T5921] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 599.331447][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 599.340995][ T5921] usb 4-1: Product: syz [ 599.353385][ T5921] usb 4-1: Manufacturer: syz [ 599.360215][ T5921] usb 4-1: SerialNumber: syz [ 599.368068][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 599.383291][ T5921] usb 4-1: config 0 descriptor?? [ 599.616642][ T5921] usb 4-1: bad CDC descriptors [ 599.623435][ T5921] usb 4-1: unsupported MDLM descriptors [ 599.635898][ T5921] usb 4-1: USB disconnect, device number 86 [ 599.986387][T14559] autofs4:pid:14559:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.100), cmd(0xc018937e) [ 600.005896][T14559] autofs4:pid:14559:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 600.194811][T14561] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2380'. [ 600.322129][T14565] FAULT_INJECTION: forcing a failure. [ 600.322129][T14565] name failslab, interval 1, probability 0, space 0, times 0 [ 600.371632][T14565] CPU: 0 UID: 0 PID: 14565 Comm: syz.6.2382 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.371663][T14565] Tainted: [L]=SOFTLOCKUP [ 600.371670][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.371681][T14565] Call Trace: [ 600.371688][T14565] [ 600.371696][T14565] dump_stack_lvl+0xe8/0x150 [ 600.371727][T14565] should_fail_ex+0x412/0x560 [ 600.371754][T14565] should_failslab+0xa8/0x100 [ 600.371777][T14565] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 600.371805][T14565] ? __alloc_skb+0x186/0x7d0 [ 600.371828][T14565] ? __alloc_skb+0x1d0/0x7d0 [ 600.371848][T14565] ? __local_bh_enable_ip+0xd0/0x130 [ 600.371874][T14565] __alloc_skb+0x1d0/0x7d0 [ 600.371901][T14565] netlink_sendmsg+0x5d4/0xb40 [ 600.371932][T14565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.371957][T14565] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.371980][T14565] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.372001][T14565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.372022][T14565] ____sys_sendmsg+0xa68/0xad0 [ 600.372056][T14565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.372089][T14565] ? import_iovec+0x73/0xa0 [ 600.372117][T14565] ___sys_sendmsg+0x2a5/0x360 [ 600.372147][T14565] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.372200][T14565] ? __fget_files+0x2a/0x420 [ 600.372225][T14565] ? __fget_files+0x3a0/0x420 [ 600.372255][T14565] __x64_sys_sendmsg+0x1bd/0x2a0 [ 600.372283][T14565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.372319][T14565] ? __pfx_ksys_write+0x10/0x10 [ 600.372345][T14565] do_syscall_64+0x14d/0xf80 [ 600.372371][T14565] ? trace_irq_disable+0x3b/0x150 [ 600.372396][T14565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.372415][T14565] ? clear_bhb_loop+0x40/0x90 [ 600.372438][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.372457][T14565] RIP: 0033:0x7f88cd79c629 [ 600.372475][T14565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.372491][T14565] RSP: 002b:00007f88ce708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.372518][T14565] RAX: ffffffffffffffda RBX: 00007f88cda15fa0 RCX: 00007f88cd79c629 [ 600.372532][T14565] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 600.372543][T14565] RBP: 00007f88ce708090 R08: 0000000000000000 R09: 0000000000000000 [ 600.372554][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.372568][T14565] R13: 00007f88cda16038 R14: 00007f88cda15fa0 R15: 00007f88cdb3fa48 [ 600.372593][T14565] [ 601.014033][T14584] SET target dimension over the limit! [ 601.054250][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 601.192185][T14590] dlm: no locking on control device [ 601.209802][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2392'. [ 601.224226][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 601.236078][ T24] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 601.267436][ T24] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.290365][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 601.302240][ T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 601.316345][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.348917][ T24] usb 4-1: config 0 descriptor?? [ 601.596607][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 601.610467][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 601.627310][ T24] usb 4-1: USB disconnect, device number 87 [ 602.133892][ T5921] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 602.233700][T12060] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 602.283723][ T1225] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 602.313902][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 602.331176][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.348670][ T5921] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 602.367632][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.379923][ T5921] usb 5-1: Product: syz [ 602.384500][ T5921] usb 5-1: Manufacturer: syz [ 602.389396][ T5921] usb 5-1: SerialNumber: syz [ 602.398720][T12060] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 602.410660][ T5921] usb 5-1: config 0 descriptor?? [ 602.415731][T12060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.424781][T12060] usb 3-1: Product: syz [ 602.432018][ T5921] cdc_ether 5-1:0.0: skipping garbage [ 602.438201][T12060] usb 3-1: Manufacturer: syz [ 602.442874][ T5921] usb 5-1: bad CDC descriptors [ 602.447782][ T1225] usb 6-1: Using ep0 maxpacket: 32 [ 602.453720][T12060] usb 3-1: SerialNumber: syz [ 602.460737][ T1225] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 602.471962][ T5921] usb 5-1: unsupported MDLM descriptors [ 602.487226][ T5921] cdc_acm 5-1:0.0: skipping garbage [ 602.492592][ T1225] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 602.511138][ T1225] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.522944][ T1225] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 602.544691][ T1225] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 602.554220][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.563509][ T1225] usb 6-1: Product: syz [ 602.570459][ T1225] usb 6-1: Manufacturer: syz [ 602.575640][ T1225] usb 6-1: SerialNumber: syz [ 602.627347][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 602.663229][ T1225] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input41 [ 602.747732][ T24] usb 5-1: USB disconnect, device number 91 [ 602.845552][ T1225] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 602.869389][ T1225] (id 0x00) [ 602.906005][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 602.940123][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 603.026225][ T1225] rc_core: IR keymap rc-imon-pad not found [ 603.044875][ T1225] Registered IR keymap rc-empty [ 603.064322][ T1225] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 603.085625][ T1225] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 603.128369][ T1225] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 603.151706][ T1225] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input42 [ 603.190769][ T1225] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:48> initialized [ 603.344470][T14616] imon:vfd_write: invalid payload size [ 603.369209][ T1225] usb 6-1: USB disconnect, device number 48 [ 603.593057][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.614538][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.246968][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 604.554298][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 604.704192][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 604.715999][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.727505][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 604.744267][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 604.744711][ T5895] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 604.778766][ T24] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 604.791108][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 604.801990][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.847012][ T24] usb 5-1: config 0 descriptor?? [ 604.854093][T12060] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 604.892494][T12060] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 604.935133][T12060] usb 3-1: USB disconnect, device number 72 [ 604.966843][ T5895] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 604.977480][ T5895] usb 4-1: config 0 has no interface number 0 [ 604.987954][ T5895] usb 4-1: config 0 interface 91 has no altsetting 0 [ 605.002961][ T5895] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 605.014335][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.033279][ T5895] usb 4-1: config 0 descriptor?? [ 605.139201][T14678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.209576][T14690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.258584][ T5895] usb 4-1: string descriptor 0 read error: -71 [ 605.278469][ T5895] uvcvideo 4-1:0.91: Found UVC 0.00 device (174f:5212) [ 605.318226][ T5895] uvcvideo 4-1:0.91: No valid video chain found. [ 605.358561][ T5895] usb 4-1: USB disconnect, device number 88 [ 605.404054][ T24] waterforce 0003:1044:7A4D.0020: item fetching failed at offset 0/1 [ 605.425658][ T24] waterforce 0003:1044:7A4D.0020: hid parse failed with -22 [ 605.457211][ T24] waterforce 0003:1044:7A4D.0020: probe with driver waterforce failed with error -22 [ 605.643083][ T5895] usb 5-1: USB disconnect, device number 92 [ 605.768320][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 605.801160][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 605.856841][T14703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2413'. [ 605.909999][T14703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2413'. [ 605.969143][T14703] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2413'. [ 606.218673][T12060] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 606.379660][T14717] FAULT_INJECTION: forcing a failure. [ 606.379660][T14717] name failslab, interval 1, probability 0, space 0, times 0 [ 606.397897][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.2.2418 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.397928][T14717] Tainted: [L]=SOFTLOCKUP [ 606.397935][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.397945][T14717] Call