last executing test programs: 3m26.749900501s ago: executing program 3 (id=5623): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x3400c890) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2a00000011140100040000000000230008004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) timer_create(0x7, &(0x7f0000000280)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000380)) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d", 0x64}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TIOCGPKT(r6, 0x40045431, 0x0) unshare(0x400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100}, 0x50) 3m25.374169497s ago: executing program 3 (id=5626): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x5f, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x31a}, &(0x7f0000000080), &(0x7f00000001c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8008) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$KVM_SET_DEBUGREGS(r12, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x2, 0x200000000000008}) ioctl$KVM_RUN(r12, 0xae80, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r13, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="5694d86ff344ad98e43acfa5c6247fc272398021b9fa0346d6e2b23f749a519b5f487750cfc06966c4f11500d3f13c6b1a966c2ccbd761f47812201aabe13ccc38a5d97061efe68e79fe3ad3e1adf58976595df8e3df8f4515a1e3124f23aaa2eade4ea50144aeee8c010f7b30a48ae4b7032cdbad4d88ccb27f6bc1a4aecf9af65e", 0x82}, {&(0x7f0000000300)="a8bc0fdbb5e76b", 0x7}, {&(0x7f0000000340)="2630f67dbb9995e714f20eb92c1d4957281f9ca56ec82d44e6b477aed13f4e227988abacfdc2a83bc841c2175749cd0fcc1ef36e86e09f881717769f70664c2e7edd121d993f7a44643f748632dc973e977dfa6eb546e411a977fde874dda09082b4d736154b0187f2efdc9a135a7e7c5b900f91b68616c8", 0x78}, {&(0x7f0000000500)="290327b1021e254577a0fe767e8ac87374ed62be6d5aaeee3992ee5537a72999343533788691b4756921cf0e5d844bc1bd291383896eed835e84593377c057daea7f28dcdbd78451185ef144d8f5c911ca88cdc0df0e07be1b2848030121c1927a7d5a99c204c7c93432929d8fcc2a12b38945b51e45d3f669bf1dedf65cba567555925bca730174b080bfa30924f8423032", 0x92}, {&(0x7f00000005c0)="b738de50b34dec995f18cae0a25dbee92b58788e299aff86673dea2b390d64abe52c65e16e5b8b853407ff84adfdc76fd33b9abd8cf3f68ed2ae7fecb40a0570ebe3e7a4afd64a32e9fa51b16618624d5bbef80fd68fc02910d090cab8f139f02020c6473279d650d13023588b1c8f1d2bd99742d1e4c36e4064ba8245c512618e76a4867aaee5d11a5ea9d5c2a5172553da3e61ca31361058a0ef29dc0c9b0953b0d8a07062e43633d614ab4bb94b2c3683249d30e03769fa16ecb35a726d8a73bcbf20be2415c49b670391ec42c8c326e5ea705b9ce3549c80090aca4d1a0228c9b9de340683d9", 0xe8}, {&(0x7f00000006c0)="7ee0541d1612bee616846afe29c3946030e6b6824158ec00ae84616c99939a529f2816389b2dccd9c2620271963b4af61986a3a26dd8b85a8709593f8a6b1e401606e65bec7898acd1a212095b202a65528bb5a5847eaef08228b74676b402a5fda84ea0ed85def2a1d1cc1fa15b0996f61f2e45a6341035a6e115dee3a3997b3dc87a9a75b861e2dd9e7b46e61df02391de6cbc1735434f37b23731f1ec1e77d71b843f57c6ceeb2bb9574623689759178b098a28cecbd726d6a8d2c6930d78", 0xc0}, {&(0x7f0000000180)="0d22fb438c73b3cae16191c3e6a562d1878ca6b383a88c3fefdb0b748cafb9345f1f3400002eb989078c8b71e0d06816000000", 0x33}], 0x7, &(0x7f0000004180)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="d5c54087407edb51de1b", @ANYBLOB="000000197b314c20f87aa1020000000000000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x8080}}], 0x1, 0x80) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x4}, [{0x2, 0x0, r0}, {0x2, 0x0, r0}, {0x2, 0x6, r8}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x20}], {0x10, 0x5}, {0x20, 0x1}}, 0x4c, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd9, 0x94, 0x8b, 0x20, 0x694, 0x1, 0xb244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x60, 0x2, 0x1, 0xaa, 0x4, 0x96, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 3m23.109991898s ago: executing program 3 (id=5634): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget(0x3, 0x3000, 0x78001622, &(0x7f0000ffb000/0x3000)=nil) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0x40806685, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100000, 0x9, 0xf38, 0x401, 0x10000, 0xfffffffb, 0x164, 0x4, 0x48}) dup(r0) 3m19.708504842s ago: executing program 3 (id=5647): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8400ed2d", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="6800330080800300ffffffffffff08021100000050505050505000001e000d010000000000000000640008050100060202002a01013c04010557022d1a004012fd07000000000000070000000b00000006000900000007710700ff00faff8d6076060e3903000200"], 0x84}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006ffdd"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="bf", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000015) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003400003000009"], 0xa0}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 3m18.876389878s ago: executing program 3 (id=5651): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cf6f6414ed71787003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1a066042, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f89f8f6660f3837e666b9fb0800000f32660f38dbf3baf80c66b8c7c5b38566efbafc0cb080ee0f20e06635000020000f22e0660f3881859400f2adf30fc7b19100660f3882830050", 0x49}], 0x1, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$loop(0x0, 0x6, 0x20000) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0xffe0}, {0xfff3, 0xfff1}}}, 0x24}}, 0x40004) 3m17.016406975s ago: executing program 3 (id=5659): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x311040) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000002580)="bd8aa8150d136fb142d4835f1fcdd00fda31e51d57c0a52648bab586e072d094cd32a2c4f095707cf02c18c498c93740cc47a1eca94770046c34c3ea56c64069ee9eaebcb858ccc9cf586a4649bd709fc354b74acacdb8b1fb47bc1ff8f20c6c16f7b9aa8ba199528d6ec9c0d815a853905c0bec29b1aeb3b4db2c8048a2462e82c28c4c5f2c116d7988450b53ac7e25d86db416129452b494821742", 0x2b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) lseek(r5, 0x10001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='%\x00', 0x4) (async) r6 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x8c}, 0x1, 0xba01}, 0x0) preadv2(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20142, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3m1.325820112s ago: executing program 32 (id=5659): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x311040) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000002580)="bd8aa8150d136fb142d4835f1fcdd00fda31e51d57c0a52648bab586e072d094cd32a2c4f095707cf02c18c498c93740cc47a1eca94770046c34c3ea56c64069ee9eaebcb858ccc9cf586a4649bd709fc354b74acacdb8b1fb47bc1ff8f20c6c16f7b9aa8ba199528d6ec9c0d815a853905c0bec29b1aeb3b4db2c8048a2462e82c28c4c5f2c116d7988450b53ac7e25d86db416129452b494821742", 0x2b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) lseek(r5, 0x10001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='%\x00', 0x4) (async) r6 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x8c}, 0x1, 0xba01}, 0x0) preadv2(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20142, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1m3.167144721s ago: executing program 5 (id=6262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m1.117917555s ago: executing program 5 (id=6268): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) eventfd2(0x5, 0x800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="02fffffadab35cde41895d593df6", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c30038640000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008000) recvmmsg(r3, &(0x7f0000005bc0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001680)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000001700)=""/236, 0xec}], 0x1, &(0x7f0000001800)=""/113, 0x71}, 0x6}, {{&(0x7f0000001880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/123, 0x7b}, {&(0x7f0000001980)=""/101, 0x65}], 0x2, &(0x7f0000001a40)=""/29, 0x1d}, 0x916}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/84, 0x54}, {&(0x7f0000003d00)=""/54, 0x36}, {&(0x7f0000003d40)=""/200, 0xc8}, {&(0x7f0000003e40)=""/163, 0xa3}], 0x9, &(0x7f0000003fc0)=""/82, 0x52}, 0x709}, {{&(0x7f0000004040)=@xdp, 0x80, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/29, 0x1d}], 0x1, &(0x7f0000004140)=""/164, 0xa4}, 0xc8000000}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004280)=""/41, 0x29}, {&(0x7f00000042c0)=""/214, 0xd6}, {&(0x7f00000043c0)=""/21, 0x15}, {&(0x7f0000004400)=""/72, 0x48}, {&(0x7f0000005dc0)=""/79, 0x4f}, {&(0x7f0000004500)=""/50, 0x32}], 0x6, &(0x7f00000045c0)=""/152, 0x98}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004680)=""/11, 0xb}], 0x1, &(0x7f0000004700)}, 0x6}, {{&(0x7f0000004740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000047c0)=""/209, 0xd1}, {&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/177, 0xb1}, {&(0x7f00000049c0)=""/116, 0x74}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/6, 0x6}, {&(0x7f0000005a80)=""/46, 0x2e}, {&(0x7f0000005ac0)=""/84, 0x54}], 0x8}, 0x6}], 0x8, 0x2, &(0x7f00000001c0)={0x77359400}) setitimer(0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecw)$\x04\x13\x87\x8bvi{\x96U', 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r7, 0x4004550d, 0x0) 58.884611287s ago: executing program 1 (id=6285): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@remote, 0x0, 0x0, 0x90132adf0ecb33e3}]}, 0x38}}, 0x0) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x20000040) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x4, 0x1000, 0x7}, &(0x7f0000000100)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x4, 0x30}, &(0x7f00000008c0)=0xc) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r9, 0x66a8, 0x4000, 0xf, 0x0, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) dup3(r8, r7, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x54) 58.732918002s ago: executing program 5 (id=6287): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x46, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlockall(0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 57.852779741s ago: executing program 0 (id=6291): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x7ffffffc}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x208000, 0xe0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000880)={"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"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x7, 0x8008, 0x200, 0x0, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x13, 0xe9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010102, @remote]}, @cipso={0x86, 0x4a, 0x3, [{0x0, 0x5, "8cab8e"}, {0x6, 0x8, "36ebd505973d"}, {0x0, 0xf, "35882ea022c44c344d8281f619"}, {0x7, 0xc, "1e6f8c575c2cb466c414"}, {0x6, 0x12, "042b83cfa1c041fe6e82df5f8950f969"}, {0x5, 0x3, '>'}, {0x5, 0x7, "9db77f7d6c"}]}, @timestamp={0x44, 0x10, 0x19, 0x0, 0x3, [0x5, 0x4d0fb34a, 0x4]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r3, 0x25, 0x29, @val=@netfilter={0x2, 0x1, 0x200, 0x1}}, 0x20) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xd, "03f37fe99f4da288"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) fchdir(0xffffffffffffffff) 57.228427261s ago: executing program 1 (id=6293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffefffffffffff}, @NFTA_LIMIT_RATE={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 56.996331048s ago: executing program 1 (id=6294): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) 56.925255806s ago: executing program 1 (id=6295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff50505050500800"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f00000002c0)=@hci={0x1f, 0x4, 0x1}, 0x80, 0x0}, 0x20000041) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000504000000003368a79970d2b59e53b74515cc913852982a4e949f98fc40e3d2c62fac51f2a4f604217ef159b78e8129aaca5da7"], 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x1001, 0x38897f21c395d50c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x6004}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000000", @ANYRES32=0x0, @ANYRES32=r9], 0x68}}, 0xc0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff0308"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 56.78834352s ago: executing program 0 (id=6296): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x1}, 0x42, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0xeed1, 0x3, 0xffffffc, 0x8, 0x0, 0x0, 0xed9, 0x0, 0x0, 0x0, 0xe7df, 0x8000000, 0x10000006, 0x0, 0x1, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x3, 0x2, 0x733, 0x3, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0xa, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x10000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0xfcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x6, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000380), &(0x7f0000000200)=r5}, 0x20) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, '_\\\x90\x8b\xb3\x7f\x02e\xdbc\x89\xf0E~\fb\xb5\'', 0x3a, '\x00', 0x3a, './file0'}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) 56.692403921s ago: executing program 4 (id=6297): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) eventfd2(0x5, 0x800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="02fffffadab35cde41895d593df6", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c30038640000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008000) recvmmsg(r3, &(0x7f0000005bc0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001680)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000001700)=""/236, 0xec}], 0x1, &(0x7f0000001800)=""/113, 0x71}, 0x6}, {{&(0x7f0000001880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/123, 0x7b}, {&(0x7f0000001980)=""/101, 0x65}], 0x2, &(0x7f0000001a40)=""/29, 0x1d}, 0x916}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/84, 0x54}, {&(0x7f0000003d00)=""/54, 0x36}, {&(0x7f0000003d40)=""/200, 0xc8}, {&(0x7f0000003e40)=""/163, 0xa3}], 0x9, &(0x7f0000003fc0)=""/82, 0x52}, 0x709}, {{&(0x7f0000004040)=@xdp, 0x80, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/29, 0x1d}], 0x1, &(0x7f0000004140)=""/164, 0xa4}, 0xc8000000}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004280)=""/41, 0x29}, {&(0x7f00000042c0)=""/214, 0xd6}, {&(0x7f00000043c0)=""/21, 0x15}, {&(0x7f0000004400)=""/72, 0x48}, {&(0x7f0000005dc0)=""/79, 0x4f}, {&(0x7f0000004500)=""/50, 0x32}], 0x6, &(0x7f00000045c0)=""/152, 0x98}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004680)=""/11, 0xb}], 0x1, &(0x7f0000004700)}, 0x6}, {{&(0x7f0000004740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000047c0)=""/209, 0xd1}, {&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/177, 0xb1}, {&(0x7f00000049c0)=""/116, 0x74}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/6, 0x6}, {&(0x7f0000005a80)=""/46, 0x2e}, {&(0x7f0000005ac0)=""/84, 0x54}], 0x8}, 0x6}], 0x8, 0x2, &(0x7f00000001c0)={0x77359400}) setitimer(0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecw)$\x04\x13\x87\x8bvi{\x96U', 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r7, 0x4004550d, 0x0) 56.482631872s ago: executing program 0 (id=6299): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = eventfd2(0x9, 0x800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x8000, 0x1, 0x0, r5, 0xb}) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0xc3d33000) 56.165597778s ago: executing program 0 (id=6302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) (fail_nth: 1) 55.755844776s ago: executing program 0 (id=6304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x20000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 55.624360717s ago: executing program 0 (id=6306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0xf7ba75687306aa38, &(0x7f0000000000)=0xc186c556ecb5c602, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendto$inet6(r2, 0x0, 0xffe2, 0x8000, &(0x7f0000000240)={0xa, 0x4e25, 0x0, @local}, 0x1c) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f0000000200)=0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000280)=0x7) capset(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r8 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r8, 0x0, 0x0, 0x100000000) 55.412735151s ago: executing program 5 (id=6308): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000032f44910c0090102a40a010203010902030000000000000904000000e5a5dd9d09971403adf3c808"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000004c0)=@secondary) add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$read(0xb, r2, &(0x7f0000000100)=""/71, 0x47) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="19"], 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000004341276ffec20647c0102030109021286b046871b0009040000007be4a800"], 0x0) 55.207625841s ago: executing program 4 (id=6309): r0 = socket$inet(0x2, 0x3, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000200)=""/126, 0x7e, 0x41) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18) r8 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$tcp_congestion(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 53.225568255s ago: executing program 1 (id=6312): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = eventfd2(0x9, 0x800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x8000, 0x1, 0x0, r5, 0xb}) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0xc3d33000) 53.225084279s ago: executing program 2 (id=6313): unshare(0x20040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000019000109000000000000000002180000ffff00000000000008000100ac141400080005"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0}}, 0xd5) close(r0) syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x4f, 0x36, 0x5d, 0x10, 0x1a72, 0x1015, 0xec10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x7e, 0xd0, 0x7, [{{0x9, 0x4, 0x7b, 0xe, 0x0, 0xc3, 0x62, 0x30, 0x4}}]}}]}}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff03, 0x0) 53.224810519s ago: executing program 4 (id=6314): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f000094f000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x2}) 52.214868939s ago: executing program 4 (id=6315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb8}}, 0x0) 48.415575057s ago: executing program 1 (id=6316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x50, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/146, 0x92}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3fd, 0xd7bf, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r8}) 47.837442999s ago: executing program 4 (id=6317): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x241, 0x0, 0x0) 46.926802115s ago: executing program 2 (id=6318): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x46, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlockall(0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 