last executing test programs: 18m43.653295792s ago: executing program 1 (id=1414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18m43.652406174s ago: executing program 1 (id=1415): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06", 0x11) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) listen(0xffffffffffffffff, 0x7ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000800)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xfb, "6cd50cfebcc69a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001800)={{r3, 0x7, 0x2, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0xffffb167, 0xc, 0x8, 0x6, 0x9, 0x3, 0x5}}) 18m43.476198899s ago: executing program 1 (id=1417): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=""/17, 0x11}, 0x3}], 0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) r4 = memfd_secret(0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd26, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0xffffffffffffff72, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 18m43.23306178s ago: executing program 1 (id=1418): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x5895d000) socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000a00)={0x20, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 18m40.895059957s ago: executing program 1 (id=1429): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x1, 'gretap0\x00', {}, 0xec1a}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) 18m40.58421741s ago: executing program 1 (id=1433): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000100)={@local, @remote}) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) 18m39.984634375s ago: executing program 32 (id=1433): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000100)={@local, @remote}) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) 5m44.961968145s ago: executing program 3 (id=4723): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x20, 0x24, 0x2, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x0, [@typed={0x4}]}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x5}]}, 0x20}], 0x1}, 0x4000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) socket$inet6(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r7 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000140)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd07e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0xe503, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r13, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0xa8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4040094) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r14, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r15, 0x0, 0x0, r16], [0x2b8]}) close_range(r12, r1, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) 5m43.114908953s ago: executing program 3 (id=4728): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400980, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff80099070, 0x0, 0x0, 0x5, 0x100000}}, 0x50) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x81, 0x0, '\x00', [@padn]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000200)={0xa0000004}) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x9, 0x4) poll(&(0x7f0000000300)=[{r3, 0x40}], 0x1, 0x8) r7 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x40000007, 0x80e01) ioctl$VIDIOC_SUBDEV_G_FMT(r7, 0xc0585604, &(0x7f0000000200)={0x1, 0x0, {0xfffff982, 0x8, 0x1009, 0x4, 0x5, 0x4, 0x0, 0x4}}) lsetxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)=@known='system.advise\x00', 0x0, 0x0, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) vmsplice(r8, &(0x7f0000000040), 0x100000000000000c, 0x6) syz_fuse_handle_req(r8, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0xb5, {0x1, 0x0, 0x8001, 0x0, 0xffffffff, 0x2, {0x0, 0xe, 0x0, 0x0, 0xe77, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xff, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 5m42.11801474s ago: executing program 3 (id=4732): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r3, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0xd05a, 0x0, 0x0, 0x313}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000123}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x1) r9 = eventfd2(0x0, 0x80801) readv(r9, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 5m40.200036582s ago: executing program 3 (id=4740): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 5m39.55099453s ago: executing program 3 (id=4744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x2, 0x200, 0x81, 0x2, 0x8, 0x101, 0x6}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 5m39.302268106s ago: executing program 3 (id=4746): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18008400000000008400000007000000100000000000000030"], 0x48, 0x48d5}, 0x8050) 5m38.798494657s ago: executing program 33 (id=4746): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18008400000000008400000007000000100000000000000030"], 0x48, 0x48d5}, 0x8050) 4m25.664163025s ago: executing program 0 (id=5072): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "d017a35a"}]}}, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000200)=0x2000000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xffff7ffd, 0x10100, 0xffffffff, 0x1a7}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {0x4, 0xa, 0x1, 0xb5d}, 0x29, [0x4, 0x7f, 0xfffffff2, 0xff, 0x3, 0x4, 0x3, 0x7, 0x8, 0x1, 0x1, 0xbc, 0x10001, 0x2, 0x1, 0x2, 0x5, 0x4, 0x8, 0x4ce, 0x9059, 0x9, 0x84, 0x8, 0x7, 0x5, 0xffffff01, 0x0, 0x8001, 0x1, 0xff, 0x40, 0x9, 0x1007, 0x0, 0xc, 0xfff, 0xa, 0x8000, 0x81, 0x1c, 0x6, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0x2007, 0x6, 0x2, 0x1, 0x6, 0x200, 0x6, 0x8, 0x6, 0x2000, 0x9, 0x8, 0x1, 0x1, 0x3, 0x0, 0x6], [0x7ff, 0x1c3, 0xfffffff7, 0x5, 0x69b, 0x2, 0x6, 0xffff, 0x34, 0x2, 0x6, 0x9, 0x5, 0x1, 0x4, 0x8000000, 0xa, 0x1000, 0x0, 0x0, 0x2, 0x7, 0x5, 0x8, 0x9, 0x7c43, 0x7fff, 0x100, 0xe12, 0x0, 0x37, 0x3, 0xa, 0x200, 0x6, 0x3, 0x5, 0x7, 0x1, 0x80, 0x4, 0xffffffff, 0xffffffff, 0x8, 0x1, 0x52f, 0x10, 0x7, 0x46b, 0xb, 0x2, 0x9, 0x3, 0x1ff, 0x2, 0x6, 0xeb1e, 0x60e, 0x741d, 0x7ff, 0x6, 0x5, 0x1, 0x5], [0x4, 0xc2, 0x4, 0x401, 0x101, 0x3, 0x1000, 0x70, 0xaff6, 0x6, 0x10000, 0x3, 0x200, 0x81, 0x2, 0x0, 0x74e, 0x5, 0x5, 0x1, 0x216a, 0x10000, 0x9, 0x1, 0x8, 0x5, 0x3, 0x7, 0x3, 0xfd3b, 0x80, 0xe, 0x401, 0x0, 0xe, 0x8, 0x0, 0x7f, 0x2, 0x4, 0x9, 0x0, 0xd, 0x6, 0x5, 0x100, 0xf, 0x6, 0x4366b5a2, 0x6, 0x8, 0x3, 0x8, 0x9, 0x88b, 0xffffa1e1, 0x8, 0x10, 0x7, 0x0, 0xf, 0x6, 0x7], [0x2, 0x8, 0x7, 0x0, 0x3f, 0x7, 0x217b215b, 0x100, 0xffffffff, 0x0, 0x400, 0x7, 0x9, 0xffffffff, 0x7fffffff, 0x7, 0x8a2f, 0x1, 0x7fffffff, 0x0, 0x3, 0xf, 0x86, 0xbb9, 0x4, 0x9, 0x7, 0x7ff, 0x118, 0x1f9, 0x7356, 0x8, 0x3ff, 0x30e, 0x7fffffff, 0x8, 0x400, 0x0, 0x1, 0xc, 0xa, 0x27, 0x5, 0x9, 0x2, 0x6, 0x8, 0x400, 0xec1, 0xfffff801, 0x5, 0x3ff, 0x6, 0xf, 0x2, 0xb, 0xf9a, 0x4, 0xd94, 0xfffffffb, 0x3ff, 0x7, 0x1c5f, 0x3]}, 0x45c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r8, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x800) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f0000000280)={'wlan0\x00'}) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xcccc9000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x25000, 0xe1, &(0x7f0000000080)=""/225}]}) creat(&(0x7f0000000040)='./file0\x00', 0x51) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4m22.448741308s ago: executing program 0 (id=5088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x6, 0x10}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x53}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 4m21.870462905s ago: executing program 0 (id=5089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaa2aaaaaaaa1780c206050086dd6000000000000201fe8000000000000000000000000000bbfe8000000000b74c4e2ed666135a00aac3"], 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400"], 0x68}, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x7259b000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) syz_fuse_handle_req(r8, &(0x7f00000026c0)="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", 0x2000, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m21.080978424s ago: executing program 0 (id=5095): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = open(0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0xfffffffd, 0x1, 0xca0, 0x0, 0x2000000002d, 0x0, 0x6, 0x100000001, 0xbd9], 0xffff1001, 0x43100}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xeeee0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x39, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x34f000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r7, &(0x7f0000000300)='1\x00', 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x810c5701, &(0x7f0000000000)) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) 4m19.852765702s ago: executing program 0 (id=5099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x6, 0x10}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x53}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 4m19.477945474s ago: executing program 0 (id=5103): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x6, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x7}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 4m19.03311666s ago: executing program 34 (id=5103): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x6, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x7}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 30.664347369s ago: executing program 5 (id=6029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001880)=""/4096}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x9, 0x0, 