Trace: [ 606.397953][T14717] [ 606.397962][T14717] dump_stack_lvl+0xe8/0x150 [ 606.397993][T14717] should_fail_ex+0x412/0x560 [ 606.398017][T14717] ? alloc_inode+0x6a/0x1b0 [ 606.398042][T14717] should_failslab+0xa8/0x100 [ 606.398066][T14717] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 606.398096][T14717] ? simple_start_creating+0xcc/0x110 [ 606.398127][T14717] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 606.398153][T14717] alloc_inode+0x6a/0x1b0 [ 606.398178][T14717] new_inode+0x22/0x170 [ 606.398208][T14717] debugfs_create_dir+0x68/0x350 [ 606.398234][T14717] ieee80211_debugfs_recreate_netdev+0x1b4/0x1460 [ 606.398267][T14717] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 606.398296][T14717] ? ieee80211_setup_sdata+0x8cd/0xb50 [ 606.398326][T14717] ieee80211_if_add+0xc3d/0x13a0 [ 606.398361][T14717] ieee80211_add_iface+0xbb/0x5e0 [ 606.398386][T14717] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 606.398410][T14717] ? __alloc_skb+0x4e5/0x7d0 [ 606.398439][T14717] nl80211_new_interface+0x80a/0x11f0 [ 606.398470][T14717] ? __pfx_nl80211_new_interface+0x10/0x10 [ 606.398496][T14717] ? nl80211_pre_doit+0x4fb/0x930 [ 606.398521][T14717] genl_family_rcv_msg_doit+0x22a/0x330 [ 606.398556][T14717] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 606.398596][T14717] ? bpf_lsm_capable+0x9/0x20 [ 606.398621][T14717] ? security_capable+0x7e/0x2c0 [ 606.398648][T14717] genl_rcv_msg+0x61c/0x7a0 [ 606.398681][T14717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.398713][T14717] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 606.398730][T14717] ? __pfx_nl80211_new_interface+0x10/0x10 [ 606.398749][T14717] ? __pfx_nl80211_post_doit+0x10/0x10 [ 606.398772][T14717] ? __lock_acquire+0x6b5/0x2cf0 [ 606.398807][T14717] netlink_rcv_skb+0x232/0x4b0 [ 606.398830][T14717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.398859][T14717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.398898][T14717] ? down_read+0x272/0x2e0 [ 606.398916][T14717] ? genl_rcv+0xd/0x40 [ 606.398944][T14717] genl_rcv+0x28/0x40 [ 606.398969][T14717] netlink_unicast+0x80f/0x9b0 [ 606.398997][T14717] ? __pfx_netlink_unicast+0x10/0x10 [ 606.399019][T14717] ? netlink_sendmsg+0x650/0xb40 [ 606.399040][T14717] ? skb_put+0x11b/0x210 [ 606.399067][T14717] netlink_sendmsg+0x813/0xb40 [ 606.399100][T14717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.399126][T14717] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.399150][T14717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.399172][T14717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.399193][T14717] ____sys_sendmsg+0xa68/0xad0 [ 606.399229][T14717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.399264][T14717] ? import_iovec+0x73/0xa0 [ 606.399295][T14717] ___sys_sendmsg+0x2a5/0x360 [ 606.399327][T14717] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.399385][T14717] ? __fget_files+0x2a/0x420 [ 606.399410][T14717] ? __fget_files+0x3a0/0x420 [ 606.399446][T14717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 606.399476][T14717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.399512][T14717] ? __pfx_ksys_write+0x10/0x10 [ 606.399543][T14717] do_syscall_64+0x14d/0xf80 [ 606.399569][T14717] ? trace_irq_disable+0x3b/0x150 [ 606.399594][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.399612][T14717] ? clear_bhb_loop+0x40/0x90 [ 606.399635][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.399654][T14717] RIP: 0033:0x7fab7cf9c629 [ 606.399672][T14717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.399694][T14717] RSP: 002b:00007fab7dd7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.399715][T14717] RAX: ffffffffffffffda RBX: 00007fab7d215fa0 RCX: 00007fab7cf9c629 [ 606.399729][T14717] RDX: 000000002400c890 RSI: 00002000000004c0 RDI: 0000000000000003 [ 606.399741][T14717] RBP: 00007fab7dd7c090 R08: 0000000000000000 R09: 0000000000000000 [ 606.399753][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.399764][T14717] R13: 00007fab7d216038 R14: 00007fab7d215fa0 R15: 00007fab7d33fa48 [ 606.399795][T14717] [ 606.399996][T14717] debugfs: out of free dentries, can not create directory 'netdev:nicvf0' [ 606.549669][ T1225] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 606.867183][T12060] usb 4-1: Using ep0 maxpacket: 16 [ 606.883215][T12060] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 606.903856][T12060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.916451][T12060] usb 4-1: Product: syz [ 606.950459][T12060] usb 4-1: Manufacturer: syz [ 606.962045][T12060] usb 4-1: SerialNumber: syz [ 607.032388][T12060] r8152-cfgselector 4-1: Unknown version 0x0000 [ 607.046684][T12060] r8152-cfgselector 4-1: config 0 descriptor?? [ 607.115971][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.146874][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.193366][ T1225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.222654][ T1225] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.262482][ T1225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.275703][T12060] r8152-cfgselector 4-1: Unknown version 0x0000 [ 607.285419][T12060] r8152-cfgselector 4-1: bad CDC descriptors [ 607.302567][ T1225] usb 6-1: config 0 descriptor?? [ 607.335392][T12060] r8152-cfgselector 4-1: USB disconnect, device number 89 [ 607.489501][ T5921] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 607.684479][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 607.697576][ T5921] usb 3-1: config 0 has no interfaces? [ 607.714821][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 607.724463][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 607.732504][ T5921] usb 3-1: Manufacturer: syz [ 607.743164][ T5921] usb 3-1: config 0 descriptor?? [ 607.908042][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.928447][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.324429][ T5921] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 608.506060][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.542690][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.587631][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.613123][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.648757][ T5921] usb 4-1: Product: syz [ 608.668087][ T5921] usb 4-1: Manufacturer: syz [ 608.688556][ T5921] usb 4-1: SerialNumber: syz [ 608.968708][ T5921] usb 4-1: 0:2 : does not exist [ 609.054380][ T5921] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 609.236500][ T1225] usbhid 6-1:0.0: can't add hid device: -71 [ 609.260713][ T1225] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 609.301184][ T5921] usb 4-1: USB disconnect, device number 90 [ 609.357319][ T1225] usb 6-1: USB disconnect, device number 49 [ 609.410181][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.390270][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2432'. [ 610.506608][ T5895] usb 3-1: USB disconnect, device number 73 [ 612.890499][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 612.890516][ T29] audit: type=1326 audit(1771860377.499:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 612.940525][ T29] audit: type=1326 audit(1771860377.499:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 612.967437][ T29] audit: type=1326 audit(1771860377.539:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 612.990860][ T29] audit: type=1326 audit(1771860377.539:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.003794][ T1225] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 613.032526][ T29] audit: type=1326 audit(1771860377.539:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.136430][ T29] audit: type=1326 audit(1771860377.539:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.208564][ T29] audit: type=1326 audit(1771860377.539:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.238830][ T29] audit: type=1326 audit(1771860377.539:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.265590][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.276768][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.281915][ T29] audit: type=1326 audit(1771860377.539:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.312221][ T29] audit: type=1326 audit(1771860377.539:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 613.360939][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.413992][ T1225] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.435550][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.477213][ T1225] usb 4-1: config 0 descriptor?? [ 613.964499][ T1225] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 614.195234][ T24] usb 4-1: USB disconnect, device number 91 [ 614.472376][T14855] ip6tnl1: entered allmulticast mode [ 615.304140][ T5895] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 615.464262][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 615.500208][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.522416][ T5895] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 615.564907][ T5895] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 615.594253][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.614405][ T5895] usb 3-1: Product: syz [ 615.618578][ T5895] usb 3-1: Manufacturer: syz [ 615.633944][ T5895] usb 3-1: SerialNumber: syz [ 615.944652][T14880] binder: 14879:14880 ioctl c0306216 2000000005c0 returned -22 [ 615.974229][ T5895] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 616.160465][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 616.286373][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 616.373098][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 616.471219][ T5895] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.541823][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.588148][ T5895] usb 5-1: Product: syz [ 616.610199][T14894] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2461'. [ 616.628899][ T5895] usb 5-1: Manufacturer: syz [ 616.652839][ T5895] usb 5-1: SerialNumber: syz [ 616.687243][ T5895] usb 5-1: config 0 descriptor?? [ 616.726203][T14878] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 617.474419][T14878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2457'. [ 618.010010][T14906] vxcan1: entered promiscuous mode [ 