45.657429252s ago: executing program 5 (id=6319): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x40000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80000001, 0x0, 0x2, 0x51, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800000, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x7, 0x40, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x2, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x5, 0x4, 0x2000000, 0x0, 0x7], [0x4, 0xfffffffc, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffd, 0x6d, 0x5, 0x0, 0x0, 0x0, 0x80, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, 0x0, 0x0) 44.660294079s ago: executing program 4 (id=6320): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) eventfd2(0x5, 0x800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="02fffffadab35cde41895d593df6", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c30038640000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008000) recvmmsg(r3, &(0x7f0000005bc0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001680)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000001700)=""/236, 0xec}], 0x1, &(0x7f0000001800)=""/113, 0x71}, 0x6}, {{&(0x7f0000001880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/123, 0x7b}, {&(0x7f0000001980)=""/101, 0x65}], 0x2, &(0x7f0000001a40)=""/29, 0x1d}, 0x916}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/84, 0x54}, {&(0x7f0000003d00)=""/54, 0x36}, {&(0x7f0000003d40)=""/200, 0xc8}, {&(0x7f0000003e40)=""/163, 0xa3}], 0x9, &(0x7f0000003fc0)=""/82, 0x52}, 0x709}, {{&(0x7f0000004040)=@xdp, 0x80, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/29, 0x1d}], 0x1, &(0x7f0000004140)=""/164, 0xa4}, 0xc8000000}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004280)=""/41, 0x29}, {&(0x7f00000042c0)=""/214, 0xd6}, {&(0x7f00000043c0)=""/21, 0x15}, {&(0x7f0000004400)=""/72, 0x48}, {&(0x7f0000005dc0)=""/79, 0x4f}, {&(0x7f0000004500)=""/50, 0x32}], 0x6, &(0x7f00000045c0)=""/152, 0x98}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004680)=""/11, 0xb}], 0x1, &(0x7f0000004700)}, 0x6}, {{&(0x7f0000004740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000047c0)=""/209, 0xd1}, {&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/177, 0xb1}, {&(0x7f00000049c0)=""/116, 0x74}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/6, 0x6}, {&(0x7f0000005a80)=""/46, 0x2e}, {&(0x7f0000005ac0)=""/84, 0x54}], 0x8}, 0x6}], 0x8, 0x2, &(0x7f00000001c0)={0x77359400}) setitimer(0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecw)$\x04\x13\x87\x8bvi{\x96U', 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r7, 0x4004550d, 0x0) 44.574508057s ago: executing program 5 (id=6321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x3}, @nested={0xfffffe7b, 0x8, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x9]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x4000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000014c0)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x40, &(0x7f0000000040)="a562efacf6572cbd2927971f7e77a7ef54dd126f22c13160e7a251d2778fce31958da6f2bb523141af792a6d728d0ba1a346142f9cb2e5ee359b7f4d43a632e9a593871d95ee37ee03b54ddc328ebbac9611f5c79d305bb08c8cc94d26d506e73992c0af6955feddbe2e208986a0f09e181b07f585ef03625dcfc6a652589a9c7b14da07fc0e6849bdd862eac56a00c7bd4314917e208da90947410e34176e327e4110b20cd48a021f6084362d3390bbc8489fe6f1dfa06c96524fed7ddc9bc0e3c7e8079b138219cc1a3056a0e988d8645f", 0xd2, 0x2, 0x80, 0x69, 0x1, 0x8, &(0x7f00000004c0)="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", [{0x6, 0x7, 0x9}, {0x7, 0x0, 0xfff}, {0x4, 0x8, 0xc4b}, {0xb, 0x5, 0x3}, {0x7, 0x8, 0x9}, {0x101, 0x4, 0x6}, {0x4, 0x1, 0x101}, {0x4, 0x2, 0xffff8001}, {0xffffffff, 0x3, 0xc66}, {0x81d7, 0xf, 0x3}, {0xc5, 0x47, 0x80000000}, {0x2, 0x0, 0xffff7fff}, {0x1, 0x2, 0x3}, {0x3, 0xfffffff7, 0x2}, {0x57, 0x7}, {0xffff, 0x5, 0x5}, {0x1ff, 0x6b1}, {0xc5, 0x9, 0x3}, {0x2, 0x80, 0x7}, {0x0, 0x22, 0x80000001}, {0x7ff, 0x6c, 0x80}, {0x8, 0x0, 0x4}, {0x7, 0x7ff, 0x80000001}, {0xc6f1, 0x5}, {0x40400, 0x5, 0x3}, {0x10001, 0x2b9, 0x9}, {0x4, 0x6, 0xfb33}, {0x56, 0x5, 0xcbd}, {0xfffffff7, 0x3, 0x55bc2dc}, {0x4707, 0x40, 0xf20}, {0x80000001, 0x8, 0x100}, {0x2, 0x1, 0x2}, {0x2, 0x1, 0x6}, {0x5, 0xffffffff, 0x1}, {0x3, 0x3, 0xee0fcc05}, {0x4, 0x1}, {0x6f, 0x3, 0x7}, {0xfff, 0x205, 0x9}, {0xffffffff, 0xffff, 0x9}, {0x2, 0x4, 0x208}, {0x891c, 0x5, 0x400}, {0x8, 0x245d, 0xffffffff}, {0x800, 0x360f, 0x2}, {0x7, 0x2950, 0xfffffff5}, {0x1ff, 0x1000, 0x101}, {0x6376, 0x40, 0x401}, {0xfffff5cb, 0x1, 0x6}, {0x10001, 0x4, 0x6}, {0x5, 0xc50, 0x7}, {0xedd0, 0x7, 0x2}, {0x0, 0xfff, 0xffff461c}, {0x2, 0x0, 0x4dbd}, {0x6, 0xe, 0x5}, {0x4, 0x6, 0xc}, {0x4, 0x80, 0x400}, {0x80, 0xfff, 0x74}, {0xffff8001, 0xfffffff7, 0x7}, {0x0, 0x6899, 0x7}, {0xc, 0x717, 0x5}, {0x7f, 0x1, 0x4}, {0x7fffffff, 0x9, 0x6}, {0x9, 0x8}, {0xfffffffe, 0xfffffffe, 0xd89e}, {0x9, 0x1a1}, {0xffffff59, 0x841, 0x3}, {0x401, 0x3, 0x4}, {0x0, 0xf, 0x327}, {0x8, 0x10001, 0xae4}, {0x5, 0xbc14, 0x1}, {0x10000, 0xf, 0x3}, {0x1c1b, 0xfe, 0x22}, {0x8, 0x7fff, 0x401}, {0x10001, 0x65f, 0x5}, {0x6, 0x5, 0xc49}, {0x7, 0x8, 0xfffffff8}, {0x1, 0x5, 0x2}, {0x92, 0x5, 0x1}, {0xfffff9c3, 0x800, 0xca}, {0x8, 0x4, 0xd}, {0xffffffff, 0x5, 0x80000001}, {0x8, 0x6, 0xd}, {0x1, 0x6, 0x9}, {0x1, 0x2, 0x10000}, {0x0, 0x6, 0xe}, {0x0, 0x0, 0x9}, {0x9faf, 0x8, 0xc}, {0x8, 0x3, 0x7}, {0x2, 0x40, 0x2}, {0x4, 0xc29, 0x1}, {0x4, 0xd, 0xffff}, {0x2, 0x5, 0x1ef}, {0x0, 0x5, 0x6}, {0x7, 0x5, 0x21461b1f}, {0x8000, 0x2, 0xffffffff}, {0x532, 0x4, 0xefd}, {0x1, 0x5, 0x3}, {0x2, 0x10001, 0x12a4}, {0x8dbe, 0xfffff801, 0x7fff}, {0x3, 0x2, 0x81}, {0x80, 0x9, 0x2e83}, {0x9, 0x3, 0x3}, {0x0, 0x9, 0x5}, {0x1, 0x4, 0x2}, {0x5, 0x2, 0x174b}, {0x2, 0x3, 0x3}]}) 37.979373801s ago: executing program 33 (id=6306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0xf7ba75687306aa38, &(0x7f0000000000)=0xc186c556ecb5c602, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendto$inet6(r2, 0x0, 0xffe2, 0x8000, &(0x7f0000000240)={0xa, 0x4e25, 0x0, @local}, 0x1c) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f0000000200)=0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000280)=0x7) capset(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r8 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r8, 0x0, 0x0, 0x100000000) 37.8958662s ago: executing program 2 (id=6323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7fffffff, 0x4) (fail_nth: 1) 30.019077852s ago: executing program 34 (id=6316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x50, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/146, 0x92}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3fd, 0xd7bf, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r8}) 26.158469713s ago: executing program 2 (id=6325): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f000094f000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x2}) 26.054447183s ago: executing program 35 (id=6321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x3}, @nested={0xfffffe7b, 0x8, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x9]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x4000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000014c0)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x40, &(0x7f0000000040)="a562efacf6572cbd2927971f7e77a7ef54dd126f22c13160e7a251d2778fce31958da6f2bb523141af792a6d728d0ba1a346142f9cb2e5ee359b7f4d43a632e9a593871d95ee37ee03b54ddc328ebbac9611f5c79d305bb08c8cc94d26d506e73992c0af6955feddbe2e208986a0f09e181b07f585ef03625dcfc6a652589a9c7b14da07fc0e6849bdd862eac56a00c7bd4314917e208da90947410e34176e327e4110b20cd48a021f6084362d3390bbc8489fe6f1dfa06c96524fed7ddc9bc0e3c7e8079b138219cc1a3056a0e988d8645f", 0xd2, 0x2, 0x80, 0x69, 0x1, 0x8, &(0x7f00000004c0)="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", [{0x6, 0x7, 0x9}, {0x7, 0x0, 0xfff}, {0x4, 0x8, 0xc4b}, {0xb, 0x5, 0x3}, {0x7, 0x8, 0x9}, {0x101, 0x4, 0x6}, {0x4, 0x1, 0x101}, {0x4, 0x2, 0xffff8001}, {0xffffffff, 0x3, 0xc66}, {0x81d7, 0xf, 0x3}, {0xc5, 0x47, 0x80000000}, {0x2, 0x0, 0xffff7fff}, {0x1, 0x2, 0x3}, {0x3, 0xfffffff7, 0x2}, {0x57, 0x7}, {0xffff, 0x5, 0x5}, {0x1ff, 0x6b1}, {0xc5, 0x9, 0x3}, {0x2, 0x80, 0x7}, {0x0, 0x22, 0x80000001}, {0x7ff, 0x6c, 0x80}, {0x8, 0x0, 0x4}, {0x7, 0x7ff, 0x80000001}, {0xc6f1, 0x5}, {0x40400, 0x5, 0x3}, {0x10001, 0x2b9, 0x9}, {0x4, 0x6, 0xfb33}, {0x56, 0x5, 0xcbd}, {0xfffffff7, 0x3, 0x55bc2dc}, {0x4707, 0x40, 0xf20}, {0x80000001, 0x8, 0x100}, {0x2, 0x1, 0x2}, {0x2, 0x1, 0x6}, {0x5, 0xffffffff, 0x1}, {0x3, 0x3, 0xee0fcc05}, {0x4, 0x1}, {0x6f, 0x3, 0x7}, {0xfff, 0x205, 0x9}, {0xffffffff, 0xffff, 0x9}, {0x2, 0x4, 0x208}, {0x891c, 0x5, 0x400}, {0x8, 0x245d, 0xffffffff}, {0x800, 0x360f, 0x2}, {0x7, 0x2950, 0xfffffff5}, {0x1ff, 0x1000, 0x101}, {0x6376, 0x40, 0x401}, {0xfffff5cb, 0x1, 0x6}, {0x10001, 0x4, 0x6}, {0x5, 0xc50, 0x7}, {0xedd0, 0x7, 0x2}, {0x0, 0xfff, 0xffff461c}, {0x2, 0x0, 0x4dbd}, {0x6, 0xe, 0x5}, {0x4, 0x6, 0xc}, {0x4, 0x80, 0x400}, {0x80, 0xfff, 0x74}, {0xffff8001, 0xfffffff7, 0x7}, {0x0, 0x6899, 0x7}, {0xc, 0x717, 0x5}, {0x7f, 0x1, 0x4}, {0x7fffffff, 0x9, 0x6}, {0x9, 0x8}, {0xfffffffe, 0xfffffffe, 0xd89e}, {0x9, 0x1a1}, {0xffffff59, 0x841, 0x3}, {0x401, 0x3, 0x4}, {0x0, 0xf, 0x327}, {0x8, 0x10001, 0xae4}, {0x5, 0xbc14, 0x1}, {0x10000, 0xf, 0x3}, {0x1c1b, 0xfe, 0x22}, {0x8, 0x7fff, 0x401}, {0x10001, 0x65f, 0x5}, {0x6, 0x5, 0xc49}, {0x7, 0x8, 0xfffffff8}, {0x1, 0x5, 0x2}, {0x92, 0x5, 0x1}, {0xfffff9c3, 0x800, 0xca}, {0x8, 0x4, 0xd}, {0xffffffff, 0x5, 0x80000001}, {0x8, 0x6, 0xd}, {0x1, 0x6, 0x9}, {0x1, 0x2, 0x10000}, {0x0, 0x6, 0xe}, {0x0, 0x0, 0x9}, {0x9faf, 0x8, 0xc}, {0x8, 0x3, 0x7}, {0x2, 0x40, 0x2}, {0x4, 0xc29, 0x1}, {0x4, 0xd, 0xffff}, {0x2, 0x5, 0x1ef}, {0x0, 0x5, 0x6}, {0x7, 0x5, 0x21461b1f}, {0x8000, 0x2, 0xffffffff}, {0x532, 0x4, 0xefd}, {0x1, 0x5, 0x3}, {0x2, 0x10001, 0x12a4}, {0x8dbe, 0xfffff801, 0x7fff}, {0x3, 0x2, 0x81}, {0x80, 0x9, 0x2e83}, {0x9, 0x3, 0x3}, {0x0, 0x9, 0x5}, {0x1, 0x4, 0x2}, {0x5, 0x2, 0x174b}, {0x2, 0x3, 0x3}]}) 25.826618187s ago: executing program 36 (id=6320): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) eventfd2(0x5, 0x800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="02fffffadab35cde41895d593df6", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c30038640000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008000) recvmmsg(r3, &(0x7f0000005bc0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001680)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000001700)=""/236, 0xec}], 0x1, &(0x7f0000001800)=""/113, 0x71}, 0x6}, {{&(0x7f0000001880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/123, 0x7b}, {&(0x7f0000001980)=""/101, 0x65}], 0x2, &(0x7f0000001a40)=""/29, 0x1d}, 0x916}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/84, 0x54}, {&(0x7f0000003d00)=""/54, 0x36}, {&(0x7f0000003d40)=""/200, 0xc8}, {&(0x7f0000003e40)=""/163, 0xa3}], 0x9, &(0x7f0000003fc0)=""/82, 0x52}, 0x709}, {{&(0x7f0000004040)=@xdp, 0x80, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/29, 0x1d}], 0x1, &(0x7f0000004140)=""/164, 0xa4}, 0xc8000000}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004280)=""/41, 0x29}, {&(0x7f00000042c0)=""/214, 0xd6}, {&(0x7f00000043c0)=""/21, 0x15}, {&(0x7f0000004400)=""/72, 0x48}, {&(0x7f0000005dc0)=""/79, 0x4f}, {&(0x7f0000004500)=""/50, 0x32}], 0x6, &(0x7f00000045c0)=""/152, 0x98}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004680)=""/11, 0xb}], 0x1, &(0x7f0000004700)}, 0x6}, {{&(0x7f0000004740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000047c0)=""/209, 0xd1}, {&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/177, 0xb1}, {&(0x7f00000049c0)=""/116, 0x74}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/6, 0x6}, {&(0x7f0000005a80)=""/46, 0x2e}, {&(0x7f0000005ac0)=""/84, 0x54}], 0x8}, 0x6}], 0x8, 0x2, &(0x7f00000001c0)={0x77359400}) setitimer(0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecw)$\x04\x13\x87\x8bvi{\x96U', 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r7, 0x4004550d, 0x0) 25.807936424s ago: executing program 2 (id=6328): syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80040, 0x0) fchdir(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x1}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "1dbec1aa"}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/98, 0x62, 0x2003, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x518, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00'}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x98}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=ANY=[@ANYBLOB="200094ff", @ANYRES16=r1, @ANYBLOB="01000000000000000000110000000c0009800800010008000000"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19.291072374s ago: executing program 2 (id=6329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a108000000000080400000014000200fc020000000000000000000000000000140001002001"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 37 (id=6329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a108000000000080400000014000200fc020000000000000000000000000000140001002001"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [T26528] netlink: 'syz.0.5776': attribute type 6 has an invalid length. [ 1636.865566][T26528] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1636.880818][T26528] tipc: Failed to remove unknown binding: 66,1,1/0:1893972330/1893972332 [ 1636.889363][T26528] tipc: Failed to remove unknown binding: 66,1,1/0:1893972330/1893972332 [ 1637.105920][T23514] usb 5-1: Using ep0 maxpacket: 16 [ 1637.359425][T26533] ipt_ECN: cannot use operation on non-tcp rule [ 1639.185801][ T5934] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1639.392789][ T5934] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1639.465689][ T5931] usb 2-1: USB disconnect, device number 89 [ 1639.478262][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.618576][T26550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5781'. [ 1639.646622][ T5934] usb 6-1: config 0 descriptor?? [ 1639.695791][T23514] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1639.704343][ T5934] cp210x 6-1:0.0: cp210x converter detected [ 1639.706634][T23514] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1639.725700][T23514] usb 5-1: can't read configurations, error -71 [ 1640.103893][ T5934] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1640.134671][ T5934] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1640.421500][T26539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.452983][T26539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.499898][T26573] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1642.112617][T23514] usb 6-1: USB disconnect, device number 3 [ 1642.145022][T23514] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1642.194255][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.676600][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.684394][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.739299][T23514] cp210x 6-1:0.0: device disconnected [ 1642.746165][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.776086][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.797608][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.820821][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.845107][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.858647][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.872160][T26586] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 1642.902699][T26590] binder: 26587:26590 ioctl 4040ae79 200000000140 returned -22 [ 1643.206017][ T5902] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1643.253888][ T5902] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1643.313562][ T5902] usb 3-1: USB disconnect, device number 84 [ 1643.605862][ T5931] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1643.756013][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1643.766043][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 1643.818934][T26611] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1643.965541][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1644.024454][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.045227][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1644.057760][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.125082][ T9] usb 2-1: Product: syz [ 1644.125103][ T9] usb 2-1: Manufacturer: syz [ 1644.125118][ T9] usb 2-1: SerialNumber: syz [ 1644.143041][ T9] usb 2-1: config 0 descriptor?? [ 1644.149687][ T9] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22 [ 1644.152475][ T9] usb 2-1: unsupported MDLM descriptors [ 1644.369118][ T9] usb 2-1: USB disconnect, device number 90 [ 1645.176098][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1645.346290][ T9] usb 3-1: device descriptor read/64, error -71 [ 1645.585912][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1645.735923][ T9] usb 3-1: device descriptor read/64, error -71 [ 1645.785777][T23514] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1645.847062][ T9] usb usb3-port1: attempt power cycle [ 1645.963140][T23514] usb 2-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.975128][T23514] usb 2-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.033615][T26633] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5806'. [ 1646.048797][T26633] FAULT_INJECTION: forcing a failure. [ 1646.048797][T26633] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.063276][T23514] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1646.072939][T23514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.088734][T26633] CPU: 0 UID: 0 PID: 26633 Comm: syz.5.5806 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1646.088760][T26633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1646.088770][T26633] Call Trace: [ 1646.088778][T26633] [ 1646.088787][T26633] dump_stack_lvl+0x189/0x250 [ 1646.088818][T26633] ? __pfx____ratelimit+0x10/0x10 [ 1646.088844][T26633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1646.088868][T26633] ? __pfx__printk+0x10/0x10 [ 1646.088901][T26633] should_fail_ex+0x414/0x560 [ 1646.088926][T26633] should_failslab+0xa8/0x100 [ 1646.088946][T26633] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1646.088971][T26633] ? skb_clone+0x212/0x3a0 [ 1646.088996][T26633] skb_clone+0x212/0x3a0 [ 1646.089017][T26633] __netlink_deliver_tap+0x404/0x850 [ 1646.089049][T26633] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.089069][T26633] netlink_deliver_tap+0x19c/0x1b0 [ 1646.089090][T26633] netlink_sendskb+0x68/0x140 [ 1646.089108][T26633] netlink_rcv_skb+0x28c/0x470 [ 