0xfffdfe0000800001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000003a000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b700000000000000950000000000000006de8c2a8477b61175074ca82f418502ef3c45272c98317e57d919ac59e412da532da61c"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000bac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 20.590397271s ago: executing program 5 (id=6055): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06", 0x11) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac000000000000000000000000000000000000001300", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 19.147290671s ago: executing program 5 (id=6064): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) landlock_create_ruleset(&(0x7f00000008c0)={0x400, 0x2, 0x2}, 0x18, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x3, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="ae8d7a", 0x0, 0xfffffff9, 0x802a, 0x8, 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) (async, rerun: 64) sendmsg$inet6(r2, 0x0, 0x0) (async, rerun: 64) writev(r2, &(0x7f0000000100), 0x0) sendto$inet6(r2, &(0x7f0000000900)="8d", 0x1, 0xf21bb4d410ace81, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) 13.150737929s ago: executing program 5 (id=6081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x5, 0x6, "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", 0x2, 0x0, 0xac, 0xf6, 0x8, 0x1, 0x6}}}, 0x120) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 9.224416802s ago: executing program 4 (id=6092): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b00000006"], 0x68}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="05ab454e59bf65f50430a64e1050de682b0cc55c0eb81f71f41a4bd3e1ab7ccb2911aa6a7f3ee562dca998c32b770169c17a87b03b7be5e56df611705d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x2010, r3, 0x0) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0xe01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$PTP_CLOCK_GETCAPS(r13, 0x43403d0e, &(0x7f0000001d40)) getdents(r0, &(0x7f0000000000)=""/41, 0x29) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r14 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 8.243722511s ago: executing program 5 (id=6094): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) fsmount(r2, 0x0, 0x8a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x70, 0x7, 0x0}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 7.939593178s ago: executing program 7 (id=6098): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r2, &(0x7f0000000000), 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x35, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000200)={0xd000, 0x1000}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x82, 0x0) syz_usb_ep_write(r7, 0x81, 0x1, &(0x7f0000000180)='A') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x8, 0x7, 0xfffff801, 0x8}, 0x10) read$char_usb(r0, &(0x7f0000000380)=""/190, 0xbe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mknod$loop(0x0, 0xfff, 0x1) 7.830505042s ago: executing program 6 (id=6099): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) (fail_nth: 35) 6.836227627s ago: executing program 6 (id=6101): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x6e) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0xffffffff, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/107, 0x6b) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r8, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24000840) 6.797380764s ago: executing program 4 (id=6102): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) unshare(0x60600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="480000000000000029000000040000003a0500000000000007280000000008400100080000000000000003000000000000000400000000000000b100000000000000000000000000380000000000000029000000360000003a030000000000000502000601040000000007100000000302ff100002000000000000000000000014000000000000002900000008000000db0000000000000040000000000000002900000036"], 0x1228}, 0x2) r2 = socket(0x12, 0xa, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0xfffffffffffffc18) 6.453951574s ago: executing program 4 (id=6103): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r5, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r2, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r7, 0x5415, 0x0) eventfd2(0xfff, 0x800) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000700)="eee8844b6f41d7630cd7cee0bbc3fdf3d5c9ab12de86e0c385b085982cc91d5d7e0b2f51e55c40bf6f9907981e91a6c3fb3400795e425fa8e53311e36b69f721074eabce4f22010b2978269e", 0x4c, r8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) socket$kcm(0x10, 0x6, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 5.670759476s ago: executing program 6 (id=6104): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x5, 0x6, "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", 0x2, 0x0, 0xac, 0xf6, 0x8, 0x1, 0x6}}}, 0x120) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 4.750708565s ago: executing program 7 (id=6106): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getlink={0x1c, 0x12, 0x321, 0x70bd21, 0x8000, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa1ffffff}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 4.434570509s ago: executing program 7 (id=6107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r3], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x7d, 0x4007, @fd=r3, 0x6, 0x3dab, 0x2, 0x8, 0xb12457d1a06075e, {0x1, r7}}) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x5c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r10, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x22, 0x3a0, 0x5, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r11, 0x0, 0x500}, 0x38) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000002e00090027bd700000000000040000002900118031f9e2672f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2000000"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$packet(0x11, 0x3, 0x300) 3.702991721s ago: executing program 2 (id=6108): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2e000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 3.462588728s ago: executing program 2 (id=6109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'hsr0\x00', @random="00d605000004"}) 3.461348784s ago: executing program 4 (id=6110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x5, 0x2}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r2, r3, 0x3}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r7, 0x0, 0x4004) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = dup(r8) r12 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r11, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r12, 0x47f5, 0x0, 0x0, 0x0, 0x0) 3.449699091s ago: executing program 5 (id=6111): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 34) 3.266636778s ago: executing program 2 (id=6112): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b00000006"], 0x68}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="05ab454e59bf65f50430a64e1050de682b0cc55c0eb81f71f41a4bd3e1ab7ccb2911aa6a7f3ee562dca998c32b770169c17a87b03b7be5e56df611705d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x2010, r3, 0x0) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0xe01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$PTP_CLOCK_GETCAPS(r13, 0x43403d0e, &(0x7f0000001d40)) getdents(r0, &(0x7f0000000000)=""/41, 0x29) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r14 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 2.502525982s ago: executing program 6 (id=6113): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000ec0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(cbcmac(cast5-generic))\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) 2.01389265s ago: executing program 6 (id=6114): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b2fc329c94a41bc", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x5}], 0x2, 0x40, 0x0) 1.75466999s ago: executing program 6 (id=6115): pipe2$9p(&(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xeeb70352323bd4c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073}]}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x928849, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000300)="11eb7621eb5dc4b38a4b818d1aab099259038740c7eda50af7c05c61fa8a838a") mkdirat(r5, 0x0, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f00000004c0)=0x4) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2, 0xf0, 0x1, 0x1, 0xffffffffffffffff, 0x9, 0x6, 0x5, 0x9, 0x51cd, 0x3, 0xfffffff8, 0x7, 0x1, 0x9, 0x10, {0x0, 0x6}, 0x78, 0x3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r9, 0x402, 0x20) syz_open_procfs(0x0, 0x0) 1.155099646s ago: executing program 2 (id=6116): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x4000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.108736936s ago: executing program 4 (id=6117): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000340)=0x82, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="c1", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (fail_nth: 2) 922.350712ms ago: executing program 2 (id=6118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x80ff, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 710.83961ms ago: executing program 7 (id=6119): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) keyctl$session_to_parent(0x12) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x8, 0xfe00, 0x5, 0x7, 0x9, "d5a8e31043abaaf2"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x729, 0x18}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000c0) r3 = syz_open_pts(r0, 0x80200) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000240)={0x0, 0x40, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000280)={0xf, 0x3, 0x4}) fcntl$setsig(r3, 0xa, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r8, {0xee01}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f00000004c0)={0x10002, 