last executing test programs: 16m8.627264348s ago: executing program 1 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/251, 0xfb}], 0x2}, 0xd}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000001c40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001840)=""/256, 0x100}], 0x9}, 0x81}], 0x4, 0x40012030, 0x0) 16m8.146100012s ago: executing program 1 (id=143): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101400, 0x1dc) linkat(r0, &(0x7f00000027c0)='./file0\x00', r0, 0x0, 0x1000) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000300)={r0, r1, 0x9}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0xffffffff, @loopback={0xffffffffffff0000}, 0x92}, 0x1c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) 16m7.654096775s ago: executing program 1 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000090a000/0x4000)=nil, 0x930, 0x5, 0x2013, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0xe, 0x541, 0x5a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x10, 0x40, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r4, 0x23, 0x21, 0x4, 0x5, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x8000, 0xfffffff1, 0x8}}) r5 = signalfd(r0, &(0x7f0000000280)={[0x8]}, 0x8) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000002c0)={'vxcan1', 0x32, 0x30}, 0x9) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x7fffffffc, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000110008000e00000000ff", 0x24) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0x6, 0xfff, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m6.140517561s ago: executing program 1 (id=148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) io_uring_setup(0x7, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000180)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x200000) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 16m1.851288196s ago: executing program 1 (id=164): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x3, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0x12, 0x6, 0x3, 0x1, 'w\viK'}, 0x15, 0x1, {}, 0x503}) write(r1, &(0x7f0000000100), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x148, 0x1e0, 0x1e0, 0x278, 0xb0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x4, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "0500", "313a19ff4c7d278bf34b54168b154d15", '\x00', "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x44) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x8, {{0x2, 0x4e22, @multicast1}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6221, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x20, 0xe, 0xd3, {0xd3, 0xe, "08f4c3da2f48743edc5abd2bc68d54d6deb97a87bf012caad84078601b21fb34059546b002fbc2bdb53bf90c6c7d7b6facb2d83d38671af4274f14fd812e5dd2cb76c5f883f0ccd05367def91abf4a7310559c4245aa2ada2d3744e574dc53e6bb6f58b714f922a3c00a8943aa9d40f040375dbca7538575b6727a07bd0fe78ebaf4bcca2bf0f0c424ec85f8f5431b55e99e8cd2222011ec3730546af022af3906dd0f3f7bdfa5dedbde6015c89401fa29a4c6269ba3969705ff8ecb36ffa9a7b097df60b5af25ea6e0af96daf9a2fa039"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f00000006c0)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x5, 0x1, 0x7f, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "49a5cb0d599ef2018cc6f0ce2d4acaae"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xd0c6, 0xf000, 0x7, [0x3f30, 0x0, 0xffc030, 0x0, 0xffc0f0, 0xff0030]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x2, 0x3, "a5e550f7", "1c4ccbf5"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x8, 0x7f, 0x5, 0x8}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x0, 0x3, 0xbd, "86565939d3146ebf15a57ba3e566b6762c392fa3cfff6dbb397de2d23b8963cf6ff7d5e30af68a08e8ee2239c49b0e23dd9e8578a8549ce92a1b80b2ed439dcbf78ab7ba27abdce9cca3e0547eeae1a424a54e42d95f0d4c1fcb7d22fdbdc8dbae519c0d9a5572bc1e0d1fc45586d7ccca33cf9416abed2296d277fbaa3bc1c20ee6465401e30f346e00b60ec3414272fde946844ee697c3e128387cb23e51423e45b418758cd83fc9f4cca20cf0c15f3a2dd017bfb50004c922a83155"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xda}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0xa0, 0x20, [0xf]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e524"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "132e"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x1}}) 16m1.52008778s ago: executing program 1 (id=165): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x200000) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x10000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() syz_pidfd_open(r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x10}, 0x20040805) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x5) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x208440, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000013}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @remote, 0x3}}}, 0x88) 16m0.940188423s ago: executing program 32 (id=165): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x200000) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x10000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() syz_pidfd_open(r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x10}, 0x20040805) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x5) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x208440, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000013}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @remote, 0x3}}}, 0x88) 41.722775442s ago: executing program 2 (id=4346): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe97, &(0x7f0000001080)) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x555) semtimedop(r1, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="934b884f7bd4c13c12a1e8f5d43e449c60d099f9fffc4eda3956927abb9734a4dc") syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f0000000f00)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x10, 0xc4000) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000100)={0xf8, ""/248}) r8 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x8040, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, r8], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) 41.196054696s ago: executing program 2 (id=4349): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) 40.662601612s ago: executing program 2 (id=4355): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x2a020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x1000000, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xac}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 40.498442327s ago: executing program 2 (id=4358): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900"], 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x6, @local}, 0x10, {0x2, 0x4e22, @multicast1}, 'ip_vti0\x00'}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e095a209406010013780102030109021b00010e061003090439d8011adaa808090508102000070980"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) fsopen(&(0x7f0000000040)='minix\x00', 0x1) (fail_nth: 7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'vlan0\x00', {}, 0xb62}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="08475d0000000203accd1d40b11e5b95ad002019f4a931f5e171b60073531fc6ef5855c278fef50f0c85512a128e9f6ecda3adeeb3df3c55cb6311e2860633b5f0b2ccb27af03e75d2ac308ab77b36ccaa37c6d12db06727d9d388c1a11978d3db878ebbf9811e225f7459fc9b4f5dc94f25ff31a199c1017f5b6c4e2d44150eb5901e03c027b5e18df55687664ee68ccf71012019985e37437f6b623c3f3b08f822f0804999e37cec32ae42483737c478c3c4b7faa377d5c327f57b584c8d820d4b9bc1cd9d1768"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x98e, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e26, @remote}}}, 0x108) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='.\x00', 0x2882c2, 0xd) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4008868}, 0x20000000) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x0, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x4, r4, &(0x7f0000000080)="0d32818e", 0x4}]) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000056ed2b12e8d244ddbb5b04040550e5ed3d81ae20243dd5409990a2fc54ce68db77aec817a381b5996792bc137bf923181511efda02"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201404000000348b35e58b5eec977a0b8d1c28d225607fc3b186d455183454cf5286321da3085d5a121b5a559e8c4c320700a2e6ae17223a16ad69d43f1b6e3382eab3c657370be2d88f677c5123b57ee5c16634b7367c8f9e71942e4afab9f142cf00619ef77c166e8b671d14804ba50339e6b6af6cc3b81e9cd60dde2e012a1531e5d2bc56"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000a80)=""/188, 0xba) 39.574544515s ago: executing program 2 (id=4362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6gretap0\x00', {}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0xc3ffffff, 'bond_slave_1\x00', {0x1}, 0xc0}) 39.443902822s ago: executing program 2 (id=4363): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {0x0}], 0x2}, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x100, &(0x7f0000000380)) sendmsg$nl_route(r0, 0x0, 0x0) 24.348536152s ago: executing program 33 (id=4363): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {0x0}], 0x2}, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x100, &(0x7f0000000380)) sendmsg$nl_route(r0, 0x0, 0x0) 11.910651319s ago: executing program 6 (id=4461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006dc0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe60, 0x2, [@TCA_FW_ACT={0xe5c, 0x4, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0x3, 0x8, 0x80000000, 0x3bb30000}, 0x40, 0x6}, [{0xa, 0x8e9, 0xf, 0x4e5, 0x1ff, 0xf}, {0x8000, 0x0, 0xd1d, 0x401, 0x8, 0x3b5e}, {0x4, 0x6, 0x5, 0x2, 0x8e0d, 0x6}, {0x7fffffff, 0x8, 0x8, 0x5, 0x3ff, 0x2}, {0x8, 0x2, 0x5b5, 0x0, 0x28000000, 0x9}, {0xffffffff, 0xf, 0x0, 0x3, 0x1}, {0x5, 0x2, 0x3, 0x9, 0x7, 0x4}, {0x400, 0x40, 0xfffffffd, 0x5, 0x2, 0x8}, {0x312c, 0x2, 0xfffffff6, 0xfffffffc, 0x4d, 0x5}, {0x400, 0xae, 0x80, 0x2, 0x3, 0xb3b}, {0x3, 0x0, 0x100, 0x6, 0x5, 0x666e}, {0x1, 0x95, 0x3, 0xf9e, 0x7, 0x1}, {0x1ff, 0x3, 0x684b, 0x53dc, 0x0, 0x9}, {0xfff, 0x6, 0x9, 0xfe, 0xedc, 0x1}, {0x5f564bc4, 0x7f, 0x3, 0x0, 0x8, 0x3}, {0x9, 0x401, 0xfffffeff, 0x4, 0x1, 0x56}, {0x75e, 0x680, 0x0, 0x3, 0x8, 0x80000000}, {0x8100000, 0xaa, 0x2, 0x10001, 0x9, 0xb}, {0x3, 0x9, 0x6, 0x2, 0x8, 0x6}, {0x1c9, 0xfffffffe, 0x10e, 0x7, 0x2}, {0xfff, 0x2, 0x8, 0x6, 0x7, 0x7ff}, {0xd368694, 0x9, 0x7ff, 0x8000, 0x7, 0x3}, {0x5d4, 0xfff, 0x9, 0xe, 0x8, 0x9}, {0x8b2d, 0x1, 0xb, 0x4, 0x2, 0x9b}, {0x7, 0x1, 0x1, 0x0, 0x60d}, {0xffffffff, 0x81, 0x400, 0x1, 0x488, 0x6000}, {0x3, 0x7, 0x1, 0x4a4, 0xd, 0x80}, {0x5, 0x80000000, 0x0, 0x7fffffff, 0x8, 0x6}, {0xd, 0x13e06239, 0x200, 0x1, 0x5, 0x32}, {0x6, 0x401, 0x1, 0x2, 0x8, 0x4}, {0x1, 0xd3a7, 0x561c, 0x5, 0xf, 0x400}, {0x8, 0xa5f0, 0x3, 0x10001, 0xfff, 0x8000}, {0xfffffaf1, 0x0, 0x2, 0x8000, 0xffffff73, 0x6}, {0x8, 0x5, 0x1, 0x7, 0x55, 0x5}, {0x7, 0x7, 0x401, 0x6, 0x7, 0x1}, {0x2, 0x7, 0x704, 0x1, 0x0, 0x40}, {0x9, 0x4, 0x1ff, 0x8, 0x4, 0x1}, {0x1, 0x6, 0x4, 0x7ff, 0x74b, 0x5}, {0x1, 0x10, 0x4, 0xffff, 0x7, 0x200}, {0x6, 0x3, 0x8, 0xffffa7e6, 0x7ff, 0x8}, {0x0, 0x4000000, 0x1, 0xfb, 0x4, 0x10001}, {0x0, 0x200, 0x10, 0x4, 0x1caf0155, 0x79}, {0x0, 0xfa, 0xc80, 0x6, 0x1, 0x2}, {0x618, 0x7ff, 0x8, 0xf, 0x9, 0x3}, {0x3ff, 0xa751, 0xffffda9e, 0xd5, 0x1800, 0x5}, {0x6, 0x4, 0xd088, 0x2, 0x5, 0x1e2}, {0x9, 0x2, 0x4, 0x1, 0x8, 0x9}, {0xc0ff, 0x3, 0xc042, 0x6, 0x2, 0x5}, {0x2, 0x8, 0x44, 0x10001, 0x80000000}, {0x3, 0x5a1b, 0x0, 0x0, 0x2, 0x2}, {0xf6f, 0x6, 0x5, 0x10000, 0x2, 0x8001}, {0x9, 0x10, 0x80, 0x4, 0x9, 0xd}, {0x3ff, 0x3, 0x6, 0x32, 0x100, 0x6}, {0x5, 0x8, 0x2, 0x7f, 0x0, 0x6}, {0x1, 0x9, 0x2, 0x2, 0xff, 0x9}, {0x80000000, 0x1ff, 0x337, 0x0, 0x9, 0x2}, {0x10000, 0x5, 0x204c10db, 0x0, 0x7, 0x9}, {0x1ff, 0x728, 0x5, 0x4, 0x9, 0xb8}, {0x9, 0x0, 0x2ab106b8, 0xb, 0x80}, {0x1, 0xffffffff, 0x1, 0xfffffff4, 0x4, 0x18}, {0x1ff, 0x9, 0x0, 0x16, 0x9, 0x74d855f7}, {0x1, 0x81, 0x6, 0x3, 0xc, 0x7fffffff}, {0x7fffffff, 0x1, 0x79, 0x5, 0x6, 0xffffffff}, {0x7f, 0x6, 0x7ff, 0xfffffff7, 0x2, 0x6}, {0x0, 0x1, 0x3, 0x3, 0x9, 0xa142}, {0xffffffff, 0x80000001, 0xffffffc5, 0xa, 0x5, 0x2}, {0x4, 0x4, 0xa53e, 0x6f, 0x3, 0xfff}, {0xc51e, 0x8577, 0xfff, 0x2, 0x5, 0x4}, {0x3, 0x2, 0x4, 0x2, 0x0, 0x5}, {0x1, 0x3, 0xe8c7, 0x2, 0x6, 0x1}, {0x9, 0x3f, 0x278, 0xc, 0xffff, 0xfffff697}, {0xf62, 0xc345, 0x7ff, 0x7fff, 0xc, 0x100}, {0x5, 0x226, 0xffff, 0xfffff801, 0x1}, {0xd, 0x0, 0x3, 0x3, 0x9, 0x5}, {0x4, 0x3, 0xbcd, 0x6, 0x2, 0x200}, {0x5, 0x1, 0x8, 0x8, 0x2, 0x1ff}, {0x6, 0x8, 0xfffffff1, 0x4, 0x1, 0x1ff}, {0x1000, 0x7fff, 0x9, 0x6, 0x56bf, 0x3}, {0xffffffc0, 0x2, 0x3, 0x0, 0x10000, 0x5}, {0x7, 0x8, 0x9, 0x6e, 0x6, 0x3}, {0x80000000, 0xdfd, 0x40, 0x0, 0xffff, 0x5}, {0x8, 0x80000001, 0xfffffffc, 0x8, 0x7, 0x1ff}, {0xfffffffd, 0x7, 0x6, 0x4, 0x7, 0x3e}, {0x3, 0x3, 0x2, 0x8, 0x3, 0x8}, {0x10001, 0x2, 0x7, 0x3, 0x6, 0x3}, {0xed, 0x0, 0x6, 0xd, 0x6, 0x4cc}, {0xa1b, 0xf, 0x9, 0x101, 0x1, 0x1}, {0x3, 0x6, 0x2223, 0x36, 0x1, 0x2}, {0xffffffd6, 0x0, 0x0, 0x6, 0x5, 0x2}, {0x300, 0x2b82, 0x0, 0x1, 0x100000, 0x100}, {0x8, 0x36, 0x0, 0xfffffff6, 0x67, 0x7}, {0xfffff941, 0x9c, 0xfffffffc, 0x2, 0x7, 0x1}, {0x3, 0x4, 0x4, 0xffffffff, 0x10, 0x9}, {0x9, 0x7, 0xc42, 0x6, 0x1, 0x5}, {0x2, 0x7, 0x5, 0x6, 0x0, 0x3}, {0x61, 0x40, 0x10, 0x4, 0x6bed, 0x10001}, {0xd95, 0x4, 0xa, 0xfffffffb, 0x0, 0x9}, {0x10001, 0x101, 0x2, 0x6, 0x960, 0x5}, {0x2, 0x9, 0x2, 0x5, 0x9, 0x6}, {0xffff7fff, 0x100, 0xffffffff, 0xffffffff, 0x401, 0x846f}, {0x4, 0x80, 0x5, 0x80000000, 0x3, 0x8}, {0x6, 0x8, 0x101, 0x7ff, 0x4, 0x2}, {0x1, 0x7, 0x3, 0xa8, 0x0, 0x3ff}, {0x40, 0xe, 0x5, 0x9, 0x80000000, 0x3}, {0x1, 0x5, 0x4, 0x0, 0x6, 0xff}, {0x9, 0x3, 0x5, 0x5, 0x8, 0x3}, {0x1, 0x5, 0x7f, 0x5, 0x7fffffff, 0x5}, {0x1, 0x8, 0x1, 0x8, 0x3, 0x1}, {0x100, 0xd349, 0x6, 0x81f, 0x6, 0x4}, {0x8, 0x2, 0x4, 0x9, 0x9, 0xec}, {0x5, 0x7, 0x1ff, 0x200, 0x2, 0x2}, {0x0, 0x6, 0x5, 0x4, 0x9, 0x40}, {0x2, 0x5, 0x1ff, 0x4, 0x3, 0x5}, {0x7, 0x40000, 0x8, 0x401, 0x1, 0x3}, {0x9, 0x4, 0xd8, 0x604, 0x1000, 0xa8b}, {0x92e, 0x4, 0x5, 0x671a3cbd, 0x0, 0x7}, {0x8, 0xd0e, 0x5, 0x4, 0x2, 0x2}, {0x8, 0x40, 0x61f, 0x1, 0x3, 0x7}, {0x10, 0x800, 0x4, 0x0, 0x9, 0xa48}, {0x4, 0xffff1bd9, 0x3, 0x3, 0x5, 0x4}, {0xfffff780, 0x6, 0x7fff, 0x0, 0x0, 0x7}, {0x8, 0x0, 0xa86, 0x9, 0x800, 0x1}, {0x0, 0x8, 0xd389, 0x6, 0x6872, 0x7}, {0x0, 0x5f7, 0x6f9, 0x8001, 0x4, 0x5}, {0x3, 0x5, 0x6, 0xc, 0x9f400000, 0x3}, {0xfda, 0xfffffff4, 0x7, 0x2b1730ad, 0x5, 0x8}, {0x1a, 0x2, 0x7, 0x5, 0xfffffc04, 0x861d}, {0x0, 0x8, 0x6, 0x0, 0x9}], [{0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x4580952d113791a7}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x22d910d457ae38fe}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x7}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x95d7782b0d70841, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$kcm(0x29, 0x2, 0x0) 11.502244272s ago: executing program 5 (id=4463): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.374147409s ago: executing program 6 (id=4464): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x2) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x1) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) 11.150740841s ago: executing program 6 (id=4465): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x4, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242", 0x1c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0xce, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x38, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e9a830dcb405b515c76b9cb4682e3c7d", 0x10}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 9.898031267s ago: executing program 3 (id=4470): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2d1d, 0x2}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)='q', 0x1}], 0x1, &(0x7f0000000a00)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x200, 0x8, 0x70}}], 0x38, 0x20080000}, 0x4004000) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000004c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) eventfd2(0x4, 0x400) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.820561453s ago: executing program 6 (id=4472): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x4, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242", 0x1c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6", 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e9a830dcb405b515c76b9cb4682e3c7d", 0x10}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 9.420193074s ago: executing program 6 (id=4473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x41, 0x0, 0x810}, 0x20004000) 8.380753539s ago: executing program 5 (id=4475): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0xe, @mcast2, 0x8ec}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="362ec0d26b9138a7d403792ee8", 0xd}], 0x1, &(0x7f00000002c0)=ANY=[], 0x10e8}, 0x4000080) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904019d080a"], 0x0) preadv2(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f0000000480)=""/252, 0xfc}], 0x2, 0x2, 0x60d, 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='\x00', &(0x7f0000000180)='./file0\x00', r3) 7.981269192s ago: executing program 3 (id=4479): ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x2, {0x0, 0x759bc414, 0x800007, 0x20003}}) 7.749689874s ago: executing program 3 (id=4480): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000005c0)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400009, 0x0, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0x80000c1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0xfffffffffffffffc, 0x7, 0x4, 0x9, 0x3, 0x4000009, 0x8892, 0x1, 0x43dd1007, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0008000000000, 0x8, 0x4, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0x0, 0x6, 0x2, 0xd, 0x20000000000066, 0x101, 0x7a4, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xffffffffffffffff, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x1b, 0xcdc, 0x100004000000007, 0x5, 0x3, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x6, 0x0, 0xffffffffffffff81, 0xb, 0xff, 0x569, 0xf, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x100000000, 0xf, 0x9, 0x6, 0x5, 0x4c9e, 0xd, 0x2, 0x4, 0x3ff, 0x8000080000001, 0x2000000000007, 0xdfd4, 0xfff9, 0x8, 0x2, 0x80, 0x1, 0x6, 0x200eb4, 0x7, 0xffffffffffffffff, 0xb68e, 0x1, 0x8, 0x1000003]}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x80082, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x4, 0x3) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x80003, 0xff) close(r4) (fail_nth: 1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000001a40)={0x1, 0xdf, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}, 0x1, 0xfff0}, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='lock i'], 0xc) syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000040392ae43f40000102030109028a000301ffc010080b0002010130071904000000db7a09a10a240110260007000000132403ff00000606020200000005007f00800009240702020900000009040133070102300009040101010102300009050109200040d4040a252506000000010400090402000001023000090402010101023000090582091002fa0a020a252500000000050900e18956a0c613079ba5df49ff3481a25508e85df63b9fab96397af9398f08e2eed365e7a8e0b22af20c294215c64f2156c388ff3b1af831c9ec0c3e77ce2032d4389a2796f51f1518cb71938ac755531496caaff1cf1f14dc6d"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x1, 