618.180486][ T5903] usb 3-1: USB disconnect, device number 74 [ 618.862157][ T5895] usb 5-1: USB disconnect, device number 93 [ 618.948927][ T9598] udevd[9598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.662691][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2473'. [ 621.502691][T14957] input: syz0 as /devices/virtual/input/input43 [ 621.612675][T14959] xt_policy: neither incoming nor outgoing policy selected [ 622.176033][T14969] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2483' sets config #1 [ 622.637824][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 622.637837][ T29] audit: type=1326 audit(1771860387.249:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 622.728650][ T29] audit: type=1326 audit(1771860387.289:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 622.844292][ T29] audit: type=1326 audit(1771860387.289:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 622.956871][ T29] audit: type=1326 audit(1771860387.289:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 623.011741][ T29] audit: type=1326 audit(1771860387.289:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 623.090819][ T29] audit: type=1326 audit(1771860387.289:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdf139c629 code=0x7ffc0000 [ 623.464359][T14988] syzkaller0: entered promiscuous mode [ 623.487219][T14988] syzkaller0: entered allmulticast mode [ 623.649727][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 623.700616][T14991] fuse: Unknown parameter 'user_i<ìd' [ 623.781300][T14996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.083080][ T29] audit: type=1326 audit(1771860388.689:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.3.2491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb17b9c629 code=0x0 [ 624.251105][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.264081][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.974325][ T5903] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 625.166300][ T5903] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.206217][ T5903] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.258558][ T5903] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.307004][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.377408][ T5903] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.408039][ T5903] usb 6-1: invalid MIDI out EP 0 [ 625.776212][ T5903] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 625.839716][ T5903] usb 6-1: USB disconnect, device number 50 [ 626.153080][T15032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2500'. [ 626.924249][ T5903] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 627.098251][ T5903] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 627.109377][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.130483][ T5903] usb 3-1: Product: syz [ 627.139723][ T5903] usb 3-1: Manufacturer: syz [ 627.154358][ T5903] usb 3-1: SerialNumber: syz [ 627.193033][ T5903] usb 3-1: config 0 descriptor?? [ 627.226931][ T5903] hub 3-1:0.0: bad descriptor, ignoring hub [ 627.235490][ T5903] hub 3-1:0.0: probe with driver hub failed with error -5 [ 627.252804][ T5903] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 627.297207][T15047] ip6gretap0: entered promiscuous mode [ 627.324368][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 627.528893][ T5895] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 627.577624][ T5903] usb 3-1: USB disconnect, device number 75 [ 627.620598][ T5903] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 627.784245][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 627.899407][ T5895] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 627.928459][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.939357][ T5895] usb 5-1: Product: syz [ 627.944916][ T5895] usb 5-1: Manufacturer: syz [ 627.949592][ T5895] usb 5-1: SerialNumber: syz [ 628.109118][T15060] xt_hashlimit: size too large, truncated to 1048576 [ 628.177172][ T5895] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 628.241570][ T5895] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 628.276992][ T5895] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 628.316617][ T5895] usb 5-1: media controller created [ 628.366323][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.415982][ T5903] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 628.626237][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71) [ 628.687463][ T5895] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 628.716156][ T5895] usb 5-1: USB disconnect, device number 94 [ 628.741729][ T5903] usb 3-1: config 8 has an invalid interface number: 241 but max is 0 [ 628.761293][ T5903] usb 3-1: config 8 has no interface number 0 [ 628.782944][ T5903] usb 3-1: config 8 interface 241 altsetting 0 endpoint 0x3 has invalid maxpacket 9224, setting to 1024 [ 628.834070][ T5903] usb 3-1: config 8 interface 241 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.884910][ T5903] usb 3-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=e2.24 [ 628.898721][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.926831][ T5903] usb 3-1: Product: syz [ 628.941874][ T5903] usb 3-1: Manufacturer: syz [ 628.956253][ T5903] usb 3-1: SerialNumber: syz [ 628.979507][T15061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.342612][ T5903] usb 3-1: USB disconnect, device number 76 [ 630.481311][T15087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2516'. [ 630.536992][T15089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2516'. [ 631.534697][T15101] tipc: Started in network mode [ 631.553032][T15101] tipc: Node identity 62de1f878168, cluster identity 4711 [ 631.580832][T15101] tipc: Enabled bearer , priority 0 [ 631.605754][T15102] syzkaller0: entered promiscuous mode [ 631.624230][T15102] syzkaller0: entered allmulticast mode [ 631.680820][T15099] tipc: Resetting bearer [ 631.859527][T15099] tipc: Disabling bearer [ 632.017738][T15107] openvswitch: netlink: Flow key attr not present in new flow. [ 633.791914][T15117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.483943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.628645][T15146] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2530'. [ 635.068070][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 635.503837][ T5903] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 635.554221][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 635.693671][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 635.714546][ T5903] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 635.746787][ T5903] usb 3-1: config 0 has no interface number 0 [ 635.783681][ T5903] usb 3-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=2a.87 [ 635.795001][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 635.817599][ T24] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 635.823697][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.855201][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.872888][ T24] usb 4-1: Product: syz [ 635.880922][ T24] usb 4-1: Manufacturer: syz [ 635.880929][ T5903] usb 3-1: Product: syz [ 635.880945][ T5903] usb 3-1: Manufacturer: syz [ 635.910029][ T24] usb 4-1: SerialNumber: syz [ 635.933358][ T5903] usb 3-1: SerialNumber: syz [ 635.945684][ T24] usb 4-1: config 0 descriptor?? [ 635.959264][ T24] empeg 4-1:0.0: empeg converter detected [ 635.967580][ T24] usb 4-1: active config #0 != 1 ?? [ 635.981310][ T5903] usb 3-1: config 0 descriptor?? [ 636.200604][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 636.232145][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 636.246986][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 636.265803][T15161] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2536'. [ 636.308305][ T24] usb 4-1: USB disconnect, device number 92 [ 637.041240][T15164] syzkaller0: entered promiscuous mode [ 637.063102][ T5903] gspca_main: pac207-2.14.0 probing 093a:2460 [ 637.077873][T15164] syzkaller0: entered allmulticast mode [ 637.223722][ T5903] gspca_pac207: Failed to read a register (index 0x0001, error -110) [ 637.339879][ T1225] usb 3-1: USB disconnect, device number 77 [ 638.233344][T15185] @ÿ: renamed from bond_slave_0 (while UP) [ 638.903731][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 639.074016][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 639.092308][ T24] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 639.107734][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.131694][ T24] usb 5-1: Product: syz [ 639.136677][ T24] usb 5-1: Manufacturer: syz [ 639.141514][ T24] usb 5-1: SerialNumber: syz [ 639.382010][ T24] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 639.393513][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 639.410321][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 639.421037][ T24] usb 5-1: media controller created [ 639.434861][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.445008][ T5895] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 639.587341][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 639.610518][ T5895] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 639.627718][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.705691][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.747236][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 639.763360][ T24] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 639.782474][ T5895] usb 6-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 639.792374][ T24] usb 5-1: USB disconnect, device number 95 [ 639.800668][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.822794][ T5895] usb 6-1: config 0 descriptor?? [ 640.260083][ T5895] wacom 0003:056A:0131.0022: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 640.461835][T15227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.479773][T15180] Invalid argument reading file caps for ./file0 [ 640.569481][ T24] usb 6-1: USB disconnect, device number 51 [ 640.972248][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2555'. [ 641.412024][T15245] netlink: 'syz.5.2557': attribute type 1 has an invalid length. [ 641.449911][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.547618][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.560608][T15245] bond3: entered promiscuous mode [ 641.588487][T15245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.612980][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2557'. [ 641.644913][ T5903] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 641.655009][T15240] loop4: detected capacity change from 0 to 7 [ 641.678649][T15240] Dev loop4: unable to read RDB block 7 [ 641.690659][T15242] bond3: (slave bridge3): making interface the new active one [ 641.707288][T15240] loop4: unable to read partition table [ 641.730660][T15242] bridge3: entered promiscuous mode [ 641.742626][T15240] loop4: partition table beyond EOD, truncated [ 641.767925][T15242] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 641.779886][T15240] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.834764][T15247] bond3: entered allmulticast mode [ 641.872466][T15247] bridge3: entered allmulticast mode [ 642.321444][T15258] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2561'. [ 642.354424][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2561'. [ 642.954377][ T5903] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 643.113716][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 643.142156][ T5903] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 643.172055][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.212877][ T5903] usb 4-1: Product: syz [ 643.254798][ T5903] usb 4-1: Manufacturer: syz [ 643.267431][ T5903] usb 4-1: SerialNumber: syz [ 643.512670][ T5903] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 643.557371][ T5903] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 643.612619][ T5903] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 643.649846][ T5903] usb 4-1: media controller created [ 643.719020][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.798837][ T5903] zl10353_read_register: readreg error (reg=127, ret==-71) [ 643.890483][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.926427][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.936838][ T5903] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 643.982747][ T5903] usb 4-1: USB disconnect, device number 94 [ 644.103704][ T1225] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 644.114668][T15286] loop4: detected capacity change from 0 to 7 [ 644.129779][T15286] Dev loop4: unable to read RDB block 7 [ 644.140999][T15286] loop4: unable to read partition table [ 644.147266][T15286] loop4: partition table beyond EOD, truncated [ 644.153456][T15286] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 644.524983][T15304] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2574'. [ 644.698267][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2575'. [ 644.708542][T15309] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2575'. [ 644.824284][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 644.906639][ T5895] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 644.994143][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 645.014262][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 645.050927][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 645.085381][ T5895] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 645.113574][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 645.126809][ T5895] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 645.140320][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.167069][ T5895] usb 4-1: config 0 has no interface number 0 [ 645.173314][ T24] usb 3-1: Product: syz [ 645.182431][ T24] usb 3-1: Manufacturer: syz [ 645.191689][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 645.204115][ T24] usb 3-1: SerialNumber: syz [ 645.208820][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.223116][ T24] usb 3-1: config 0 descriptor?? [ 645.231816][ T5895] usb 4-1: Product: syz [ 645.239875][ T5895] usb 4-1: Manufacturer: syz [ 645.248358][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 645.265292][ T5895] usb 4-1: SerialNumber: syz [ 645.274744][ T5895] usb 4-1: config 0 descriptor?? [ 645.280891][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 645.702179][ T5895] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 645.727387][ T5895] uvcvideo 4-1:0.64: No valid video chain found. [ 645.856689][ T24] em28xx 3-1:0.0: chip ID is em28178 [ 645.929108][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.977013][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.062700][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.078624][ T1225] usb 3-1: USB disconnect, device number 78 [ 646.091217][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.132600][ T1225] em28xx 3-1:0.0: Disconnecting em28xx [ 646.191540][ T1225] em28xx 3-1:0.0: Freeing device [ 646.274941][ T5903] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 646.314378][ T24] usb 4-1: USB disconnect, device number 95 [ 646.557936][T15325] loop4: detected capacity change from 0 to 7 [ 646.578680][T15325] Dev loop4: unable to read RDB block 7 [ 646.596027][T15325] loop4: unable to read partition table [ 646.622297][T15325] loop4: partition table beyond EOD, truncated [ 646.636767][T15325] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 647.067584][T15345] FAULT_INJECTION: forcing a failure. [ 647.067584][T15345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.081541][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.2.2586 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.081571][T15345] Tainted: [L]=SOFTLOCKUP [ 647.081578][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.081589][T15345] Call Trace: [ 647.081597][T15345] [ 647.081604][T15345] dump_stack_lvl+0xe8/0x150 [ 647.081632][T15345] should_fail_ex+0x412/0x560 [ 647.081658][T15345] _copy_to_user+0x31/0xb0 [ 647.081684][T15345] simple_read_from_buffer+0xe1/0x170 [ 647.081710][T15345] proc_fail_nth_read+0x1bb/0x230 [ 647.081736][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.081762][T15345] ? rw_verify_area+0x2a6/0x4d0 [ 647.081778][T15345] ? vfs_write+0x27f/0xb90 [ 647.081792][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.081818][T15345] vfs_read+0x20c/0xa70 [ 647.081834][T15345] ? fdget_pos+0x246/0x320 [ 647.081862][T15345] ? __pfx___mutex_lock+0x10/0x10 [ 647.081889][T15345] ? __pfx_vfs_read+0x10/0x10 [ 647.081908][T15345] ? __fget_files+0x2a/0x420 [ 647.081935][T15345] ? __fget_files+0x3a0/0x420 [ 647.081956][T15345] ? __fget_files+0x2a/0x420 [ 647.081987][T15345] ksys_read+0x150/0x270 [ 647.082008][T15345] ? __pfx_ksys_read+0x10/0x10 [ 647.082034][T15345] do_syscall_64+0x14d/0xf80 [ 647.082059][T15345] ? trace_irq_disable+0x3b/0x150 [ 647.082083][T15345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.082103][T15345] ? clear_bhb_loop+0x40/0x90 [ 647.082126][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.082144][T15345] RIP: 0033:0x7fab7cf5cece [ 647.082160][T15345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.082176][T15345] RSP: 002b:00007fab7dd7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.082195][T15345] RAX: ffffffffffffffda RBX: 00007fab7dd7c6c0 RCX: 00007fab7cf5cece [ 647.082210][T15345] RDX: 000000000000000f RSI: 00007fab7dd7c0a0 RDI: 0000000000000004 [ 647.082221][T15345] RBP: 00007fab7dd7c090 R08: 0000000000000000 R09: 0000000000000000 [ 647.082232][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.082242][T15345] R13: 00007fab7d216038 R14: 00007fab7d215fa0 R15: 00007fab7d33fa48 [ 647.082269][T15345] [ 647.667439][T15339] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 647.751244][T15352] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 649.249042][T15377] FAULT_INJECTION: forcing a failure. [ 649.249042][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.283668][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.4.2594 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.283699][T15377] Tainted: [L]=SOFTLOCKUP [ 649.283707][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.283721][T15377] Call Trace: [ 649.283728][T15377] [ 649.283736][T15377] dump_stack_lvl+0xe8/0x150 [ 649.283764][T15377] should_fail_ex+0x412/0x560 [ 649.283789][T15377] _copy_from_iter+0x1d3/0x1670 [ 649.283816][T15377] ? rcu_is_watching+0x15/0xb0 [ 649.283845][T15377] ? __pfx__copy_from_iter+0x10/0x10 [ 649.283876][T15377] ? netlink_sendmsg+0x650/0xb40 [ 649.283904][T15377] ? skb_put+0x11b/0x210 [ 649.283931][T15377] netlink_sendmsg+0x6c0/0xb40 [ 649.283962][T15377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.283987][T15377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.284011][T15377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.284033][T15377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.284059][T15377] ____sys_sendmsg+0xa68/0xad0 [ 649.284094][T15377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.284128][T15377] ? import_iovec+0x73/0xa0 [ 649.284156][T15377] ___sys_sendmsg+0x2a5/0x360 [ 649.284187][T15377] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.284243][T15377] ? __fget_files+0x2a/0x420 [ 649.284268][T15377] ? __fget_files+0x3a0/0x420 [ 649.284302][T15377] __x64_sys_sendmsg+0x1bd/0x2a0 [ 649.284331][T15377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.284363][T15377] ? __pfx_ksys_write+0x10/0x10 [ 649.284388][T15377] do_syscall_64+0x14d/0xf80 [ 649.284411][T15377] ? trace_irq_disable+0x3b/0x150 [ 649.284434][T15377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.284453][T15377] ? clear_bhb_loop+0x40/0x90 [ 649.284475][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.284491][T15377] RIP: 0033:0x7fcdf139c629 [ 649.284507][T15377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.284522][T15377] RSP: 002b:00007fcdf2250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.284540][T15377] RAX: ffffffffffffffda RBX: 00007fcdf1615fa0 RCX: 00007fcdf139c629 [ 649.284553][T15377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 649.284565][T15377] RBP: 00007fcdf2250090 R08: 0000000000000000 R09: 0000000000000000 [ 649.284577][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.284587][T15377] R13: 00007fcdf1616038 R14: 00007fcdf1615fa0 R15: 00007fcdf173fa48 [ 649.284615][T15377] [ 649.847586][ T29] audit: type=1326 audit(1771860414.459:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.4.2596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdf139c629 