0x4, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x6, r0}) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10010, r7, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000580)=@IORING_OP_FSYNC={0x3, 0x55, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}) ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/152}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r12, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x4000) 586.371017ms ago: executing program 2 (id=6120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200400c0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff, 0xfe00}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 346.315666ms ago: executing program 7 (id=6121): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x58b7, 0x2, 0x1, 0xc, 0x80}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x8090) fallocate(r0, 0x0, 0x9, 0x6a4c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) sendto$inet6(r11, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 223.39756ms ago: executing program 4 (id=6122): io_setup(0xca, &(0x7f0000000080)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_getevents(r0, 0xf1, 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)={0x77359400}) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r1, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb061179d54b36399968b2ede680f1f234dc71d5f107d12c318b4c51f0820d49be9702a5bace4e3d6c9df81f6a5c86fd7c752bfe5c5641e6cb9567a94cf4f25be7d9f67bb6d746657a5c0631dade3805207c27c9a2b188215cff9fa099f3bb570caae3fdf79a0c3f4", 0xb499, 0x8}]) 0s ago: executing program 7 (id=6123): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_enter(r5, 0x847bc, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfe2, &(0x7f0000001840)=""/4066, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000806}, 0x94) kernel console output (not intermixed with test programs): 2d0 [ 1392.787623][T26203] do_symlinkat+0x1f1/0x3c0 [ 1392.787643][T26203] ? __pfx_do_symlinkat+0x10/0x10 [ 1392.787657][T26203] ? strncpy_from_user+0x150/0x2b0 [ 1392.787679][T26203] ? getname_flags+0x1e4/0x540 [ 1392.787700][T26203] __x64_sys_symlink+0x7a/0x90 [ 1392.787716][T26203] do_syscall_64+0xe2/0xf80 [ 1392.787740][T26203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.787755][T26203] ? trace_irq_disable+0x37/0x100 [ 1392.787775][T26203] ? clear_bhb_loop+0x60/0xb0 [ 1392.787793][T26203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.787807][T26203] RIP: 0033:0x7f502e59acb9 [ 1392.787821][T26203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.787833][T26203] RSP: 002b:00007f502f3fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1392.787849][T26203] RAX: ffffffffffffffda RBX: 00007f502e815fa0 RCX: 00007f502e59acb9 [ 1392.787860][T26203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000002040 [ 1392.787870][T26203] RBP: 00007f502f3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.787879][T26203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.787888][T26203] R13: 00007f502e816038 R14: 00007f502e815fa0 R15: 00007f502e93fa48 [ 1392.787911][T26203] [ 1393.510936][T26227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1393.678988][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1394.318202][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 1394.718891][ T5842] Bluetooth: hci2: command tx timeout [ 1395.489832][T26260] loop2: detected capacity change from 0 to 7 [ 1395.540256][T26260] Dev loop2: unable to read RDB block 7 [ 1395.550921][T26260] loop2: unable to read partition table [ 1395.577000][T26260] loop2: partition table beyond EOD, truncated [ 1395.583261][T26260] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1395.757148][T26265] FAULT_INJECTION: forcing a failure. [ 1395.757148][T26265] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.792600][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1395.815572][T26265] CPU: 0 UID: 0 PID: 26265 Comm: syz.6.5654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1395.815597][T26265] Tainted: [L]=SOFTLOCKUP [ 1395.815602][T26265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1395.815612][T26265] Call Trace: [ 1395.815619][T26265] [ 1395.815626][T26265] dump_stack_lvl+0xe8/0x150 [ 1395.815650][T26265] should_fail_ex+0x412/0x560 [ 1395.815676][T26265] should_failslab+0xa8/0x100 [ 1395.815696][T26265] __kmalloc_noprof+0xde/0x7e0 [ 1395.815718][T26265] ? iter_file_splice_write+0x1d4/0x1100 [ 1395.815742][T26265] iter_file_splice_write+0x1d4/0x1100 [ 1395.815760][T26265] ? __lock_acquire+0x6b5/0x2cf0 [ 1395.815792][T26265] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1395.815811][T26265] ? direct_splice_actor+0x49/0x160 [ 1395.815830][T26265] ? direct_splice_actor+0x49/0x160 [ 1395.815859][T26265] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1395.815879][T26265] direct_splice_actor+0x101/0x160 [ 1395.815900][T26265] splice_direct_to_actor+0x53a/0xc70 [ 1395.815927][T26265] ? __pfx_direct_splice_actor+0x10/0x10 [ 1395.815952][T26265] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1395.815978][T26265] do_splice_direct+0x195/0x290 [ 1395.815999][T26265] ? __pfx_do_splice_direct+0x10/0x10 [ 1395.816017][T26265] ? common_file_perm+0x1b4/0x220 [ 1395.816037][T26265] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1395.816062][T26265] ? rw_verify_area+0x255/0x4d0 [ 1395.816088][T26265] do_sendfile+0x535/0x7c0 [ 1395.816113][T26265] ? __pfx_do_sendfile+0x10/0x10 [ 1395.816132][T26265] ? __fget_files+0x3a0/0x420 [ 1395.816157][T26265] __se_sys_sendfile64+0x144/0x1a0 [ 1395.816178][T26265] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1395.816204][T26265] do_syscall_64+0xe2/0xf80 [ 1395.816226][T26265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.816240][T26265] ? trace_irq_disable+0x37/0x100 [ 1395.816260][T26265] ? clear_bhb_loop+0x60/0xb0 [ 1395.816277][T26265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.816292][T26265] RIP: 0033:0x7f4cb259acb9 [ 1395.816305][T26265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.816318][T26265] RSP: 002b:00007f4cb33ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1395.816335][T26265] RAX: ffffffffffffffda RBX: 00007f4cb2816090 RCX: 00007f4cb259acb9 [ 1395.816346][T26265] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1395.816354][T26265] RBP: 00007f4cb33ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.816364][T26265] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.816373][T26265] R13: 00007f4cb2816128 R14: 00007f4cb2816090 R15: 00007f4cb293fa48 [ 1395.816397][T26265] [ 1396.671393][T26284] program syz.5.5652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1396.684628][T26284] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5652'. [ 1398.158630][T26290] FAULT_INJECTION: forcing a failure. [ 1398.158630][T26290] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.268445][T26290] CPU: 1 UID: 0 PID: 26290 Comm: syz.6.5662 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.268479][T26290] Tainted: [L]=SOFTLOCKUP [ 1398.268488][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1398.268501][T26290] Call Trace: [ 1398.268515][T26290] [ 1398.268524][T26290] dump_stack_lvl+0xe8/0x150 [ 1398.268548][T26290] should_fail_ex+0x412/0x560 [ 1398.268573][T26290] should_failslab+0xa8/0x100 [ 1398.268594][T26290] __kmalloc_noprof+0xde/0x7e0 [ 1398.268608][T26290] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1398.268635][T26290] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1398.268662][T26290] genl_family_rcv_msg_doit+0xd9/0x330 [ 1398.268687][T26290] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1398.268714][T26290] ? apparmor_capable+0x137/0x1a0 [ 1398.268730][T26290] ? bpf_lsm_capable+0x9/0x20 [ 1398.268748][T26290] ? security_capable+0x7e/0x2c0 [ 1398.268771][T26290] genl_rcv_msg+0x61c/0x7a0 [ 1398.268796][T26290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1398.268815][T26290] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1398.268837][T26290] ? __pfx_ref_tracker_free+0x10/0x10 [ 1398.268865][T26290] netlink_rcv_skb+0x232/0x4b0 [ 1398.268882][T26290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1398.268903][T26290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1398.268916][T26290] ? genl_rcv+0x19/0x40 [ 1398.268947][T26290] ? down_read+0x272/0x2e0 [ 1398.268960][T26290] ? genl_rcv+0xd/0x40 [ 1398.268980][T26290] genl_rcv+0x28/0x40 [ 1398.268998][T26290] netlink_unicast+0x80f/0x9b0 [ 1398.269027][T26290] ? __pfx_netlink_unicast+0x10/0x10 [ 1398.269051][T26290] ? netlink_sendmsg+0x650/0xb40 [ 1398.269066][T26290] ? skb_put+0x11b/0x210 [ 1398.269091][T26290] netlink_sendmsg+0x813/0xb40 [ 1398.269114][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.269133][T26290] ? aa_file_perm+0x12d/0x1630 [ 1398.269153][T26290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1398.269174][T26290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1398.269188][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.269205][T26290] __sock_sendmsg+0x21c/0x270 [ 1398.269232][T26290] ____sys_sendmsg+0x4d7/0x810 [ 1398.269247][T26290] ? __might_fault+0xaf/0x130 [ 1398.269274][T26290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1398.269295][T26290] ? import_iovec+0x73/0xa0 [ 1398.269314][T26290] ___sys_sendmsg+0x2a5/0x360 [ 1398.269328][T26290] ? __lock_acquire+0x6b5/0x2cf0 [ 1398.269347][T26290] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.269387][T26290] ? __fget_files+0x2a/0x420 [ 1398.269406][T26290] ? __fget_files+0x3a0/0x420 [ 1398.269436][T26290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1398.269454][T26290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1398.269481][T26290] ? __pfx_ksys_write+0x10/0x10 [ 1398.269506][T26290] do_syscall_64+0xe2/0xf80 [ 1398.269527][T26290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.269541][T26290] ? trace_irq_disable+0x37/0x100 [ 1398.269561][T26290] ? clear_bhb_loop+0x60/0xb0 [ 1398.269579][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.269594][T26290] RIP: 0033:0x7f4cb259acb9 [ 1398.269608][T26290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.269622][T26290] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.269638][T26290] RAX: ffffffffffffffda RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1398.269649][T26290] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 000000000000000b [ 1398.269659][T26290] RBP: 00007f4cb33ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.269668][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.269677][T26290] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1398.269701][T26290] [ 1398.974035][T21745] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1399.264315][T21745] usb 6-1: Using ep0 maxpacket: 32 [ 1399.272501][T21745] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1399.338312][T21745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1399.382207][T21745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1399.411522][T21745] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1399.440980][T21745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.460194][T26308] FAULT_INJECTION: forcing a failure. [ 1399.460194][T26308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.487287][T21745] usb 6-1: config 0 descriptor?? [ 1399.494278][T26296] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1399.503197][T26308] CPU: 1 UID: 0 PID: 26308 Comm: syz.6.5669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.503229][T26308] Tainted: [L]=SOFTLOCKUP [ 1399.503238][T26308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1399.503251][T26308] Call Trace: [ 1399.503260][T26308] [ 1399.503269][T26308] dump_stack_lvl+0xe8/0x150 [ 1399.503302][T26308] should_fail_ex+0x412/0x560 [ 1399.503336][T26308] copy_fpstate_to_sigframe+0xafd/0xd40 [ 1399.503374][T26308] ? copy_fpstate_to_sigframe+0x196/0xd40 [ 1399.503412][T26308] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1399.503455][T26308] ? ktime_get+0x45/0x200 [ 1399.503487][T26308] ? ktime_get+0x45/0x200 [ 1399.503516][T26308] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1399.503548][T26308] ? read_tsc+0x9/0x20 [ 1399.503578][T26308] ? fpu__alloc_mathframe+0xac/0x130 [ 1399.503611][T26308] get_sigframe+0x5f7/0x820 [ 1399.503652][T26308] ? __pfx_get_sigframe+0x10/0x10 [ 1399.503687][T26308] ? posixtimer_deliver_signal+0x304/0x410 [ 1399.503722][T26308] x64_setup_rt_frame+0x160/0xcb0 [ 1399.503758][T26308] ? _raw_spin_unlock_irq+0x23/0x50 [ 1399.503785][T26308] ? lockdep_hardirqs_on+0x7a/0x110 [ 1399.503813][T26308] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1399.503839][T26308] ? get_signal+0x114f/0x1330 [ 1399.503866][T26308] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1399.503905][T26308] arch_do_signal_or_restart+0x424/0x830 [ 1399.503938][T26308] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1399.503974][T26308] ? __se_sys_preadv2+0x279/0x2a0 [ 1399.504007][T26308] exit_to_user_mode_loop+0x86/0x480 [ 1399.504030][T26308] ? rcu_is_watching+0x15/0xb0 [ 1399.504059][T26308] do_syscall_64+0x2b7/0xf80 [ 1399.504088][T26308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.504109][T26308] ? clear_bhb_loop+0x60/0xb0 [ 1399.504134][T26308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.504154][T26308] RIP: 0033:0x7f4cb259acb7 [ 1399.504173][T26308] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1399.504198][T26308] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1399.504221][T26308] RAX: 0000000000000147 RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1399.504235][T26308] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1399.504248][T26308] RBP: 00007f4cb33ef090 R08: 0000000000008000 R09: 0000000000000000 [ 1399.504262][T26308] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 1399.504274][T26308] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1399.504308][T26308] [ 1399.978478][T21745] hub 6-1:0.0: USB hub found [ 1400.044135][T18730] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1400.295095][T18730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.341610][T18730] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1400.396294][T18730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1400.431514][T26318] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1400.439613][T18730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1400.464638][T18730] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1400.503239][T21745] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 1400.550408][T18730] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1400.573276][T18730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1400.603597][T18730] usb 3-1: Product: syz [ 1400.625779][T18730] usb 3-1: Manufacturer: syz [ 1400.639482][T18730] usb 3-1: SerialNumber: syz [ 1400.677629][T18730] usb 3-1: config 0 descriptor?? [ 1400.887143][T18730] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1400.912302][T18730] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1400.938902][T21745] usbhid 6-1:0.0: can't add hid device: -71 [ 1400.952652][T21745] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1401.006758][T21745] usb 6-1: USB disconnect, device number 7 [ 1401.088935][T18730] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1401.141586][T18730] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1401.175090][T18730] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1401.701310][T21745] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1401.864678][T21745] usb 5-1: Using ep0 maxpacket: 32 [ 1401.879622][T21745] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1402.102880][T21745] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1402.114783][T21745] usb 5-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 1402.123410][T21745] usb 5-1: Manufacturer: syz [ 1402.202010][T21745] usb 5-1: config 0 descriptor?? [ 1402.482431][T26340] syzkaller0: entered promiscuous mode [ 1402.493791][T26340] syzkaller0: entered allmulticast mode [ 1402.777579][T18730] usb 3-1: USB disconnect, device number 70 [ 1402.908189][ T5922] usb 5-1: USB disconnect, device number 74 [ 1403.289852][T26369] binder: 26367:26369 ioctl c0306201 200000000640 returned -22 [ 1404.029413][T26385] sctp: [Deprecated]: syz.4.5694 (pid 26385) Use of int in max_burst socket option deprecated. [ 1404.029413][T26385] Use struct sctp_assoc_value instead [ 1404.378670][ T30] audit: type=1326 audit(1769367783.163:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.378738][ T30] audit: type=1326 audit(1769367783.163:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.378777][ T30] audit: type=1326 audit(1769367783.163:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.378809][ T30] audit: type=1326 audit(1769367783.163:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.378841][ T30] audit: type=1326 audit(1769367783.163:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.378872][ T30] audit: type=1326 audit(1769367783.163:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.446626][T26395] IPVS: Scheduler module ip_vs_ not found [ 1404.447166][ T30] audit: type=1326 audit(1769367783.333:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.447221][ T30] audit: type=1326 audit(1769367783.333:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf55d9acb9 code=0x7ffc0000 [ 1404.470277][T18730] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1404.714712][T18730] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1404.714742][T18730] usb 5-1: config 0 has no interface number 0 [ 1404.746559][T18730] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1404.746585][T18730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.746600][T18730] usb 5-1: Product: syz [ 1404.746612][T18730] usb 5-1: Manufacturer: syz [ 1404.746623][T18730] usb 5-1: SerialNumber: syz [ 1404.753707][T18730] usb 5-1: config 0 descriptor?? [ 1405.104879][T18730] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1405.111884][T18730] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1405.112239][T18730] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1405.112307][T18730] usb 5-1: media controller created [ 1405.142444][T18730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.245837][T18730] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1406.431707][T18730] usb 5-1: USB disconnect, device number 75 [ 1407.404159][ T5935] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1407.485248][T26446] netlink: 'syz.2.5707': attribute type 1 has an invalid length. [ 1407.614673][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 1407.622211][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1407.629060][ T5935] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1407.645802][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.677338][ T5935] usb 5-1: config 0 descriptor?? [ 1407.976279][T26454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.106939][T26457] FAULT_INJECTION: forcing a failure. [ 1408.106939][T26457] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.126571][T26441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.140209][T26441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.250127][T26457] CPU: 1 UID: 0 PID: 26457 Comm: syz.2.5710 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.250152][T26457] Tainted: [L]=SOFTLOCKUP [ 1408.250159][T26457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1408.250169][T26457] Call Trace: [ 1408.250175][T26457] [ 1408.250183][T26457] dump_stack_lvl+0xe8/0x150 [ 1408.250211][T26457] should_fail_ex+0x412/0x560 [ 1408.250266][T26457] should_failslab+0xa8/0x100 [ 1408.250293][T26457] __kmalloc_noprof+0xde/0x7e0 [ 1408.250314][T26457] ? esp6_init_state+0x764/0x1240 [ 