1646.089127][T26633] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1646.089150][T26633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1646.089184][T26633] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.089202][T26633] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.089223][T26633] xfrm_netlink_rcv+0x79/0x90 [ 1646.089242][T26633] netlink_unicast+0x75b/0x8d0 [ 1646.089271][T26633] netlink_sendmsg+0x805/0xb30 [ 1646.089300][T26633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.089324][T26633] ? aa_sock_msg_perm+0x94/0x160 [ 1646.089347][T26633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1646.089367][T26633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.089387][T26633] __sock_sendmsg+0x219/0x270 [ 1646.089413][T26633] ____sys_sendmsg+0x505/0x830 [ 1646.089438][T26633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.089467][T26633] ? import_iovec+0x74/0xa0 [ 1646.089488][T26633] ___sys_sendmsg+0x21f/0x2a0 [ 1646.089510][T26633] ? __pfx____sys_sendmsg+0x10/0x10 [ 1646.089564][T26633] ? __fget_files+0x2a/0x420 [ 1646.089581][T26633] ? __fget_files+0x3a0/0x420 [ 1646.089609][T26633] __x64_sys_sendmsg+0x19b/0x260 [ 1646.089633][T26633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1646.089662][T26633] ? __pfx_ksys_write+0x10/0x10 [ 1646.089675][T26633] ? rcu_is_watching+0x15/0xb0 [ 1646.089711][T26633] ? do_syscall_64+0xbe/0x3b0 [ 1646.089729][T26633] do_syscall_64+0xfa/0x3b0 [ 1646.089742][T26633] ? lockdep_hardirqs_on+0x9c/0x150 [ 1646.089765][T26633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.089781][T26633] ? clear_bhb_loop+0x60/0xb0 [ 1646.089802][T26633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.089818][T26633] RIP: 0033:0x7fb627d8e929 [ 1646.089833][T26633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1646.089849][T26633] RSP: 002b:00007fb628b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.089867][T26633] RAX: ffffffffffffffda RBX: 00007fb627fb5fa0 RCX: 00007fb627d8e929 [ 1646.089879][T26633] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004 [ 1646.089890][T26633] RBP: 00007fb628b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.089901][T26633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.089910][T26633] R13: 0000000000000000 R14: 00007fb627fb5fa0 R15: 00007fb6280dfa28 [ 1646.089937][T26633] [ 1646.478721][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1646.506110][ T5931] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1646.513843][ T5931] usb 5-1: can't read configurations, error -71 [ 1646.536080][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1646.558515][ T9] usb 3-1: device descriptor read/8, error -71 [ 1646.694308][T23514] megaworld 0003:07B5:0312.0057: unknown main item tag 0x6 [ 1646.777646][T23514] megaworld 0003:07B5:0312.0057: item fetching failed at offset 3/5 [ 1646.798382][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1646.818847][T23514] megaworld 0003:07B5:0312.0057: parse failed [ 1646.825034][T23514] megaworld 0003:07B5:0312.0057: probe with driver megaworld failed with error -22 [ 1646.835727][ T9] usb 3-1: device descriptor read/8, error -71 [ 1646.931203][ T30] audit: type=1326 audit(1750772391.659:23050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1646.947133][ T9] usb usb3-port1: unable to enumerate USB device [ 1646.978837][ T30] audit: type=1326 audit(1750772391.659:23051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.001651][ T5902] usb 2-1: USB disconnect, device number 91 [ 1647.020864][T26651] FAULT_INJECTION: forcing a failure. [ 1647.020864][T26651] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.029614][ T30] audit: type=1326 audit(1750772391.659:23052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.061438][T26097] raw-gadget.1 gadget.3: failed to queue disconnect event [ 1647.067870][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.5.5813 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1647.067895][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1647.067905][T26651] Call Trace: [ 1647.067913][T26651] [ 1647.067921][T26651] dump_stack_lvl+0x189/0x250 [ 1647.067951][T26651] ? __pfx____ratelimit+0x10/0x10 [ 1647.067974][T26651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1647.067998][T26651] ? __pfx__printk+0x10/0x10 [ 1647.068022][T26651] ? __pfx___might_resched+0x10/0x10 [ 1647.068045][T26651] ? fs_reclaim_acquire+0x7d/0x100 [ 1647.068068][T26651] should_fail_ex+0x414/0x560 [ 1647.068094][T26651] should_failslab+0xa8/0x100 [ 1647.068113][T26651] __kmalloc_cache_noprof+0x70/0x3d0 [ 1647.068134][T26651] ? cls_bpf_change+0x22a/0xde0 [ 1647.068157][T26651] cls_bpf_change+0x22a/0xde0 [ 1647.068185][T26651] ? __pfx_cls_bpf_change+0x10/0x10 [ 1647.068227][T26651] tc_new_tfilter+0xdca/0x15b0 [ 1647.068275][T26651] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1647.068329][T26651] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1647.068348][T26651] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1647.068369][T26651] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1647.068385][T26651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1647.068399][T26651] ? ref_tracker_free+0x63a/0x7d0 [ 1647.068418][T26651] ? __copy_skb_header+0xa7/0x550 [ 1647.068440][T26651] ? __pfx_ref_tracker_free+0x10/0x10 [ 1647.068471][T26651] netlink_rcv_skb+0x208/0x470 [ 1647.068491][T26651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1647.068509][T26651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1647.068540][T26651] ? netlink_deliver_tap+0x2e/0x1b0 [ 1647.068558][T26651] ? netlink_deliver_tap+0x2e/0x1b0 [ 1647.068582][T26651] netlink_unicast+0x75b/0x8d0 [ 1647.068615][T26651] netlink_sendmsg+0x805/0xb30 [ 1647.068643][T26651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.068665][T26651] ? aa_sock_msg_perm+0x94/0x160 [ 1647.068688][T26651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1647.068708][T26651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.068727][T26651] __sock_sendmsg+0x219/0x270 [ 1647.068753][T26651] ____sys_sendmsg+0x505/0x830 [ 1647.068779][T26651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1647.068804][T26651] ? import_iovec+0x74/0xa0 [ 1647.068820][T26651] ___sys_sendmsg+0x21f/0x2a0 [ 1647.068837][T26651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1647.068879][T26651] ? __fget_files+0x2a/0x420 [ 1647.068893][T26651] ? __fget_files+0x3a0/0x420 [ 1647.068915][T26651] __x64_sys_sendmsg+0x19b/0x260 [ 1647.068934][T26651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1647.068958][T26651] ? __pfx_ksys_write+0x10/0x10 [ 1647.068969][T26651] ? rcu_is_watching+0x15/0xb0 [ 1647.068995][T26651] ? do_syscall_64+0xbe/0x3b0 [ 1647.069012][T26651] do_syscall_64+0xfa/0x3b0 [ 1647.069024][T26651] ? lockdep_hardirqs_on+0x9c/0x150 [ 1647.069044][T26651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.069060][T26651] ? clear_bhb_loop+0x60/0xb0 [ 1647.069080][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.069096][T26651] RIP: 0033:0x7fb627d8e929 [ 1647.069112][T26651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1647.069127][T26651] RSP: 002b:00007fb628b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1647.069146][T26651] RAX: ffffffffffffffda RBX: 00007fb627fb5fa0 RCX: 00007fb627d8e929 [ 1647.069159][T26651] RDX: 0000000020040810 RSI: 0000200000006040 RDI: 0000000000000004 [ 1647.069170][T26651] RBP: 00007fb628b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1647.069181][T26651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.069191][T26651] R13: 0000000000000000 R14: 00007fb627fb5fa0 R15: 00007fb6280dfa28 [ 1647.069219][T26651] [ 1647.129069][ T30] audit: type=1326 audit(1750772391.659:23053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.460490][ T30] audit: type=1326 audit(1750772391.669:23054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.639242][ T30] audit: type=1326 audit(1750772391.669:23055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.674977][ T30] audit: type=1326 audit(1750772391.669:23056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.708204][ T30] audit: type=1326 audit(1750772391.669:23057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.765756][ T30] audit: type=1326 audit(1750772391.669:23058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.808901][ T30] audit: type=1326 audit(1750772391.669:23059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26628 comm="syz.1.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f478e98e929 code=0x7ffc0000 [ 1647.902914][T26666] FAULT_INJECTION: forcing a failure. [ 1647.902914][T26666] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.000791][T26666] CPU: 1 UID: 0 PID: 26666 Comm: syz.1.5816 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1648.000825][T26666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1648.000832][T26666] Call Trace: [ 1648.000837][T26666] [ 1648.000841][T26666] dump_stack_lvl+0x189/0x250 [ 1648.000860][T26666] ? __pfx____ratelimit+0x10/0x10 [ 1648.000875][T26666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1648.000888][T26666] ? __pfx__printk+0x10/0x10 [ 1648.000901][T26666] ? __pfx___might_resched+0x10/0x10 [ 1648.000918][T26666] should_fail_ex+0x414/0x560 [ 1648.000932][T26666] should_failslab+0xa8/0x100 [ 1648.000944][T26666] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1648.000954][T26666] ? __alloc_skb+0x112/0x2d0 [ 1648.000967][T26666] __alloc_skb+0x112/0x2d0 [ 1648.000979][T26666] audit_log_start+0x152/0x870 [ 1648.000993][T26666] ? __pfx_audit_log_start+0x10/0x10 [ 1648.001005][T26666] ? migrate_enable+0x29c/0x3c0 [ 1648.001017][T26666] ? __pfx_migrate_enable+0x10/0x10 [ 1648.001029][T26666] audit_seccomp+0x64/0x190 [ 1648.001037][T26666] ? clear_bhb_loop+0x60/0xb0 [ 1648.001047][T26666] ? clear_bhb_loop+0xe/0xb0 [ 1648.001058][T26666] __seccomp_filter+0x9aa/0x1a40 [ 1648.001078][T26666] ? __pfx___seccomp_filter+0x10/0x10 [ 1648.001090][T26666] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1648.001105][T26666] ? __pfx_vfs_write+0x10/0x10 [ 1648.001121][T26666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1648.001136][T26666] ? __fget_files+0x3a0/0x420 [ 1648.001155][T26666] ? __pfx_ksys_write+0x10/0x10 [ 1648.001164][T26666] ? __secure_computing+0xe2/0x2a0 [ 1648.001179][T26666] syscall_trace_enter+0xaa/0x160 [ 1648.001192][T26666] do_syscall_64+0xd3/0x3b0 [ 1648.001201][T26666] ? lockdep_hardirqs_on+0x9c/0x150 [ 1648.001213][T26666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.001222][T26666] ? clear_bhb_loop+0x60/0xb0 [ 1648.001234][T26666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.001242][T26666] RIP: 0033:0x7f478e98e929 [ 1648.001253][T26666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.001261][T26666] RSP: 002b:00007f478f79c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1648.001272][T26666] RAX: ffffffffffffffda RBX: 00007f478ebb5fa0 RCX: 00007f478e98e929 [ 1648.001279][T26666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1648.001285][T26666] RBP: 00007f478f79c090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.001291][T26666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.001297][T26666] R13: 0000000000000000 R14: 00007f478ebb5fa0 R15: 00007f478ecdfa28 [ 1648.001311][T26666] [ 1648.677234][ T9466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.134300][ T9466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.245946][ T5931] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1649.426271][ T9466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.464718][ T9466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.565955][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 1649.703499][ T9466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.749617][ T9466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.149779][ T9466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1650.239475][ T9466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.974266][ T9466] bridge_slave_1: left allmulticast mode [ 1650.982433][ T9466] bridge_slave_1: left promiscuous mode [ 1650.996013][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.093983][ T9466] bridge_slave_0: left allmulticast mode [ 1651.108311][ T9466] bridge_slave_0: left promiscuous mode [ 1651.136372][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.331950][T26692] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5822'. [ 1651.642761][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1651.804553][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1651.813312][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1651.823586][ T9] usb 6-1: config 6 has an invalid interface number: 30 but max is 0 [ 1651.832479][ T9] usb 6-1: config 6 has no interface number 0 [ 1651.839086][ T9] usb 6-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1651.851136][ T9] usb 6-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 1651.863136][ T9] usb 6-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1651.880767][ T9] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 1651.900659][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.924285][ T9] usb 6-1: Product: syz [ 1651.928926][ T9] usb 6-1: Manufacturer: syz [ 1651.940483][ T9] usb 6-1: SerialNumber: syz [ 1651.964882][T26696] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1652.164525][ T9466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.176851][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1652.193563][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1652.194560][ T9] usbtest 6-1:6.30: usb test device [ 1652.205083][ T5931] usb 3-1: can't read configurations, error -71 [ 1652.220782][ T9466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.259511][ T9] usbtest 6-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 1652.276959][ T9466] bond0 (unregistering): Released all slaves [ 1652.299626][ T9] usb 6-1: USB disconnect, device number 4 [ 1652.428423][ T9466] IPVS: stopping master sync thread 17380 ... [ 1652.442235][ T9466] IPVS: stopping backup sync thread 18611 ... [ 1652.509149][T26712] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1652.646381][ T5931] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1652.825929][ T5931] usb 3-1: device descriptor read/64, error -71 [ 1652.936254][ T5931] usb usb3-port1: attempt power cycle [ 1653.342197][ T5931] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1653.374997][T26723] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1653.394696][ T5931] usb 3-1: device descriptor read/8, error -71 [ 1653.513253][ T9466] hsr_slave_0: left promiscuous mode [ 1653.578303][ T9466] hsr_slave_1: left promiscuous mode [ 1653.590326][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.631297][ T9466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.639684][ T5931] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1653.676930][ T5931] usb 3-1: device descriptor read/8, error -71 [ 1653.748895][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.786605][ T5931] usb usb3-port1: unable to enumerate USB device [ 1653.796469][ T9466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.842323][ T9466] veth1_macvtap: left promiscuous mode [ 1654.021605][ T9466] veth0_macvtap: left promiscuous mode [ 1654.053589][ T9466] veth1_vlan: left promiscuous mode [ 1654.086524][ T9466] veth0_vlan: left promiscuous mode [ 1654.556409][ T9466] pimreg (unregistering): left allmulticast mode [ 1655.202462][ T9466] team0 (unregistering): Port device team_slave_1 removed [ 1655.252368][ T9466] team0 (unregistering): Port device team_slave_0 removed [ 1656.499406][ T9466] IPVS: stop unused estimator thread 0... [ 1657.236352][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1658.876039][ T5902] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1659.055737][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 1659.066544][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.077046][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.106042][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.116234][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1659.123567][ T5902] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1659.549249][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.690821][ T5902] usb 2-1: config 0 descriptor?? [ 1659.696719][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1659.696734][ T30] audit: type=1326 audit(1750772404.469:23105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26838 comm="syz.5.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d8e929 code=0x7ffc0000 [ 1659.726029][ T30] audit: type=1326 audit(1750772404.469:23106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26838 comm="syz.5.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d8e929 code=0x7ffc0000 [ 1659.751670][ T30] audit: type=1326 audit(1750772404.519:23107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26838 comm="syz.5.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb627d8e929 code=0x7ffc0000 [ 1659.775172][ T30] audit: type=1326 audit(1750772404.519:23108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26838 comm="syz.5.