code=0x0 [ 649.924364][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.946446][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.058032][T15386] loop4: detected capacity change from 0 to 7 [ 650.154378][ T796] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 650.185437][T15386] Dev loop4: unable to read RDB block 7 [ 650.202720][T15386] loop4: unable to read partition table [ 650.215931][T15386] loop4: partition table beyond EOD, truncated [ 650.232395][T15386] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 650.688273][T15402] syzkaller0: entered promiscuous mode [ 650.694195][T15402] syzkaller0: entered allmulticast mode [ 651.284803][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 651.475648][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 651.505024][T15421] kernel read not supported for file /!sel (pid: 15421 comm: syz.6.2605) [ 651.526638][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 651.560281][ T29] audit: type=1800 audit(1771860416.159:1982): pid=15421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2605" name="!sel" dev="mqueue" ino=66453 res=0 errno=0 [ 651.607517][ T24] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 651.653160][ T24] usb 6-1: config 0 has no interface number 0 [ 651.674805][ T24] usb 6-1: config 0 interface 206 has no altsetting 0 [ 651.715143][ T24] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=9e.4a [ 651.745212][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.778665][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2606'. [ 651.804333][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2606'. [ 651.823649][T15424] FAULT_INJECTION: forcing a failure. [ 651.823649][T15424] name failslab, interval 1, probability 0, space 0, times 0 [ 651.855016][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.6.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.855037][T15424] Tainted: [L]=SOFTLOCKUP [ 651.855041][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.855048][T15424] Call Trace: [ 651.855052][T15424] [ 651.855058][T15424] dump_stack_lvl+0xe8/0x150 [ 651.855077][T15424] should_fail_ex+0x412/0x560 [ 651.855092][T15424] ? __d_alloc+0x37/0x6f0 [ 651.855109][T15424] should_failslab+0xa8/0x100 [ 651.855123][T15424] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 651.855145][T15424] __d_alloc+0x37/0x6f0 [ 651.855163][T15424] d_alloc+0x4b/0x190 [ 651.855178][T15424] ? lookup_one_qstr_excl+0xc8/0x360 [ 651.855194][T15424] lookup_one_qstr_excl+0xdc/0x360 [ 651.855208][T15424] ? lookup_noperm_common+0x245/0x430 [ 651.855224][T15424] start_dirop+0x5c/0x90 [ 651.855239][T15424] simple_start_creating+0xcc/0x110 [ 651.855257][T15424] ? __pfx_simple_start_creating+0x10/0x10 [ 651.855276][T15424] ? do_raw_spin_unlock+0xf5/0x210 [ 651.855287][T15424] ? mntput+0x65/0xc0 [ 651.855302][T15424] debugfs_start_creating+0xdb/0x1a0 [ 651.855318][T15424] __debugfs_create_file+0x6f/0x400 [ 651.855334][T15424] debugfs_create_file_full+0x3f/0x60 [ 651.855350][T15424] ref_tracker_dir_debugfs+0x197/0x360 [ 651.855364][T15424] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 651.855391][T15424] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 651.855403][T15424] ? alloc_netdev_mqs+0xa6/0x11b0 [ 651.855415][T15424] ? __raw_spin_lock_init+0x45/0x100 [ 651.855427][T15424] alloc_netdev_mqs+0x272/0x11b0 [ 651.855442][T15424] ? __pfx_hsr_dev_setup+0x10/0x10 [ 651.855458][T15424] rtnl_create_link+0x31f/0xd70 [ 651.855472][T15424] rtnl_newlink_create+0x277/0xb70 [ 651.855488][T15424] ? __pfx___nla_validate_parse+0x10/0x10 [ 651.855507][T15424] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 651.855523][T15424] ? __pfx___mutex_lock+0x10/0x10 [ 651.855539][T15424] ? ns_capable+0x89/0xe0 [ 651.855554][T15424] rtnl_newlink+0x1666/0x1be0 [ 651.855575][T15424] ? __pfx_rtnl_newlink+0x10/0x10 [ 651.855587][T15424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.855616][T15424] ? kasan_quarantine_put+0xbb/0x1f0 [ 651.855626][T15424] ? lockdep_hardirqs_on+0x7a/0x110 [ 651.855644][T15424] ? kmem_cache_free+0x187/0x630 [ 651.855654][T15424] ? nlmon_xmit+0xb0/0x100 [ 651.855675][T15424] ? __lock_acquire+0x6b5/0x2cf0 [ 651.855693][T15424] ? __local_bh_enable_ip+0xd0/0x130 [ 651.855706][T15424] ? lockdep_hardirqs_on+0x7a/0x110 [ 651.855721][T15424] ? __dev_queue_xmit+0x274/0x38a0 [ 651.855736][T15424] ? __local_bh_enable_ip+0xd0/0x130 [ 651.855748][T15424] ? __dev_queue_xmit+0x274/0x38a0 [ 651.855776][T15424] ? __pfx_rtnl_newlink+0x10/0x10 [ 651.855788][T15424] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 651.855803][T15424] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 651.855815][T15424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.855827][T15424] ? ref_tracker_free+0x693/0x840 [ 651.855838][T15424] ? __copy_skb_header+0xa3/0x4a0 [ 651.855854][T15424] ? __pfx_ref_tracker_free+0x10/0x10 [ 651.855872][T15424] netlink_rcv_skb+0x232/0x4b0 [ 651.855886][T15424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.855900][T15424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.855917][T15424] ? netlink_deliver_tap+0x2e/0x1b0 [ 651.855933][T15424] netlink_unicast+0x80f/0x9b0 [ 651.855949][T15424] ? __pfx_netlink_unicast+0x10/0x10 [ 651.855961][T15424] ? netlink_sendmsg+0x650/0xb40 [ 651.855972][T15424] ? skb_put+0x11b/0x210 [ 651.855987][T15424] netlink_sendmsg+0x813/0xb40 [ 651.856004][T15424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.856019][T15424] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.856035][T15424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.856056][T15424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.856078][T15424] ____sys_sendmsg+0xa68/0xad0 [ 651.856112][T15424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.856132][T15424] ? import_iovec+0x73/0xa0 [ 651.856149][T15424] ___sys_sendmsg+0x2a5/0x360 [ 651.856167][T15424] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.856199][T15424] ? __fget_files+0x2a/0x420 [ 651.856213][T15424] ? __fget_files+0x3a0/0x420 [ 651.856232][T15424] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.856248][T15424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.856268][T15424] ? __pfx_ksys_write+0x10/0x10 [ 651.856284][T15424] do_syscall_64+0x14d/0xf80 [ 651.856300][T15424] ? trace_irq_disable+0x3b/0x150 [ 651.856315][T15424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.856325][T15424] ? clear_bhb_loop+0x40/0x90 [ 651.856338][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.856348][T15424] RIP: 0033:0x7f88cd79c629 [ 651.856360][T15424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.856369][T15424] RSP: 002b:00007f88ce708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.856382][T15424] RAX: ffffffffffffffda RBX: 00007f88cda15fa0 RCX: 00007f88cd79c629 [ 651.856390][T15424] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000f [ 651.856396][T15424] RBP: 00007f88ce708090 R08: 0000000000000000 R09: 0000000000000000 [ 651.856403][T15424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.856409][T15424] R13: 00007f88cda16038 R14: 00007f88cda15fa0 R15: 00007f88cdb3fa48 [ 651.856426][T15424] [ 652.368254][T15424] team0: entered promiscuous mode [ 652.373309][T15424] team_slave_0: entered promiscuous mode [ 652.379123][T15424] team_slave_1: entered promiscuous mode [ 652.385969][T15424] bond0: entered promiscuous mode [ 652.391011][T15424] bond_slave_0: entered promiscuous mode [ 652.396782][T15424] bond_slave_1: entered promiscuous mode [ 652.403204][T15424] debugfs: 'hsr1' already exists in 'hsr' [ 652.409077][T15424] Cannot create hsr debugfs directory [ 652.414870][T15424] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 652.469910][ T24] usb 6-1: Product: syz [ 652.482919][ T24] usb 6-1: Manufacturer: syz [ 652.506804][ T24] usb 6-1: SerialNumber: syz [ 652.636792][ T24] usb 6-1: config 0 descriptor?? [ 652.902672][ T796] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 652.958066][ T796] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 654.147532][T15442] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 654.689169][ T5895] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 654.854186][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 654.880497][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 654.906595][ T5895] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 655.062551][T15433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.079142][T15433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.158467][T15434] loop4: detected capacity change from 0 to 7 [ 655.186080][T15434] Dev loop4: unable to read RDB block 7 [ 655.196512][T15434] loop4: unable to read partition table [ 655.208854][T15434] loop4: partition table beyond EOD, truncated [ 655.225072][T15434] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 655.271430][ T5895] usb 3-1: config 13 has no interface number 0 [ 655.374127][ T5895] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 655.465168][ T5895] usb 3-1: config 13 interface 50 has no altsetting 0 [ 655.481286][ T24] ftdi_sio 6-1:0.206: FTDI USB Serial Device converter detected [ 655.510622][ T5895] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 655.561712][ T24] ftdi_sio ttyUSB0: unknown device type: 0x9e4a [ 655.619151][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.656411][ T24] usb 6-1: USB disconnect, device number 54 [ 655.669200][ T5895] usb 3-1: Product: syz [ 655.680724][ T24] ftdi_sio 6-1:0.206: device disconnected [ 655.686856][ T5895] usb 3-1: Manufacturer: syz [ 655.742884][ T5895] usb 3-1: SerialNumber: syz [ 655.779315][T15447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 655.850446][T15443] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 655.870957][T15443] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 656.286270][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 656.318974][ T5895] usb 3-1: MIDIStreaming interface descriptor not found [ 656.658973][ T5895] usb 3-1: USB disconnect, device number 80 [ 656.992645][T12057] udevd[12057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.743893][T15486] FAULT_INJECTION: forcing a failure. [ 657.743893][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.773675][T15486] CPU: 0 UID: 0 PID: 15486 Comm: syz.2.