1408.250347][T26457] esp6_init_state+0x764/0x1240 [ 1408.250377][T26457] ? ___sys_sendmsg+0x2a5/0x360 [ 1408.250401][T26457] ? __pfx_esp6_init_state+0x10/0x10 [ 1408.250440][T26457] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1408.250456][T26457] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1408.250478][T26457] ? __xfrm_init_state+0x842/0x1460 [ 1408.250502][T26457] __xfrm_init_state+0xac9/0x1460 [ 1408.250523][T26457] ? __xfrm_init_state+0x842/0x1460 [ 1408.250547][T26457] xfrm_add_sa+0x3073/0x4230 [ 1408.250574][T26457] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1408.250592][T26457] ? apparmor_capable+0x137/0x1a0 [ 1408.250611][T26457] ? __nla_parse+0x40/0x60 [ 1408.250628][T26457] xfrm_user_rcv_msg+0x746/0xb20 [ 1408.250654][T26457] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1408.250701][T26457] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1408.250724][T26457] ? rcu_is_watching+0x15/0xb0 [ 1408.250744][T26457] ? trace_contention_end+0x39/0x100 [ 1408.250764][T26457] ? __mutex_lock+0x319/0x1300 [ 1408.250791][T26457] netlink_rcv_skb+0x232/0x4b0 [ 1408.250809][T26457] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1408.250831][T26457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.250857][T26457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.250872][T26457] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.250890][T26457] xfrm_netlink_rcv+0x79/0x90 [ 1408.250910][T26457] netlink_unicast+0x80f/0x9b0 [ 1408.250940][T26457] ? __pfx_netlink_unicast+0x10/0x10 [ 1408.250961][T26457] ? __alloc_skb+0x193/0x390 [ 1408.250983][T26457] ? netlink_sendmsg+0x650/0xb40 [ 1408.250997][T26457] ? skb_put+0x11b/0x210 [ 1408.251021][T26457] netlink_sendmsg+0x813/0xb40 [ 1408.251044][T26457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.251062][T26457] ? aa_file_perm+0x12d/0x1630 [ 1408.251083][T26457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1408.251104][T26457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1408.251118][T26457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.251135][T26457] __sock_sendmsg+0x21c/0x270 [ 1408.251156][T26457] ____sys_sendmsg+0x4d7/0x810 [ 1408.251171][T26457] ? __might_fault+0xaf/0x130 [ 1408.251197][T26457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.251219][T26457] ? import_iovec+0x73/0xa0 [ 1408.251237][T26457] ___sys_sendmsg+0x2a5/0x360 [ 1408.251251][T26457] ? __lock_acquire+0x6b5/0x2cf0 [ 1408.251269][T26457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.251309][T26457] ? __fget_files+0x2a/0x420 [ 1408.251327][T26457] ? __fget_files+0x3a0/0x420 [ 1408.251352][T26457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1408.251369][T26457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.251418][T26457] ? __pfx_ksys_write+0x10/0x10 [ 1408.251451][T26457] do_syscall_64+0xe2/0xf80 [ 1408.251480][T26457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.251514][T26457] ? trace_irq_disable+0x37/0x100 [ 1408.251534][T26457] ? clear_bhb_loop+0x60/0xb0 [ 1408.251552][T26457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.251567][T26457] RIP: 0033:0x7fcf55d9acb9 [ 1408.251580][T26457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.251593][T26457] RSP: 002b:00007fcf56cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.251610][T26457] RAX: ffffffffffffffda RBX: 00007fcf56015fa0 RCX: 00007fcf55d9acb9 [ 1408.251621][T26457] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1408.251631][T26457] RBP: 00007fcf56cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.251640][T26457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.251649][T26457] R13: 00007fcf56016038 R14: 00007fcf56015fa0 R15: 00007fcf5613fa48 [ 1408.251675][T26457] [ 1409.197896][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 1409.204240][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1409.214884][ T30] audit: type=1804 audit(1769367788.093:889): pid=26466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5713" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 1409.236958][ T5935] usb 5-1: USB disconnect, device number 76 [ 1409.474478][T26473] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1410.242262][T26484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 1410.278139][T26486] loop5: detected capacity change from 0 to 7 [ 1410.287829][T26486] Dev loop5: unable to read RDB block 7 [ 1410.293565][T26486] loop5: unable to read partition table [ 1410.300681][T26486] loop5: partition table beyond EOD, truncated [ 1410.314807][T26486] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1411.402279][T26502] vivid-000: disconnect [ 1411.550364][ T5197] Dev loop5: unable to read RDB block 7 [ 1411.557149][ T5197] loop5: unable to read partition table [ 1411.565360][ T5197] loop5: partition table beyond EOD, truncated [ 1411.735774][ T5197] Dev loop5: unable to read RDB block 7 [ 1411.742985][ T5197] loop5: unable to read partition table [ 1411.749869][ T5197] loop5: partition table beyond EOD, truncated [ 1411.779653][T26498] vivid-000: reconnect [ 1412.039742][ T5197] Dev loop5: unable to read RDB block 7 [ 1412.045903][ T5197] loop5: unable to read partition table [ 1412.051963][ T5197] loop5: partition table beyond EOD, truncated [ 1413.005198][T26522] erspan0: entered promiscuous mode [ 1413.264799][ T5197] Dev loop5: unable to read RDB block 7 [ 1413.289094][ T5197] loop5: unable to read partition table [ 1413.308062][ T5197] loop5: partition table beyond EOD, truncated [ 1415.204468][T21745] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1415.359860][T21745] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1415.379925][T21745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.471980][T21745] usb 5-1: Product: syz [ 1415.476418][T21745] usb 5-1: Manufacturer: syz [ 1415.481172][T21745] usb 5-1: SerialNumber: syz [ 1415.495039][T21745] usb 5-1: config 0 descriptor?? [ 1415.506661][T21745] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1415.923545][T21745] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input98 [ 1416.139125][T21745] usb 5-1: USB disconnect, device number 77 [ 1416.499307][T26564] syzkaller0: entered promiscuous mode [ 1416.505071][T26564] syzkaller0: entered allmulticast mode [ 1416.840050][T26570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1416.866419][T26570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1416.912981][T26570] kvm: user requested TSC rate below hardware speed [ 1417.208020][T26586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5751'. [ 1417.229093][T26586] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1417.540928][T26599] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1418.056661][T26614] sctp: [Deprecated]: syz.2.5763 (pid 26614) Use of int in max_burst socket option deprecated. [ 1418.056661][T26614] Use struct sctp_assoc_value instead [ 1418.125796][T26616] netlink: 304 bytes leftover after parsing attributes in process `syz.7.5762'. [ 1418.139906][T26616] openvswitch: netlink: Flow key attr not present in new flow. [ 1418.354280][ T5935] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1418.397450][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5765'. [ 1418.528099][ T5935] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1418.554139][ T5935] usb 3-1: config 0 has no interface number 0 [ 1418.560891][T21743] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1418.578215][ T5935] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1418.588230][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.596754][ T5935] usb 3-1: Product: syz [ 1418.601074][ T5935] usb 3-1: Manufacturer: syz [ 1418.606057][ T5935] usb 3-1: SerialNumber: syz [ 1418.640672][ T5935] usb 3-1: config 0 descriptor?? [ 1418.754346][T21743] usb 5-1: Using ep0 maxpacket: 32 [ 1418.763192][T21743] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.775060][T21743] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1418.787955][T21743] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1418.822731][T21743] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1418.896286][ T5935] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1418.910845][ T5935] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1418.939746][ T5935] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1418.954823][T21743] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1418.973199][T21743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.982302][ T5935] usb 3-1: media controller created [ 1418.997152][T21743] usb 5-1: Product: syz [ 1419.011778][T21743] usb 5-1: Manufacturer: syz [ 1419.022205][T21743] usb 5-1: SerialNumber: syz [ 1419.029469][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1419.060170][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1419.073016][T21743] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input99 [ 1419.216918][ T5935] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1419.289548][ T5935] usb 3-1: USB disconnect, device number 71 [ 1419.384489][T21743] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1419.403792][T21743] (id 0x00) [ 1419.604558][T21743] rc_core: IR keymap rc-imon-pad not found [ 1419.610576][T21743] Registered IR keymap rc-empty [ 1419.616473][T21743] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1419.628205][T21743] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1419.755171][T21743] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1419.802744][T21743] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input100 [ 1419.855500][T21743] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:78> initialized [ 1419.955640][T26643] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1420.087713][T26619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.115119][T26619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.311319][ T5914] usb 5-1: USB disconnect, device number 78 [ 1421.819109][T26668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.905472][T26695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5786'. [ 1423.124358][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1424.481687][T26711] veth1_macvtap: left promiscuous mode [ 1424.490459][T26711] macsec0: entered allmulticast mode [ 1424.522259][T26713] veth1_macvtap: entered promiscuous mode [ 1424.543711][T26713] veth1_macvtap: entered allmulticast mode [ 1424.574728][T18730] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1424.582510][T26713] macsec0: left allmulticast mode [ 1424.582535][T26713] veth1_macvtap: left allmulticast mode [ 1424.741437][T26719] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1424.759818][T18730] usb 5-1: device descriptor read/64, error -71 [ 1425.024217][T18730] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1425.047225][T26726] netlink: 'syz.7.5797': attribute type 10 has an invalid length. [ 1425.076304][T26726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.097754][T26726] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1425.154064][T18730] usb 5-1: device descriptor read/64, error -71 [ 1425.284872][T18730] usb usb5-port1: attempt power cycle [ 1425.545209][ T5922] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1425.624450][T18730] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1425.646183][T18730] usb 5-1: device descriptor read/8, error -71 [ 1425.686317][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1425.884082][T18730] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1425.925877][T18730] usb 5-1: device descriptor read/8, error -71 [ 1425.935362][ T5922] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1426.009140][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5802'. [ 1426.023389][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5802'. [ 1426.039929][T18730] usb usb5-port1: unable to enumerate USB device [ 1426.049850][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5802'. [ 1426.150427][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1426.302610][T26758] netlink: 'syz.7.5805': attribute type 4 has an invalid length. [ 1426.337948][ T5922] usb usb6-port1: attempt power cycle [ 1426.850092][ T5922] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1426.943549][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1427.136066][T26767] netlink: 'syz.2.5809': attribute type 9 has an invalid length. [ 1427.145256][T26767] netlink: 'syz.2.5809': attribute type 11 has an invalid length. [ 1427.153107][T26767] netlink: 'syz.2.5809': attribute type 12 has an invalid length. [ 1427.162666][T26767] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1427.172967][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1427.184687][ T5922] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1427.207321][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1427.314873][ T5922] usb usb6-port1: unable to enumerate USB device [ 1427.407188][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1428.258044][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.265198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.615247][ T5922] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1429.699626][ T30] audit: type=1326 audit(1769367808.583:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.728506][ T30] audit: type=1326 audit(1769367808.613:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.757695][ T30] audit: type=1326 audit(1769367808.643:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.793255][ T30] audit: type=1326 audit(1769367808.643:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.825917][ T30] audit: type=1326 audit(1769367808.643:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.849563][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 1429.857138][ T30] audit: type=1326 audit(1769367808.643:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.881077][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.893605][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1429.904108][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.934728][ T30] audit: type=1326 audit(1769367808.643:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.959095][ T5922] usb 3-1: config 0 descriptor?? [ 1429.966134][ T30] audit: type=1326 audit(1769367808.643:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1429.998095][ T30] audit: type=1326 audit(1769367808.673:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34fa95b58e code=0x7ffc0000 [ 1430.021420][ T30] audit: type=1326 audit(1769367808.673:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26792 comm="syz.5.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fa99acb9 code=0x7ffc0000 [ 1430.234773][T21745] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1430.243436][T26789] syzkaller0: entered promiscuous mode [ 1430.254478][T26789] syzkaller0: entered allmulticast mode [ 1430.425953][T21745] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1430.440212][T21745] usb 5-1: config 0 has no interface number 0 [ 1430.452586][T21745] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1430.476403][T21745] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1430.485953][T21745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.513866][ T5922] magicmouse 0003:05AC:0324.003D: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 1430.541055][T21745] usb 5-1: Product: syz [ 1430.553574][T21745] usb 5-1: Manufacturer: syz [ 1430.566373][T21745] usb 5-1: SerialNumber: syz [ 1430.655409][T21745] usb 5-1: config 0 descriptor?? [ 1431.007210][T26807] FAULT_INJECTION: forcing a failure. [ 1431.007210][T26807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.025883][T26807] CPU: 1 UID: 0 PID: 26807 Comm: syz.6.5823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.025917][T26807] Tainted: [L]=SOFTLOCKUP [ 1431.025926][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1431.025942][T26807] Call Trace: [ 1431.025951][T26807] [ 1431.025960][T26807] dump_stack_lvl+0xe8/0x150 [ 1431.025992][T26807] should_fail_ex+0x412/0x560 [ 1431.026027][T26807] _copy_from_user+0x2d/0xb0 [ 1431.026051][T26807] input_event_from_user+0xb1/0x290 [ 1431.026074][T26807] ? __pfx_input_event_from_user+0x10/0x10 [ 1431.026105][T26807] evdev_write+0x2c7/0x4c0 [ 1431.026130][T26807] ? __pfx_evdev_write+0x10/0x10 [ 1431.026151][T26807] ? bpf_lsm_file_permission+0x9/0x20 [ 1431.026173][T26807] ? security_file_permission+0x75/0x260 [ 1431.026197][T26807] ? rw_verify_area+0x255/0x4d0 [ 1431.026228][T26807] ? __pfx_evdev_write+0x10/0x10 [ 1431.026249][T26807] vfs_write+0x29a/0xb90 [ 1431.026287][T26807] ? __pfx_vfs_write+0x10/0x10 [ 1431.026309][T26807] ? __fget_files+0x2a/0x420 [ 1431.026338][T26807] ? __fget_files+0x2a/0x420 [ 1431.026362][T26807] ? __fget_files+0x3a0/0x420 [ 1431.026386][T26807] ? __fget_files+0x2a/0x420 [ 1431.026420][T26807] ksys_write+0x150/0x270 [ 1431.026443][T26807] ? __pfx_ksys_write+0x10/0x10 [ 1431.026475][T26807] do_syscall_64+0xe2/0xf80 [ 1431.026505][T26807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.026524][T26807] ? trace_irq_disable+0x37/0x100 [ 1431.026550][T26807] ? clear_bhb_loop+0x60/0xb0 [ 1431.026574][T26807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.026594][T26807] RIP: 0033:0x7f4cb259acb9 [ 1431.026613][T26807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.026630][T26807] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1431.026653][T26807] RAX: ffffffffffffffda RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1431.026668][T26807] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 1431.026681][T26807] RBP: 00007f4cb33ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.026693][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.026705][T26807] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1431.026739][T26807] [ 1431.353775][T21745] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1431.369559][T21745] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1431.384842][T21745] usb 5-1: USB disconnect, device number 83 [ 1432.514452][T21745] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1432.704139][T21745] usb 5-1: device descriptor read/64, error -71 [ 1432.898458][T26838] loop6: detected capacity change from 0 to 524288000 [ 1432.978725][T21745] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1433.304547][T21745] usb 5-1: device descriptor read/64, error -71 [ 1433.372528][T26842] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5829'. [ 1433.424944][T21745] usb usb5-port1: attempt power cycle [ 1433.774092][T21745] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1433.899168][T21745] usb 5-1: device descriptor read/8, error -71 [ 1434.194234][T21745] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1434.252563][T21745] usb 5-1: device descriptor read/8, error -71 [ 1434.405248][T21745] usb usb5-port1: unable to enumerate USB device [ 1435.970083][T26853] xt_CT: No such helper "snmp" [ 1436.751148][T26838] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1437.200501][T18730] usb 3-1: USB disconnect, device number 72 [ 1437.754172][T18730] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1437.974911][T18730] usb 3-1: device descriptor read/64, error -71 [ 1438.144324][T21745] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1438.224709][T18730] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1438.294588][T21745] usb 5-1: Using ep0 maxpacket: 16 [ 1438.301841][T21745] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 1438.311224][T21745] usb 5-1: config 2 has no interface number 0 [ 1438.319675][T21745] usb 5-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1438.333538][T21745] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1438.345426][T21745] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.374826][T18730] usb 