0x4, 0x0, 0x48, 0x0, 0x1, 0x5}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x7fffffff}, {0x0, 0x7, 0x0, 0x3ff, 0x6, 0x5, 0x31}, {0xb, 0x7, 0x4, 0xffffff89, 0x6, 0x6, 0x3}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0xe0000}, {0x80000000, 0x2ab, 0x0, 0xd, 0x3, 0x40007ff, 0x400}, {0x80000001, 0x2, 0x0, 0x8, 0xfffffff9, 0xff, 0x3}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r9}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000640)="67260f01c5b832018ec8660f38325f0b6766660fc7700ebaf80c66b848dd3f8b66efbafc0ced66b80500000066b9a2bed83d0f01d9f4b81e018ed8361d0080f2dbd7", 0x42}], 0x1, 0x4, &(0x7f0000000700), 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00fdffffff0002000000000800040000000000080018004e244e23"], 0x2c}}, 0x0) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r12, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r12, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 6.538943546s ago: executing program 5 (id=4485): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000100)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00'}) 5.899073265s ago: executing program 0 (id=4488): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x8002, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r8, r9, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) setgid(r9) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x0) 4.838466564s ago: executing program 0 (id=4489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x20000, 0x104, 0xa}, 0x18) socket(0x11, 0x4, 0x1000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000003340)=""/4087, 0xff7}, {&(0x7f00000013c0)=""/240, 0xf0}], 0x2}, 0xd}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001840)=""/256, 0x100}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f00000008c0)=""/214, 0xd6}], 0xe}, 0x81}], 0x4, 0x40012030, 0x0) 4.79402106s ago: executing program 4 (id=4490): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x13f, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.585287507s ago: executing program 0 (id=4491): unshare(0x6a040000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x30, r1, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6004005}, 0x8010) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0xcc801, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x4, r0, 0x80000}) 4.511331597s ago: executing program 4 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x1000271f, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000084) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) socket$inet6(0xa, 0x3, 0x8) fcntl$setstatus(r2, 0x4, 0x42000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 3.655944106s ago: executing program 0 (id=4493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffeff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0xfffffffffffffffc}, @flat=@binder={0x73622a85, 0x10b, 0x20000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 2.866190545s ago: executing program 4 (id=4494): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000001240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000ffdbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000004300000008000200010000000802020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f00000000c0)=0xfffffadc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x600c8050}, 0x0) 2.537549091s ago: executing program 4 (id=4495): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x40, 0x17d, 0x9, 0x4, 0x2, {0x0, 0x9}, {0x34e, 0x101, 0xffffffff}, {0x10, 0x2}, {0x4, 0x4080000, 0x7fe}, 0x3, 0x100, 0x0, 0xd614, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x4}) 2.47232992s ago: executing program 5 (id=4496): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x4, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242", 0x1c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ec", 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e9a830dcb405b515c76b9cb4682e3c7d", 0x10}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 2.237742362s ago: executing program 4 (id=4497): ioprio_set$pid(0x3, 0x0, 0xc00f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f0000000040)=""/74, 0x4a}], 0x6}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x10100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000068000100030010007f00000000000000040c00020000000000150000001c000c807d0800020004676702b01a221800000008ff030000000000000001000f00000008000100020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x4040090) 1.958908709s ago: executing program 4 (id=4498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = fsopen(0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x0, @mcast2}, r11, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="650f01ef6436f466f080737ca90f01c30f320f01c8b8006000000f23d80f21f835000000a00f23f8670f01c3faf00fba3985", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) 1.787455716s ago: executing program 5 (id=4499): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x8002, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r7, r8, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) setgid(r8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x0) 1.235464471s ago: executing program 6 (id=4500): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) pipe(&(0x7f00000002c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) shutdown(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x8000) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) 1.043519115s ago: executing program 0 (id=4501): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x460, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 1.043213251s ago: executing program 3 (id=4502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000303e50000000000000008000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d7930"], 0x3c}}, 0x8000) 737.903549ms ago: executing program 3 (id=4503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000340)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce1c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc3010122", 0x61}], 0x1, 0x10, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffff63fe}]}}]}, 0x3c}}, 0x2000400c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1d, 0x4, 0xfd}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x289, 0xfffffffffffffffe, 0xc, 0xff, 0x1000000010000a, 0x8001, 0x8, 0xb, 0x3, 0xffffffff, 0xffffffffffffffc, 0x9, 0x1, 0x20000000000f8, 0x2, 0xe], 0x8080000, 0x40005}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 638.362256ms ago: executing program 5 (id=4504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r5, &(0x7f0000000080), 0x0) close(r5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffe"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 48.806123ms ago: executing program 0 (id=4505): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000001240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000ffdbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000004300000008000200010000000802020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f00000000c0)=0xfffffadc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x600c8050}, 0x0) 0s ago: executing program 3 (id=4506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x5b}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[{0x5, 0x5, 0x7, 0x7ffc0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400"/18, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x21, 0x80004, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x160}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x10) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x4, 0x1}, {0x4f, 0x1}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$video(0x0, 0xabb, 0x82341) chroot(&(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xe}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): batman_adv: batadv0: Adding interface: macsec1 [ 987.339401][T19252] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.461151][T19252] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 987.533315][ T5771] lenovo 0003:17EF:60EE.0048: Sensitivity setting failed: -71 [ 987.577753][ T5771] usb 4-1: USB disconnect, device number 16 [ 987.708885][ T5002] Dev loop3: unable to read RDB block 7 [ 987.726089][ T5002] loop3: unable to read partition table [ 987.746101][ T5002] loop3: partition table beyond EOD, truncated [ 988.134496][ T5002] Dev loop3: unable to read RDB block 7 [ 988.154727][ T5002] loop3: unable to read partition table [ 988.177227][ T5002] loop3: partition table beyond EOD, truncated [ 988.229830][ T5771] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 988.419812][ T5771] usb 6-1: Using ep0 maxpacket: 8 [ 988.454298][ T5771] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 988.475641][ T5771] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.507809][ T5771] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.531922][ T5771] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.564425][ T5771] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.599142][ T5771] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.622856][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.895709][ T5771] usb 6-1: usb_control_msg returned -32 [ 988.908789][ T5771] usbtmc 6-1:16.0: can't read capabilities [ 989.289071][T19264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.306106][T19264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.327730][T19264] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 989.529515][ T5771] usb 6-1: USB disconnect, device number 4 [ 989.568821][ T5002] Dev loop3: unable to read RDB block 7 [ 989.586083][ T5002] loop3: unable to read partition table [ 989.611517][ T5002] loop3: partition table beyond EOD, truncated [ 989.676510][T19272] FAULT_INJECTION: forcing a failure. [ 989.676510][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 989.724935][T19272] CPU: 1 UID: 0 PID: 19272 Comm: syz.2.4045 Tainted: G L syzkaller #0 PREEMPT(full) [ 989.724970][T19272] Tainted: [L]=SOFTLOCKUP [ 989.724978][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 989.724990][T19272] Call Trace: [ 989.724999][T19272] [ 989.725008][T19272] dump_stack_lvl+0xe8/0x150 [ 989.725040][T19272] should_fail_ex+0x412/0x560 [ 989.725069][T19272] should_failslab+0xa8/0x100 [ 989.725093][T19272] __kmalloc_cache_noprof+0x88/0x660 [ 989.725122][T19272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 989.725147][T19272] ? kobject_uevent_env+0x28c/0x9e0 [ 989.725290][T19272] ? __pfx_dev_uevent_name+0x10/0x10 [ 989.725455][T19272] kobject_uevent_env+0x28c/0x9e0 [ 989.725494][T19272] device_add+0x557/0xbb0 [ 989.725521][T19272] device_create+0x269/0x300 [ 989.725547][T19272] ? timer_init_key+0x161/0x2c0 [ 989.725582][T19272] ? __pfx_device_create+0x10/0x10 [ 989.725607][T19272] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 989.725686][T19272] mac80211_hwsim_new_radio+0x427/0x5aa0 [ 989.725794][T19272] ? stack_trace_save+0xa9/0x100 [ 989.725824][T19272] ? __pfx_stack_trace_save+0x10/0x10 [ 989.725858][T19272] ? stack_depot_save_flags+0x33/0x810 [ 989.725881][T19272] ? kasan_save_alloc_info+0x21/0x50 [ 989.725904][T19272] ? __kasan_slab_free+0x5c/0x80 [ 989.725937][T19272] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 989.725980][T19272] hwsim_new_radio_nl+0xf6a/0x1c00 [ 989.726035][T19272] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 989.726075][T19272] ? rcu_is_watching+0x15/0xb0 [ 989.726101][T19272] ? trace_kmalloc+0x2a/0xf0 [ 989.726135][T19272] ? __nla_parse+0x40/0x60 [ 989.726165][T19272] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 989.726191][T19272] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 989.726226][T19272] genl_family_rcv_msg_doit+0x22a/0x330 [ 989.726260][T19272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.726300][T19272] ? bpf_lsm_capable+0x9/0x20 [ 989.726320][T19272] ? security_capable+0x7e/0x2c0 [ 989.726356][T19272] genl_rcv_msg+0x61c/0x7a0 [ 989.726387][T19272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.726446][T19272] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 989.726478][T19272] ? __pfx_ref_tracker_free+0x10/0x10 [ 989.726501][T19272] ? __asan_memcpy+0x40/0x70 [ 989.726525][T19272] ? __skb_clone+0x63/0x7a0 [ 989.726555][T19272] netlink_rcv_skb+0x232/0x4b0 [ 989.726587][T19272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.726614][T19272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.726662][T19272] ? down_read+0x270/0x2e0 [ 989.726684][T19272] ? genl_rcv+0xd/0x40 [ 989.726709][T19272] genl_rcv+0x28/0x40 [ 989.726731][T19272] netlink_unicast+0x75c/0x8e0 [ 989.726772][T19272] netlink_sendmsg+0x813/0xb40 [ 989.726802][T19272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.726827][T19272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 989.726860][T19272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.726892][T19272] ____sys_sendmsg+0x972/0x9f0 [ 989.726913][T19272] ? __might_fault+0xaf/0x130 [ 989.726948][T19272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.726978][T19272] ? import_iovec+0x73/0xa0 [ 989.727008][T19272] ___sys_sendmsg+0x2a5/0x360 [ 989.727027][T19272] ? __lock_acquire+0x6b5/0x2cf0 [ 989.727054][T19272] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.727115][T19272] ? __fget_files+0x2a/0x420 [ 989.727139][T19272] ? __fget_files+0x3a0/0x420 [ 989.727180][T19272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 989.727204][T19272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.727234][T19272] ? __pfx_ksys_write+0x10/0x10 [ 989.727273][T19272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.727295][T19272] do_syscall_64+0x174/0x580 [ 989.727316][T19272] ? trace_irq_disable+0x3b/0x140 [ 989.727346][T19272] ? clear_bhb_loop+0x40/0x90 [ 989.727373][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.727393][T19272] RIP: 0033:0x7fadde19ce59 [ 989.727421][T19272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.727439][T19272] RSP: 002b:00007faddf005028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.727461][T19272] RAX: ffffffffffffffda RBX: 00007fadde415fa0 RCX: 00007fadde19ce59 [ 989.727477][T19272] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 989.727490][T19272] RBP: 00007faddf005090 R08: 0000000000000000 R09: 0000000000000000 [ 989.727504][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.727517][T19272] R13: 00007fadde416038 R14: 00007fadde415fa0 R15: 00007fadde53fa48 [ 989.727553][T19272] [ 990.287195][ T5002] Dev loop3: unable to read RDB block 7 [ 990.311786][ T5002] loop3: unable to read partition table [ 990.317863][ T5002] loop3: partition table beyond EOD, truncated [ 990.498209][T19261] tipc: Resetting bearer [ 990.509465][T19261] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 990.516825][T19261] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 990.564305][T19261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 990.570357][T19261] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 990.662836][ T5636] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 990.676065][T19261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.683464][T19261] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 990.831981][ T5636] usb 4-1: config 0 has no interfaces? [ 990.846073][ T5636] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 990.891899][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 990.922285][ T5636] usb 4-1: SerialNumber: syz [ 990.933052][T19261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 990.962110][ T5636] usb 4-1: config 0 descriptor?? [ 990.972971][T19261] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 991.160640][T19261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.195303][ T9] usb 4-1: USB disconnect, device number 17 [ 991.206666][T19261] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 991.265678][T19289] bridge2: entered promiscuous mode [ 991.296377][T19289] bridge2: entered allmulticast mode [ 991.334231][T19291] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 991.518510][T19295] syzkaller0: entered promiscuous mode [ 991.526239][T19295] syzkaller0: entered allmulticast mode [ 991.539559][T19298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4050'. [ 991.814760][T19315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4053'. [ 991.841792][T19315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.859324][T19315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.074976][ T5002] Dev loop3: unable to read RDB block 7 [ 992.099943][ T5002] loop3: unable to read partition table [ 992.127645][ T5002] loop3: partition table beyond EOD, truncated [ 992.591408][T19331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4057'. [ 993.011159][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.019299][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.186230][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'. [ 993.241917][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4060'. [ 993.854879][ T5002] Dev loop3: unable to read RDB block 7 [ 993.879591][ T5002] loop3: unable to read partition table [ 993.907186][ T5002] loop3: partition table beyond EOD, truncated [ 994.065878][T19365] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4062'. [ 994.096560][T19366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.097044][T19366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.281559][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 994.510129][ T5771] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 994.672965][ T5771] usb 6-1: config 0 has no interfaces? [ 994.674088][ T5771] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 994.674118][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 994.674140][ T5771] usb 6-1: SerialNumber: syz [ 994.684548][ T5771] usb 6-1: config 0 descriptor?? [ 994.894260][ T5771] usb 6-1: USB disconnect, device number 5 [ 995.060721][ T5002] Dev loop3: unable to read RDB block 7 [ 995.073136][ T5002] loop3: unable to read partition table [ 995.088948][ T5002] loop3: partition table beyond EOD, truncated [ 995.113612][T19395] trusted_key: encrypted_key: insufficient parameters specified [ 995.227121][T19395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.238413][T19395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.462700][T19420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.499343][T19424] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 996.531714][T19420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.583432][T19420] fuse: Unknown parameter 'rootmod$' [ 996.744181][T19426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.838258][T19426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.176242][T19439] netlink: 'syz.5.4078': attribute type 4 has an invalid length. [ 997.926832][ T5002] Dev loop3: unable to read RDB block 7 [ 997.956937][ T5002] loop3: unable to read partition table [ 997.985803][ T5002] loop3: partition table beyond EOD, truncated [ 998.186584][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.216450][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.300292][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.333406][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.953166][ T5002] Dev loop3: unable to read RDB block 7 [ 998.959642][ T5002] loop3: unable to read partition table [ 998.979330][ T5002] loop3: partition table beyond EOD, truncated [ 998.994390][T19475] syzkaller0: entered promiscuous mode [ 999.016975][T19475] syzkaller0: entered allmulticast mode [ 999.263349][ T5002] Dev loop3: unable to read RDB block 7 [ 999.271867][ T5002] loop3: unable to read partition table [ 999.277944][ T5002] loop3: partition table beyond EOD, truncated [ 999.363086][T19488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.396305][T19488] FAULT_INJECTION: forcing a failure. [ 999.396305][T19488] name failslab, interval 1, probability 0, space 0, times 0 [ 999.396347][T19488] CPU: 0 UID: 0 PID: 19488 Comm: syz.3.4091 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.396367][T19488] Tainted: [L]=SOFTLOCKUP [ 999.396373][T19488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.396382][T19488] Call Trace: [ 999.396389][T19488] [ 999.396396][T19488] dump_stack_lvl+0xe8/0x150 [ 999.396418][T19488] should_fail_ex+0x412/0x560 [ 999.396439][T19488] should_failslab+0xa8/0x100 [ 999.396455][T19488] __kmalloc_noprof+0xe8/0x760 [ 999.396478][T19488] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 999.396498][T19488] tomoyo_realpath_from_path+0xe3/0x5d0 [ 999.396513][T19488] ? tomoyo_domain+0xd7/0x130 [ 999.396531][T19488] ? tomoyo_path_number_perm+0x219/0x630 [ 999.396552][T19488] tomoyo_path_number_perm+0x246/0x630 [ 999.396573][T19488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 999.396592][T19488] ? __lock_acquire+0x6b5/0x2cf0 [ 999.396651][T19488] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 999.396690][T19488] ? __fget_files+0x2a/0x420 [ 999.396728][T19488] ? __fget_files+0x2a/0x420 [ 999.396753][T19488] ? __fget_files+0x3a0/0x420 [ 999.396776][T19488] ? __fget_files+0x2a/0x420 [ 999.396812][T19488] security_file_ioctl+0xc3/0x2a0 [ 999.396845][T19488] __se_sys_ioctl+0x47/0x170 [ 999.396869][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.396886][T19488] do_syscall_64+0x174/0x580 [ 999.396901][T19488] ? trace_irq_disable+0x3b/0x140 [ 999.396923][T19488] ? clear_bhb_loop+0x40/0x90 [ 999.396944][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.396958][T19488] RIP: 0033:0x7f18d5d9ce59 [ 999.396973][T19488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.396986][T19488] RSP: 002b:00007f18d6c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.397002][T19488] RAX: ffffffffffffffda RBX: 00007f18d6015fa0 RCX: 00007f18d5d9ce59 [ 999.397013][T19488] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 999.397023][T19488] RBP: 00007f18d6c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 999.397032][T19488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.397041][T19488] R13: 00007f18d6016038 R14: 00007f18d6015fa0 R15: 00007f18d613fa48 [ 999.397064][T19488] [ 999.397091][T19488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 999.784934][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.791112][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.794480][T19497] fuse: Unknown parameter 'rootmod$' [ 1000.212289][ T5002] Dev loop3: unable to read RDB block 7 [ 1000.212324][ T5002] loop3: unable to read partition table [ 1000.212473][ T5002] loop3: partition table beyond EOD, truncated [ 1000.504894][ T5002] Dev loop3: unable to read RDB block 7 [ 1000.541655][ T5002] loop3: unable to read partition table [ 1000.561397][ T5002] loop3: partition table beyond EOD, truncated [ 1000.744878][T19505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1000.831337][ T30] audit: type=1326 audit(1780918785.907:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1000.909060][ T30] audit: type=1326 audit(1780918785.907:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1000.967897][ T30] audit: type=1326 audit(1780918785.907:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.019991][ T30] audit: type=1326 audit(1780918785.907:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.160043][ T30] audit: type=1326 audit(1780918785.907:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.221836][T19508] tipc: Enabled bearer , priority 0 [ 1001.253358][T19508] syzkaller0: entered promiscuous mode [ 1001.268127][ T30] audit: type=1326 audit(1780918785.917:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.270423][T19508] syzkaller0: entered allmulticast mode [ 1001.411452][ T30] audit: type=1326 audit(1780918785.917:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.471821][T19511] tipc: Resetting bearer [ 1001.506411][ T30] audit: type=1326 audit(1780918785.917:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.551947][T19507] tipc: Resetting bearer [ 1001.558199][ T30] audit: type=1326 audit(1780918785.917:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.586088][ T30] audit: type=1326 audit(1780918785.917:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.4094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d5d9ce59 code=0x7ffc0000 [ 1001.652374][T19507] tipc: Disabling bearer [ 1001.689676][T19519] binder: 19518:19519 ioctl c0306201 0 returned -14 [ 1001.787986][T19519] binder: 19518:19519 ioctl c0306201 0 returned -14 [ 1001.893971][T19519] netlink: 39 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1001.940514][T19519] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1002.014478][T19528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1002.064033][T19528] openvswitch: netlink: Flow actions attr not present in new flow. [ 1002.143873][ T5002] Dev loop3: unable to read RDB block 7 [ 1002.162447][ T5002] loop3: unable to read partition table [ 1002.189522][ T5002] loop3: partition table beyond EOD, truncated [ 1002.904300][T19544] FAULT_INJECTION: forcing a failure. [ 1002.904300][T19544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.953241][T19544] CPU: 1 UID: 0 PID: 19544 Comm: syz.0.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.953282][T19544] Tainted: [L]=SOFTLOCKUP [ 1002.953291][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1002.953303][T19544] Call Trace: [ 1002.953312][T19544] [ 1002.953322][T19544] dump_stack_lvl+0xe8/0x150 [ 1002.953352][T19544] should_fail_ex+0x412/0x560 [ 1002.953381][T19544] _copy_to_user+0x31/0xb0 [ 1002.953422][T19544] simple_read_from_buffer+0xe1/0x170 [ 1002.953455][T19544] proc_fail_nth_read+0x1bb/0x230 [ 1002.953487][T19544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1002.953517][T19544] ? rw_verify_area+0x2a6/0x4d0 [ 1002.953552][T19544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1002.953580][T19544] vfs_read+0x20c/0xa70 [ 1002.953615][T19544] ? __pfx___mutex_lock+0x10/0x10 [ 1002.953640][T19544] ? __pfx_vfs_read+0x10/0x10 [ 1002.953671][T19544] ? __fget_files+0x2a/0x420 [ 1002.953701][T19544] ? __fget_files+0x3a0/0x420 [ 1002.953725][T19544] ? __fget_files+0x2a/0x420 [ 1002.953759][T19544] ksys_read+0x150/0x270 [ 1002.953791][T19544] ? __pfx_ksys_read+0x10/0x10 [ 1002.953830][T19544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.953854][T19544] do_syscall_64+0x174/0x580 [ 1002.953875][T19544] ? trace_irq_disable+0x3b/0x140 [ 1002.953906][T19544] ? clear_bhb_loop+0x40/0x90 [ 1002.953932][T19544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.953953][T19544] RIP: 0033:0x7f071135d68e [ 1002.953973][T19544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1002.953990][T19544] RSP: 002b:00007f0712203fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1002.954012][T19544] RAX: ffffffffffffffda RBX: 00007f07122046c0 RCX: 00007f071135d68e [ 1002.954027][T19544] RDX: 000000000000000f RSI: 00007f07122040a0 RDI: 0000000000000005 [ 1002.954039][T19544] RBP: 00007f0712204090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.954052][T19544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.954064][T19544] R13: 00007f0711616128 R14: 00007f0711616090 R15: 00007f071173fa48 [ 1002.954098][T19544] [ 1003.764090][ T5002] Dev loop3: unable to read RDB block 7 [ 1003.764140][ T5002] loop3: unable to read partition table [ 1003.764355][ T5002] loop3: partition table beyond EOD, truncated [ 1004.160030][T19562] syz_tun: entered allmulticast mode [ 1004.235222][ T5002] Dev loop3: unable to read RDB block 7 [ 1004.250751][ T5002] loop3: unable to read partition table [ 1004.268403][ T5002] loop3: partition table beyond EOD, truncated [ 1004.430044][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1004.599861][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1004.613661][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1004.635369][ T9] usb 6-1: config 0 has no interface number 0 [ 1004.653737][T19553] syz_tun: left allmulticast mode [ 1004.659049][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.689226][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1004.707792][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1004.719803][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.739079][T19570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.752991][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1004.772090][T19570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.791096][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1004.811448][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.845407][ T9] usb 6-1: config 0 descriptor?? [ 1004.893326][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1004.967059][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.000006][T19574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.019666][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.042755][T19574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.056933][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.085530][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.113851][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.147462][ T5002] Dev loop3: unable to read RDB block 7 [ 1005.162024][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.178362][ T5002] loop3: unable to read partition table [ 1005.214664][ T5002] loop3: partition table beyond EOD, truncated [ 1005.385996][T19575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.434482][T19575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.998803][ T5002] Dev loop3: unable to read RDB block 7 [ 1006.030198][ T5002] loop3: unable to read partition table [ 1006.074823][ T5002] loop3: partition table beyond EOD, truncated [ 1006.421661][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.469114][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.719808][T11120] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1006.913791][T11120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1006.955668][T11120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1006.993124][T11120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1007.043499][T11120] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1007.085508][T11120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.129800][T11120] usb 4-1: Product: syz [ 1007.141574][T11120] usb 4-1: Manufacturer: syz [ 1007.151286][T11120] usb 4-1: SerialNumber: syz [ 1007.160682][T19590] FAULT_INJECTION: forcing a failure. [ 1007.160682][T19590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.183822][T11120] usb 4-1: config 0 descriptor?? [ 1007.225947][T19590] CPU: 1 UID: 0 PID: 19590 Comm: syz.2.4118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.225981][T19590] Tainted: [L]=SOFTLOCKUP [ 1007.225989][T19590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1007.226002][T19590] Call Trace: [ 1007.226014][T19590] [ 1007.226023][T19590] dump_stack_lvl+0xe8/0x150 [ 1007.226057][T19590] should_fail_ex+0x412/0x560 [ 1007.226087][T19590] _copy_from_user+0x2d/0xb0 [ 1007.226117][T19590] snd_seq_oss_write+0x5b1/0x8f0 [ 1007.226144][T19590] ? get_pid_task+0x20/0x1f0 [ 1007.226184][T19590] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1007.226214][T19590] ? apparmor_file_permission+0x1f4/0x300 [ 1007.226245][T19590] ? security_file_permission+0x75/0x260 [ 1007.226276][T19590] odev_write+0x5a/0x80 [ 1007.226304][T19590] ? __pfx_odev_write+0x10/0x10 [ 1007.226328][T19590] vfs_write+0x29a/0xb90 [ 1007.226375][T19590] ? __pfx_vfs_write+0x10/0x10 [ 1007.226406][T19590] ? __fget_files+0x2a/0x420 [ 1007.226436][T19590] ? __fget_files+0x2a/0x420 [ 1007.226460][T19590] ? __fget_files+0x3a0/0x420 [ 1007.226483][T19590] ? __fget_files+0x2a/0x420 [ 1007.226517][T19590] ksys_write+0x150/0x270 [ 1007.226549][T19590] ? __pfx_ksys_write+0x10/0x10 [ 1007.226585][T19590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.226609][T19590] do_syscall_64+0x174/0x580 [ 1007.226633][T19590] ? clear_bhb_loop+0x40/0x90 [ 1007.226658][T19590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.226679][T19590] RIP: 0033:0x7fadde19ce59 [ 1007.226699][T19590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.226717][T19590] RSP: 002b:00007faddf005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.226739][T19590] RAX: ffffffffffffffda RBX: 00007fadde415fa0 RCX: 00007fadde19ce59 [ 1007.226754][T19590] RDX: 0000000000000078 RSI: 0000200000000100 RDI: 0000000000000003 [ 1007.226768][T19590] RBP: 00007faddf005090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.226781][T19590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.226794][T19590] R13: 00007fadde416038 R14: 00007fadde415fa0 R15: 00007fadde53fa48 [ 1007.226828][T19590] [ 1007.485734][ T5771] usb 6-1: USB disconnect, device number 6 [ 1007.733818][ T5771] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1007.850414][T19586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.919022][T19586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.189275][T11120] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1008.253592][T11120] usb 4-1: USB disconnect, device number 18 [ 1009.081182][ T5002] Dev loop3: unable to read RDB block 7 [ 1009.102931][ T5002] loop3: unable to read partition table [ 1009.151234][ T5002] loop3: partition table beyond EOD, truncated [ 1009.871497][ T5002] Dev loop3: unable to read RDB block 7 [ 1009.896590][ T5002] loop3: unable to read partition table [ 1009.912706][ T5002] loop3: partition table beyond EOD, truncated [ 1009.950727][T19612] syzkaller0: entered promiscuous mode [ 1009.967809][T19612] syzkaller0: entered allmulticast mode [ 1009.990994][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.017230][T19612] tipc: Enabled bearer , priority 0 [ 1010.026076][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.037869][T19616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.067236][T19611] tipc: Resetting bearer [ 1010.093350][ T5002] Dev loop3: unable to read RDB block 7 [ 1010.095318][T19616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.100901][ T5002] loop3: unable to read partition table [ 1010.114004][T19596] binder: 19595:19596 ioctl c0306201 200000001ac0 returned -14 [ 1010.163611][ T5002] loop3: partition table beyond EOD, truncated [ 1010.195653][T19611] tipc: Disabling bearer [ 1010.475777][T19625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.517719][T19625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.575858][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.590964][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.640134][ T5729] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1010.799823][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1010.815924][ T5729] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1010.836851][ T5729] usb 6-1: config 0 has no interface number 0 [ 1010.859986][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1010.873712][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1010.887600][ T5729] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1010.903034][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1010.919757][ T5729] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1010.931802][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.957635][ T5729] usb 6-1: config 0 descriptor?? [ 1010.984505][ T5729] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1011.211439][ T5729] usb 6-1: USB disconnect, device number 7 [ 1011.259574][ T5729] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1011.377832][T19633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.417496][T19633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.566341][T19639] fuse: fd is not a fuse device [ 1012.245692][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.343026][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.446091][T19649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.466633][T19649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.629848][T11120] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1012.817060][T11120] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1012.843321][T11120] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1012.881348][T11120] usb 4-1: config 0 has no interface number 0 [ 1012.909076][T11120] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1012.935966][T11120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.965001][T11120] usb 4-1: Product: syz [ 1012.978710][T11120] usb 4-1: Manufacturer: syz [ 1012.998348][T11120] usb 4-1: SerialNumber: syz [ 1013.022729][T11120] usb 4-1: config 0 descriptor?? [ 1013.467615][T11120] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1013.501875][T11120] uvcvideo 4-1:0.64: No valid video chain found. [ 1013.839545][T19626] syzkaller0: entered promiscuous mode [ 1013.896516][T19626] syzkaller0: entered allmulticast mode [ 1014.308564][ T5729] usb 4-1: USB disconnect, device number 19 [ 1014.453313][T19655] bridge0: port 1(netdevsim0) entered blocking state [ 1014.475479][T19655] bridge0: port 1(netdevsim0) entered disabled state [ 1014.511927][T19655] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1014.609999][T11115] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1014.629279][T19655] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1014.696675][T19655] bridge0: port 1(netdevsim0) entered blocking state [ 1014.705611][T19655] bridge0: port 1(netdevsim0) entered forwarding state [ 1014.793647][T19662] syzkaller0: entered promiscuous mode [ 1014.809277][T19662] syzkaller0: entered allmulticast mode [ 1014.817304][T11115] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.828833][T11115] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.848391][T11115] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1014.861604][T11115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.880049][T11115] usb 6-1: Product: syz [ 1014.889993][T11115] usb 6-1: Manufacturer: syz [ 1014.899779][T11115] usb 6-1: SerialNumber: syz [ 1015.386269][T11115] usb 6-1: USB disconnect, device number 8 [ 1015.568962][ T5002] Dev loop3: unable to read RDB block 7 [ 1015.576265][ T5002] loop3: unable to read partition table [ 1015.587194][ T5002] loop3: partition table beyond EOD, truncated [ 1015.948011][T19676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.964708][T19676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.977995][T11115] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1016.086260][T19678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.097936][T19678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.149816][T11115] usb 