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d8e929 code=0x7ffc0000 [ 1660.199991][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1660.210819][ T5902] kye 0003:0458:0153.0058: unexpected long global item [ 1660.219220][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1660.236415][ T5902] kye 0003:0458:0153.0058: parse failed [ 1660.242068][ T5902] kye 0003:0458:0153.0058: probe with driver kye failed with error -22 [ 1660.359227][ T24] usb 2-1: USB disconnect, device number 92 [ 1660.850330][T26874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5855'. [ 1661.977096][ T24] IPVS: starting estimator thread 0... [ 1662.075908][T26892] IPVS: using max 35 ests per chain, 84000 per kthread [ 1662.366360][T26263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1662.376685][T26263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1662.416595][T26263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1662.460208][T26263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1662.469631][T26263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1662.837717][T15961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.859367][T15961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45447 - 0 [ 1663.134165][T15961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.144671][T15961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45447 - 0 [ 1663.331345][T15961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.354515][T15961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45447 - 0 [ 1663.847793][T15961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.904462][T15961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45447 - 0 [ 1664.540390][T26896] chnl_net:caif_netlink_parms(): no params data found [ 1664.556012][T16181] Bluetooth: hci1: command tx timeout [ 1666.263590][T15961] team0: Port device bond0 removed [ 1666.272469][T15961] bond0 (unregistering): Released all slaves [ 1666.596162][T15961] : left promiscuous mode [ 1666.626152][T16181] Bluetooth: hci1: command tx timeout [ 1666.953658][T26896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.988597][T26896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.033100][T26896] bridge_slave_0: entered allmulticast mode [ 1667.051986][T26896] bridge_slave_0: entered promiscuous mode [ 1667.108338][T15961] tipc: Left network mode [ 1667.113059][T26896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.140433][T15961] IPVS: stopping backup sync thread 19023 ... [ 1667.159818][T26896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.182392][T26896] bridge_slave_1: entered allmulticast mode [ 1667.217257][T26896] bridge_slave_1: entered promiscuous mode [ 1667.461538][T26896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.510921][T26896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.921654][T26896] team0: Port device team_slave_0 added [ 1668.013589][T26896] team0: Port device team_slave_1 added [ 1668.331481][T27018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1668.392525][T15961] hsr_slave_0: left promiscuous mode [ 1668.413547][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1668.423603][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1668.615841][T15961] hsr_slave_1: left promiscuous mode [ 1668.708734][T15961] veth1_macvtap: left promiscuous mode [ 1668.714265][T15961] veth0_macvtap: left promiscuous mode [ 1668.728797][T16181] Bluetooth: hci1: command tx timeout [ 1668.728986][T15961] veth1_vlan: left promiscuous mode [ 1668.791544][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.797941][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.825720][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1668.931433][T15961] veth0_vlan: left promiscuous mode [ 1669.012730][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1669.051908][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.080695][ T24] usb 6-1: Product: syz [ 1669.096505][ T24] usb 6-1: Manufacturer: syz [ 1669.101113][ T24] usb 6-1: SerialNumber: syz [ 1669.153176][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1669.176529][ T5931] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1669.512464][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1669.567189][T27033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1670.023425][ T5902] usb 6-1: USB disconnect, device number 5 [ 1670.236178][ T5931] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1670.243255][ T5931] ath9k_htc: Failed to initialize the device [ 1670.289727][ T5902] usb 6-1: ath9k_htc: USB layer deinitialized [ 1670.434335][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5905'. [ 1670.786037][T16181] Bluetooth: hci1: command tx timeout [ 1671.265146][T27058] usb usb8: usbfs: process 27058 (syz.5.5910) did not claim interface 0 before use [ 1671.699319][T27065] validate_nla: 41 callbacks suppressed [ 1671.699339][T27065] netlink: 'syz.0.5912': attribute type 10 has an invalid length. [ 1672.658138][T26896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.665149][T26896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.714795][T26896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.728121][T26896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.735182][T26896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.763521][T26896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.815327][T27020] kthread_run failed with err -4 [ 1673.112548][T27082] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5920'. [ 1673.122000][T27082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1673.662143][T26896] hsr_slave_0: entered promiscuous mode [ 1673.691350][T26896] hsr_slave_1: entered promiscuous mode [ 1673.711368][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1673.751598][T26896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1673.886474][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1673.905874][T26896] Cannot create hsr debugfs directory [ 1674.126139][ T24] IPVS: starting estimator thread 0... [ 1674.234279][T27106] IPVS: using max 30 ests per chain, 72000 per kthread [ 1674.374144][T15961] IPVS: stop unused estimator thread 0... [ 1675.716498][T26896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1675.739771][T26896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1675.767851][T26896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1675.807820][T27123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1675.847814][T26896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1676.191147][T27150] sctp: [Deprecated]: syz.4.5934 (pid 27150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1676.191147][T27150] Use struct sctp_sack_info instead [ 1676.421223][T26896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.460322][T26896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.512227][T24524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.519573][T24524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.580762][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.588052][T15962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.890323][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1676.905456][T26896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.959731][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1677.214684][T26896] veth0_vlan: entered promiscuous mode [ 1677.232434][T26896] veth1_vlan: entered promiscuous mode [ 1677.315241][T27171] netlink: 'syz.2.5939': attribute type 8 has an invalid length. [ 1677.378767][T26896] veth0_macvtap: entered promiscuous mode [ 1677.423035][T26896] veth1_macvtap: entered promiscuous mode [ 1677.517888][T26896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.548561][ T30] audit: type=1326 audit(1750772422.319:23109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27157 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7fc00000 [ 1677.602763][T26896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.660681][T26896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.702472][T26896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.715815][T26896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.734795][T26896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.013059][T15962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.052511][T15962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.105353][T15962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.121880][T15962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.186088][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1679.347936][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.382421][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.410571][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1679.445959][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1679.465135][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.566011][ T9] usb 2-1: config 0 descriptor?? [ 1679.988592][ T9] plantronics 0003:047F:FFFF.0059: unbalanced collection at end of report description [ 1680.059496][ T9] plantronics 0003:047F:FFFF.0059: parse failed [ 1680.088680][ T9] plantronics 0003:047F:FFFF.0059: probe with driver plantronics failed with error -22 [ 1680.193587][ T9] usb 2-1: USB disconnect, device number 93 [ 1680.543068][T27254] binder: 27251:27254 ioctl c0306201 200000000080 returned -14 [ 1681.745224][T27303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1681.931012][ T30] audit: type=1326 audit(1750772426.699:23110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.5982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40b1d8e929 code=0x0 [ 1683.816041][T23514] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1684.126571][T23514] usb 3-1: config 0 has no interfaces? [ 1684.179684][T23514] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1684.263254][T23514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.344388][ T30] audit: type=1326 audit(1750772429.109:23111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27348 comm="syz.1.5997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2657d8e929 code=0x0 [ 1684.365280][T23514] usb 3-1: Product: syz [ 1684.370597][T23514] usb 3-1: Manufacturer: syz [ 1684.375194][T23514] usb 3-1: SerialNumber: syz [ 1684.426320][T23514] usb 3-1: config 0 descriptor?? [ 1686.327642][T27391] netlink: 'syz.1.6007': attribute type 8 has an invalid length. [ 1686.591558][ T30] audit: type=1326 audit(1750772431.359:23112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27401 comm="syz.4.6010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40b1d8e929 code=0x0 [ 1686.848818][T23514] usb 3-1: USB disconnect, device number 93 [ 1688.123717][ T30] audit: type=1326 audit(1750772432.889:23113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.169561][ T30] audit: type=1326 audit(1750772432.919:23114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.249227][ T30] audit: type=1326 audit(1750772432.919:23115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.324458][ T30] audit: type=1326 audit(1750772432.919:23116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.432209][ T30] audit: type=1326 audit(1750772432.919:23117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.516272][ T30] audit: type=1326 audit(1750772432.919:23118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.597373][ T30] audit: type=1326 audit(1750772432.919:23119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1688.645126][ T30] audit: type=1326 audit(1750772432.919:23120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27455 comm="syz.0.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f30aed8e929 code=0x7ffc0000 [ 1689.637441][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6033'. [ 1689.948073][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6035'. [ 1690.244870][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1690.244888][ T30] audit: type=1326 audit(1750772435.009:23123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.455676][ T30] audit: type=1326 audit(1750772435.209:23124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.574527][ T30] audit: type=1326 audit(1750772435.209:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.676035][ T30] audit: type=1326 audit(1750772435.209:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.775057][ T30] audit: type=1326 audit(1750772435.209:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.855776][ T30] audit: type=1326 audit(1750772435.209:23128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.879293][ T30] audit: type=1326 audit(1750772435.209:23129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1690.943630][ T30] audit: type=1326 audit(1750772435.209:23130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1691.114167][ T30] audit: type=1326 audit(1750772435.209:23131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1691.175787][ T30] audit: type=1326 audit(1750772435.209:23132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.4.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b1d8e929 code=0x7ffc0000 [ 1691.666019][ T5934] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1691.810572][ T5934] usb 3-1: device descriptor read/64, error -71 [ 1692.056930][ T5934] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1692.164675][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6046'. [ 1692.385349][ T5934] usb 3-1: device descriptor read/64, error -71 [ 1692.601803][ T5934] usb usb3-port1: attempt power cycle [ 1692.985810][ T5934] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1693.109037][ T5934] usb 3-1: device descriptor read/8, error -71 [ 1693.378214][ T5934] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1693.428142][ T5934] usb 3-1: device descriptor read/8, error -71 [ 1693.567927][ T5934] usb usb3-port1: unable to enumerate USB device [ 1694.527373][T26263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1694.537930][T26263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1694.548058][T26263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1694.557603][T26263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1694.576306][T26263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1695.123580][T27577] FAULT_INJECTION: forcing a failure. [ 1695.123580][T27577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.142748][T27577] CPU: 1 UID: 0 PID: 27577 Comm: syz.5.6054 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1695.142772][T27577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1695.142783][T27577] Call Trace: [ 1695.142791][T27577] [ 1695.142799][T27577] dump_stack_lvl+0x189/0x250 [ 1695.142826][T27577] ? __pfx____ratelimit+0x10/0x10 [ 1695.142848][T27577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1695.142871][T27577] ? __pfx__printk+0x10/0x10 [ 1695.142889][T27577] ? __might_fault+0xb0/0x130 [ 1695.142917][T27577] should_fail_ex+0x414/0x560 [ 1695.142942][T27577] _copy_from_user+0x2d/0xb0 [ 1695.142959][T27577] ___sys_sendmsg+0x158/0x2a0 [ 1695.142983][T27577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1695.143033][T27577] ? __fget_files+0x2a/0x420 [ 1695.143050][T27577] ? __fget_files+0x3a0/0x420 [ 1695.143078][T27577] __sys_sendmmsg+0x227/0x430 [ 1695.143109][T27577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1695.143127][T27577] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1695.143177][T27577] ? ksys_write+0x22a/0x250 [ 1695.143195][T27577] ? __pfx_ksys_write+0x10/0x10 [ 1695.143209][T27577] ? rcu_is_watching+0x15/0xb0 [ 1695.143240][T27577] __x64_sys_sendmmsg+0xa0/0xc0 [ 1695.143262][T27577] do_syscall_64+0xfa/0x3b0 [ 1695.143276][T27577] ? lockdep_hardirqs_on+0x9c/0x150 [ 1695.143298][T27577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.143314][T27577] ? clear_bhb_loop+0x60/0xb0 [ 1695.143334][T27577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.143350][T27577] RIP: 0033:0x7fb627d8e929 [ 1695.143365][T27577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.143380][T27577] RSP: 002b:00007fb628b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1695.143404][T27577] RAX: ffffffffffffffda RBX: 00007fb627fb5fa0 RCX: 00007fb627d8e929 [ 1695.143417][T27577] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 1695.143428][T27577] RBP: 00007fb628b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.143438][T27577] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.143446][T27577] R13: 0000000000000000 R14: 00007fb627fb5fa0 R15: 00007fb6280dfa28 [ 1695.143472][T27577] [ 1695.156851][T27563] chnl_net:caif_netlink_parms(): no params data found [ 1695.726019][ T9] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1695.912993][ T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1695.924010][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.132536][ T9] usb 3-1: config 0 has no interface number 0 [ 1696.195440][ T9] usb 3-1: config 0 interface 11 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1696.232974][ T9] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1696.245159][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1696.260407][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.281370][ T9] usb 3-1: config 0 descriptor?? [ 1696.292826][ T9] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1696.303852][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 1696.314552][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 1696.354767][T27563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.373137][T27563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.374010][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1696.385879][T27563] bridge_slave_0: entered allmulticast mode [ 1696.402500][T27563] bridge_slave_0: entered promiscuous mode [ 1696.404721][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1696.426746][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1696.447214][T27563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.454580][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1696.462910][T27563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.463120][T27563] bridge_slave_1: entered allmulticast mode [ 1696.480792][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1696.498150][T27563] bridge_slave_1: entered promiscuous mode [ 1696.500837][T27585] binder: 27584:27585 unknown command 1074029334 [ 1696.510514][T27585] binder: 27584:27585 ioctl c0306201 200000000640 returned -22 [ 1696.634643][T16181] Bluetooth: hci4: command tx timeout [ 1696.637851][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1696.650509][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1696.792136][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1696.845896][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1696.901090][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1696.938803][T27563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.950924][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1696.981193][T27563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.020578][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1697.080568][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1697.159417][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1697.170228][T27563] team0: Port device team_slave_0 added [ 1697.226755][T27563] team0: Port device team_slave_1 added [ 1697.255320][ T9] usb 3-1: USB disconnect, device number 98 [ 1697.281389][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1697.435031][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1697.496839][ T9] keyspan 3-1:0.11: device disconnected [ 1697.740964][T27563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.753794][T27563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.873677][T27563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.941989][T27629] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1698.125432][T27563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.167475][T27563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.235201][T27563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.707233][T16181] Bluetooth: hci4: command tx timeout [ 1698.885344][T27563] hsr_slave_0: entered promiscuous mode [ 1698.919121][T27563] hsr_slave_1: entered promiscuous mode [ 1698.976381][T27563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.027520][T27563] Cannot create hsr debugfs directory [ 1699.468304][ T30] audit: type=1400 