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.773708][T15486] Tainted: [L]=SOFTLOCKUP [ 657.773716][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.773727][T15486] Call Trace: [ 657.773735][T15486] [ 657.773744][T15486] dump_stack_lvl+0xe8/0x150 [ 657.773774][T15486] should_fail_ex+0x412/0x560 [ 657.773800][T15486] _copy_from_user+0x2d/0xb0 [ 657.773828][T15486] ucma_write+0x15d/0x2f0 [ 657.773851][T15486] ? __pfx_ucma_write+0x10/0x10 [ 657.773870][T15486] ? iov_iter_iovec_advance+0x1e0/0x290 [ 657.773901][T15486] vfs_writev+0x4bd/0x990 [ 657.773934][T15486] ? __pfx_ucma_write+0x10/0x10 [ 657.773958][T15486] ? __pfx_vfs_writev+0x10/0x10 [ 657.773993][T15486] ? __fget_files+0x2a/0x420 [ 657.774023][T15486] ? __fget_files+0x3a0/0x420 [ 657.774046][T15486] ? __fget_files+0x2a/0x420 [ 657.774078][T15486] do_writev+0x154/0x2e0 [ 657.774104][T15486] ? __pfx_do_writev+0x10/0x10 [ 657.774135][T15486] do_syscall_64+0x14d/0xf80 [ 657.774159][T15486] ? trace_irq_disable+0x3b/0x150 [ 657.774182][T15486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.774201][T15486] ? clear_bhb_loop+0x40/0x90 [ 657.774222][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.774241][T15486] RIP: 0033:0x7fab7cf9c629 [ 657.774258][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.774274][T15486] RSP: 002b:00007fab7dd7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 657.774294][T15486] RAX: ffffffffffffffda RBX: 00007fab7d215fa0 RCX: 00007fab7cf9c629 [ 657.774308][T15486] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 657.774320][T15486] RBP: 00007fab7dd7c090 R08: 0000000000000000 R09: 0000000000000000 [ 657.774331][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.774343][T15486] R13: 00007fab7d216038 R14: 00007fab7d215fa0 R15: 00007fab7d33fa48 [ 657.774371][T15486] [ 659.494378][T15521] dvmrp0: entered allmulticast mode [ 660.061328][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 660.881743][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 660.939510][T15543] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 661.421297][ T29] audit: type=1326 audit(1771860426.019:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.520264][ T29] audit: type=1326 audit(1771860426.019:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.580172][ T29] audit: type=1326 audit(1771860426.029:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.654334][ T29] audit: type=1326 audit(1771860426.029:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.706181][ T29] audit: type=1326 audit(1771860426.029:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.766129][T15552] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2641'. [ 661.791920][ T29] audit: type=1326 audit(1771860426.069:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 661.885639][ T29] audit: type=1326 audit(1771860426.069:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 662.059022][ T29] audit: type=1326 audit(1771860426.169:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 662.165493][ T29] audit: type=1326 audit(1771860426.169:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 662.294150][ T29] audit: type=1326 audit(1771860426.169:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cd79c629 code=0x7ffc0000 [ 662.819218][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.913727][T12060] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 662.922238][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.150332][T15561] loop4: detected capacity change from 0 to 7 [ 663.167197][T15561] Dev loop4: unable to read RDB block 7 [ 663.182100][T15561] loop4: unable to read partition table [ 663.196799][T15561] loop4: partition table beyond EOD, truncated [ 663.209885][T15561] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 663.448804][T15582] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 663.460755][T15579] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 665.160501][T15604] lo: entered promiscuous mode [ 665.173970][T15604] lo: entered allmulticast mode [ 665.218337][T15604] fuse: Bad value for 'group_id' [ 665.237316][T15604] fuse: Bad value for 'group_id' [ 665.513714][T12060] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 665.685529][T12060] usb 6-1: Using ep0 maxpacket: 8 [ 665.712451][T12060] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.749787][T12060] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 665.796877][T12060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.855118][T12060] usb 6-1: Product: syz [ 665.893279][T12060] usb 6-1: Manufacturer: syz [ 665.920273][T12060] usb 6-1: SerialNumber: syz [ 666.038037][T12060] usb 6-1: config 0 descriptor?? [ 666.060441][T15613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.100978][T12060] gspca_main: t613-2.14.0 probing 17a1:0128 [ 666.114040][T15613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.291364][T12060] gspca_t613: unknown sensor 0000 [ 666.317694][T12060] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 666.371991][T12060] usb 6-1: USB disconnect, device number 55 [ 666.444080][T15613] loop4: detected capacity change from 0 to 7 [ 666.466236][T15613] Dev loop4: unable to read RDB block 7 [ 666.482071][T15613] loop4: unable to read partition table [ 666.506462][T15613] loop4: partition table beyond EOD, truncated [ 666.521560][T15613] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.052684][T15628] netlink: 'syz.6.2662': attribute type 46 has an invalid length. [ 667.113016][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2662'. [ 667.286299][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 667.686814][ T5907] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 667.878640][ T5907] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.891162][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 667.903738][ T5907] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 667.920983][ T5907] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 667.950438][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 667.950569][ T29] audit: type=1400 audit(1771860432.559:2002): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15643 comm="syz.6.2669" [ 667.978881][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.025010][T15636] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 668.057167][ T5907] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 668.318299][T12060] usb 6-1: USB disconnect, device number 56 [ 669.007287][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.068909][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.104305][ T5907] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 669.274277][T15661] loop4: detected capacity change from 0 to 7 [ 669.381948][T15661] Dev loop4: unable to read RDB block 7 [ 669.441045][T15661] loop4: unable to read partition table [ 669.483898][T15661] loop4: partition table beyond EOD, truncated [ 669.528787][T15661] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 671.233729][T12060] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 671.417188][T12060] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 671.474297][T12060] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 671.554651][T12060] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 671.583739][T12060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.646394][T15715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 671.718768][T12060] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.116658][T12060] usb 4-1: USB disconnect, device number 97 [ 672.714243][ T5907] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 672.894158][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 672.901800][ T5907] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 672.911229][ T5907] usb 5-1: config 0 has no interface number 0 [ 672.919637][ T5907] usb 5-1: config 0 interface 196 has no altsetting 0 [ 672.930553][ T5907] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 672.942467][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.951616][ T5907] usb 5-1: Product: syz [ 672.957189][ T5907] usb 5-1: Manufacturer: syz [ 672.962113][ T5907] usb 5-1: SerialNumber: syz [ 672.970806][ T5907] usb 5-1: config 0 descriptor?? [ 673.201260][ T5907] ipheth 5-1:0.196: Unable to find endpoints [ 673.222048][ T5907] usb 5-1: USB disconnect, device number 96 [ 674.715740][T15453] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 674.921058][T15453] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 674.944320][T15453] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid wMaxPacketSize 0 [ 674.957335][T15453] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.969845][T15453] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.986282][T15453] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.997638][T15453] usb 5-1: Product: syz [ 675.008142][T15453] usb 5-1: Manufacturer: syz [ 675.027790][T15453] usb 5-1: SerialNumber: syz [ 675.109777][T15453] usb 5-1: config 0 descriptor?? [ 675.180122][T15453] usb 5-1: selecting invalid altsetting 0 [ 676.221146][T15800] fuse: Bad value for 'fd' [ 676.292141][T15797] netlink: 544 bytes leftover after parsing attributes in process `syz.5.2712'. [ 676.412339][T15811] FAULT_INJECTION: forcing a failure. [ 676.412339][T15811] name failslab, interval 1, probability 0, space 0, times 0 [ 676.430856][T15810] netlink: 'syz.2.2714': attribute type 4 has an invalid length. [ 676.456212][T15811] CPU: 1 UID: 0 PID: 15811 Comm: syz.5.