4-1: Using ep0 maxpacket: 32 [ 1016.158916][T11115] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.170701][T11115] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.183175][T11115] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1016.197206][T11115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.206230][T11115] usb 4-1: Product: syz [ 1016.210950][T11115] usb 4-1: Manufacturer: syz [ 1016.215612][T11115] usb 4-1: SerialNumber: syz [ 1016.236992][T19682] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.243924][T19682] binder: 19681:19682 ioctl 4018620d 200000004a80 returned -16 [ 1016.252672][T19682] binder: 19681:19682 ioctl c0306201 2000000009c0 returned -14 [ 1016.260959][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4149'. [ 1016.271536][T19682] binder: 19681:19682 ioctl 40305828 200000000300 returned -22 [ 1016.299847][ T5771] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1016.455248][ T5771] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1016.473786][T11115] usb 4-1: USB disconnect, device number 20 [ 1016.480308][ T5771] usb 6-1: config 1 has no interface number 0 [ 1016.488080][ T5771] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1016.507554][ T5771] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1016.537062][ T5771] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 1016.567199][T19688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.577717][ T5771] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1016.583513][T19688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.599013][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.607510][ T5771] usb 6-1: Product: syz [ 1016.612256][ T5771] usb 6-1: Manufacturer: syz [ 1016.616918][ T5771] usb 6-1: SerialNumber: syz [ 1016.982894][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1016.990533][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.020563][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.046033][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.064504][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.083115][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.098932][ T5002] Dev loop3: unable to read RDB block 7 [ 1017.119203][ T5002] loop3: unable to read partition table [ 1017.128146][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.143734][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.144846][ T5002] loop3: partition table beyond EOD, [ 1017.151907][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.166116][ T5002] truncated [ 1017.172350][T16170] hid-generic 0006:0008:0001.0049: unknown main item tag 0x0 [ 1017.191282][T16170] hid-generic 0006:0008:0001.0049: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1017.333015][ T5002] Dev loop3: unable to read RDB block 7 [ 1017.357140][ T5002] loop3: unable to read partition table [ 1017.370628][ T5002] loop3: partition table beyond EOD, truncated [ 1017.453595][T19703] fido_id[19703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1017.523677][T19708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.535520][T19708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.664770][ T5002] Dev loop3: unable to read RDB block 7 [ 1017.677906][ T5002] loop3: unable to read partition table [ 1017.695832][ T5002] loop3: partition table beyond EOD, truncated [ 1017.897151][ T5002] Dev loop3: unable to read RDB block 7 [ 1017.914914][ T5002] loop3: unable to read partition table [ 1017.936833][ T5002] loop3: partition table beyond EOD, truncated [ 1018.059033][T19722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.073082][T19722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.194376][T19723] fuse: Bad value for 'group_id' [ 1018.205073][T19723] fuse: Bad value for 'group_id' [ 1018.356019][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1018.377351][T19731] netlink: 'syz.0.4166': attribute type 16 has an invalid length. [ 1018.395370][T19729] bond2: option mode: unable to set because the bond device has slaves [ 1018.404655][T19731] netlink: 'syz.0.4166': attribute type 17 has an invalid length. [ 1018.558960][T19731] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1018.624537][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1018.634207][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1018.712130][T19736] netlink: 'syz.2.4165': attribute type 10 has an invalid length. [ 1018.761606][T15526] bond5: left allmulticast mode [ 1018.804300][T15526] bond5: left promiscuous mode [ 1018.821552][T15526] bridge0: port 1(bond5) entered disabled state [ 1018.834449][T19739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.892263][T19739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.950829][T19739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.985475][T19739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.204723][T19739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.261930][T19739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.398569][T15526] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1019.435513][T19739] nvme_fabrics: missing parameter 'transport=%s' [ 1019.452374][T19739] nvme_fabrics: missing parameter 'nqn=%s' [ 1019.508817][T15526] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1019.566110][T15526] team0: Port device geneve1 removed [ 1019.609316][ T5771] usb 6-1: USB disconnect, device number 9 [ 1019.679204][ T5701] udevd[5701]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.938216][T15526] bond0 (unregistering): Released all slaves [ 1019.958721][T15526] bond1 (unregistering): Released all slaves [ 1019.995058][T15526] bond2 (unregistering): Released all slaves [ 1020.046843][T15526] bond3 (unregistering): Released all slaves [ 1020.088853][T15526] bond4 (unregistering): Released all slaves [ 1020.110493][ T5771] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1020.129544][ T5002] Dev loop3: unable to read RDB block 7 [ 1020.147123][ T5002] loop3: unable to read partition table [ 1020.156140][T15526] bond5 (unregistering): Released all slaves [ 1020.164231][ T5002] loop3: partition table beyond EOD, truncated [ 1020.224706][T19736] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1020.229557][T19756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.245688][T19756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.273112][ T5771] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1020.305629][T18087] bond2: (slave bond0): link status definitely down, disabling slave [ 1020.351357][ T5771] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1020.376455][T18087] bond2: now running without any active interface! [ 1020.392494][ T5771] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.455673][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.469763][T19758] netlink: 'syz.3.4173': attribute type 4 has an invalid length. [ 1020.495195][T19748] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.567003][ T5771] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.685866][T19766] netlink: 'syz.0.4174': attribute type 4 has an invalid length. [ 1020.791929][T15526] : left promiscuous mode [ 1021.063809][ T5771] usb 6-1: USB disconnect, device number 10 [ 1021.239342][T15526] tipc: Disabling bearer [ 1021.267485][T15526] tipc: Left network mode [ 1022.300124][ T5729] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1022.473450][T15526] hsr_slave_0: left promiscuous mode [ 1022.492546][T15526] hsr_slave_1: left promiscuous mode [ 1022.503723][ T5729] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1022.546672][ T5729] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1022.587698][ T5729] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1022.629185][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.708557][T19773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1022.786727][ T5729] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1022.879192][ T5002] Dev loop3: unable to read RDB block 7 [ 1022.907699][ T5002] loop3: unable to read partition table [ 1022.940408][ T5002] loop3: partition table beyond EOD, truncated [ 1023.145527][ T5729] usb 6-1: USB disconnect, device number 11 [ 1023.299907][T11115] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1023.453707][T11115] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1023.453753][T11115] usb 4-1: can't read configurations, error -61 [ 1023.590212][T11115] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1023.628539][T19784] netlink: 'syz.4.4179': attribute type 4 has an invalid length. [ 1023.771614][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.814925][T11115] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1023.830786][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.855342][T11115] usb 4-1: can't read configurations, error -61 [ 1023.887166][T11115] usb usb4-port1: attempt power cycle [ 1023.976326][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1024.024667][T19795] bond1: option mode: unable to set because the bond device is up [ 1024.082019][T19786] tipc: Enabled bearer , priority 0 [ 1024.110961][T19786] syzkaller0: entered promiscuous mode [ 1024.116538][T19786] syzkaller0: entered allmulticast mode [ 1024.245973][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1024.255153][T11115] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1024.263368][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1024.283637][T19789] tipc: Resetting bearer [ 1024.284718][T11115] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1024.306746][T11115] usb 4-1: can't read configurations, error -61 [ 1024.333160][T19785] tipc: Resetting bearer [ 1024.339333][T15526] IPVS: stop unused estimator thread 0... [ 1024.350691][T19799] netlink: 'syz.5.4183': attribute type 10 has an invalid length. [ 1024.404081][T19785] tipc: Disabling bearer [ 1024.473238][T11115] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1024.514781][T11115] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1024.526845][T11115] usb 4-1: can't read configurations, error -61 [ 1024.536850][T11115] usb usb4-port1: unable to enumerate USB device [ 1024.938823][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4185'. [ 1024.951134][T19805] bond1: option mode: unable to set because the bond device is up [ 1025.127428][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4185'. [ 1025.137502][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4185'. [ 1025.148088][T19814] netlink: 'syz.5.4185': attribute type 10 has an invalid length. [ 1025.826144][T19818] netlink: 'syz.4.4188': attribute type 4 has an invalid length. [ 1026.169499][ T5002] Dev loop3: unable to read RDB block 7 [ 1026.188991][ T5002] loop3: unable to read partition table [ 1026.241286][ T5002] loop3: partition table beyond EOD, truncated [ 1026.249534][T19827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1026.346319][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1026.415937][T19831] binder: 19829:19831 ioctl c018620c 200000000240 returned -22 [ 1026.649339][ T5002] Dev loop3: unable to read RDB block 7 [ 1026.655467][ T5002] loop3: unable to read partition table [ 1026.662454][ T5002] loop3: partition table beyond EOD, truncated [ 1026.719865][T11115] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1026.880389][ T5002] Dev loop3: unable to read RDB block 7 [ 1026.900350][T11115] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1026.920002][ T5002] loop3: unable to read partition table [ 1026.933583][ T5002] loop3: partition table beyond EOD, truncated [ 1026.944693][T11115] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1026.972507][T19841] syz_tun: entered allmulticast mode [ 1026.997886][T11115] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1027.019578][T11115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.069073][T19842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.079318][T19835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1027.133597][T11115] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1027.150326][T19842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.407673][ T5636] usb 6-1: USB disconnect, device number 12 [ 1027.807857][T19839] syz_tun: left allmulticast mode [ 1028.094651][ T5002] Dev loop3: unable to read RDB block 7 [ 1028.119566][ T5002] loop3: unable to read partition table [ 1028.150394][ T5002] loop3: partition table beyond EOD, truncated [ 1028.189151][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1028.215769][T19850] bond1: option mode: unable to set because the bond device has slaves [ 1028.352258][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1028.393139][T19855] netlink: 'syz.3.4199': attribute type 10 has an invalid length. [ 1028.414617][T18073] bond1: (slave bond0): link status definitely down, disabling slave [ 1028.456923][T18073] bond1: now running without any active interface! [ 1028.549572][T19855] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1028.579478][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.596027][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.630367][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.642326][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.909876][T11115] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1029.072049][T11115] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1029.085507][T11115] usb 6-1: can't read configurations, error -61 [ 1029.108675][ T5002] Dev loop3: unable to read RDB block 7 [ 1029.122934][T19868] tipc: Enabled bearer , priority 0 [ 1029.131309][ T5002] loop3: unable to read partition table [ 1029.143040][ T5002] loop3: partition table beyond EOD, truncated [ 1029.150373][T19868] syzkaller0: entered promiscuous mode [ 1029.167726][T19868] syzkaller0: entered allmulticast mode [ 1029.251448][T11115] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1029.262856][T19868] tipc: Resetting bearer [ 1029.275574][T19867] tipc: Resetting bearer [ 1029.316755][T19867] tipc: Disabling bearer [ 1029.363790][ T5002] Dev loop3: unable to read RDB block 7 [ 1029.372170][ T5002] loop3: unable to read partition table [ 1029.397215][ T5002] loop3: partition table beyond EOD, truncated [ 1029.418556][T11115] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1029.438216][T11115] usb 6-1: can't read configurations, error -61 [ 1029.459232][T11115] usb usb6-port1: attempt power cycle [ 1029.594405][T19877] netlink: 'syz.4.4207': attribute type 4 has an invalid length. [ 1029.645063][T19881] __nla_validate_parse: 1 callbacks suppressed [ 1029.645078][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1029.695484][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1029.724461][ T5002] Dev loop3: unable to read RDB block 7 [ 1029.737735][ T5002] loop3: unable to read partition table [ 1029.747957][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1029.761094][ T5002] loop3: partition table beyond EOD, truncated [ 1029.840213][T11115] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1029.893409][T11115] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1029.903720][T11115] usb 6-1: can't read configurations, error -61 [ 1029.943688][ T5002] Dev loop3: unable to read RDB block 7 [ 1029.959290][ T5002] loop3: unable to read partition table [ 1029.983575][ T5002] loop3: partition table beyond EOD, truncated [ 1030.071323][T11115] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1030.113683][T11115] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1030.127316][T11115] usb 6-1: can't read configurations, error -61 [ 1030.141624][T11115] usb usb6-port1: unable to enumerate USB device [ 1030.228403][T19894] netlink: 'syz.3.4212': attribute type 1 has an invalid length. [ 1030.264051][T19894] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1030.395963][ T5002] Dev loop3: unable to read RDB block 7 [ 1030.442169][ T5002] loop3: unable to read partition table [ 1030.458345][ T5002] loop3: partition table beyond EOD, truncated [ 1030.532930][T19901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.603890][T19901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.644700][T19908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.664981][ T5002] Dev loop3: unable to read RDB block 7 [ 1030.677165][T19908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.685165][ T5002] loop3: unable to read partition table [ 1030.697588][ T5002] loop3: partition table beyond EOD, truncated [ 1030.715129][T19908] FAULT_INJECTION: forcing a failure. [ 1030.715129][T19908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.763168][T19908] CPU: 0 UID: 0 PID: 19908 Comm: syz.2.4217 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.763201][T19908] Tainted: [L]=SOFTLOCKUP [ 1030.763210][T19908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.763223][T19908] Call Trace: [ 1030.763233][T19908] [ 1030.763242][T19908] dump_stack_lvl+0xe8/0x150 [ 1030.763273][T19908] should_fail_ex+0x412/0x560 [ 1030.763310][T19908] _copy_from_user+0x2d/0xb0 [ 1030.763338][T19908] ___sys_sendmsg+0x1c6/0x360 [ 1030.763362][T19908] ? __lock_acquire+0x6b5/0x2cf0 [ 1030.763393][T19908] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.763420][T19908] ? kstrtouint+0x6e/0xe0 [ 1030.763478][T19908] ? __fget_files+0x2a/0x420 [ 1030.763503][T19908] ? __fget_files+0x3a0/0x420 [ 1030.763539][T19908] __sys_sendmmsg+0x27c/0x4e0 [ 1030.763571][T19908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1030.763623][T19908] ? __pfx_ksys_write+0x10/0x10 [ 1030.763660][T19908] __x64_sys_sendmmsg+0xa0/0xc0 [ 1030.763682][T19908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.763704][T19908] do_syscall_64+0x174/0x580 [ 1030.763726][T19908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.763748][T19908] ? clear_bhb_loop+0x40/0x90 [ 1030.763773][T19908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.763794][T19908] RIP: 0033:0x7fadde19ce59 [ 1030.763813][T19908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.763832][T19908] RSP: 002b:00007faddf005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1030.763854][T19908] RAX: ffffffffffffffda RBX: 00007fadde415fa0 RCX: 00007fadde19ce59 [ 1030.763870][T19908] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 000000000000000a [ 1030.763883][T19908] RBP: 00007faddf005090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.763896][T19908] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1030.763909][T19908] R13: 00007fadde416038 R14: 00007fadde415fa0 R15: 00007fadde53fa48 [ 1030.763949][T19908] [ 1031.027322][ T5002] Dev loop3: unable to read RDB block 7 [ 1031.034146][ T5002] loop3: unable to read partition table [ 1031.046205][ T5002] loop3: partition table beyond EOD, truncated [ 1031.303098][T19912] tipc: Enabled bearer , priority 0 [ 1031.311825][T19912] syzkaller0: entered promiscuous mode [ 1031.318819][T19912] syzkaller0: entered allmulticast mode [ 1031.369453][T19912] tipc: Resetting bearer [ 1031.384596][T19911] tipc: Resetting bearer [ 1031.426983][T19911] tipc: Disabling bearer [ 1031.645475][T19917] netlink: 'syz.2.4220': attribute type 4 has