3-1: device descriptor read/64, error -71 [ 1438.385071][T21745] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1438.467424][T21745] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1438.485336][T18730] usb usb3-port1: attempt power cycle [ 1438.491255][T21745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.504701][T21745] usb 5-1: Product: syz [ 1438.508914][T21745] usb 5-1: Manufacturer: syz [ 1438.513711][T21745] usb 5-1: SerialNumber: syz [ 1438.563782][T21745] usb 5-1: NFC: intf ffff88805f84c000 id ffffffff8edb26c0 [ 1438.770492][T26883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5844'. [ 1438.805330][T26883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5844'. [ 1438.844105][T18730] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1438.879724][T18730] usb 3-1: device descriptor read/8, error -71 [ 1438.949780][T21745] usb 5-1: USB disconnect, device number 88 [ 1439.125295][T18730] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1439.155844][T18730] usb 3-1: device descriptor read/8, error -71 [ 1439.265030][T18730] usb usb3-port1: unable to enumerate USB device [ 1439.424722][ T5907] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1439.572369][T26890] input: syz1 as /devices/virtual/input/input101 [ 1439.615988][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1439.623479][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1439.640821][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.661890][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1439.674972][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1439.691499][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1439.700498][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1439.713478][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.727531][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1439.740796][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1439.787960][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1439.797669][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1439.809431][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.822327][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1439.834607][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1439.884803][ T5907] usb 6-1: string descriptor 0 read error: -22 [ 1439.891350][ T5907] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1439.902133][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.936123][ T5907] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1440.374646][T18730] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1440.544505][T18730] usb 5-1: Using ep0 maxpacket: 32 [ 1440.553849][T18730] usb 5-1: config 9 has an invalid interface number: 138 but max is 0 [ 1440.566257][T18730] usb 5-1: config 9 has an invalid interface number: 102 but max is 0 [ 1440.575314][T18730] usb 5-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 1440.594043][T18730] usb 5-1: config 9 has no interface number 0 [ 1440.600236][T18730] usb 5-1: config 9 has no interface number 1 [ 1440.609677][T18730] usb 5-1: config 9 interface 138 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1440.627782][T18730] usb 5-1: too many endpoints for config 9 interface 102 altsetting 108: 107, using maximum allowed: 30 [ 1440.643240][T18730] usb 5-1: config 9 interface 102 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 1440.658249][T18730] usb 5-1: config 9 interface 138 has no altsetting 0 [ 1440.668975][T18730] usb 5-1: config 9 interface 102 has no altsetting 0 [ 1440.681080][T18730] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=3a.c5 [ 1440.690664][T18730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.699342][T18730] usb 5-1: Product: syz [ 1440.703569][T18730] usb 5-1: Manufacturer: syz [ 1440.708913][T18730] usb 5-1: SerialNumber: syz [ 1440.951500][T26895] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1443.134643][T21745] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1443.192038][T18730] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1443.263103][T18730] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1443.275952][T21745] usb 3-1: device descriptor read/64, error -71 [ 1443.310378][T18730] dib0700: firmware download failed at 7 with -22 [ 1443.434619][T18730] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1443.454899][ T5935] usb 6-1: USB disconnect, device number 12 [ 1443.514403][T21745] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1443.639747][T18730] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1443.654347][T26937] syz.7.5864: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1443.670951][T18730] dib0700: firmware download failed at 7 with -22 [ 1443.681687][T18730] usb 5-1: USB disconnect, device number 89 [ 1443.700780][T26937] CPU: 1 UID: 0 PID: 26937 Comm: syz.7.5864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.700817][T26937] Tainted: [L]=SOFTLOCKUP [ 1443.700826][T26937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1443.700840][T26937] Call Trace: [ 1443.700849][T26937] [ 1443.700859][T26937] dump_stack_lvl+0xe8/0x150 [ 1443.700895][T26937] warn_alloc+0x249/0x340 [ 1443.700920][T26937] ? stack_trace_save+0xa9/0x100 [ 1443.700956][T26937] ? __pfx_warn_alloc+0x10/0x10 [ 1443.700984][T26937] ? kasan_save_track+0x4f/0x80 [ 1443.701003][T26937] ? kasan_save_track+0x3e/0x80 [ 1443.701021][T26937] ? __kasan_kmalloc+0x93/0xb0 [ 1443.701040][T26937] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1443.701061][T26937] ? xskq_create+0x56/0x170 [ 1443.701087][T26937] ? xsk_setsockopt+0x54c/0x990 [ 1443.701107][T26937] ? do_sock_setsockopt+0x17c/0x1b0 [ 1443.701137][T26937] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1443.701168][T26937] ? do_syscall_64+0xe2/0xf80 [ 1443.701201][T26937] __vmalloc_node_range_noprof+0x132/0x1730 [ 1443.701254][T26937] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1443.701282][T26937] ? __kasan_kmalloc+0x93/0xb0 [ 1443.701311][T26937] vmalloc_user_noprof+0xad/0xe0 [ 1443.701332][T26937] ? xskq_create+0xbf/0x170 [ 1443.701358][T26937] xskq_create+0xbf/0x170 [ 1443.701387][T26937] xsk_init_queue+0xad/0x110 [ 1443.701425][T26937] xsk_setsockopt+0x54c/0x990 [ 1443.701453][T26937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1443.701479][T26937] ? __pfx_aa_sk_perm+0x10/0x10 [ 1443.701509][T26937] ? aa_sock_opt_perm+0xff/0x1a0 [ 1443.701543][T26937] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1443.701563][T26937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1443.701590][T26937] do_sock_setsockopt+0x17c/0x1b0 [ 1443.701628][T26937] __x64_sys_setsockopt+0x13d/0x1b0 [ 1443.701667][T26937] do_syscall_64+0xe2/0xf80 [ 1443.701695][T26937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.701716][T26937] ? trace_irq_disable+0x37/0x100 [ 1443.701742][T26937] ? clear_bhb_loop+0x60/0xb0 [ 1443.701768][T26937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.701789][T26937] RIP: 0033:0x7fadf3b9acb9 [ 1443.701808][T26937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.701827][T26937] RSP: 002b:00007fadf4a88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1443.701849][T26937] RAX: ffffffffffffffda RBX: 00007fadf3e15fa0 RCX: 00007fadf3b9acb9 [ 1443.701865][T26937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1443.701878][T26937] RBP: 00007fadf3c08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 1443.701890][T26937] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1443.701903][T26937] R13: 00007fadf3e16038 R14: 00007fadf3e15fa0 R15: 00007fadf3f3fa48 [ 1443.701934][T26937] [ 1443.701957][T26937] Mem-Info: [ 1444.034173][T26937] active_anon:11059 inactive_anon:0 isolated_anon:0 [ 1444.034173][T26937] active_file:19415 inactive_file:40520 isolated_file:0 [ 1444.034173][T26937] unevictable:768 dirty:180 writeback:0 [ 1444.034173][T26937] slab_reclaimable:9536 slab_unreclaimable:110609 [ 1444.034173][T26937] mapped:36403 shmem:4056 pagetables:2223 [ 1444.034173][T26937] sec_pagetables:0 bounce:0 [ 1444.034173][T26937] kernel_misc_reclaimable:0 [ 1444.034173][T26937] free:1267625 free_pcp:19834 free_cma:0 [ 1444.086374][T21745] usb 3-1: device descriptor read/64, error -71 [ 1444.154751][T26937] Node 0 active_anon:45536kB inactive_anon:0kB active_file:77636kB inactive_file:161880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105928kB dirty:720kB writeback:0kB shmem:15888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:14080kB pagetables:8748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1444.189051][T26937] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40984kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1444.225695][T21745] usb usb3-port1: attempt power cycle [ 1444.280460][T26933] input: syz0 as /devices/virtual/input/input102 [ 1444.327083][T26937] Node 0 DMA free:11208kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:16kB free_cma:0kB [ 1444.371949][T26937] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 1444.379250][T26937] Node 0 DMA32 free:1262384kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45836kB inactive_anon:0kB active_file:77636kB inactive_file:161880kB unevictable:1536kB writepending:720kB zspages:752kB present:3129332kB managed:2555788kB mlocked:0kB bounce:0kB free_pcp:39612kB local_pcp:23744kB free_cma:0kB [ 1444.421836][T26937] lowmem_reserve[]: 0 0 1 1 1 [ 1444.436349][T26937] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.574161][T21745] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1444.602535][T26937] lowmem_reserve[]: 0 0 0 0 0 [ 1444.629792][T21745] usb 3-1: device descriptor read/8, error -71 [ 1444.636822][T26937] Node 1 Normal free:3796908kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39176kB local_pcp:25312kB