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.456243][T15811] Tainted: [L]=SOFTLOCKUP [ 676.456251][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.456263][T15811] Call Trace: [ 676.456271][T15811] [ 676.456279][T15811] dump_stack_lvl+0xe8/0x150 [ 676.456316][T15811] should_fail_ex+0x412/0x560 [ 676.456343][T15811] should_failslab+0xa8/0x100 [ 676.456375][T15811] __kmalloc_noprof+0xe8/0x760 [ 676.456394][T15811] ? sock_kmalloc+0xd6/0x160 [ 676.456425][T15811] sock_kmalloc+0xd6/0x160 [ 676.456454][T15811] skcipher_recvmsg+0x54f/0x1140 [ 676.456498][T15811] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 676.456525][T15811] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 676.456545][T15811] ? security_socket_recvmsg+0x7e/0x2c0 [ 676.456571][T15811] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 676.456598][T15811] sock_recvmsg+0x22c/0x270 [ 676.456623][T15811] ____sys_recvmsg+0x1e6/0x4a0 [ 676.456658][T15811] ? __pfx_____sys_recvmsg+0x10/0x10 [ 676.456697][T15811] ? import_iovec+0x73/0xa0 [ 676.456726][T15811] ___sys_recvmsg+0x215/0x590 [ 676.456751][T15811] ? get_pid_task+0x20/0x1f0 [ 676.456773][T15811] ? __pfx____sys_recvmsg+0x10/0x10 [ 676.456823][T15811] ? __fget_files+0x3a0/0x420 [ 676.456858][T15811] __x64_sys_recvmsg+0x1ba/0x2a0 [ 676.456888][T15811] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 676.456924][T15811] ? __pfx_ksys_write+0x10/0x10 [ 676.456954][T15811] do_syscall_64+0x14d/0xf80 [ 676.456981][T15811] ? trace_irq_disable+0x3b/0x150 [ 676.457006][T15811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.457025][T15811] ? clear_bhb_loop+0x40/0x90 [ 676.457048][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.457067][T15811] RIP: 0033:0x7f19b9f9c629 [ 676.457086][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.457102][T15811] RSP: 002b:00007f19baecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 676.457122][T15811] RAX: ffffffffffffffda RBX: 00007f19ba215fa0 RCX: 00007f19b9f9c629 [ 676.457136][T15811] RDX: 0000000000000102 RSI: 00002000000005c0 RDI: 0000000000000004 [ 676.457149][T15811] RBP: 00007f19baecd090 R08: 0000000000000000 R09: 0000000000000000 [ 676.457161][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.457173][T15811] R13: 00007f19ba216038 R14: 00007f19ba215fa0 R15: 00007f19ba33fa48 [ 676.457202][T15811] [ 677.301349][T15824] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.340412][ T5903] usb 5-1: USB disconnect, device number 97 [ 677.481677][T15828] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2727'. [ 677.627028][T15837] FAULT_INJECTION: forcing a failure. [ 677.627028][T15837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.657305][T15837] CPU: 1 UID: 0 PID: 15837 Comm: syz.5.2728 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.657336][T15837] Tainted: [L]=SOFTLOCKUP [ 677.657344][T15837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.657355][T15837] Call Trace: [ 677.657360][T15837] [ 677.657365][T15837] dump_stack_lvl+0xe8/0x150 [ 677.657385][T15837] should_fail_ex+0x412/0x560 [ 677.657401][T15837] _copy_from_user+0x2d/0xb0 [ 677.657416][T15837] mfill_atomic_pte_copy+0x131/0x3d0 [ 677.657432][T15837] ? mm_alloc_pmd+0x246/0x400 [ 677.657446][T15837] mfill_atomic_copy+0x528/0x1420 [ 677.657457][T15837] ? unwind_get_return_address+0x4d/0x90 [ 677.657481][T15837] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 677.657499][T15837] userfaultfd_ioctl+0x2c17/0x5130 [ 677.657514][T15837] ? kasan_save_track+0x4f/0x80 [ 677.657524][T15837] ? kasan_save_track+0x3e/0x80 [ 677.657542][T15837] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 677.657571][T15837] ? kasan_quarantine_put+0xbb/0x1f0 [ 677.657585][T15837] ? tomoyo_path_number_perm+0x219/0x630 [ 677.657597][T15837] ? tomoyo_path_number_perm+0x219/0x630 [ 677.657610][T15837] ? do_vfs_ioctl+0x1166/0x1530 [ 677.657623][T15837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 677.657640][T15837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 677.657667][T15837] ? __fget_files+0x2a/0x420 [ 677.657683][T15837] ? __fget_files+0x2a/0x420 [ 677.657696][T15837] ? __fget_files+0x3a0/0x420 [ 677.657709][T15837] ? __fget_files+0x2a/0x420 [ 677.657725][T15837] ? bpf_lsm_file_ioctl+0x9/0x20 [ 677.657739][T15837] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 677.657753][T15837] __se_sys_ioctl+0xfc/0x170 [ 677.657766][T15837] do_syscall_64+0x14d/0xf80 [ 677.657781][T15837] ? trace_irq_disable+0x3b/0x150 [ 677.657795][T15837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.657806][T15837] ? clear_bhb_loop+0x40/0x90 [ 677.657819][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.657829][T15837] RIP: 0033:0x7f19b9f9c629 [ 677.657841][T15837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.657850][T15837] RSP: 002b:00007f19baecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.657862][T15837] RAX: ffffffffffffffda RBX: 00007f19ba215fa0 RCX: 00007f19b9f9c629 [ 677.657870][T15837] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 677.657878][T15837] RBP: 00007f19baecd090 R08: 0000000000000000 R09: 0000000000000000 [ 677.657884][T15837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.657890][T15837] R13: 00007f19ba216038 R14: 00007f19ba215fa0 R15: 00007f19ba33fa48 [ 677.657906][T15837] [ 678.044504][T15453] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 678.056367][ T29] audit: type=1804 audit(1771860442.649:2003): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2729" name="bus" dev="ramfs" ino=68594 res=1 errno=0 [ 678.194165][T15453] usb 4-1: Using ep0 maxpacket: 8 [ 678.202699][T15453] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 678.212355][T15453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.246392][T15453] usb 4-1: Product: syz [ 678.263187][T15453] usb 4-1: Manufacturer: syz [ 678.281121][T15453] usb 4-1: SerialNumber: syz [ 678.302051][T15453] usb 4-1: config 0 descriptor?? [ 678.327123][T15453] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 678.644076][ T30] INFO: task syz.0.2044:13392 blocked for more than 143 seconds. [ 678.673627][ T30] Tainted: G L syzkaller #0 [ 678.680181][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.797525][ T30] task:syz.0.2044 state:D stack:24960 pid:13392 tgid:13392 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 678.899558][ T30] Call Trace: [ 678.906536][ T30] [ 678.921000][ T30] __schedule+0x1585/0x5340 [ 678.952014][ T30] ? __pfx___schedule+0x10/0x10 [ 678.971120][ T30] ? schedule+0x90/0x360 [ 678.985698][ T30] schedule+0x164/0x360 [ 678.998747][ T30] schedule_timeout+0xc3/0x2c0 [ 679.021359][ T30] ? futex_unqueue+0x22/0x240 [ 679.033177][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 679.057170][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.071005][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.088892][ T30] ? wait_for_completion+0x274/0x5e0 [ 679.105588][ T30] wait_for_completion+0x2cc/0x5e0 [ 679.123045][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 679.142375][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.164873][ T30] restrict_one_thread_callback+0x320/0x570 [ 679.179788][ T30] task_work_run+0x1d9/0x270 [ 679.194424][ T30] ? __pfx_task_work_run+0x10/0x10 [ 679.210620][ T30] ? __pfx_futex_wait+0x10/0x10 [ 679.228808][ T30] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 679.245445][ T30] get_signal+0x11eb/0x1330 [ 679.263363][ T30] ? do_futex+0x333/0x420 [ 679.280061][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 679.297426][ T30] ? read_tsc+0x9/0x20 [ 679.309624][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 679.330427][ T30] exit_to_user_mode_loop+0x86/0x480 [ 679.346627][ T30] ? rcu_is_watching+0x15/0xb0 [ 679.367214][ T30] do_syscall_64+0x32d/0xf80 [ 679.379359][ T30] ? trace_irq_disable+0x3b/0x150 [ 679.397862][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.416410][ T30] ? clear_bhb_loop+0x40/0x90 [ 679.429356][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.450093][ T30] RIP: 0033:0x7f50bf59c629 [ 679.462901][ T30] RSP: 002b:00007f50bf93fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 679.488906][ T30] RAX: fffffffffffffdfc RBX: 00000000000813a6 RCX: 00007f50bf59c629 [ 679.504702][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50bf81618c [ 679.526844][ T30] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 679.555247][ T30] R10: 00007f50bf93fcb0 R11: 0000000000000246 R12: 00007f50bf93fcd0 [ 679.584033][ T30] R13: 00007f50bf81618c R14: 00000000000813d8 R15: 00007f50bf93fcb0 [ 679.617791][ T30] [ 679.628031][ T30] INFO: task syz.0.2044:13393 blocked for more than 144 seconds. [ 679.662990][ T30] Tainted: G L syzkaller #0 [ 679.686866][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.717178][ T30] task:syz.0.2044 state:D stack:26336 pid:13393 tgid:13392 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 679.773643][ T30] Call Trace: [ 679.777213][ T30] [ 679.780251][ T30] __schedule+0x1585/0x5340 [ 679.785154][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 679.800178][ T30] ? __pfx___schedule+0x10/0x10 [ 679.810291][ T30] ? schedule+0x90/0x360 [ 679.820414][ T30] schedule+0x164/0x360 [ 679.833689][ T30] schedule_timeout+0xc3/0x2c0 [ 679.850161][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 679.862463][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.876791][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.891285][ T30] ? wait_for_completion+0x274/0x5e0 [ 679.907096][ T30] wait_for_completion+0x2cc/0x5e0 [ 679.918923][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 679.933893][ T30] ? restrict_one_thread_callback+0x15b/0x570 [ 679.959258][ T30] restrict_one_thread_callback+0x320/0x570 [ 679.984754][ T30] task_work_run+0x1d9/0x270 [ 679.994211][ T30] ? __pfx_task_work_run+0x10/0x10 [ 680.007549][ T30] ? __pfx_futex_wake+0x10/0x10 [ 680.016509][ T30] get_signal+0x11eb/0x1330 [ 680.030237][ T30] ? do_futex+0x395/0x420 [ 680.043969][ T30] ? __fget_files+0x2a/0x420 [ 680.069317][ T30] ? __fget_files+0x3a0/0x420 [ 680.082962][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 680.089394][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 680.103977][ T30] exit_to_user_mode_loop+0x86/0x480 [ 680.123723][ T30] ? rcu_is_watching+0x15/0xb0 [ 680.129797][ T30] do_syscall_64+0x32d/0xf80 [ 680.135831][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.143818][ T30] ? clear_bhb_loop+0x40/0x90 [ 680.157494][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.190650][ T30] RIP: 0033:0x7f50bf59c629 [ 680.203711][ T30] RSP: 002b:00007f50c04f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 680.223828][ T30] RAX: 0000000000000001 RBX: 00007f50bf815fa8 RCX: 00007f50bf59c629 [ 680.245132][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f50bf815fac [ 680.262954][ T30] RBP: 00007f50bf815fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 680.278583][ T30] R10: 00000000000000bc R11: 0000000000000246 R12: 0000000000000000 [ 680.297927][ T30] R13: 00007f50bf816038 R14: 00007f50bf93f960 