an invalid length. [ 1031.677735][T19917] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4220'. [ 1031.710559][ T5002] Dev loop3: unable to read RDB block 7 [ 1031.727080][ T5002] loop3: unable to read partition table [ 1031.747622][ T5002] loop3: partition table beyond EOD, truncated [ 1031.877932][T19921] FAULT_INJECTION: forcing a failure. [ 1031.877932][T19921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.921382][T19921] CPU: 0 UID: 0 PID: 19921 Comm: syz.5.4223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.921416][T19921] Tainted: [L]=SOFTLOCKUP [ 1031.921425][T19921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1031.921438][T19921] Call Trace: [ 1031.921447][T19921] [ 1031.921456][T19921] dump_stack_lvl+0xe8/0x150 [ 1031.921486][T19921] should_fail_ex+0x412/0x560 [ 1031.921516][T19921] _copy_from_user+0x2d/0xb0 [ 1031.921545][T19921] ___sys_sendmsg+0x1c6/0x360 [ 1031.921567][T19921] ? __lock_acquire+0x6b5/0x2cf0 [ 1031.921594][T19921] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.921652][T19921] ? __fget_files+0x2a/0x420 [ 1031.921677][T19921] ? __fget_files+0x3a0/0x420 [ 1031.921711][T19921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1031.921736][T19921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.921767][T19921] ? __pfx_ksys_write+0x10/0x10 [ 1031.921806][T19921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.921829][T19921] do_syscall_64+0x174/0x580 [ 1031.921851][T19921] ? trace_irq_disable+0x3b/0x140 [ 1031.921881][T19921] ? clear_bhb_loop+0x40/0x90 [ 1031.921906][T19921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.921927][T19921] RIP: 0033:0x7fe49959ce59 [ 1031.921947][T19921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.921965][T19921] RSP: 002b:00007fe49a474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.921996][T19921] RAX: ffffffffffffffda RBX: 00007fe499815fa0 RCX: 00007fe49959ce59 [ 1031.922011][T19921] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000006 [ 1031.922025][T19921] RBP: 00007fe49a474090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.922039][T19921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.922052][T19921] R13: 00007fe499816038 R14: 00007fe499815fa0 R15: 00007fe49993fa48 [ 1031.922085][T19921] [ 1032.050718][T11120] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1032.175222][T19928] fuse: Bad value for 'fd' [ 1032.206306][T11120] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1032.461381][T11120] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1032.498382][T11120] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1032.529929][T11120] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1032.549771][T11120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.581544][T19919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1032.627084][T19935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4228'. [ 1033.132050][T19942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.157891][T19942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.207618][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1033.295486][T15520] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.295750][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1033.341449][T15520] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.383177][T15520] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.411627][T15520] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.423895][T11120] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1033.451696][T11120] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input112 [ 1033.568845][T11120] usb 4-1: USB disconnect, device number 25 [ 1033.568924][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1033.840923][T19947] tipc: Enabled bearer , priority 0 [ 1033.862634][T19950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.872364][T19947] syzkaller0: entered promiscuous mode [ 1033.884064][T19947] syzkaller0: entered allmulticast mode [ 1033.892885][T19950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.986196][T19947] tipc: Resetting bearer [ 1034.000136][T19945] tipc: Resetting bearer [ 1034.035353][T19945] tipc: Disabling bearer [ 1034.103886][ T5002] Dev loop3: unable to read RDB block 7 [ 1034.109802][ T5002] loop3: unable to read partition table [ 1034.115831][ T5002] loop3: partition table beyond EOD, truncated [ 1034.226020][T19954] FAULT_INJECTION: forcing a failure. [ 1034.226020][T19954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.254563][T19954] CPU: 1 UID: 0 PID: 19954 Comm: syz.3.4235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.254599][T19954] Tainted: [L]=SOFTLOCKUP [ 1034.254607][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1034.254621][T19954] Call Trace: [ 1034.254630][T19954] [ 1034.254639][T19954] dump_stack_lvl+0xe8/0x150 [ 1034.254673][T19954] should_fail_ex+0x412/0x560 [ 1034.254702][T19954] _copy_to_iter+0x589/0x17d0 [ 1034.254741][T19954] ? __pfx__copy_to_iter+0x10/0x10 [ 1034.254763][T19954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1034.254796][T19954] ? lockdep_hardirqs_on+0x7a/0x110 [ 1034.254817][T19954] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1034.254855][T19954] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1034.254886][T19954] __skb_datagram_iter+0xf8/0x980 [ 1034.254910][T19954] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1034.254942][T19954] skb_copy_datagram_iter+0xb5/0x240 [ 1034.254970][T19954] netlink_recvmsg+0x2c3/0xa50 [ 1034.255001][T19954] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1034.255035][T19954] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1034.255056][T19954] sock_recvmsg_nosec+0x10c/0x140 [ 1034.255087][T19954] ____sys_recvmsg+0x3e3/0x4a0 [ 1034.255117][T19954] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1034.255155][T19954] ? import_iovec+0x73/0xa0 [ 1034.255184][T19954] ___sys_recvmsg+0x215/0x590 [ 1034.255212][T19954] ? __pfx____sys_recvmsg+0x10/0x10 [ 1034.255240][T19954] ? __fget_files+0x2a/0x420 [ 1034.255297][T19954] do_recvmmsg+0x334/0x800 [ 1034.255328][T19954] ? __pfx_do_recvmmsg+0x10/0x10 [ 1034.255363][T19954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1034.255406][T19954] __x64_sys_recvmmsg+0x198/0x250 [ 1034.255433][T19954] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1034.255466][T19954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.255490][T19954] do_syscall_64+0x174/0x580 [ 1034.255511][T19954] ? trace_irq_disable+0x3b/0x140 [ 1034.255544][T19954] ? clear_bhb_loop+0x40/0x90 [ 1034.255578][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.255600][T19954] RIP: 0033:0x7f18d5d9ce59 [ 1034.255620][T19954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.255639][T19954] RSP: 002b:00007f18d6c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1034.255662][T19954] RAX: ffffffffffffffda RBX: 00007f18d6015fa0 RCX: 00007f18d5d9ce59 [ 1034.255678][T19954] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1034.255691][T19954] RBP: 00007f18d6c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.255705][T19954] R10: 0000000040012030 R11: 0000000000000246 R12: 0000000000000002 [ 1034.255719][T19954] R13: 00007f18d6016038 R14: 00007f18d6015fa0 R15: 00007f18d613fa48 [ 1034.255753][T19954] [ 1034.898599][ T5002] Dev loop3: unable to read RDB block 7 [ 1034.922336][ T5002] loop3: unable to read partition table [ 1034.942917][ T5002] loop3: partition table beyond EOD, truncated [ 1035.475623][ T5002] Dev loop3: unable to read RDB block 7 [ 1035.498131][ T5002] loop3: unable to read partition table [ 1035.516721][ T5002] loop3: partition table beyond EOD, truncated [ 1035.564016][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1035.602300][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.646230][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.688944][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.724302][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.792336][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.810530][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.983597][ T5002] Dev loop3: unable to read RDB block 7 [ 1035.993210][ T5002] loop3: unable to read partition table [ 1036.013869][ T5002] loop3: partition table beyond EOD, truncated [ 1036.758309][T19985] tipc: Enabled bearer , priority 0 [ 1036.779640][T19985] syzkaller0: entered promiscuous mode [ 1036.793479][T19985] syzkaller0: entered allmulticast mode [ 1037.013962][T19985] tipc: Resetting bearer [ 1037.057578][ T5002] Dev loop3: unable to read RDB block 7 [ 1037.070468][T19984] tipc: Resetting bearer [ 1037.083947][ T5002] loop3: unable to read partition table [ 1037.098232][ T5002] loop3: partition table beyond EOD, truncated [ 1037.175951][T19984] tipc: Disabling bearer [ 1037.285602][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1037.390248][ T5002] Dev loop3: unable to read RDB block 7 [ 1037.404027][ T5002] loop3: unable to read partition table [ 1037.424043][ T5002] loop3: partition table beyond EOD, truncated [ 1037.851196][T20003] netlink: 'syz.5.4251': attribute type 1 has an invalid length. [ 1037.950264][T20003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.034640][T20010] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1038.069111][T20016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.078672][T20003] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 1038.090046][T15520] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1038.111785][T20016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.150919][T20003] netlink: 'syz.5.4251': attribute type 10 has an invalid length. [ 1038.179349][T20003] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1038.205786][T15520] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1038.210597][T20003] dummy0: entered promiscuous mode [ 1038.244845][T20003] bond3: (slave dummy0): Removing an active aggregator [ 1038.282228][T18073] bond3: (slave dummy0): link status up again after 0 ms [ 1038.321689][T18073] bond3: (slave dummy0): link status up again after 0 ms [ 1038.326905][T20003] bond3: (slave dummy0): Releasing backup interface [ 1038.383373][ T5002] Dev loop3: unable to read RDB block 7 [ 1038.398077][ T5002] loop3: unable to read partition table [ 1038.413983][ T5002] loop3: partition table beyond EOD, truncated [ 1038.604714][ T5002] Dev loop3: unable to read RDB block 7 [ 1038.620211][ T5002] loop3: unable to read partition table [ 1038.633791][ T5002] loop3: partition table beyond EOD, truncated [ 1038.723398][T20034] binder: 20030:20034 ioctl c0306201 0 returned -14 [ 1038.727963][T20038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.731809][T20038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.782625][T20027] tipc: Enabled bearer , priority 0 [ 1038.784559][T20034] syz.5.4261 (20034): drop_caches: 2 [ 1038.809339][T20027] syzkaller0: entered promiscuous mode [ 1038.809392][T20027] syzkaller0: entered allmulticast mode [ 1038.917168][T20027] tipc: Resetting bearer [ 1038.928095][T20025] tipc: Resetting bearer [ 1038.963841][T20025] tipc: Disabling bearer [ 1039.092856][ T5002] Dev loop3: unable to read RDB block 7 [ 1039.116707][ T5002] loop3: unable to read partition table [ 1039.141430][ T5002] loop3: partition table beyond EOD, truncated [ 1039.489632][T20054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.515913][T20054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.546995][T20054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.558936][T20054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.696895][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1039.720147][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1040.023813][T20066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.037301][T20066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.093609][ T5002] Dev loop3: unable to read RDB block 7 [ 1040.113877][ T5002] loop3: unable to read partition table [ 1040.131213][ T5002] loop3: partition table beyond EOD, truncated [ 1040.267546][ T5002] Dev loop3: unable to read RDB block 7 [ 1040.282271][ T5002] loop3: unable to read partition table [ 1040.299125][ T5002] loop3: partition table beyond EOD, truncated [ 1040.395832][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4268'. [ 1040.442522][ T5002] Dev loop3: unable to read RDB block 7 [ 1040.448549][T20072] tipc: Enabled bearer , priority 0 [ 1040.462743][ T5002] loop3: unable to read partition table [ 1040.469090][ T5002] loop3: partition table beyond EOD, truncated [ 1040.472956][T20072] syzkaller0: entered promiscuous mode [ 1040.496399][T20072] syzkaller0: entered allmulticast mode [ 1040.541048][T20072] tipc: Resetting bearer [ 1040.553425][T20071] tipc: Resetting bearer [ 1040.584276][T20071] tipc: Disabling bearer [ 1040.662131][ T5729] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1040.839887][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1040.856470][ T5729] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1040.874668][ T5729] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1040.888548][T20086] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 1040.904453][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.915070][ T5729] usb 6-1: Product: syz [ 1040.919446][ T5729] usb 6-1: Manufacturer: syz [ 1040.925827][ T5729] usb 6-1: SerialNumber: syz [ 1040.966326][ T5729] usb 6-1: config 0 descriptor?? [ 1041.001940][T16170] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1041.063676][T20086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.077072][T20086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.146989][T20096] FAULT_INJECTION: forcing a failure. [ 1041.146989][T20096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.177956][T16170] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.199078][T16170] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1041.212140][T16170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1041.224337][T20056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.249197][T16170] usb 4-1: Product: syz [ 1041.254601][T20056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.275784][T20096] CPU: 0 UID: 0 PID: 20096 Comm: syz.4.4283 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.275822][T20096] Tainted: [L]=SOFTLOCKUP [ 1041.275830][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1041.275843][T20096] Call Trace: [ 1041.275852][T20096] [ 1041.275861][T20096] dump_stack_lvl+0xe8/0x150 [ 1041.275896][T20096] should_fail_ex+0x412/0x560 [ 1041.275934][T20096] _copy_from_user+0x2d/0xb0 [ 1041.275961][T20096] ___sys_sendmsg+0x1c6/0x360 [ 1041.275982][T20096] ? get_pid_task+0x20/0x1f0 [ 1041.276013][T20096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.276055][T20096] ? sb_end_write+0xe9/0x1c0 [ 1041.276092][T20096] ? __pfx_vfs_write+0x10/0x10 [ 1041.276132][T20096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1041.276156][T20096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1041.276187][T20096] ? __pfx_ksys_write+0x10/0x10 [ 1041.276225][T20096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.276248][T20096] do_syscall_64+0x174/0x580 [ 1041.276270][T20096] ? trace_irq_disable+0x3b/0x140 [ 1041.276300][T20096] ? clear_bhb_loop+0x40/0x90 [ 1041.276326][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.276347][T20096] RIP: 0033:0x7fe4e039ce59 [ 1041.276366][T20096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.276383][T20096] RSP: 002b:00007fe4e11ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.276405][T20096] RAX: ffffffffffffffda RBX: 00007fe4e0615fa0 RCX: 00007fe4e039ce59 [ 1041.276421][T20096] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1041.276434][T20096] RBP: 00007fe4e11ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.276447][T20096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.276459][T20096] R13: 00007fe4e0616038 R14: 00007fe4e0615fa0 R15: 00007fe4e073fa48 [ 1041.276492][T20096] [ 1041.283367][T16170] usb 4-1: Manufacturer: syz [ 1041.591515][ T5729] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1041.630075][ T5729] dvb-usb: bulk message failed: -22 (2/0) [ 1041.675874][T20102] netlink: 'syz.4.4285': attribute type 3 has an invalid length. [ 1041.705240][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1041.736026][ T5729] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1041.770517][T16170] usb 4-1: SerialNumber: syz [ 1041.773761][ T5729] usb 6-1: media controller created [ 1041.928077][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.063273][ T5729] usb 6-1: selecting invalid altsetting 0 [ 1042.090386][ T5729] cxusb: set interface failed [ 1042.102803][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1042.118234][T16170] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1042.250282][ T5729] DVB: Unable to find symbol mt352_attach() [ 1042.265578][ T5729] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1042.289195][T20111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4287'. [ 1042.335685][ T5636] usb 4-1: USB disconnect, device number 26 [ 1042.369216][ T5636] usblp0: removed [ 1042.458758][ T5729] rc_core: IR keymap rc-dvico-portable not found [ 1042.469956][ T5729] Registered IR keymap rc-empty [ 1042.492137][ T5729] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1042.549231][ T5729] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input113 [ 1042.597963][ T5729] dvb-usb: schedule remote query interval to 100 msecs. [ 1042.628271][ T5729] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1042.664391][ T5729] usb 6-1: USB disconnect, device number 17 [ 1042.834014][ T5729] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1043.263946][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.300152][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.345199][T20119] tipc: Enabled bearer , priority 0 [ 1043.367896][T20119] syzkaller0: entered promiscuous mode [ 1043.387099][T20119] syzkaller0: entered allmulticast mode [ 1043.480479][T20119] tipc: Resetting bearer [ 1043.499204][T20117] tipc: Resetting bearer [ 1043.573827][T20117] tipc: Disabling bearer [ 1044.216452][ T5002] Dev loop3: unable to read RDB block 7 [ 1044.243460][ T5002] loop3: unable to read partition table [ 1044.270269][ T5002] loop3: partition table beyond EOD, truncated [ 1044.353093][T20134] syzkaller0: entered promiscuous mode [ 1044.378392][T20134] syzkaller0: entered allmulticast mode [ 1044.435540][T20134] tipc: Enabled bearer , priority 0 [ 1044.464161][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.483636][T20133] tipc: Resetting bearer [ 1044.494087][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.621248][T20133] tipc: Disabling bearer [ 1044.656185][ T5002] Dev loop3: unable to read RDB block 7 [ 1044.671065][ T5002] loop3: unable to read partition table [ 1044.691030][ T5002] loop3: partition table beyond EOD, truncated [ 1045.257754][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.316177][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.041745][T20166] tipc: Enabled bearer , priority 0 [ 1046.115479][T20161] syzkaller0: entered promiscuous mode [ 1046.175402][T20161] syzkaller0: entered allmulticast mode [ 1046.255508][ T5002] Dev loop3: unable to read RDB block 7 [ 1046.272724][ T5002] loop3: unable to read partition table [ 1046.316881][ T5002] loop3: partition table beyond EOD, truncated [ 1046.513624][T20173] tipc: Resetting bearer [ 1046.559243][T20160] tipc: Resetting bearer [ 1046.588248][T20177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.621186][T20177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.731854][T20183] binder: 20182:20183 ioctl c028564d 200000000100 returned -22 [ 1046.823895][T20160] tipc: Disabling bearer [ 1047.815387][T20188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1047.821962][T20188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1047.918108][T20188] vhci_hcd vhci_hcd.0: Device attached [ 1047.944849][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 1048.000644][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 1048.093742][ T5002] Dev loop3: unable to read RDB block 7 [ 1048.113434][ T5002] loop3: unable to read partition table [ 1048.130886][T20189] vhci_hcd: connection closed [ 1048.137525][T18070] vhci_hcd vhci_hcd.2: stop threads [ 1048.139410][ T5002] loop3: partition table beyond EOD, [ 1048.150999][ T5729] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1048.171503][T18070] vhci_hcd vhci_hcd.2: release socket [ 1048.191497][T18070] vhci_hcd vhci_hcd.2: disconnect device [ 1048.200953][ T5002] truncated [ 1048.347974][T20197] fuse: Bad value for 'user_id' [ 1048.380940][T20197] fuse: Bad value for 'user_id' [ 1048.850094][T11120] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1049.045100][T11120] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1049.074305][T11120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.103100][T11120] usb 4-1: Product: syz [ 1049.123045][T11120] usb 4-1: Manufacturer: syz [ 1049.142798][T11120] usb 4-1: SerialNumber: syz [ 1049.182922][T11120] usb 4-1: config 0 descriptor?? [ 1049.216153][T11120] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1049.388340][T20212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.461862][T20212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.757792][T11120] gspca_sunplus: reg_r err -110 [ 1049.880577][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1050.072487][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.112112][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.139417][ T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1050.149732][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.177477][ T9] usb 6-1: Product: syz [ 1050.188769][ T9] usb 6-1: Manufacturer: syz [ 1050.205822][ T9] usb 6-1: SerialNumber: syz [ 1050.470018][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.515093][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.671409][ T9] usb 6-1: USB disconnect, device number 18 [ 1050.899158][T20227] tipc: Enabled bearer , priority 0 [ 1050.909138][T20227] syzkaller0: entered promiscuous mode [ 1050.917838][T20227] syzkaller0: entered allmulticast mode [ 1051.043958][T20227] tipc: Resetting bearer [ 1051.071448][T20226] tipc: Resetting bearer [ 1051.103455][T20232] netlink: 'syz.0.4323': attribute type 4 has an invalid length. [ 1051.136079][T20226] tipc: Disabling bearer [ 1051.372466][T11120] usb 4-1: USB disconnect, device number 27 [ 1051.405564][ T5002] Dev loop3: unable to read RDB block 7 [ 1051.422934][ T5002] loop3: unable to read partition table [ 1051.438347][ T5002] loop3: partition table beyond EOD, truncated [ 1051.721026][T20239] syzkaller0: entered promiscuous mode [ 1051.738359][T20239] syzkaller0: entered allmulticast mode [ 1051.768157][ T5002] Dev loop3: unable to read RDB block 7 [ 1051.803981][ T5002] loop3: unable to read partition table [ 1051.820988][ T5002] loop3: partition table beyond EOD, truncated [ 1052.007875][T20239] tipc: Enabled bearer , priority 0 [ 1052.075535][T20238] tipc: Resetting bearer [ 1052.251241][T20238] tipc: Disabling bearer [ 1052.650086][T11120] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1052.780375][T20264] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 1052.831188][T11120] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.943452][T11120] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1052.971512][T11120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1052.996028][T11120] usb 6-1: Product: syz [ 1053.019040][T11120] usb 6-1: Manufacturer: syz [ 1053.034223][T11120] usb 6-1: SerialNumber: syz [ 1053.082500][T20269] syz.2.4334 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1053.287999][T11120] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1053.329852][ T5729] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1053.618772][T11120] usb 6-1: USB disconnect, device number 19 [ 1053.664701][T11120] usblp0: removed [ 1054.363101][ T5002] Dev loop3: unable to read RDB block 7 [ 1054.401153][ T5002] loop3: unable to read partition table [ 1054.419913][ T5002] loop3: partition table beyond EOD, truncated [ 1054.461638][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.469613][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.696323][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.710645][ T5729] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1054.734846][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.839018][T20292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4341'. [ 1054.906220][ T5729] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1054.930314][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.955830][ T5729] usb 4-1: Product: syz [ 1054.968918][ T5729] usb 4-1: Manufacturer: syz [ 1054.986032][ T5729] usb 4-1: SerialNumber: syz [ 1055.010001][ T5729] usb 4-1: config 0 descriptor?? [ 1055.238524][ T5729] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1055.261083][ T5729] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1055.292131][ T5729] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 1055.341331][ T5729] usb 4-1: USB disconnect, device number 28 [ 1055.386665][ T5002] Dev loop3: unable to read RDB block 7 [ 1055.394123][ T5002] loop3: unable to read partition table [ 1055.412726][ T5002] loop3: partition table beyond EOD, truncated [ 1055.674738][ T5002] Dev loop3: unable to read RDB block 7 [ 1055.702910][ T5002] loop3: unable to read partition table [ 1055.730003][ T5002] loop3: partition table beyond EOD, truncated [ 1056.142020][T20308] veth1_vlan (unregistering): left allmulticast mode [ 1056.158221][T20311] kernel read not supported for file /file0 (pid: 20311 comm: syz.5.4347) [ 1056.169387][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1056.169407][ T30] audit: type=1800 audit(1780918841.237:2272): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4347" name="file0" dev="mqueue" ino=112933 res=0 errno=0 [ 1056.217186][T20313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.234676][T20313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.258016][T20308] bond0: (slave macvlan1): Releasing backup interface [ 1056.536799][T20315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1056.685382][ T5002] Dev loop3: unable to read RDB block 7 [ 1056.710326][ T5002] loop3: unable to read partition table [ 1056.716689][ T5002] loop3: partition table beyond EOD, truncated [ 1056.746012][T20317] tipc: Enabled bearer , priority 0 [ 1056.756804][T20317] syzkaller0: entered promiscuous mode [ 1056.763264][T20317] syzkaller0: entered allmulticast mode [ 1056.829730][T20317] tipc: Resetting bearer [ 1056.842975][T20316] tipc: Resetting bearer [ 1056.905372][T20316] tipc: Disabling bearer [ 1056.969030][ T5002] Dev loop3: unable to read RDB block 7 [ 1056.976048][ T5002] loop3: unable to read partition table [ 1056.985553][ T5002] loop3: partition table beyond EOD, truncated [ 1057.115790][ T5002] Dev loop3: unable to read RDB block 7 [ 1057.115839][ T5002] loop3: unable to read partition table [ 1057.116075][ T5002] loop3: partition table beyond EOD, truncated [ 1057.252239][ T5002] Dev loop3: unable to read RDB block 7 [ 1057.276390][ T5002] loop3: unable to read partition table [ 1057.289366][ T5002] loop3: partition table beyond EOD, truncated [ 1057.335570][T20342] xt_hashlimit: size too large, truncated to 1048576 [ 1057.382662][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.446544][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.484050][T20344] FAULT_INJECTION: forcing a failure. [ 1057.484050][T20344] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.548826][T20344] CPU: 0 UID: 0 PID: 20344 Comm: syz.2.4358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.548865][T20344] Tainted: [L]=SOFTLOCKUP [ 1057.548872][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.548881][T20344] Call Trace: [ 1057.548888][T20344] [ 1057.548895][T20344] dump_stack_lvl+0xe8/0x150 [ 1057.548920][T20344] should_fail_ex+0x412/0x560 [ 1057.548942][T20344] should_failslab+0xa8/0x100 [ 1057.548958][T20344] ? security_file_alloc+0x34/0x310 [ 1057.548979][T20344] kmem_cache_alloc_noprof+0x87/0x650 [ 1057.548999][T20344] ? rcu_is_watching+0x15/0xb0 [ 1057.549018][T20344] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1057.549040][T20344] security_file_alloc+0x34/0x310 [ 1057.549059][T20344] init_file+0x90/0x2b0 [ 1057.549078][T20344] alloc_empty_file+0x74/0x1d0 [ 1057.549097][T20344] alloc_file_pseudo+0x155/0x240 [ 1057.549117][T20344] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1057.549135][T20344] ? alloc_fd+0x64b/0x6c0 [ 1057.549159][T20344] anon_inode_getfd+0xc8/0x1f0 [ 1057.549210][T20344] __se_sys_fsopen+0x232/0x2c0 [ 1057.549225][T20344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.549242][T20344] do_syscall_64+0x174/0x580 [ 1057.549258][T20344] ? trace_irq_disable+0x3b/0x140 [ 1057.549281][T20344] ? clear_bhb_loop+0x40/0x90 [ 1057.549299][T20344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.549313][T20344] RIP: 0033:0x7fadde19ce59 [ 1057.549328][T20344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.549341][T20344] RSP: 002b:00007faddefe4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1057.549358][T20344] RAX: ffffffffffffffda RBX: 00007fadde416090 RCX: 00007fadde19ce59 [ 1057.549369][T20344] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 1057.549379][T20344] RBP: 00007faddefe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.549388][T20344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.549397][T20344] R13: 00007fadde416128 R14: 00007fadde416090 R15: 00007fadde53fa48 [ 1057.549420][T20344] [ 1058.070120][ T808] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1058.250557][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 1058.267431][ T808] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1058.286156][ T808] usb 6-1: config 0 has no interface number 0 [ 1058.303579][ T808] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1058.331370][ T5636] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1058.349203][ T808] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1058.361762][ T808] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.395991][ T808] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1058.463632][ T808] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1058.486122][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.508238][ T5636] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.520611][ T808] usb 6-1: config 0 descriptor?? [ 1058.576285][ T808] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1058.589299][ T5636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1058.589326][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1058.589344][ T5636] usb 4-1: Product: syz [ 1058.589356][ T5636] usb 4-1: Manufacturer: syz [ 1058.589388][ T5636] usb 4-1: SerialNumber: syz [ 1058.908638][ T5636] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1058.983099][ T24] usb 6-1: USB disconnect, device number 20 [ 1058.992888][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1059.045755][T20371] tipc: Enabled bearer , priority 0 [ 1059.069637][T20371] syzkaller0: entered promiscuous mode [ 1059.087387][T20371] syzkaller0: entered allmulticast mode [ 1059.198670][ T808] usb 4-1: USB disconnect, device number 29 [ 1059.235373][ T808] usblp1: removed [ 1059.276780][T20371] tipc: Resetting bearer [ 1059.315830][T20370] tipc: Resetting bearer [ 1059.490069][T20370] tipc: Disabling bearer [ 1059.906763][T20388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4370'. [ 1060.343391][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.357466][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.459958][T20394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1060.793757][ T5002] Dev loop3: unable to read RDB block 7 [ 1060.807623][ T5002] loop3: unable to read partition table [ 1060.830989][ T5002] loop3: partition table beyond EOD, truncated [ 1060.980823][ T5002] Dev loop3: unable to read RDB block 7 [ 1060.999164][ T5002] loop3: unable to read partition table [ 1061.020046][ T5002] loop3: partition table beyond EOD, truncated [ 1061.349788][ T808] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1061.389772][T15711] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1061.499901][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 1061.516151][ T808] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1061.528583][ T808] usb 6-1: config 0 has no interface number 0 [ 1061.542532][ T808] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1061.554473][T15711] usb 4-1: Using ep0 maxpacket: 32 [ 1061.572057][T15711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.584399][ T808] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1061.603494][T15711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.615686][ T808] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.637795][T15711] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1061.649385][ T808] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1061.649445][ T808] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1061.649472][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.654532][ T808] usb 6-1: config 0 descriptor?? [ 1061.656275][T15711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.666061][T15711] usb 4-1: config 0 descriptor?? [ 1061.677543][T15711] hub 4-1:0.0: USB hub found [ 1061.704115][ T808] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1061.875850][T15711] hub 4-1:0.0: 1 port detected [ 1061.951386][ T808] usb 6-1: USB disconnect, device number 21 [ 1061.989056][ T808] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1062.157528][T20421] netlink: 'syz.4.4379': attribute type 1 has an invalid length. [ 1062.287472][T20423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.319137][T20423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.347624][T20420] tipc: Enabled bearer , priority 0 [ 1062.355330][T20420] syzkaller0: entered promiscuous mode [ 1062.361093][T20420] syzkaller0: entered allmulticast mode [ 1062.485466][T20425] tipc: Resetting bearer [ 1062.514260][ T808] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1062.535059][T20419] tipc: Resetting bearer [ 1062.708621][T20419] tipc: Disabling bearer [ 1062.961541][T20428] syzkaller0: entered promiscuous mode [ 1062.967232][T20428] syzkaller0: entered allmulticast mode [ 1063.230371][T20430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.261183][T20430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.289432][T20430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.313833][T20430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.353992][T20430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.382756][T20430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.408123][T20430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1063.989817][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1064.161661][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.217244][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1064.249299][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1064.276103][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.287757][ T24] usb 6-1: Product: syz [ 1064.299546][ T24] usb 6-1: Manufacturer: syz [ 1064.310577][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.326423][ T24] usb 6-1: SerialNumber: syz [ 1064.334747][ T5002] Dev loop3: unable to read RDB block 7 [ 1064.347284][ T5002] loop3: unable to read partition table [ 1064.366617][ T5002] loop3: partition table beyond EOD, truncated [ 1064.380860][ T808] usb 4-1: USB disconnect, device number 30 [ 1064.396980][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4388'. [ 1064.452599][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.484664][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.524601][T20447] fuse: Bad value for 'fd' [ 1064.579858][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1064.661234][T20448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1064.829152][ T808] usb 6-1: USB disconnect, device number 22 [ 1064.894878][ T808] usblp0: removed [ 1065.094940][T15520] team0: Port device geneve1 removed [ 1065.159037][T20450] trusted_key: encrypted_key: insufficient parameters specified [ 1065.222056][T20452] netlink: 'syz.0.4391': attribute type 1 has an invalid length. [ 1065.246535][T20450] FAULT_INJECTION: forcing a failure. [ 1065.246535][T20450] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.293510][T20450] CPU: 0 UID: 0 PID: 20450 Comm: syz.4.4390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.293535][T20450] Tainted: [L]=SOFTLOCKUP [ 1065.293541][T20450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1065.293550][T20450] Call Trace: [ 1065.293557][T20450] [ 1065.293564][T20450] dump_stack_lvl+0xe8/0x150 [ 1065.293587][T20450] should_fail_ex+0x412/0x560 [ 1065.293608][T20450] should_failslab+0xa8/0x100 [ 1065.293625][T20450] __kmalloc_cache_noprof+0x88/0x660 [ 1065.293648][T20450] ? find_get_pmu_context+0x8b/0x890 [ 1065.293674][T20450] find_get_pmu_context+0x8b/0x890 [ 1065.293694][T20450] ? find_get_context+0x5c4/0x6e0 [ 1065.293717][T20450] ? perf_event_create_kernel_counter+0xe0/0x630 [ 1065.293740][T20450] perf_event_create_kernel_counter+0x2b1/0x630 [ 1065.293766][T20450] ptrace_set_debugreg+0xad4/0xd70 [ 1065.293790][T20450] ? __pfx_ptrace_set_debugreg+0x10/0x10 [ 1065.293805][T20450] ? __lock_acquire+0x6b5/0x2cf0 [ 1065.293824][T20450] ? __lock_acquire+0x6b5/0x2cf0 [ 1065.293846][T20450] ? kstrtoull+0x12f/0x1d0 [ 1065.293895][T20450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1065.293919][T20450] ? lockdep_hardirqs_on+0x7a/0x110 [ 1065.293941][T20450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1065.293964][T20450] ? wait_task_inactive+0x430/0x7e0 [ 1065.293997][T20450] ? __pfx_wait_task_inactive+0x10/0x10 [ 1065.294027][T20450] arch_ptrace+0x361/0x410 [ 1065.294044][T20450] __se_sys_ptrace+0x150/0x3b0 [ 1065.294066][T20450] ? __pfx___se_sys_ptrace+0x10/0x10 [ 1065.294089][T20450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.294106][T20450] do_syscall_64+0x174/0x580 [ 1065.294121][T20450] ? trace_irq_disable+0x3b/0x140 [ 1065.294143][T20450] ? clear_bhb_loop+0x40/0x90 [ 1065.294161][T20450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.294177][T20450] RIP: 0033:0x7fe4e039ce59 [ 1065.294191][T20450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.294204][T20450] RSP: 002b:00007fe4e11ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1065.294223][T20450] RAX: ffffffffffffffda RBX: 00007fe4e0615fa0 RCX: 00007fe4e039ce59 [ 1065.294235][T20450] RDX: 0000000000000388 RSI: 0000000000000354 RDI: 0000000000000006 [ 1065.294244][T20450] RBP: 00007fe4e11ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.294254][T20450] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 1065.294263][T20450] R13: 00007fe4e0616038 R14: 00007fe4e0615fa0 R15: 00007fe4e073fa48 [ 1065.294287][T20450] [ 1065.814575][T20450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.825013][T20450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.833393][ T5002] Dev loop3: unable to read RDB block 7 [ 1065.843694][ T5002] loop3: unable to read partition table [ 1065.851224][ T5002] loop3: partition table beyond EOD, truncated [ 1066.225531][ T5636] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1066.616687][T15520] bond0 (unregistering): Released all slaves [ 1066.647067][T15520] bond1 (unregistering): Released all slaves [ 1066.764898][ T5636] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1066.773483][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.868531][ T5636] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1066.882374][ T5636] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1066.894251][ T5636] usb 4-1: Manufacturer: syz [ 1066.929107][ T5636] usb 4-1: config 0 descriptor?? [ 1067.185074][T15520] tipc: Disabling bearer [ 1067.238603][ T5636] rc_core: IR keymap rc-hauppauge not found [ 1067.244854][ T5636] Registered IR keymap rc-empty [ 1067.254599][ T5636] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1067.268235][ T5636] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input114 [ 1067.322902][T15520] tipc: Left network mode [ 1067.327429][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1067.349085][T20457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.363252][T20466] netlink: 'syz.0.4394': attribute type 4 has an invalid length. [ 1067.383592][ T5636] usb 4-1: USB disconnect, device number 31 [ 1067.405002][T20457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.457601][T20457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.526181][T20457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.580889][T15711] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1067.684977][T20457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.723732][T20457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.765561][T15711] usb 6-1: Using ep0 maxpacket: 8 [ 1067.786428][T15711] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1067.801245][T15711] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.827712][T15711] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1067.859599][T15711] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1067.890234][ T5002] Dev loop3: unable to read RDB block 7 [ 1067.896609][T15711] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.913986][ T5002] loop3: unable to read partition table [ 1067.932969][ T5002] loop3: partition table beyond EOD, truncated [ 1067.948252][T15711] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1067.982490][T15711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.236915][T15711] usb 6-1: usb_control_msg returned -32 [ 1068.261944][T15711] usbtmc 6-1:16.0: can't read capabilities [ 1068.496485][ T5636] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1068.606812][T20465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.659788][ T5636] usb 4-1: Using ep0 maxpacket: 8 [ 1068.667658][ T5636] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1068.680206][T20465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.713105][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1068.747725][T20465] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 1068.756449][ T5636] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1068.779044][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.805887][ T5636] usb 4-1: Product: syz [ 1068.816060][ T5636] usb 4-1: Manufacturer: syz [ 1068.836415][ T5636] usb 4-1: SerialNumber: syz [ 1068.876973][ T5636] usb 4-1: config 0 descriptor?? [ 1068.895121][ T5636] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1068.968076][T15711] usb 6-1: USB disconnect, device number 23 [ 1070.709168][T15520] IPVS: stop unused estimator thread 0... [ 1071.125407][T20496] netlink: 'syz.5.4404': attribute type 1 has an invalid length. [ 1071.136638][T15711] usb 4-1: USB disconnect, device number 32 [ 1071.187672][ T5002] Dev loop3: unable to read RDB block 7 [ 1071.211127][ T5002] loop3: unable to read partition table [ 1071.233824][ T5002] loop3: partition table beyond EOD, truncated [ 1071.814436][ T997] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1071.853150][T20505] netlink: 'syz.5.4406': attribute type 4 has an invalid length. [ 1071.982237][ T997] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.059309][ T997] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1072.088948][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1072.119630][ T997] usb 4-1: Product: syz [ 1072.133730][ T997] usb 4-1: Manufacturer: syz [ 1072.152768][ T997] usb 4-1: SerialNumber: syz [ 1072.474577][ T997] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1072.715717][ T24] usb 4-1: USB disconnect, device number 33 [ 1072.757762][ T24] usblp0: removed [ 1073.730724][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1073.756881][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1073.768236][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1073.785163][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1073.836942][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1073.994503][ T4951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.006262][ T4951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.015522][ T4951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.031483][ T4951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.043250][ T4951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1074.166877][T20516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.268758][T20516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.339870][T20516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.401010][T20516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.459314][ T24] usb 3-1: USB disconnect, device number 17 [ 1074.868065][ T5002] Dev loop3: unable to read RDB block 7 [ 1074.889782][ T5002] loop3: unable to read partition table [ 1074.897301][ T5002] loop3: partition table beyond EOD, truncated [ 1075.383376][ T5002] Dev loop3: unable to read RDB block 7 [ 1075.435750][ T5002] loop3: unable to read partition table [ 1075.501062][ T5002] loop3: partition table beyond EOD, truncated [ 1075.645803][T20517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.698034][T20517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.738156][T20517] bridge_slave_0: entered allmulticast mode [ 1075.758882][T20517] bridge_slave_0: entered promiscuous mode [ 1075.797365][T20517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.845032][T20517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.861567][T20517] bridge_slave_1: entered allmulticast mode [ 1075.880255][T20517] bridge_slave_1: entered promiscuous mode [ 1076.008841][T20517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.032731][T20517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.119991][ T5636] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1076.164027][ T4951] Bluetooth: hci2: command tx timeout [ 1076.262663][T20517] team0: Port device team_slave_0 added [ 1076.286804][T20517] team0: Port device team_slave_1 added [ 1076.301529][ T5636] usb 4-1: Using ep0 maxpacket: 32 [ 1076.320195][ T5636] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1076.392124][ T5636] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1076.432493][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.456905][ T5636] usb 4-1: config 0 descriptor?? [ 1076.472954][T20517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.502271][ T5636] hub 4-1:0.0: bad descriptor, ignoring hub [ 1076.508789][T20517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.539737][ T5636] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1076.581597][ T5636] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1076.613236][T20517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.648624][T20517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.664415][T20517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.742716][T20517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.009150][T20543] binder: 20541:20543 ioctl c028564d 200000000100 returned -22 [ 1077.104665][T20517] hsr_slave_0: entered promiscuous mode [ 1077.115637][T20517] hsr_slave_1: entered promiscuous mode [ 1077.288528][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1078.213632][ T4951] Bluetooth: hci2: command tx timeout [ 1078.389114][T20517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1078.404585][T20517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.405681][T20517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1078.416966][T20517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.418651][T20517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1078.431727][T20517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.432841][T20517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1078.459369][T20517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.499761][T15711] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1078.650842][T15711] usb 6-1: Using ep0 maxpacket: 8 [ 1078.676590][T15711] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1078.708893][T15711] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.726445][T15711] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.747908][T15711] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.772678][T20517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.795414][T15711] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.827417][T15711] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1078.846887][T15711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.871563][T20517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.919018][ T5002] Dev loop3: unable to read RDB block 7 [ 1078.927528][ T5002] loop3: unable to read partition table [ 1078.939300][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.946584][ T9302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.968651][ T5002] loop3: partition table beyond EOD, truncated [ 1078.990578][ T808] usb 4-1: USB disconnect, device number 34 [ 1079.008905][T15520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.016180][T15520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.089292][T15711] usb 6-1: usb_control_msg returned -32 [ 1079.108552][T15711] usbtmc 6-1:16.0: can't read capabilities [ 1079.302224][T20517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.461513][T20583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.507208][T20583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.529310][T20583] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 1079.536458][T20517] veth0_vlan: entered promiscuous mode [ 1079.567706][ T5002] Dev loop3: unable to read RDB block 7 [ 1079.582026][ T5002] loop3: unable to read partition table [ 1079.588205][T20517] veth1_vlan: entered promiscuous mode [ 1079.590848][ T5002] loop3: partition table beyond EOD, truncated [ 1079.682271][T20517] veth0_macvtap: entered promiscuous mode [ 1079.718029][T20517] veth1_macvtap: entered promiscuous mode [ 1079.737102][ T808] usb 6-1: USB disconnect, device number 24 [ 1079.795193][T20517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.827949][ T5002] Dev loop3: unable to read RDB block 7 [ 1079.839628][T20517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.855186][ T5002] loop3: unable to read partition table [ 1079.881491][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.892907][T15526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.899417][ T5002] loop3: partition table beyond EOD, truncated [ 1079.920307][T18085] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.933779][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.974696][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.003617][T18085] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.019159][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.035443][T18085] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.253726][ T5002] Dev loop3: unable to read RDB block 7 [ 1080.269992][ T5002] loop3: unable to read partition table [ 1080.281051][ T5002] loop3: partition table beyond EOD, truncated [ 1080.291110][ T4951] Bluetooth: hci2: command tx timeout [ 1080.304831][T18070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.323233][T18070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.482518][T20597] syzkaller1: entered promiscuous mode [ 1080.504225][T20597] syzkaller1: entered allmulticast mode [ 1080.676865][ T9302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.676890][ T9302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.255770][T20613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.274701][T20613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.823713][ T5002] Dev loop3: unable to read RDB block 7 [ 1081.843761][ T5002] loop3: unable to read partition table [ 1081.868728][ T5002] loop3: partition table beyond EOD, truncated [ 1082.370425][ T4951] Bluetooth: hci2: command tx timeout [ 1082.418482][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1082.439261][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1082.844130][T20642] tipc: Enabled bearer , priority 0 [ 1082.884893][T20642] syzkaller0: entered promiscuous mode [ 1082.930375][T20642] syzkaller0: entered allmulticast mode [ 1083.065958][T20643] sch_tbf: burst 122 is lower than device syzkaller0 mtu (1514) ! [ 1083.125058][T20642] tipc: Resetting bearer [ 1083.589277][T20641] tipc: Resetting bearer [ 1083.712054][T20641] tipc: Disabling bearer [ 1083.783905][T20650] xt_connbytes: Forcing CT accounting to be enabled [ 1083.856149][T20653] binder: 20649:20653 ioctl c028564d 200000000100 returned -22 [ 1084.404803][ T5002] Dev loop3: unable to read RDB block 7 [ 1084.404854][ T5002] loop3: unable to read partition table [ 1084.405182][ T5002] loop3: partition table beyond EOD, truncated [ 1084.685062][T20664] syzkaller0: entered promiscuous mode [ 1084.722761][T20664] syzkaller0: entered allmulticast mode [ 1085.209097][ T5002] Dev loop3: unable to read RDB block 7 [ 1085.236188][ T5002] loop3: unable to read partition table [ 1085.236435][ T5002] loop3: partition table beyond EOD, truncated [ 1085.279279][T20677] netlink: 'syz.6.4456': attribute type 15 has an invalid length. [ 1085.470171][T20681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.682716][ T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1086.732152][ T5002] Dev loop3: unable to read RDB block 7 [ 1086.739407][ T5002] loop3: unable to read partition table [ 1086.739781][ T5002] loop3: partition table beyond EOD, truncated [ 1086.853311][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1086.878360][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.912992][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1086.939883][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.017852][ T24] usb 6-1: config 0 descriptor?? [ 1087.018578][T20700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1087.166156][ T5002] Dev loop3: unable to read RDB block 7 [ 1087.166210][ T5002] loop3: unable to read partition table [ 1087.166372][ T5002] loop3: partition table beyond EOD, truncated [ 1087.188150][T20715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.457491][ T5002] Dev loop3: unable to read RDB block 7 [ 1087.457543][ T5002] loop3: unable to read partition table [ 1087.457787][ T5002] loop3: partition table beyond EOD, truncated [ 1087.459289][ T24] hid_parser_main: 7 callbacks suppressed [ 1087.459314][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459348][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459378][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459406][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459433][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459544][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459574][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459602][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459629][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.459798][ T24] thrustmaster 0003:044F:B304.004A: unknown main item tag 0x0 [ 1087.472838][ T24] thrustmaster 0003:044F:B304.004A: hidraw0: USB HID v0.05 Device [HID 044f:b304] on usb-dummy_hcd.5-1/input0 [ 1087.474621][ T24] thrustmaster 0003:044F:B304.004A: no inputs found [ 1087.850716][ T5002] Dev loop3: unable to read RDB block 7 [ 1087.856457][ T5002] loop3: unable to read partition table [ 1087.866275][ T5002] loop3: partition table beyond EOD, truncated [ 1088.919498][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.934738][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.975124][T20736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.997868][T20736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.321196][ T5636] usb 6-1: USB disconnect, device number 25 [ 1089.508862][T20738] libceph: resolve '0..' (ret=-3): failed [ 1089.655503][T20743] syzkaller0: entered promiscuous mode [ 1089.664390][T20743] syzkaller0: entered allmulticast mode [ 1089.765478][ T5002] Dev loop3: unable to read RDB block 7 [ 1089.787784][ T5002] loop3: unable to read partition table [ 1089.804580][ T5002] loop3: partition table beyond EOD, truncated [ 1089.881302][ T5636] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1089.958101][ T5002] Dev loop3: unable to read RDB block 7 [ 1089.969822][ T5002] loop3: unable to read partition table [ 1089.981944][ T5002] loop3: partition table beyond EOD, truncated [ 1090.110566][ T5636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.121133][ T5636] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.133656][ T5636] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.143765][ T5636] usb 6-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1090.216252][ T5636] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1090.232350][ T5636] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.251503][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.296720][ T5636] usb 6-1: Product: syz [ 1090.305786][ T5636] usb 6-1: Manufacturer: syz [ 1090.314088][ T5636] usb 6-1: SerialNumber: syz [ 1090.372696][ T5636] usb 6-1: selecting invalid altsetting 0 [ 1090.382561][ T5636] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1090.397309][ T5636] usb 6-1: selecting invalid altsetting 0 [ 1090.428712][ T5636] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 1090.451895][T16170] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1090.543629][ T5636] usb 6-1: USB disconnect, device