audit(1750772444.229:23133): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1700.246376][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1700.269532][T27563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.323266][T27563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.587223][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.610320][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1700.625198][ T9] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1700.645099][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1700.654925][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.711629][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1700.737787][ T9] usb 6-1: invalid MIDI out EP 0 [ 1700.781803][T27563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.792470][T16181] Bluetooth: hci4: command tx timeout [ 1700.889142][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1700.919983][ T5902] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1700.927384][T27563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.106063][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 1701.113307][T27563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.116112][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1701.144522][ T5902] usb 2-1: config 8 has an invalid interface number: 137 but max is 0 [ 1701.152728][T27563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.204792][ T5902] usb 2-1: config 8 has no interface number 0 [ 1701.226139][ T5902] usb 2-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1701.243341][ T5902] usb 2-1: config 8 interface 137 has no altsetting 0 [ 1701.285523][ T5902] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1701.305348][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.319564][T27563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.331995][ T5902] usb 2-1: Product: syz [ 1701.351482][ T5902] usb 2-1: Manufacturer: syz [ 1701.352815][T27563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.358427][ T5902] usb 2-1: SerialNumber: syz [ 1701.461564][T27674] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1701.703453][ T5902] cyberjack 2-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1701.742872][ T5902] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1701.848443][ T5902] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1701.872517][ T5902] usb 2-1: USB disconnect, device number 94 [ 1702.022140][ T5902] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1702.029632][T27563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1702.069386][T27563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1702.088395][T27563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1702.109343][ T5902] cyberjack 2-1:8.137: device disconnected [ 1702.139715][T27563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1702.426139][ T30] audit: type=1326 audit(1750772447.179:23134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1702.501653][ T30] audit: type=1326 audit(1750772447.179:23135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1702.611131][T27563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.615783][ T30] audit: type=1326 audit(1750772447.219:23136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1702.690740][T27563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.723026][ T30] audit: type=1326 audit(1750772447.219:23137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1702.749044][T24516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.756186][T24516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.812481][T24516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.819712][T24516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.843082][ T30] audit: type=1326 audit(1750772447.219:23138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1702.882087][T16181] Bluetooth: hci4: command tx timeout [ 1703.031384][ T30] audit: type=1326 audit(1750772447.239:23139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2657d8e929 code=0x7ffc0000 [ 1703.148793][T27563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.181992][ T30] audit: type=1326 audit(1750772447.239:23140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1703.252226][ T5902] usb 6-1: USB disconnect, device number 6 [ 1703.457077][ T30] audit: type=1326 audit(1750772447.239:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1703.527574][T27563] veth0_vlan: entered promiscuous mode [ 1703.572530][ T30] audit: type=1326 audit(1750772447.239:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1703.586846][T27563] veth1_vlan: entered promiscuous mode [ 1703.917708][T27731] FAULT_INJECTION: forcing a failure. [ 1703.917708][T27731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.984334][T27563] veth0_macvtap: entered promiscuous mode [ 1704.027747][T27731] CPU: 1 UID: 0 PID: 27731 Comm: syz.2.6080 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1704.027773][T27731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1704.027784][T27731] Call Trace: [ 1704.027791][T27731] [ 1704.027809][T27731] dump_stack_lvl+0x189/0x250 [ 1704.027837][T27731] ? __pfx____ratelimit+0x10/0x10 [ 1704.027861][T27731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.027883][T27731] ? __pfx__printk+0x10/0x10 [ 1704.027912][T27731] should_fail_ex+0x414/0x560 [ 1704.027937][T27731] _copy_to_user+0x31/0xb0 [ 1704.027956][T27731] simple_read_from_buffer+0xe1/0x170 [ 1704.027979][T27731] proc_fail_nth_read+0x1df/0x250 [ 1704.028002][T27731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.028024][T27731] ? rw_verify_area+0x258/0x650 [ 1704.028047][T27731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.028066][T27731] vfs_read+0x200/0x980 [ 1704.028094][T27731] ? __pfx___mutex_lock+0x10/0x10 [ 1704.028118][T27731] ? __pfx_vfs_read+0x10/0x10 [ 1704.028143][T27731] ? __fget_files+0x2a/0x420 [ 1704.028166][T27731] ? __fget_files+0x3a0/0x420 [ 1704.028181][T27731] ? __fget_files+0x2a/0x420 [ 1704.028205][T27731] ksys_read+0x145/0x250 [ 1704.028230][T27731] ? __pfx_ksys_read+0x10/0x10 [ 1704.028250][T27731] ? rcu_is_watching+0x15/0xb0 [ 1704.028278][T27731] ? do_syscall_64+0xbe/0x3b0 [ 1704.028298][T27731] do_syscall_64+0xfa/0x3b0 [ 1704.028311][T27731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1704.028334][T27731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.028351][T27731] ? clear_bhb_loop+0x60/0xb0 [ 1704.028371][T27731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.028388][T27731] RIP: 0033:0x7f86aa98d33c [ 1704.028403][T27731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1704.028417][T27731] RSP: 002b:00007f86ab7b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1704.028436][T27731] RAX: ffffffffffffffda RBX: 00007f86aabb5fa0 RCX: 00007f86aa98d33c [ 1704.028449][T27731] RDX: 000000000000000f RSI: 00007f86ab7b00a0 RDI: 0000000000000004 [ 1704.028459][T27731] RBP: 00007f86ab7b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.028470][T27731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.028480][T27731] R13: 0000000000000000 R14: 00007f86aabb5fa0 R15: 00007f86aacdfa28 [ 1704.028507][T27731] [ 1704.054756][T27563] veth1_macvtap: entered promiscuous mode [ 1704.471327][ T5902] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1704.479105][ T30] kauditd_printk_skb: 513 callbacks suppressed [ 1704.479119][ T30] audit: type=1326 audit(1750772449.239:23656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1704.588590][ T30] audit: type=1326 audit(1750772449.239:23657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1704.675473][ T30] audit: type=1326 audit(1750772449.239:23658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1704.675942][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1704.735718][ T30] audit: type=1326 audit(1750772449.239:23659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1704.811700][ T5902] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1704.851676][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.940033][ T5902] usb 6-1: Product: syz [ 1704.944280][ T5902] usb 6-1: Manufacturer: syz [ 1704.952397][ T5902] usb 6-1: SerialNumber: syz [ 1704.963888][T27563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.993570][ T30] audit: type=1326 audit(1750772449.239:23660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.005202][ T5902] usb 6-1: config 0 descriptor?? [ 1705.040339][T27563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.186123][ T30] audit: type=1326 audit(1750772449.239:23661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.217349][T27563] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.321978][T27563] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.331855][ T30] audit: type=1326 audit(1750772449.239:23662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.355449][T27563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.364604][T27563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.366862][T27734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.375659][ T30] audit: type=1326 audit(1750772449.239:23663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.408437][ T30] audit: type=1326 audit(1750772449.239:23664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.451309][ T30] audit: type=1326 audit(1750772449.239:23665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27706 comm="syz.1.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2657d2ab19 code=0x7ffc0000 [ 1705.474739][T27734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.535756][T25232] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1705.684325][T24516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.703335][T24516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.722077][T25232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1705.746260][T25232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1705.769072][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6081'. [ 1705.784085][T25232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1705.793561][T25232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.806036][T27749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1705.818196][T25232] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1705.828087][T27755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.837989][T27755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.863960][ T5902] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1705.894138][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1705.933154][ T5902] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1705.950470][ T5902] usb 6-1: media controller created [ 1705.997340][ T9466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.049903][ T9466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.060260][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1706.110263][T27734] dtv5100: wlen = 0, aborting. [ 1706.164606][ T5902] zl10353_read_register: readreg error (reg=127, ret==0) [ 1706.182327][ T5902] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1706.201429][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1706.323305][ T5902] usb 6-1: USB disconnect, device number 7 [ 1706.422904][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1706.982171][T27774] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1707.325772][T27776] FAULT_INJECTION: forcing a failure. [ 1707.325772][T27776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1707.361679][T27776] CPU: 0 UID: 0 PID: 27776 Comm: syz.4.6091 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1707.361704][T27776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1707.361715][T27776] Call Trace: [ 1707.361722][T27776] [ 1707.361730][T27776] dump_stack_lvl+0x189/0x250 [ 1707.361759][T27776] ? __pfx____ratelimit+0x10/0x10 [ 1707.361782][T27776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1707.361806][T27776] ? __pfx__printk+0x10/0x10 [ 1707.361825][T27776] ? __might_fault+0xb0/0x130 [ 1707.361851][T27776] should_fail_ex+0x414/0x560 [ 1707.361878][T27776] _copy_from_iter+0x1db/0x16f0 [ 1707.361906][T27776] ? rcu_is_watching+0x15/0xb0 [ 1707.361931][T27776] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1707.361950][T27776] ? __pfx__copy_from_iter+0x10/0x10 [ 1707.361975][T27776] ? __build_skb_around+0x257/0x3e0 [ 1707.361998][T27776] ? netlink_sendmsg+0x642/0xb30 [ 1707.362016][T27776] ? skb_put+0x11b/0x210 [ 1707.362039][T27776] netlink_sendmsg+0x6b2/0xb30 [ 1707.362066][T27776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1707.362090][T27776] ? aa_sock_msg_perm+0x94/0x160 [ 1707.362113][T27776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1707.362134][T27776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1707.362153][T27776] __sock_sendmsg+0x219/0x270 [ 1707.362180][T27776] ____sys_sendmsg+0x505/0x830 [ 1707.362205][T27776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1707.362235][T27776] ? import_iovec+0x74/0xa0 [ 1707.362308][T27776] ___sys_sendmsg+0x21f/0x2a0 [ 1707.362328][T27776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1707.362377][T27776] ? __fget_files+0x2a/0x420 [ 1707.362395][T27776] ? __fget_files+0x3a0/0x420 [ 1707.362420][T27776] __x64_sys_sendmsg+0x19b/0x260 [ 1707.362443][T27776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1707.362481][T27776] ? do_syscall_64+0xbe/0x3b0 [ 1707.362497][T27776] do_syscall_64+0xfa/0x3b0 [ 1707.362564][T27776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.362582][T27776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1707.362598][T27776] ? clear_bhb_loop+0x60/0xb0 [ 1707.362617][T27776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.362633][T27776] RIP: 0033:0x7f100198e929 [ 1707.362647][T27776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.362662][T27776] RSP: 002b:00007f10028e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1707.362679][T27776] RAX: ffffffffffffffda RBX: 00007f1001bb5fa0 RCX: 00007f100198e929 [ 1707.362690][T27776] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005 [ 1707.362699][T27776] RBP: 00007f10028e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.362709][T27776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.362719][T27776] R13: 0000000000000000 R14: 00007f1001bb5fa0 R15: 00007f1001cdfa28 [ 1707.362744][T27776] [ 1708.036595][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1708.186186][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1708.282654][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1708.340713][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.355282][ T24] usb 2-1: Product: syz [ 1708.374328][ T24] usb 2-1: Manufacturer: syz [ 1708.394933][ T24] usb 2-1: SerialNumber: syz [ 1708.420243][ T24] usb 2-1: config 0 descriptor?? [ 1708.442075][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1708.496141][T11428] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1708.726613][T25232] usb 3-1: USB disconnect, device number 99 [ 1708.747774][T11428] usb 6-1: config 0 has no interfaces? [ 1708.852038][T11428] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1708.868363][T11428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.890086][T11428] usb 6-1: Product: syz [ 1708.894618][T11428] usb 6-1: Manufacturer: syz [ 1708.935359][T11428] usb 6-1: SerialNumber: syz [ 1709.037542][T11428] usb 6-1: config 0 descriptor?? [ 1709.468763][ T24] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 1709.687371][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 1709.693777][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1709.978218][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1709.978236][ T30] audit: type=1326 audit(1750772454.749:23723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100198e929 code=0x7ffc0000 [ 1710.110185][ T30] audit: type=1326 audit(1750772454.749:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100198e929 code=0x7ffc0000 [ 1710.194804][ T30] audit: type=1326 audit(1750772454.799:23725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f100198e929 code=0x7ffc0000 [ 1710.304297][ T30] audit: type=1326 audit(1750772454.799:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f100192ab19 code=0x7ffc0000 [ 1710.449129][ T30] audit: type=1326 audit(1750772454.799:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f100192ab19 code=0x7ffc0000 [ 1710.473349][ T30] audit: type=1326 audit(1750772454.799:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f100192ab19 code=0x7ffc0000 [ 1710.496699][ T30] audit: type=1326 audit(1750772454.799:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f100192ab19 code=0x7ffc0000 [ 1710.519716][ T30] audit: type=1326 audit(1750772454.799:23730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100198e929 code=0x7ffc0000 [ 1710.549792][ T30] audit: type=1326 audit(1750772454.799:23731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100198e929 code=0x7ffc0000 [ 1710.644239][ T30] audit: type=1326 audit(1750772454.799:23732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27811 comm="syz.4.6103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f100192ab19 code=0x7ffc0000 [ 1710.721484][ T5902] usb 2-1: USB disconnect, device number 95 [ 1712.238142][T11428] usb 6-1: USB disconnect, device number 8 [ 1712.377242][T27845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.436238][T27845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.468215][T27850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.538579][T27850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.791990][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1712.912137][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1713.605985][T23514] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1713.812830][T23514] usb 6-1: config 0 has no interfaces? [ 1713.824977][T23514] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1713.868791][T23514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.904962][T27887] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1713.958539][T23514] usb 6-1: Product: syz [ 1713.964490][T23514] usb 6-1: Manufacturer: syz [ 1713.973859][T23514] usb 6-1: SerialNumber: syz [ 1714.028256][T23514] usb 6-1: config 0 descriptor?? [ 1714.369555][T27869] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.732393][T27895] x_tables: duplicate underflow at hook 1 [ 1714.776144][T27873] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1714.796506][T27873] syzkaller1: Refused to change device type [ 1714.875314][ T5902] usb 6-1: USB disconnect, device number 9 [ 1715.133371][T27908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6136'. [ 1716.403031][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1716.548378][T27939] bridge1: entered promiscuous mode [ 