R15: 00007f50bf93fa48 [ 680.323289][ T30] [ 680.326526][ T30] INFO: task syz.0.2044:13394 blocked for more than 145 seconds. [ 680.343654][ T30] Tainted: G L syzkaller #0 [ 680.350196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.373854][ T30] task:syz.0.2044 state:D stack:27912 pid:13394 tgid:13392 ppid:5824 task_flags:0x400140 flags:0x00080006 [ 680.399519][ T30] Call Trace: [ 680.402843][ T30] [ 680.413699][ T30] __schedule+0x1585/0x5340 [ 680.418290][ T30] ? __pfx___schedule+0x10/0x10 [ 680.433411][ T30] ? schedule+0x90/0x360 [ 680.443534][ T30] schedule+0x164/0x360 [ 680.447855][ T30] schedule_timeout+0xc3/0x2c0 [ 680.452639][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.467932][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 680.473357][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.493655][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.498933][ T30] ? wait_for_completion+0x274/0x5e0 [ 680.509108][ T30] wait_for_completion+0x2cc/0x5e0 [ 680.523224][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 680.529100][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 680.537669][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 680.545474][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 680.553024][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 680.560028][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 680.567855][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 680.574136][ T30] do_syscall_64+0x14d/0xf80 [ 680.578754][ T30] ? trace_irq_disable+0x3b/0x150 [ 680.584698][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.591451][ T30] ? clear_bhb_loop+0x40/0x90 [ 680.597371][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.604020][ T30] RIP: 0033:0x7f50bf59c629 [ 680.609401][ T30] RSP: 002b:00007f50c04d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 680.619068][ T30] RAX: ffffffffffffffda RBX: 00007f50bf816090 RCX: 00007f50bf59c629 [ 680.627466][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 680.636639][ T30] RBP: 00007f50bf632b39 R08: 0000000000000000 R09: 0000000000000000 [ 680.645933][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.654074][ T30] R13: 00007f50bf816128 R14: 00007f50bf816090 R15: 00007f50bf93fa48 [ 680.662075][ T30] [ 680.665233][ T30] INFO: task syz.0.2044:13395 blocked for more than 145 seconds. [ 680.673220][ T30] Tainted: G L syzkaller #0 [ 680.681469][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.690305][ T30] task:syz.0.2044 state:D stack:28832 pid:13395 tgid:13392 ppid:5824 task_flags:0x400140 flags:0x00080006 [ 680.721970][ T30] Call Trace: [ 680.731752][ T30] [ 680.735317][ T30] __schedule+0x1585/0x5340 [ 680.739880][ T30] ? register_lock_class+0x31/0x2e0 [ 680.747181][ T30] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 680.752751][ T30] ? __pfx___schedule+0x10/0x10 [ 680.760306][ T30] ? schedule+0x90/0x360 [ 680.764758][ T30] schedule+0x164/0x360 [ 680.768953][ T30] schedule_timeout+0xc3/0x2c0 [ 680.773798][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.778840][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 680.784286][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.789341][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.794603][ T30] ? wait_for_completion+0x274/0x5e0 [ 680.799912][ T30] wait_for_completion+0x2cc/0x5e0 [ 680.805775][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 680.811459][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 680.817961][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 680.824657][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 680.831555][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 680.836835][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 680.843010][ T30] do_syscall_64+0x14d/0xf80 [ 680.847732][ T30] ? trace_irq_disable+0x3b/0x150 [ 680.852786][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.858983][ T30] ? clear_bhb_loop+0x40/0x90 [ 680.864304][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.870447][ T30] RIP: 0033:0x7f50bf59c629 [ 680.875009][ T30] RSP: 002b:00007f50c04b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 680.883443][ T30] RAX: ffffffffffffffda RBX: 00007f50bf816180 RCX: 00007f50bf59c629 [ 680.892811][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 680.900853][ T30] RBP: 00007f50bf632b39 R08: 0000000000000000 R09: 0000000000000000 [ 680.908886][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.917135][ T30] R13: 00007f50bf816218 R14: 00007f50bf816180 R15: 00007f50bf93fa48 [ 680.925217][ T30] [ 680.928297][ T30] [ 680.928297][ T30] Showing all locks held in the system: [ 680.942465][ T30] 1 lock held by khungtaskd/30: [ 680.947427][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 680.957404][ T30] 2 locks held by getty/5576: [ 680.962095][ T30] #0: ffff8880346830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 680.972015][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 680.982245][ T30] 4 locks held by udevd/5937: [ 680.987120][ T30] #0: ffff8880783d41c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 680.995983][ T30] #1: ffff88805b84d088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 681.005489][ T30] #2: ffff8880437a7d28 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 681.015043][ T30] #3: ffff88805e0e5198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 681.024757][ T30] 5 locks held by kworker/1:3/15453: [ 681.030043][ T30] #0: ffff888021eb7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 681.041472][ T30] #1: ffffc90003697c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 681.048812][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.056072][ T30] #2: ffff8880293f1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 681.064610][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.072267][ T30] #3: ffff88805e0e5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 681.087737][ T30] #4: ffff8880354a2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 681.097060][ T30] 1 lock held by syz.6.2729/15838: [ 681.102171][ T30] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 681.113158][ T30] [ 681.115551][ T30] ============================================= [ 681.115551][ T30] [ 681.124607][ T30] NMI backtrace for cpu 0 [ 681.124625][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.124648][ T30] Tainted: [L]=SOFTLOCKUP [ 681.124654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.124665][ T30] Call Trace: [ 681.124672][ T30] [ 681.124680][ T30] dump_stack_lvl+0xe8/0x150 [ 681.124709][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 681.124738][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.124761][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 681.124783][ T30] sys_info+0x135/0x170 [ 681.124801][ T30] watchdog+0xfd9/0x1030 [ 681.124829][ T30] ? watchdog+0x21a/0x1030 [ 681.124861][ T30] kthread+0x388/0x470 [ 681.124879][ T30] ? __pfx_watchdog+0x10/0x10 [ 681.124903][ T30] ? __pfx_kthread+0x10/0x10 [ 681.124922][ T30] ret_from_fork+0x51e/0xb90 [ 681.124948][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 681.124970][ T30] ? __switch_to+0xc7d/0x1450 [ 681.124994][ T30] ? __pfx_kthread+0x10/0x10 [ 681.125013][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.125053][ T30] [ 681.125061][ T30] Sending NMI from CPU 0 to CPUs 1: [ 681.240509][ C1] NMI backtrace for cpu 1 [ 681.240528][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.240552][ C1] Tainted: [L]=SOFTLOCKUP [ 681.240558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.240569][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 681.240603][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 681.240618][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 681.240633][ C1] RAX: 0000000000fa2b4d RBX: ffffffff819a80ad RCX: 0000000080000001 [ 681.240654][ C1] RDX: 0000000000000001 RSI: ffffffff8def2270 RDI: ffffffff8c27a880 [ 681.240667][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 681.240680][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90117db0 [ 681.240693][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 681.240705][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 681.240720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 681.240732][ C1] CR2: 000000110c33744b CR3: 0000000062060000 CR4: 00000000003526f0 [ 681.240747][ C1] DR0: 00000000ffffa75b DR1: 0000000000000000 DR2: 0000000000000000 [ 681.240758][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 681.240769][ C1] Call Trace: [ 681.240778][ C1] [ 681.240784][ C1] default_idle+0x9/0x20 [ 681.240802][ C1] default_idle_call+0x72/0xb0 [ 681.240821][ C1] do_idle+0x1bd/0x500 [ 681.240844][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 681.240870][ C1] ? __pfx_do_idle+0x10/0x10 [ 681.240897][ C1] cpu_startup_entry+0x43/0x60 [ 681.240920][ C1] start_secondary+0x101/0x110 [ 681.240941][ C1] common_startup_64+0x13e/0x147 [ 681.240971][ C1] [ 681.354417][T15453] gspca_sonixj: reg_w1 err -110 [ 681.365982][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 681.366013][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.366040][ T30] Tainted: [L]=SOFTLOCKUP [ 681.366049][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.366061][ T30] Call Trace: [ 681.366071][ T30] [ 681.366081][ T30] vpanic+0x56c/0xa60 [ 681.366111][ T30] ? __pfx___schedule+0x10/0x10 [ 681.366138][ T30] ? __pfx_vpanic+0x10/0x10 [ 681.366164][ T30] ? __pfx_console_unlock+0x10/0x10 [ 681.366199][ T30] panic+0xc5/0xd0 [ 681.366223][ T30] ? __pfx_panic+0x10/0x10 [ 681.366251][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 681.366278][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 681.366304][ T30] watchdog+0x1023/0x1030 [ 681.366333][ T30] ? watchdog+0x21a/0x1030 [ 681.366364][ T30] kthread+0x388/0x470 [ 681.366382][ T30] ? __pfx_watchdog+0x10/0x10 [ 681.526578][ T30] ? __pfx_kthread+0x10/0x10 [ 681.531168][ T30] ret_from_fork+0x51e/0xb90 [ 681.535763][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 681.540881][ T30] ? __switch_to+0xc7d/0x1450 [ 681.545557][ T30] ? __pfx_kthread+0x10/0x10 [ 681.550142][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.554915][ T30] [ 681.558263][ T30] Kernel Offset: disabled [ 681.562576][ T30] Rebooting in 86400 seconds..