number 26 [ 1090.630806][T16170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.680247][T16170] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.727182][T16170] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1090.742824][T16170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.806810][T16170] usb 4-1: Product: syz [ 1090.806836][T16170] usb 4-1: Manufacturer: syz [ 1090.806853][T16170] usb 4-1: SerialNumber: syz [ 1091.910163][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1091.997116][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1092.037629][T20777] bond1: option mode: unable to set because the bond device has slaves [ 1092.130463][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.187271][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1092.219043][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1092.258163][ T24] usb 6-1: Product: syz [ 1092.285349][ T24] usb 6-1: Manufacturer: syz [ 1092.297440][T20780] netlink: 'syz.0.4488': attribute type 10 has an invalid length. [ 1092.313201][ T24] usb 6-1: SerialNumber: syz [ 1092.346023][T20780] bridge0: port 1(netdevsim0) entered disabled state [ 1092.595896][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1092.960284][ T24] usb 6-1: USB disconnect, device number 27 [ 1092.987993][ T24] usblp0: removed [ 1093.286351][T20788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.355838][T20788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.417729][T20797] fuse: Bad value for 'fd' [ 1094.730023][T20798] No such timeout policy "syz1" [ 1095.637624][T20809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1096.232429][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4499'. [ 1096.272183][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4499'. [ 1096.309948][T20821] netlink: 'syz.5.4499': attribute type 10 has an invalid length. [ 1096.667743][T16170] usb 4-1: USB disconnect, device number 35 [ 1096.728641][ T5002] Dev loop3: unable to read RDB block 7 [ 1096.748612][ T5002] loop3: unable to read partition table [ 1096.793185][ T5002] loop3: partition table beyond EOD, truncated [ 1096.843644][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1097.029593][ T5002] Dev loop3: unable to read RDB block 7 [ 1097.063207][ T5002] loop3: unable to read partition table [ 1097.086204][ T5002] loop3: partition table beyond EOD, truncated [ 1097.773135][ T5002] Dev loop3: unable to read RDB block 7 [ 1097.800180][ T5002] loop3: unable to read partition table [ 1097.826088][ T5002] loop3: partition table beyond EOD, truncated [ 1097.933608][T20842] bridge0: entered promiscuous mode [ 1097.973498][T20842] bridge0: entered allmulticast mode [ 1098.083052][ C1] [ 1098.085440][ C1] ======================================================== [ 1098.092647][ C1] WARNING: possible irq lock inversion dependency detected [ 1098.099943][ C1] syzkaller #0 Tainted: G L [ 1098.105933][ C1] -------------------------------------------------------- [ 1098.113203][ C1] syz.3.4506/20842 just changed the state of lock: [ 1098.119717][ C1] ffff88802c65a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1098.129576][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 1098.137585][ C1] (tasklist_lock){.+.+}-{3:3} [ 1098.137619][ C1] [ 1098.137619][ C1] [ 1098.137619][ C1] and interrupts could create inverse lock ordering between them. [ 1098.137619][ C1] [ 1098.156728][ C1] [ 1098.156728][ C1] other info that might help us debug this: [ 1098.164808][ C1] Chain exists of: [ 1098.164808][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1098.164808][ C1] [ 1098.178455][ C1] Possible interrupt unsafe locking scenario: [ 1098.178455][ C1] [ 1098.186856][ C1] CPU0 CPU1 [ 1098.192314][ C1] ---- ---- [ 1098.197737][ C1] lock(tasklist_lock); [ 1098.202003][ C1] local_irq_disable(); [ 1098.208770][ C1] lock(&dev->event_lock#2); [ 1098.216009][ C1] lock(&client->buffer_lock); [ 1098.223410][ C1] [ 1098.226936][ C1] lock(&dev->event_lock#2); [ 1098.231831][ C1] [ 1098.231831][ C1] *** DEADLOCK *** [ 1098.231831][ C1] [ 1098.239989][ C1] 2 locks held by syz.3.4506/20842: [ 1098.245288][ C1] #0: ffff88802c7c9110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1098.254533][ C1] #1: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 1098.264191][ C1] [ 1098.264191][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 1098.273591][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 1098.279094][ C1] HARDIRQ-ON-R at: [ 1098.283534][ C1] lock_acquire+0x106/0x350 [ 1098.290408][ C1] _raw_read_lock+0x36/0x50 [ 1098.297336][ C1] __do_wait+0xde/0x740 [ 1098.303862][ C1] do_wait+0x1e7/0x510 [ 1098.310298][ C1] kernel_wait+0xd6/0x1c0 [ 1098.317041][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1098.325325][ C1] process_scheduled_works+0xb5d/0x1860 [ 1098.333232][ C1] worker_thread+0xa53/0xfc0 [ 1098.340185][ C1] kthread+0x389/0x470 [ 1098.346646][ C1] ret_from_fork+0x514/0xb70 [ 1098.353594][ C1] ret_from_fork_asm+0x1a/0x30 [ 1098.360828][ C1] SOFTIRQ-ON-R at: [ 1098.365191][ C1] lock_acquire+0x106/0x350 [ 1098.372095][ C1] _raw_read_lock+0x36/0x50 [ 1098.379009][ C1] __do_wait+0xde/0x740 [ 1098.385546][ C1] do_wait+0x1e7/0x510 [ 1098.392007][ C1] kernel_wait+0xd6/0x1c0 [ 1098.398710][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1098.406974][ C1] process_scheduled_works+0xb5d/0x1860 [ 1098.414885][ C1] worker_thread+0xa53/0xfc0 [ 1098.421836][ C1] kthread+0x389/0x470 [ 1098.428277][ C1] ret_from_fork+0x514/0xb70 [ 1098.435241][ C1] ret_from_fork_asm+0x1a/0x30 [ 1098.442473][ C1] INITIAL USE at: [ 1098.446742][ C1] lock_acquire+0x106/0x350 [ 1098.453530][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1098.460751][ C1] copy_process+0x2b4c/0x4440 [ 1098.467706][ C1] kernel_clone+0x2d7/0x940 [ 1098.474484][ C1] user_mode_thread+0x110/0x180 [ 1098.481610][ C1] rest_init+0x23/0x300 [ 1098.488053][ C1] start_kernel+0x38a/0x3e0 [ 1098.495064][ C1] x86_64_start_reservations+0x24/0x30 [ 1098.502868][ C1] x86_64_start_kernel+0x143/0x1c0 [ 1098.510265][ C1] common_startup_64+0x13e/0x147 [ 1098.517487][ C1] INITIAL READ USE at: [ 1098.522176][ C1] lock_acquire+0x106/0x350 [ 1098.529388][ C1] _raw_read_lock+0x36/0x50 [ 1098.536616][ C1] __do_wait+0xde/0x740 [ 1098.543487][ C1] do_wait+0x1e7/0x510 [ 1098.550286][ C1] kernel_wait+0xd6/0x1c0 [ 1098.557327][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1098.565940][ C1] process_scheduled_works+0xb5d/0x1860 [ 1098.574196][ C1] worker_thread+0xa53/0xfc0 [ 1098.581503][ C1] kthread+0x389/0x470 [ 1098.588287][ C1] ret_from_fork+0x514/0xb70 [ 1098.595588][ C1] ret_from_fork_asm+0x1a/0x30 [ 1098.603069][ C1] } [ 1098.605924][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 1098.614147][ C1] ... acquired at: [ 1098.618314][ C1] _raw_read_lock+0x36/0x50 [ 1098.623019][ C1] send_sigio+0x101/0x370 [ 1098.627547][ C1] dnotify_handle_event+0x169/0x440 [ 1098.632930][ C1] fsnotify+0x1831/0x1ae0 [ 1098.637454][ C1] path_openat+0x15c2/0x3860 [ 1098.642242][ C1] do_file_open+0x23e/0x4a0 [ 1098.646937][ C1] do_sys_openat2+0x113/0x200 [ 1098.651808][ C1] __x64_sys_open+0x11e/0x150 [ 1098.656854][ C1] do_syscall_64+0x174/0x580 [ 1098.661635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.667808][ C1] [ 1098.670167][ C1] -> (&f_owner->lock){....}-{3:3} { [ 1098.675660][ C1] INITIAL USE at: [ 1098.679834][ C1] lock_acquire+0x106/0x350 [ 1098.686439][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1098.693478][ C1] __f_setown+0x67/0x370 [ 1098.699911][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 1098.706771][ C1] do_fcntl+0x77e/0x1a20 [ 1098.713202][ C1] __se_sys_fcntl+0xc8/0x150 [ 1098.719985][ C1] do_syscall_64+0x174/0x580 [ 1098.726679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.734672][ C1] INITIAL READ USE at: [ 1098.739288][ C1] lock_acquire+0x106/0x350 [ 1098.746342][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1098.754094][ C1] send_sigio+0x38/0x370 [ 1098.760892][ C1] kill_fasync+0x24d/0x4d0 [ 1098.767849][ C1] lease_break_callback+0x26/0x30 [ 1098.775419][ C1] __break_lease+0x81f/0x1ea0 [ 1098.782631][ C1] vfs_remove_acl+0x21c/0x830 [ 1098.789852][ C1] path_removexattrat+0x4c4/0x750 [ 1098.797456][ C1] __x64_sys_fremovexattr+0x62/0x70 [ 1098.805220][ C1] do_syscall_64+0x174/0x580 [ 1098.812351][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.820784][ C1] } [ 1098.823556][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1098.832797][ C1] ... acquired at: [ 1098.836888][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1098.842281][ C1] send_sigio+0x38/0x370 [ 1098.846714][ C1] kill_fasync+0x24d/0x4d0 [ 1098.851323][ C1] lease_break_callback+0x26/0x30 [ 1098.856544][ C1] __break_lease+0x81f/0x1ea0 [ 1098.861421][ C1] vfs_remove_acl+0x21c/0x830 [ 1098.866299][ C1] path_removexattrat+0x4c4/0x750 [ 1098.871507][ C1] __x64_sys_fremovexattr+0x62/0x70 [ 1098.876899][ C1] do_syscall_64+0x174/0x580 [ 1098.881680][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.887759][ C1] [ 1098.890098][ C1] -> (&new->fa_lock){....}-{3:3} { [ 1098.895418][ C1] INITIAL USE at: [ 1098.899495][ C1] lock_acquire+0x106/0x350 [ 1098.905926][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1098.912787][ C1] fasync_remove_entry+0xf1/0x1c0 [ 1098.919750][ C1] lease_modify+0x4f7/0x6c0 [ 1098.926179][ C1] locks_remove_file+0x5f0/0xf70 [ 1098.933046][ C1] __fput+0x3ae/0xa60 [ 1098.938963][ C1] task_work_run+0x1d9/0x270 [ 1098.945481][ C1] exit_to_user_mode_loop+0x193/0x680 [ 1098.952783][ C1] do_syscall_64+0x353/0x580 [ 1098.959316][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.967140][ C1] INITIAL READ USE at: [ 1098.971658][ C1] lock_acquire+0x106/0x350 [ 1098.978520][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1098.986086][ C1] kill_fasync+0x199/0x4d0 [ 1098.992873][ C1] lease_break_callback+0x26/0x30 [ 1099.000268][ C1] __break_lease+0x81f/0x1ea0 [ 1099.007303][ C1] vfs_remove_acl+0x21c/0x830 [ 1099.014344][ C1] path_removexattrat+0x4c4/0x750 [ 1099.021731][ C1] __x64_sys_fremovexattr+0x62/0x70 [ 1099.029299][ C1] do_syscall_64+0x174/0x580 [ 1099.036247][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.044506][ C1] } [ 1099.047189][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1099.056060][ C1] ... acquired at: [ 1099.060048][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1099.065445][ C1] kill_fasync+0x199/0x4d0 [ 1099.070059][ C1] evdev_pass_values+0x627/0xbd0 [ 1099.075183][ C1] evdev_events+0x1e6/0x340 [ 1099.079878][ C1] input_pass_values+0x288/0x890 [ 1099.085039][ C1] input_event_dispose+0x330/0x6b0 [ 1099.090344][ C1] input_inject_event+0x1dc/0x330 [ 1099.095563][ C1] evdev_write+0x325/0x4c0 [ 1099.100162][ C1] vfs_write+0x29a/0xb90 [ 1099.104595][ C1] ksys_write+0x150/0x270 [ 1099.109116][ C1] do_syscall_64+0x174/0x580 [ 1099.113923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.120009][ C1] [ 1099.122346][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 1099.128192][ C1] INITIAL USE at: [ 1099.132183][ C1] lock_acquire+0x106/0x350 [ 1099.138440][ C1] _raw_spin_lock+0x2e/0x40 [ 1099.144699][ C1] evdev_handle_get_val+0x70/0x9f0 [ 1099.151623][ C1] evdev_ioctl_handler+0x127b/0x1fe0 [ 1099.158659][ C1] __se_sys_ioctl+0xfc/0x170 [ 1099.165011][ C1] do_syscall_64+0x174/0x580 [ 1099.171382][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.179056][ C1] } [ 1099.181660][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1099.190048][ C1] ... acquired at: [ 1099.193951][ C1] _raw_spin_lock+0x2e/0x40 [ 1099.198997][ C1] evdev_handle_get_val+0x70/0x9f0 [ 1099.204299][ C1] evdev_ioctl_handler+0x127b/0x1fe0 [ 1099.209787][ C1] __se_sys_ioctl+0xfc/0x170 [ 1099.214588][ C1] do_syscall_64+0x174/0x580 [ 1099.219375][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.225454][ C1] [ 1099.227787][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1099.233374][ C1] IN-SOFTIRQ-W at: [ 1099.237378][ C1] lock_acquire+0x106/0x350 [ 1099.243545][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.250422][ C1] input_inject_event+0xa4/0x330 [ 1099.257027][ C1] led_trigger_event+0x138/0x210 [ 1099.263634][ C1] kbd_bh+0x1c6/0x2e0 [ 1099.269360][ C1] tasklet_action_common+0x2da/0x4b0 [ 1099.276317][ C1] handle_softirqs+0x22a/0x840 [ 1099.282769][ C1] __irq_exit_rcu+0xca/0x220 [ 1099.289021][ C1] irq_exit_rcu+0x9/0x30 [ 1099.294940][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1099.302238][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.309888][ C1] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1099.317193][ C1] evdev_write+0x325/0x4c0 [ 1099.323272][ C1] vfs_write+0x29a/0xb90 [ 1099.329280][ C1] ksys_write+0x150/0x270 [ 1099.335287][ C1] do_syscall_64+0x174/0x580 [ 1099.341572][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.349137][ C1] INITIAL USE at: [ 1099.353051][ C1] lock_acquire+0x106/0x350 [ 1099.359144][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.365955][ C1] input_inject_event+0xa4/0x330 [ 1099.372484][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 1099.379522][ C1] led_trigger_set+0x535/0x960 [ 1099.385870][ C1] led_trigger_set_default+0x260/0x2a0 [ 1099.392914][ C1] led_classdev_register_ext+0x787/0x9c0 [ 1099.400125][ C1] input_leds_connect+0x517/0x790 [ 1099.406730][ C1] input_register_device+0xce0/0x1140 [ 1099.413688][ C1] atkbd_connect+0x71e/0xa10 [ 1099.419857][ C1] serio_driver_probe+0x82/0xb0 [ 1099.426280][ C1] really_probe+0x267/0xaf0 [ 1099.432373][ C1] __driver_probe_device+0x1ef/0x380 [ 1099.439235][ C1] driver_probe_device+0x4f/0x240 [ 1099.445835][ C1] __driver_attach+0x34c/0x640 [ 1099.452182][ C1] bus_for_each_dev+0x23b/0x2c0 [ 1099.458618][ C1] serio_handle_event+0x1af/0xf80 [ 1099.465229][ C1] process_scheduled_works+0xb5d/0x1860 [ 1099.472350][ C1] worker_thread+0xa53/0xfc0 [ 1099.478514][ C1] kthread+0x389/0x470 [ 1099.484164][ C1] ret_from_fork+0x514/0xb70 [ 1099.490337][ C1] ret_from_fork_asm+0x1a/0x30 [ 1099.496684][ C1] } [ 1099.499198][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1099.508347][ C1] ... acquired at: [ 1099.512167][ C1] mark_lock+0x115/0x190 [ 1099.516599][ C1] __lock_acquire+0x689/0x2cf0 [ 1099.521549][ C1] lock_acquire+0x106/0x350 [ 1099.526237][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.531657][ C1] input_inject_event+0xa4/0x330 [ 1099.536792][ C1] led_trigger_event+0x138/0x210 [ 1099.541927][ C1] kbd_bh+0x1c6/0x2e0 [ 1099.546095][ C1] tasklet_action_common+0x2da/0x4b0 [ 1099.551570][ C1] handle_softirqs+0x22a/0x840 [ 1099.556824][ C1] __irq_exit_rcu+0xca/0x220 [ 1099.561618][ C1] irq_exit_rcu+0x9/0x30 [ 1099.566052][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1099.571874][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.578047][ C1] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1099.583880][ C1] evdev_write+0x325/0x4c0 [ 1099.588490][ C1] vfs_write+0x29a/0xb90 [ 1099.592925][ C1] ksys_write+0x150/0x270 [ 1099.597450][ C1] do_syscall_64+0x174/0x580 [ 1099.602232][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.608319][ C1] [ 1099.610652][ C1] [ 1099.610652][ C1] stack backtrace: [ 1099.616557][ C1] CPU: 1 UID: 0 PID: 20842 Comm: syz.3.4506 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.616580][ C1] Tainted: [L]=SOFTLOCKUP [ 1099.616586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1099.616597][ C1] Call Trace: [ 1099.616604][ C1] [ 1099.616613][ C1] dump_stack_lvl+0xe8/0x150 [ 1099.616632][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 1099.616653][ C1] mark_lock_irq+0x3d2/0x420 [ 1099.616675][ C1] mark_lock+0x115/0x190 [ 1099.616693][ C1] __lock_acquire+0x689/0x2cf0 [ 1099.616712][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.616733][ C1] ? input_inject_event+0xa4/0x330 [ 1099.616754][ C1] lock_acquire+0x106/0x350 [ 1099.616770][ C1] ? input_inject_event+0xa4/0x330 [ 1099.616793][ C1] ? rcu_is_watching+0x15/0xb0 [ 1099.616814][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1099.616837][ C1] ? input_inject_event+0xa4/0x330 [ 1099.616857][ C1] input_inject_event+0xa4/0x330 [ 1099.616879][ C1] ? led_trigger_event+0x4b/0x210 [ 1099.616901][ C1] led_trigger_event+0x138/0x210 [ 1099.616924][ C1] kbd_bh+0x1c6/0x2e0 [ 1099.616941][ C1] tasklet_action_common+0x2da/0x4b0 [ 1099.616963][ C1] handle_softirqs+0x22a/0x840 [ 1099.616979][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1099.616997][ C1] __irq_exit_rcu+0xca/0x220 [ 1099.617012][ C1] irq_exit_rcu+0x9/0x30 [ 1099.617027][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1099.617043][ C1] [ 1099.617049][ C1] [ 1099.617055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.617072][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1099.617098][ C1] Code: f7 e8 ad 28 f8 f5 f7 c3 00 02 00 00 74 05 e8 b0 c2 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c4 a7 e9 f5 65 8b 05 8d dd 8d 07 85 c0 74 18 5b 41 5e c3 cc cc [ 1099.617112][ C1] RSP: 0018:ffffc900037d7b88 EFLAGS: 00000206 [ 1099.617127][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001 [ 1099.617138][ C1] RDX: 0000000000000006 RSI: ffffffff8dfa4dc8 RDI: 0000000000000001 [ 1099.617148][ C1] RBP: ffffc900037d7c90 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 1099.617161][ C1] R10: dffffc0000000000 R11: fffffbfff20606df R12: 00000000000003a8 [ 1099.617173][ C1] R13: 1ffff11004d0e3e2 R14: ffff88802c65a218 R15: 1ffff920006faf7c [ 1099.617193][ C1] evdev_write+0x325/0x4c0 [ 1099.617209][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.617227][ C1] ? __pfx_evdev_write+0x10/0x10 [ 1099.617243][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 1099.617266][ C1] ? security_file_permission+0x75/0x260 [ 1099.617287][ C1] ? rw_verify_area+0x255/0x4d0 [ 1099.617313][ C1] ? __pfx_evdev_write+0x10/0x10 [ 1099.617330][ C1] vfs_write+0x29a/0xb90 [ 1099.617355][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1099.617376][ C1] ? __fget_files+0x2a/0x420 [ 1099.617396][ C1] ? __fget_files+0x2a/0x420 [ 1099.617414][ C1] ? __fget_files+0x3a0/0x420 [ 1099.617432][ C1] ? __fget_files+0x2a/0x420 [ 1099.617453][ C1] ksys_write+0x150/0x270 [ 1099.617476][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1099.617500][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.617517][ C1] do_syscall_64+0x174/0x580 [ 1099.617533][ C1] ? trace_irq_disable+0x3b/0x140 [ 1099.617555][ C1] ? clear_bhb_loop+0x40/0x90 [ 1099.617573][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.617589][ C1] RIP: 0033:0x7f18d5d9ce59 [ 1099.617604][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.617617][ C1] RSP: 002b:00007f18d6c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1099.617633][ C1] RAX: ffffffffffffffda RBX: 00007f18d6015fa0 RCX: 00007f18d5d9ce59 [ 1099.617645][ C1] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 000000000000000a [ 1099.617655][ C1] RBP: 00007f18d5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1099.617665][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.617675][ C1] R13: 00007f18d6016038 R14: 00007f18d6015fa0 R15: 00007f18d613fa48 [ 1099.617693][ C1] [ 1100.745163][ T5002] Dev loop3: unable to read RDB block 7 [ 1100.758756][ T5002] loop3: unable to read partition table [ 1100.785940][ T5002] loop3: partition table beyond EOD, truncated