1716.732236][T27951] loop6: detected capacity change from 0 to 63 [ 1716.746593][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1716.769185][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.793912][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.817766][T27951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.827478][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.841867][T27951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.849940][T25232] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1716.859553][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.870170][T27957] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.878652][T27957] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.888307][ T24] usb 2-1: device descriptor read/64, error -71 [ 1716.889585][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.905001][T27957] Buffer I/O error on dev loop6, logical block 0, async page read [ 1716.986094][T25232] usb 6-1: device descriptor read/64, error -71 [ 1717.146068][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1717.219156][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1717.236143][T25232] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1717.325748][ T24] usb 2-1: device descriptor read/64, error -71 [ 1717.395967][T25232] usb 6-1: device descriptor read/64, error -71 [ 1717.456978][ T24] usb usb2-port1: attempt power cycle [ 1717.516180][T25232] usb usb6-port1: attempt power cycle [ 1717.806068][T23514] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1717.845785][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1717.857834][T25232] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1717.867025][T27989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1717.882482][ T24] usb 2-1: device descriptor read/8, error -71 [ 1717.896365][T25232] usb 6-1: device descriptor read/8, error -71 [ 1717.976203][T23514] usb 5-1: Using ep0 maxpacket: 16 [ 1717.983268][T23514] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.007916][T23514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1718.021041][T23514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1718.031377][T23514] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1718.042217][T23514] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1718.057174][T23514] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1718.083242][T23514] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1718.092650][T23514] usb 5-1: Manufacturer: syz [ 1718.107881][T23514] usb 5-1: config 0 descriptor?? [ 1718.126666][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1718.138750][T25232] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1718.168867][T25232] usb 6-1: device descriptor read/8, error -71 [ 1718.175868][ T24] usb 2-1: device descriptor read/8, error -71 [ 1718.285968][ T24] usb usb2-port1: unable to enumerate USB device [ 1718.286831][T25232] usb usb6-port1: unable to enumerate USB device [ 1718.425981][T23514] rc_core: IR keymap rc-hauppauge not found [ 1718.433216][T23514] Registered IR keymap rc-empty [ 1718.438816][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.467283][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.494622][T23514] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1718.516357][T23514] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input131 [ 1718.545383][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.555571][T27981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.571600][T27981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.576165][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.606267][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.645755][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.666201][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.719952][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.746282][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.765978][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.786525][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.805886][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1718.827554][T23514] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1718.843269][T23514] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1718.874661][T23514] usb 5-1: USB disconnect, device number 63 [ 1719.048094][ T5934] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1719.219783][ T5934] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1719.233634][ T5934] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1719.252312][ T5934] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1719.270213][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.283373][T28019] FAULT_INJECTION: forcing a failure. [ 1719.283373][T28019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.296703][T28019] CPU: 0 UID: 0 PID: 28019 Comm: syz.4.6166 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1719.296725][T28019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1719.296732][T28019] Call Trace: [ 1719.296737][T28019] [ 1719.296741][T28019] dump_stack_lvl+0x189/0x250 [ 1719.296761][T28019] ? __pfx____ratelimit+0x10/0x10 [ 1719.296776][T28019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1719.296790][T28019] ? __pfx__printk+0x10/0x10 [ 1719.296800][T28019] ? __might_fault+0xb0/0x130 [ 1719.296816][T28019] should_fail_ex+0x414/0x560 [ 1719.296831][T28019] _copy_from_iter+0x1db/0x16f0 [ 1719.296846][T28019] ? rcu_is_watching+0x15/0xb0 [ 1719.296862][T28019] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1719.296873][T28019] ? __pfx__copy_from_iter+0x10/0x10 [ 1719.296887][T28019] ? __build_skb_around+0x257/0x3e0 [ 1719.296900][T28019] ? netlink_sendmsg+0x642/0xb30 [ 1719.296910][T28019] ? skb_put+0x11b/0x210 [ 1719.296922][T28019] netlink_sendmsg+0x6b2/0xb30 [ 1719.296937][T28019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1719.296950][T28019] ? aa_sock_msg_perm+0x94/0x160 [ 1719.296963][T28019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1719.296975][T28019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1719.296986][T28019] __sock_sendmsg+0x219/0x270 [ 1719.297002][T28019] ____sys_sendmsg+0x505/0x830 [ 1719.297015][T28019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1719.297031][T28019] ? import_iovec+0x74/0xa0 [ 1719.297042][T28019] ___sys_sendmsg+0x21f/0x2a0 [ 1719.297054][T28019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1719.297083][T28019] ? __fget_files+0x2a/0x420 [ 1719.297093][T28019] ? __fget_files+0x3a0/0x420 [ 1719.297108][T28019] __x64_sys_sendmsg+0x19b/0x260 [ 1719.297121][T28019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1719.297136][T28019] ? __pfx_ksys_write+0x10/0x10 [ 1719.297144][T28019] ? rcu_is_watching+0x15/0xb0 [ 1719.297159][T28019] ? do_syscall_64+0xbe/0x3b0 [ 1719.297170][T28019] do_syscall_64+0xfa/0x3b0 [ 1719.297177][T28019] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.297190][T28019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.297199][T28019] ? clear_bhb_loop+0x60/0xb0 [ 1719.297210][T28019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.297219][T28019] RIP: 0033:0x7f100198e929 [ 1719.297237][T28019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.297245][T28019] RSP: 002b:00007f10028c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1719.297256][T28019] RAX: ffffffffffffffda RBX: 00007f1001bb6080 RCX: 00007f100198e929 [ 1719.297263][T28019] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1719.297269][T28019] RBP: 00007f10028c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.297275][T28019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.297280][T28019] R13: 0000000000000000 R14: 00007f1001bb6080 R15: 00007f1001cdfa28 [ 1719.297295][T28019] [ 1719.303823][T28012] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1719.593204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.728026][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1719.985822][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1721.231339][T28049] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6175'. [ 1721.256158][T28049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1721.457414][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1721.490778][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1721.519787][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 1721.519803][ T30] audit: type=1326 audit(1750772466.289:23913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.0.6177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30aed8e929 code=0x0 [ 1721.595852][ T24] usb 6-1: device descriptor read/64, error -71 [ 1721.596308][ T5834] usb 3-1: USB disconnect, device number 100 [ 1721.837088][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1721.852934][T28062] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6179'. [ 1721.952300][T28062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6179'. [ 1721.976093][ T24] usb 6-1: device descriptor read/64, error -71 [ 1722.035819][ T5834] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1722.087092][ T24] usb usb6-port1: attempt power cycle [ 1722.175718][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1722.455815][ T5834] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1722.510054][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1722.550567][ T24] usb 6-1: device descriptor read/8, error -71 [ 1722.596035][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1722.719321][ T5834] usb usb3-port1: attempt power cycle [ 1722.795702][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1722.817573][ T24] usb 6-1: device descriptor read/8, error -71 [ 1722.926265][ T24] usb usb6-port1: unable to enumerate USB device [ 1723.075831][ T5834] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1723.119730][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1723.376014][ T5834] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1723.422674][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1723.536723][ T5834] usb usb3-port1: unable to enumerate USB device [ 1723.685754][T23514] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1723.845960][T23514] usb 2-1: Using ep0 maxpacket: 32 [ 1723.876828][T23514] usb 2-1: config 0 has no interfaces? [ 1723.882426][T23514] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1723.891982][T23514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.904757][T23514] usb 2-1: config 0 descriptor?? [ 1724.160062][T23514] usb 2-1: USB disconnect, device number 100 [ 1724.356869][T28089] loop6: detected capacity change from 0 to 63 [ 1724.375652][T28089] buffer_io_error: 16 callbacks suppressed [ 1724.375669][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 1724.422603][T28089] Buffer I/O error on dev loop6, logical block 1, async page read [ 1724.454491][T28089] Buffer I/O error on dev loop6, logical block 2, async page read [ 1724.464140][T28089] Buffer I/O error on dev loop6, logical block 3, async page read [ 1724.473732][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.506976][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 1724.515469][T28089] Buffer I/O error on dev loop6, logical block 1, async page read [ 1724.535460][T28089] Buffer I/O error on dev loop6, logical block 2, async page read [ 1724.607606][T28089] Buffer I/O error on dev loop6, logical block 3, async page read [ 1724.616831][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 1724.629863][T28089] Buffer I/O error on dev loop6, logical block 1, async page read [ 1724.851192][T28099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6193'. [ 1725.506653][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.514417][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'. [ 1725.536532][ T30] audit: type=1326 audit(1750772470.309:23914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28117 comm="syz.2.6199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aa98e929 code=0x0 [ 1725.615879][ T5834] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1725.757341][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.786904][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 1725.789720][ T5834] usb 6-1: config 0 has no interfaces? [ 1725.794627][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1725.794657][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.794676][ T5834] usb 6-1: Product: syz [ 1725.794686][ T5834] usb 6-1: Manufacturer: syz [ 1725.794694][ T5834] usb 6-1: SerialNumber: syz [ 1725.796473][ T5834] usb 6-1: config 0 descriptor?? [ 1726.493402][T28132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1726.546284][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.877001][T28141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.906764][T28141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.024413][T28141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.063668][T28142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.097372][T28142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.148763][T28142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.171067][T28142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.375227][T28141] xfrm0: entered allmulticast mode [ 1727.391337][T28141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.407318][T28141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.836015][T23514] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1727.975948][T23514] usb 2-1: device descriptor read/64, error -71 [ 1728.120206][T28162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1728.246054][T23514] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1728.389161][T23514] usb 2-1: device descriptor read/64, error -71 [ 1728.420519][ T24] usb 6-1: USB disconnect, device number 18 [ 1728.530377][T23514] usb usb2-port1: attempt power cycle [ 1728.745703][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1728.876881][T23514] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1728.954227][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1729.076379][T23514] usb 2-1: device descriptor read/8, error -71 [ 1729.108510][ T24] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1729.150321][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.164921][ T24] usb 6-1: Product: syz [ 1729.197020][ T24] usb 6-1: Manufacturer: syz [ 1729.211556][ T24] usb 6-1: SerialNumber: syz [ 1729.279817][ T24] usb 6-1: config 0 descriptor?? [ 1729.359699][T23514] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1729.406763][T23514] usb 2-1: device descriptor read/8, error -71 [ 1729.526271][T23514] usb usb2-port1: unable to enumerate USB device [ 1729.542280][ T24] usb_8dev 6-1:0.0 can0: sending command message failed [ 1729.671446][ T24] usb_8dev 6-1:0.0 can0: can't get firmware version [ 1729.757981][ T24] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 1729.858000][ T24] usb 6-1: USB disconnect, device number 19 [ 1729.961841][T28194] batman_adv: batadv0: Adding interface: dummy0 [ 1729.968411][T28194] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.994929][T28194] batman_adv: batadv0: Interface activated: dummy0 [ 1730.229518][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.236155][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.565765][ T5934] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1730.745835][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1730.754628][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.777000][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.798604][ T5934] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.800024][T28201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6220'. [ 1730.830120][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.842286][ T5934] usb 6-1: Product: syz [ 1730.851464][ T5934] usb 6-1: Manufacturer: syz [ 1730.856868][ T5934] usb 6-1: SerialNumber: syz [ 1731.284505][T28197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6219'. [ 1731.339886][T28209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6219'. [ 1731.578596][ T5934] usb 6-1: 0:2 : does not exist [ 1731.758692][ T5887] net_ratelimit: 8 callbacks suppressed [ 1731.758706][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.772832][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1731.826105][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.840010][ T5934] usb 6-1: USB disconnect, device number 20 [ 1731.947616][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1731.977041][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1732.001100][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1732.032913][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.131869][ T24] usb 2-1: config 0 descriptor?? [ 1732.176379][T28218] ptrace attach of "./syz-executor exec"[26266] was attempted by "./syz-executor exec"[28218] [ 1732.797570][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.428915][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.840631][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.972225][ T5931] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1734.066488][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.329783][ T5931] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1734.349238][T28241] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1734.388520][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.391586][T28241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1734.556801][ T5931] usb 3-1: config 0 descriptor?? [ 1734.653859][ T5931] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1734.765053][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1734.806033][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1734.814883][T28243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.846588][ T24] usb 2-1: USB disconnect, device number 105 [ 1734.875905][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.182343][T28239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.198499][T28239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.350295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.660948][T28256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6238'. [ 1736.081733][T28271] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1736.857692][T28279] FAULT_INJECTION: forcing a failure. [ 1736.857692][T28279] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.871628][T28279] CPU: 1 UID: 0 PID: 28279 Comm: syz.1.6245 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1736.871655][T28279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1736.871666][T28279] Call Trace: [ 1736.871674][T28279] [ 1736.871681][T28279] dump_stack_lvl+0x189/0x250 [ 1736.871711][T28279] ? __pfx____ratelimit+0x10/0x10 [ 1736.871735][T28279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.871760][T28279] ? __pfx__printk+0x10/0x10 [ 1736.871785][T28279] ? ref_tracker_alloc+0x318/0x460 [ 1736.871809][T28279] should_fail_ex+0x414/0x560 [ 1736.871834][T28279] should_failslab+0xa8/0x100 [ 1736.871854][T28279] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1736.871878][T28279] ? skb_clone+0x212/0x3a0 [ 1736.871911][T28279] skb_clone+0x212/0x3a0 [ 1736.871934][T28279] __netlink_deliver_tap+0x404/0x850 [ 1736.871965][T28279] ? netlink_deliver_tap+0x2e/0x1b0 [ 1736.871985][T28279] netlink_deliver_tap+0x19c/0x1b0 [ 1736.872006][T28279] netlink_unicast+0x72f/0x8d0 [ 1736.872034][T28279] netlink_sendmsg+0x805/0xb30 [ 1736.872062][T28279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1736.872084][T28279] ? aa_sock_msg_perm+0x94/0x160 [ 1736.872107][T28279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1736.872128][T28279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1736.872147][T28279] __sock_sendmsg+0x219/0x270 [ 1736.872174][T28279] ____sys_sendmsg+0x52d/0x830 [ 1736.872199][T28279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1736.872228][T28279] ? import_iovec+0x74/0xa0 [ 1736.872248][T28279] ___sys_sendmsg+0x21f/0x2a0 [ 1736.872271][T28279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1736.872334][T28279] ? __might_fault+0xb0/0x130 [ 1736.872355][T28279] __sys_sendmmsg+0x227/0x430 [ 1736.872381][T28279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1736.872398][T28279] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1736.872448][T28279] ? ksys_write+0x22a/0x250 [ 1736.872467][T28279] ? __pfx_ksys_write+0x10/0x10 [ 1736.872490][T28279] __x64_sys_sendmmsg+0xa0/0xc0 [ 1736.872511][T28279] do_syscall_64+0xfa/0x3b0 [ 1736.872528][T28279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.872544][T28279] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1736.872560][T28279] ? clear_bhb_loop+0x60/0xb0 [ 1736.872580][T28279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.872596][T28279] RIP: 0033:0x7f2657d8e929 [ 1736.872613][T28279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.872628][T28279] RSP: 002b:00007f2658c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1736.872645][T28279] RAX: ffffffffffffffda RBX: 00007f2657fb5fa0 RCX: 00007f2657d8e929 [ 1736.872657][T28279] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1736.872669][T28279] RBP: 00007f2658c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.872680][T28279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.872690][T28279] R13: 0000000000000000 R14: 00007f2657fb5fa0 R15: 00007f26580dfa28 [ 1736.872718][T28279] [ 1737.226306][T23514] net_ratelimit: 5 callbacks suppressed [ 1737.226323][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.267197][ T5931] gp8psk: usb in 128 operation failed. [ 1737.400041][ T5931] gp8psk: usb in 137 operation failed. [ 1737.405571][ T5931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1737.416027][ T5931] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1737.497859][ T5902] usb 3-1: USB disconnect, device number 105 [ 1737.580212][T28289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.581766][T28289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.582057][T28289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.592082][T28288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.592304][T28288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.601062][T28287] hub 9-0:1.0: USB hub found [ 1737.605908][T28287] hub 9-0:1.0: 1 port detected [ 1737.665953][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6251'. [ 1737.685365][T28291] netlink: 'syz.5.6250': attribute type 10 has an invalid length. [ 1737.743931][T28291] team0: Port device dummy0 added [ 1737.758613][T28296] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6253'. [ 1738.347069][T28315] netlink: 'syz.2.6258': attribute type 10 has an invalid length. [ 1738.357267][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.656115][ T5902] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1738.834106][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1738.844172][ T5902] usb 3-1: config 0 has no interfaces? [ 1738.857878][ T5902] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 1738.867726][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.876673][ T5902] usb 3-1: Product: syz [ 1739.023960][ T5902] usb 3-1: Manufacturer: syz [ 1739.029704][ T5902] usb 3-1: SerialNumber: syz [ 1739.039267][ T5902] usb 3-1: config 0 descriptor?? [ 1739.411237][T28314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1739.425300][T28314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1739.448199][T28314] ipvlan0: entered promiscuous mode [ 1739.456348][T28314] ipvlan0: left promiscuous mode [ 1739.466223][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.746023][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.875118][T28332] FAULT_INJECTION: forcing a failure. [ 1739.875118][T28332] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.915233][T28332] CPU: 0 UID: 0 PID: 28332 Comm: syz.1.6265 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1739.915260][T28332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1739.915271][T28332] Call Trace: [ 1739.915279][T28332] [ 1739.915288][T28332] dump_stack_lvl+0x189/0x250 [ 1739.915319][T28332] ? __pfx____ratelimit+0x10/0x10 [ 1739.915344][T28332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1739.915369][T28332] ? __pfx__printk+0x10/0x10 [ 1739.915393][T28332] ? __pfx___might_resched+0x10/0x10 [ 1739.915423][T28332] ? fs_reclaim_acquire+0x7d/0x100 [ 1739.915448][T28332] should_fail_ex+0x414/0x560 [ 1739.915474][T28332] should_failslab+0xa8/0x100 [ 1739.915494][T28332] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1739.915512][T28332] ? __alloc_skb+0x112/0x2d0 [ 1739.915535][T28332] __alloc_skb+0x112/0x2d0 [ 1739.915557][T28332] netlink_ack+0x146/0xa50 [ 1739.915574][T28332] ? kasan_quarantine_put+0xdd/0x220 [ 1739.915605][T28332] ? kfree+0x18e/0x440 [ 1739.915630][T28332] nfnetlink_rcv+0x2290/0x2520 [ 1739.915678][T28332] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1739.915717][T28332] ? ref_tracker_free+0x63a/0x7d0 [ 1739.915767][T28332] ? __netlink_deliver_tap+0x807/0x850 [ 1739.915800][T28332] ? netlink_deliver_tap+0x2e/0x1b0 [ 1739.915817][T28332] ? netlink_deliver_tap+0x2e/0x1b0 [ 1739.915841][T28332] netlink_unicast+0x75b/0x8d0 [ 1739.915869][T28332] netlink_sendmsg+0x805/0xb30 [ 1739.915897][T28332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.915924][T28332] ? aa_sock_msg_perm+0x94/0x160 [ 1739.915948][T28332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1739.915968][T28332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.915986][T28332] __sock_sendmsg+0x219/0x270 [ 1739.916014][T28332] ____sys_sendmsg+0x505/0x830 [ 1739.916040][T28332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1739.916073][T28332] ? import_iovec+0x74/0xa0 [ 1739.916092][T28332] ___sys_sendmsg+0x21f/0x2a0 [ 1739.916115][T28332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1739.916171][T28332] ? __fget_files+0x2a/0x420 [ 1739.916188][T28332] ? __fget_files+0x3a0/0x420 [ 1739.916217][T28332] __x64_sys_sendmsg+0x19b/0x260 [ 1739.916240][T28332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1739.916268][T28332] ? __pfx_ksys_write+0x10/0x10 [ 1739.916281][T28332] ? rcu_is_watching+0x15/0xb0 [ 1739.916307][T28332] ? do_syscall_64+0xbe/0x3b0 [ 1739.916323][T28332] do_syscall_64+0xfa/0x3b0 [ 1739.916336][T28332] ? lockdep_hardirqs_on+0x9c/0x150 [ 1739.916357][T28332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.916372][T28332] ? clear_bhb_loop+0x60/0xb0 [ 1739.916390][T28332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.916406][T28332] RIP: 0033:0x7f2657d8e929 [ 1739.916429][T28332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.916444][T28332] RSP: 002b:00007f2658c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.916464][T28332] RAX: ffffffffffffffda RBX: 00007f2657fb5fa0 RCX: 00007f2657d8e929 [ 1739.916477][T28332] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1739.916488][T28332] RBP: 00007f2658c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.916498][T28332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.916508][T28332] R13: 0000000000000000 R14: 00007f2657fb5fa0 R15: 00007f26580dfa28 [ 1739.916534][T28332] [ 1740.237621][ C0] vkms_vblank_simulate: vblank timer overrun [ 1740.635795][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.972995][T28338] dvmrp3: entered allmulticast mode [ 1741.403767][ T24] usb 3-1: USB disconnect, device number 106 [ 1742.604143][T28376] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1742.708824][T26263] Bluetooth: hci3: command 0x0406 tx timeout [ 1742.715497][T23514] net_ratelimit: 1 callbacks suppressed [ 1742.715508][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.804368][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.521017][T28396] binder: 28395:28396 ioctl 4040ae79 200000000140 returned -22 [ 1743.536092][ T5887] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1743.667005][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.695801][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1743.702413][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.715070][ T5887] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1743.732662][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.740822][ T5887] usb 6-1: Product: syz [ 1743.746331][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.754706][ T5887] usb 6-1: Manufacturer: syz [ 1743.770566][ T5887] usb 6-1: SerialNumber: syz [ 1743.806328][ T5887] usb 6-1: config 0 descriptor?? [ 1743.824623][T28400] ALSA: mixer_oss: invalid index 40000 [ 1744.922579][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.092823][T28419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1745.283798][T28423] input: syz0 as /devices/virtual/input/input133 [ 1745.598057][T23514] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1745.710113][T28435] binder: 28433:28435 ioctl 4040ae79 200000000140 returned -22 [ 1745.788106][T23514] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1745.809532][T23514] usb 2-1: not running at top speed; connect to a high speed hub [ 1745.821917][T23514] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 1745.831062][T23514] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.841361][T23514] usb 2-1: config 5 has no interface number 0 [ 1745.890435][T23514] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1745.915918][T23514] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.933376][T28446] FAULT_INJECTION: forcing a failure. [ 1745.933376][T28446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.955428][T23514] usb 2-1: config 5 interface 246 has no altsetting 0 [ 1745.962866][T28446] CPU: 1 UID: 0 PID: 28446 Comm: syz.0.6302 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1745.962890][T28446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1745.962900][T28446] Call Trace: [ 1745.962907][T28446] [ 1745.962916][T28446] dump_stack_lvl+0x189/0x250 [ 1745.962946][T28446] ? __pfx____ratelimit+0x10/0x10 [ 1745.962974][T28446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1745.962999][T28446] ? __pfx__printk+0x10/0x10 [ 1745.963017][T28446] ? __might_fault+0xb0/0x130 [ 1745.963045][T28446] should_fail_ex+0x414/0x560 [ 1745.963071][T28446] _copy_from_user+0x2d/0xb0 [ 1745.963089][T28446] ___sys_sendmsg+0x158/0x2a0 [ 1745.963113][T28446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1745.963176][T28446] ? __fget_files+0x2a/0x420 [ 1745.963194][T28446] ? __fget_files+0x3a0/0x420 [ 1745.963221][T28446] __x64_sys_sendmsg+0x19b/0x260 [ 1745.963245][T28446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1745.963274][T28446] ? __pfx_ksys_write+0x10/0x10 [ 1745.963288][T28446] ? rcu_is_watching+0x15/0xb0 [ 1745.963317][T28446] ? do_syscall_64+0xbe/0x3b0 [ 1745.963336][T28446] do_syscall_64+0xfa/0x3b0 [ 1745.963350][T28446] ? lockdep_hardirqs_on+0x9c/0x150 [ 1745.963372][T28446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.963388][T28446] ? clear_bhb_loop+0x60/0xb0 [ 1745.963409][T28446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.963426][T28446] RIP: 0033:0x7f30aed8e929 [ 1745.963442][T28446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1745.963457][T28446] RSP: 002b:00007f30afcc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.963475][T28446] RAX: ffffffffffffffda RBX: 00007f30aefb5fa0 RCX: 00007f30aed8e929 [ 1745.963488][T28446] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1745.963499][T28446] RBP: 00007f30afcc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.963509][T28446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.963519][T28446] R13: 0000000000000000 R14: 00007f30aefb5fa0 R15: 00007f30af0dfa28 [ 1745.963547][T28446] [ 1746.174894][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.226858][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.417734][T23514] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1746.427378][T23514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.435488][T23514] usb 2-1: Product: syz [ 1746.440681][T23514] usb 2-1: Manufacturer: syz [ 1746.445374][T23514] usb 2-1: SerialNumber: syz [ 1746.533612][ T5834] usb 6-1: USB disconnect, device number 21 [ 1746.705876][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.866453][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.925559][T23514] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1746.928895][T24516] usb 2-1: Failed to submit usb control message: -71 [ 1746.965492][T23514] usb 2-1: USB disconnect, device number 106 [ 1746.975987][ T5834] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1747.002389][T24516] usb 2-1: unable to send the bmi data to the device: -71 [ 1747.012959][T24516] usb 2-1: unable to get target info from device [ 1747.035329][T24516] usb 2-1: could not get target info (-71) [ 1747.062769][T24516] usb 2-1: could not probe fw (-71) [ 1747.144802][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 1747.365756][T26263] Bluetooth: hci3: command 0x0406 tx timeout [ 1747.373743][ T5934] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1747.576926][ T5834] usb 6-1: config 0 has no interfaces? [ 1747.985309][T26263] Bluetooth: hci5: command 0x0406 tx timeout [ 1748.008700][ T5834] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1748.025582][ T5934] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1748.094929][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.438311][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.623382][ T5834] usb 6-1: Product: syz [ 1748.655911][ T5834] usb 6-1: Manufacturer: syz [ 1748.660548][ T5834] usb 6-1: SerialNumber: syz [ 1748.758847][ T5834] usb 6-1: config 0 descriptor?? [ 1749.416762][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.501978][T28477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6313'. [ 1749.703010][T28483] binder: 28481:28483 ioctl 4040ae79 200000000140 returned -22 [ 1750.046014][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.145766][ T5834] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1750.685943][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 1753.417271][ T5934] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1753.423405][ T5934] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1753.431500][T16181] Bluetooth: hci5: command 0x0406 tx timeout [ 1754.044775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.995824][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1756.216385][T16571] usb 6-1: USB disconnect, device number 22 [ 1756.266911][ T5834] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1756.274537][ T5834] usb 3-1: can't read configurations, error -71 [ 1756.592866][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.605558][T28500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.614644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.000492][T27595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.012375][ T0] sched: DL replenish lagged too much [ 1757.106849][T28505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.127039][ T5834] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1757.746081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.945910][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 1763.394811][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.518304][T28505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.605793][ T5834] usb 3-1: device descriptor read/all, error -71 [ 1763.995866][ T5834] usb usb3-port1: attempt power cycle [ 1764.003631][T28515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6321'. [ 1766.733664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.229098][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.336012][T28505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.259946][T16571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.268455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.630854][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.639556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.305913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.842887][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.970362][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.297864][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.315945][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.264794][T16571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.892255][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.969099][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.062756][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.515823][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.410364][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.532500][T27593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.575809][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.594880][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.512962][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.556261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.562608][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.626252][T26263] Bluetooth: hci1: command 0x0406 tx timeout [ 1792.647718][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.248941][T24523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.266051][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.706312][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.884747][T24518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.183272][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.418479][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.430511][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.576701][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.430937][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.439358][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.366062][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.725909][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.415863][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.329075][T28493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.816070][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.865985][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.896372][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.590287][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.928193][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.626502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.637700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.665733][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.674043][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.687456][T24522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.266149][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.555647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.587060][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.626479][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.386438][T24524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.401231][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.435293][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.920693][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.988358][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.505965][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.450407][T28493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.120881][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.191702][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.383032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.425915][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.186205][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.978174][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.983915][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.985961][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.596263][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.122281][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.130851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.666029][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.025579][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.068737][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.540905][T28493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.786067][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.134374][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.487206][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.505967][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.509205][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.677505][T28493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.204041][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.225934][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.266377][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.505300][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.548278][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.986442][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.994700][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.898304][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.908457][T23514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.934784][T24514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.948133][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.960447][T28543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.384212][T28493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.989102][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.848074][T28526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.130750][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.148838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.671472][T24516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.912774][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.866185][ T31] INFO: task kworker/0:5:5902 blocked for more than 142 seconds. [ 1890.873967][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 1890.898775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.925983][ T31] task:kworker/0:5 state:D stack:18664 pid:5902 tgid:5902 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1890.975107][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1890.982140][ T31] Call Trace: [ 1890.985440][ T31] [ 1891.011424][ T31] __schedule+0x16f5/0x4d00 [ 1891.016360][ T31] ? schedule+0x165/0x360 [ 1891.020718][ T31] ? __pfx___schedule+0x10/0x10 [ 1891.063162][ T31] ? schedule+0x91/0x360 [ 1891.081313][ T31] schedule+0x165/0x360 [ 1891.085522][ T31] schedule_preempt_disabled+0x13/0x30 [ 1891.101873][ T31] __mutex_lock+0x724/0xe80 [ 1891.121453][ T31] ? look_up_lock_class+0x74/0x170 [ 1891.133979][ T31] ? __mutex_lock+0x51b/0xe80 [ 1891.139280][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1891.145556][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1891.182697][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1891.203626][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1891.215545][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1891.221815][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1891.241297][ T31] process_scheduled_works+0xae1/0x17b0 [ 1891.261521][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1891.282586][ T31] worker_thread+0x8a0/0xda0 [ 1891.292195][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1891.301002][ T31] ? __kthread_parkme+0x7b/0x200 [ 1891.310019][ T31] kthread+0x70e/0x8a0 [ 1891.314124][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1891.322548][ T31] ? __pfx_kthread+0x10/0x10 [ 1891.330992][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1891.338814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1891.344045][ T31] ? __pfx_kthread+0x10/0x10 [ 1891.353493][ T31] ret_from_fork+0x3fc/0x770 [ 1891.360651][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1891.369666][ T31] ? __switch_to_asm+0x39/0x70 [ 1891.374462][ T31] ? __switch_to_asm+0x33/0x70 [ 1891.384652][ T31] ? __pfx_kthread+0x10/0x10 [ 1891.395299][ T31] ret_from_fork_asm+0x1a/0x30 [ 1891.403806][ T31] [ 1891.411070][ T31] [ 1891.411070][ T31] Showing all locks held in the system: [ 1891.433324][ T31] 4 locks held by kworker/0:0/9: [ 1891.439732][ T31] 3 locks held by kworker/1:0/24: [ 1891.444782][ T31] #0: ffff888024529148 ((wq_completion)wg-kex-wg0#30){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.462458][ T31] #1: ffffc900001e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.533915][ T31] #2: ffff88807f9cacc0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1891.550972][ T31] 1 lock held by khungtaskd/31: [ 1891.557256][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1891.572874][ T31] 2 locks held by getty/5596: [ 1891.578591][ T31] #0: ffff88814c5030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1891.593896][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1891.605215][ T31] 3 locks held by kworker/0:4/5834: [ 1891.615985][ T31] 3 locks held by kworker/0:5/5902: [ 1891.621202][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.646968][ T31] #1: ffffc9000469fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.667629][ T31] #2: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1891.683316][ T31] 7 locks held by kworker/0:8/5934: [ 1891.690928][ T31] 3 locks held by kworker/u8:9/9466: [ 1891.700036][ T31] #0: ffff88803029e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.714483][ T31] #1: ffffc90005777bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.734309][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1891.755992][ T31] 3 locks held by kworker/1:2/11428: [ 1891.761853][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.783747][ T31] #1: ffffc9001cc3fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.795246][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1891.812224][ T31] 3 locks held by kworker/u8:18/15962: [ 1891.818022][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.836021][ T31] #1: ffffc9001c59fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.853784][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1891.868005][ T31] 3 locks held by kworker/u8:19/15963: [ 1891.873488][ T31] #0: ffff88801c3fb148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.892606][ T31] #1: ffffc9001c58fbc0 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.914021][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb6/0x630 [ 1891.925206][ T31] 4 locks held by kworker/u8:12/24523: [ 1891.935910][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1891.952472][ T31] #1: ffffc9000406fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1891.963511][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1891.989392][ T31] #3: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1892.006655][ T31] 2 locks held by kworker/0:1/25232: [ 1892.011973][ T31] 1 lock held by syz-executor/26896: [ 1892.021894][ T31] #0: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1892.034433][ T31] 1 lock held by syz.0.6306/28459: [ 1892.044221][ T31] #0: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1892.056187][ T31] 2 locks held by kworker/0:6/28493: [ 1892.061501][ T31] 2 locks held by kworker/0:7/28505: [ 1892.077130][ T31] 1 lock held by syz.5.6321/28515: [ 1892.082266][ T31] #0: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1892.104506][ T31] 1 lock held by syz.4.6320/28519: [ 1892.111293][ T31] #0: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1892.127529][ T31] 2 locks held by syz-executor/28518: [ 1892.132922][ T31] #0: ffff888058a45918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1892.150087][ T31] #1: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1892.162717][ T31] 2 locks held by kworker/0:9/28526: [ 1892.172662][ T31] 2 locks held by syz-executor/28527: [ 1892.180547][ T31] #0: ffff8880676ba918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1892.201218][ T31] #1: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1892.217065][ T31] 2 locks held by syz-executor/28530: [ 1892.222466][ T31] #0: ffff88807b9d5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1892.238936][ T31] #1: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1892.252107][ T31] 2 locks held by syz-executor/28531: [ 1892.262134][ T31] #0: ffff88807f558118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1892.276140][ T31] #1: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1892.292244][ T31] 2 locks held by kworker/0:10/28537: [ 1892.299781][ T31] 1 lock held by syz.2.6329/28539: [ 1892.304930][ T31] #0: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1892.323769][ T31] 2 locks held by syz-executor/28545: [ 1892.335385][ T31] #0: ffff88807a1cf118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1892.351688][ T31] #1: ffffffff8f7eaf28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1892.362359][ T31] 2 locks held by kworker/0:11/28546: [ 1892.373707][ T31] 2 locks held by kworker/0:13/28551: [ 1892.379365][ T31] 2 locks held by kworker/0:14/28552: [ 1892.384822][ T31] [ 1892.394900][ T31] ============================================= [ 1892.394900][ T31] [ 1892.404083][ T31] NMI backtrace for cpu 1 [ 1892.404101][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1892.404128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1892.404138][ T31] Call Trace: [ 1892.404145][ T31] [ 1892.404153][ T31] dump_stack_lvl+0x189/0x250 [ 1892.404180][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1892.404202][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1892.404227][ T31] ? __pfx__printk+0x10/0x10 [ 1892.404256][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1892.404280][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1892.404298][ T31] ? _printk+0xcf/0x120 [ 1892.404320][ T31] ? __pfx__printk+0x10/0x10 [ 1892.404340][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1892.404363][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1892.404385][ T31] watchdog+0xfee/0x1030 [ 1892.404408][ T31] ? watchdog+0x1de/0x1030 [ 1892.404436][ T31] kthread+0x70e/0x8a0 [ 1892.404459][ T31] ? __pfx_watchdog+0x10/0x10 [ 1892.404479][ T31] ? __pfx_kthread+0x10/0x10 [ 1892.404499][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1892.404521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1892.404540][ T31] ? __pfx_kthread+0x10/0x10 [ 1892.404560][ T31] ret_from_fork+0x3fc/0x770 [ 1892.404585][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1892.404612][ T31] ? __switch_to_asm+0x39/0x70 [ 1892.404629][ T31] ? __switch_to_asm+0x33/0x70 [ 1892.404644][ T31] ? __pfx_kthread+0x10/0x10 [ 1892.404664][ T31] ret_from_fork_asm+0x1a/0x30 [ 1892.404696][ T31] [ 1892.404703][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1892.564469][ C0] NMI backtrace for cpu 0 [ 1892.564485][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1892.564505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1892.564517][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1892.564538][ C0] RIP: 0010:mark_lock+0x3e/0x190 [ 1892.564563][ C0] Code: 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 e4 51 06 12 73 10 <48> 69 c0 c8 00 00 00 48 8d 88 30 a3 45 93 eb 48 83 3d 2b e1 09 18 [ 1892.564577][ C0] RSP: 0018:ffffc90000007a78 EFLAGS: 00000003 [ 1892.564590][ C0] RAX: 000000000000021a RBX: 0000000000000002 RCX: 0000000000000002 [ 1892.564602][ C0] RDX: 0000000000000002 RSI: ffff88801d2a8af0 RDI: ffff88801d2a8000 [ 1892.564613][ C0] RBP: 0000000000000004 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 1892.564624][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: ffff88801d2a8af0 [ 1892.564637][ C0] R13: dffffc0000000000 R14: ffff88801d2a8af0 R15: 0000000000000000 [ 1892.564648][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1892.564662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.564673][ C0] CR2: 0000557c4fab3240 CR3: 000000003e5ec000 CR4: 00000000003526f0 [ 1892.564688][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1892.564697][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1892.564708][ C0] Call Trace: [ 1892.564715][ C0] [ 1892.564724][ C0] lockdep_hardirqs_on_prepare+0x129/0x2a0 [ 1892.564747][ C0] trace_hardirqs_on+0x28/0x40 [ 1892.564766][ C0] _raw_spin_unlock_irq+0x23/0x50 [ 1892.564786][ C0] ? process_backlog+0x2d5/0x14f0 [ 1892.564801][ C0] process_backlog+0xf4f/0x14f0 [ 1892.564816][ C0] ? __lock_acquire+0xab9/0xd20 [ 1892.564841][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1892.564860][ C0] __napi_poll+0xc4/0x480 [ 1892.564881][ C0] ? net_rx_action+0x46d/0xe30 [ 1892.564897][ C0] net_rx_action+0x707/0xe30 [ 1892.564912][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1892.564937][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1892.564965][ C0] handle_softirqs+0x286/0x870 [ 1892.564989][ C0] ? do_softirq+0xec/0x180 [ 1892.565012][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1892.565035][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 1892.565051][ C0] do_softirq+0xec/0x180 [ 1892.565071][ C0] [ 1892.565077][ C0] [ 1892.565084][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1892.565109][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1892.565130][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1892.565153][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1892.565174][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1892.565196][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1892.565217][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 1892.565233][ C0] ? neigh_periodic_work+0xb41/0xd60 [ 1892.565249][ C0] neigh_periodic_work+0xb41/0xd60 [ 1892.565267][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1892.565290][ C0] process_scheduled_works+0xae1/0x17b0 [ 1892.565322][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1892.565350][ C0] worker_thread+0x8a0/0xda0 [ 1892.565382][ C0] kthread+0x70e/0x8a0 [ 1892.565399][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1892.565421][ C0] ? __pfx_kthread+0x10/0x10 [ 1892.565438][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1892.565457][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1892.565477][ C0] ? __pfx_kthread+0x10/0x10 [ 1892.565494][ C0] ret_from_fork+0x3fc/0x770 [ 1892.565515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1892.565538][ C0] ? __switch_to_asm+0x39/0x70 [ 1892.565553][ C0] ? __switch_to_asm+0x33/0x70 [ 1892.565568][ C0] ? __pfx_kthread+0x10/0x10 [ 1892.565588][ C0] ret_from_fork_asm+0x1a/0x30 [ 1892.565607][ C0] [ 1892.943960][T24516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.982408][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1892.989292][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1893.001099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1893.011338][ T31] Call Trace: [ 1893.014657][ T31] [ 1893.017592][ T31] dump_stack_lvl+0x99/0x250 [ 1893.022202][ T31] ? __asan_memcpy+0x40/0x70 [ 1893.026807][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1893.032030][ T31] ? __pfx__printk+0x10/0x10 [ 1893.036645][ T31] panic+0x2db/0x790 [ 1893.040650][ T31] ? __pfx_panic+0x10/0x10 [ 1893.045078][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1893.049848][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1893.055675][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1893.061071][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1893.067243][ T31] watchdog+0x102d/0x1030 [ 1893.071587][ T31] ? watchdog+0x1de/0x1030 [ 1893.076032][ T31] kthread+0x70e/0x8a0 [ 1893.080118][ T31] ? __pfx_watchdog+0x10/0x10 [ 1893.084806][ T31] ? __pfx_kthread+0x10/0x10 [ 1893.089411][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1893.094637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.099852][ T31] ? __pfx_kthread+0x10/0x10 [ 1893.104449][ T31] ret_from_fork+0x3fc/0x770 [ 1893.109060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1893.114188][ T31] ? __switch_to_asm+0x39/0x70 [ 1893.118958][ T31] ? __switch_to_asm+0x33/0x70 [ 1893.123733][ T31] ? __pfx_kthread+0x10/0x10 [ 1893.128332][ T31] ret_from_fork_asm+0x1a/0x30 [ 1893.133113][ T31] [ 1893.136423][ T31] Kernel Offset: disabled [ 1893.140740][ T31] Rebooting in 86400 seconds..