free_cma:0kB [ 1444.673428][T26937] lowmem_reserve[]: 0 0 0 0 0 [ 1444.678285][T26937] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11208kB [ 1444.701617][T26937] Node 0 DMA32: 4800*4kB (UME) 5286*8kB (UME) 3905*16kB (UME) 750*32kB (UME) 874*64kB (UME) 1040*128kB (UME) 867*256kB (UME) 565*512kB (UME) 356*1024kB (UM) 23*2048kB (UM) 0*4096kB = 1259904kB [ 1444.777785][T26937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1444.793840][T26937] Node 1 Normal: 201*4kB (UME) 53*8kB (UME) 46*16kB (UME) 228*32kB (UME) 82*64kB (UME) 18*128kB (UME) 10*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 917*4096kB (UM) = 3796908kB [ 1444.822949][T26937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.865178][T26937] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1444.884578][T21745] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1444.905073][T26937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.905391][T21745] usb 3-1: device descriptor read/8, error -71 [ 1444.986720][T26937] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1445.024656][T21745] usb usb3-port1: unable to enumerate USB device [ 1445.069729][T26937] 61925 total pagecache pages [ 1445.095055][T26937] 0 pages in swap cache [ 1445.126636][T26937] Free swap = 124552kB [ 1445.143741][T26937] Total swap = 124996kB [ 1445.170386][T26937] 2097051 pages RAM [ 1445.183102][T26937] 0 pages HighMem/MovableOnly [ 1445.188762][T26937] 426142 pages reserved [ 1445.193452][T26937] 0 pages cma reserved [ 1445.567621][T26967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5873'. [ 1445.592007][T26967] openvswitch: netlink: Flow actions attr not present in new flow. [ 1445.824966][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5874'. [ 1446.624936][T21743] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1446.817982][T21743] usb 5-1: device descriptor read/64, error -71 [ 1447.067437][T21743] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1447.214437][T21743] usb 5-1: device descriptor read/64, error -71 [ 1447.324813][T21743] usb usb5-port1: attempt power cycle [ 1447.384203][T21745] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1447.544455][T21745] usb 3-1: Using ep0 maxpacket: 32 [ 1447.553142][T21745] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1447.562591][T21745] usb 3-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 1447.571061][T21745] usb 3-1: Manufacturer: syz [ 1447.578304][T21745] usb 3-1: config 0 descriptor?? [ 1447.664322][T21743] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1447.685177][T21743] usb 5-1: device descriptor read/8, error -71 [ 1447.789014][T21745] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1447.799237][T21745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1447.820079][T21745] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1447.827983][T21745] usb 3-1: media controller created [ 1447.848335][T21745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1447.935241][T21743] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1447.965977][T21743] usb 5-1: device descriptor read/8, error -71 [ 1447.997888][T21745] az6027: usb out operation failed. (-71) [ 1448.006095][T21745] az6027: usb out operation failed. (-71) [ 1448.012491][T21745] stb0899_attach: Driver disabled by Kconfig [ 1448.020075][T21745] az6027: no front-end attached [ 1448.020075][T21745] [ 1448.027688][T21745] az6027: usb out operation failed. (-71) [ 1448.033578][T21745] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1448.043866][T21745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103 [ 1448.059480][T21745] dvb-usb: schedule remote query interval to 400 msecs. [ 1448.067906][T21745] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1448.077210][T21743] usb usb5-port1: unable to enumerate USB device [ 1448.086924][T21745] usb 3-1: USB disconnect, device number 81 [ 1448.182965][T21745] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1448.390226][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1448.403824][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1448.835969][T21929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1448.850285][T21929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1448.859510][T21929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1448.868109][T21929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1448.876744][T27006] __vm_enough_memory: pid: 27006, comm: syz.6.5886, bytes: 4503599627366400 not enough memory for the allocation [ 1448.890420][T21929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1449.176401][T27012] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5887'. [ 1449.358074][T27008] chnl_net:caif_netlink_parms(): no params data found [ 1449.529781][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.982629][ T5842] Bluetooth: hci5: command tx timeout [ 1450.991915][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.409649][T27008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.485311][T27008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.515063][T27008] bridge_slave_0: entered allmulticast mode [ 1451.541699][T27008] bridge_slave_0: entered promiscuous mode [ 1451.679159][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.714954][T27008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.731265][T27008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.754794][T27008] bridge_slave_1: entered allmulticast mode [ 1451.793266][T27008] bridge_slave_1: entered promiscuous mode [ 1452.742812][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.968415][T27008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.982248][T27008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.044176][ T5842] Bluetooth: hci5: command tx timeout [ 1453.172969][T27008] team0: Port device team_slave_0 added [ 1453.192346][T27008] team0: Port device team_slave_1 added [ 1453.364920][T27008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.380813][T27008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.492343][T27008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.524297][T27008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.554675][T27008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.603618][T27008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.777691][T27008] hsr_slave_0: entered promiscuous mode [ 1453.786512][T27008] hsr_slave_1: entered promiscuous mode [ 1453.793431][T27008] debugfs: 'hsr0' already exists in 'hsr' [ 1453.800572][T27008] Cannot create hsr debugfs directory [ 1454.657071][ T12] bridge_slave_1: left allmulticast mode [ 1454.724687][ T12] bridge_slave_1: left promiscuous mode [ 1454.731511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.834913][ T12] bridge_slave_0: left allmulticast mode [ 1454.843612][ T12] bridge_slave_0: left promiscuous mode [ 1454.861868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.184080][ T5842] Bluetooth: hci5: command tx timeout [ 1455.941801][ T12] team0: Port device bridge0 removed [ 1456.016244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.039613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.050688][ T12] bond0 (unregistering): Released all slaves [ 1456.365153][ T12] bond1 (unregistering): Released all slaves [ 1456.577412][ T12] bond2 (unregistering): Released all slaves [ 1456.794495][ T12] bond3 (unregistering): Released all slaves [ 1456.810825][ T12] bond4 (unregistering): Released all slaves [ 1456.826344][ T12] bond5 (unregistering): Released all slaves [ 1456.891940][T27095] tap0: tun_chr_ioctl cmd 1074025677 [ 1456.901386][T27095] tap0: linktype set to 768 [ 1456.991716][ T12] : left promiscuous mode [ 1457.209196][ T5842] Bluetooth: hci5: command tx timeout [ 1457.409076][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1457.418532][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1457.428132][T27112] netlink: 'syz.4.5914': attribute type 11 has an invalid length. [ 1457.471866][T27112] netlink: 'syz.4.5914': attribute type 14 has an invalid length. [ 1457.798704][T27116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1459.188607][ T12] hsr_slave_0: left promiscuous mode [ 1459.198825][T27139] FAULT_INJECTION: forcing a failure. [ 1459.198825][T27139] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.237541][ T12] hsr_slave_1: left promiscuous mode [ 1459.246099][T27139] CPU: 0 UID: 0 PID: 27139 Comm: syz.4.5921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.246133][T27139] Tainted: [L]=SOFTLOCKUP [ 1459.246142][T27139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1459.246156][T27139] Call Trace: [ 1459.246164][T27139] [ 1459.246174][T27139] dump_stack_lvl+0xe8/0x150 [ 1459.246207][T27139] should_fail_ex+0x412/0x560 [ 1459.246242][T27139] should_failslab+0xa8/0x100 [ 1459.246270][T27139] __kmalloc_cache_noprof+0x83/0x6e0 [ 1459.246293][T27139] ? sctp_association_new+0x89/0x25e0 [ 1459.246329][T27139] sctp_association_new+0x89/0x25e0 [ 1459.246364][T27139] ? sctp_has_association+0x1cd/0x1f0 [ 1459.246383][T27139] ? sctp_has_association+0x2f/0x1f0 [ 1459.246412][T27139] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1459.246446][T27139] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1459.246478][T27139] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1459.246508][T27139] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1459.246537][T27139] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1459.246567][T27139] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1459.246589][T27139] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1459.246615][T27139] sctp_sendmsg+0x1577/0x2920 [ 1459.246658][T27139] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1459.246686][T27139] ? aa_sk_perm+0x82d/0x960 [ 1459.246722][T27139] ? __pfx_aa_sk_perm+0x10/0x10 [ 1459.246752][T27139] ? sock_rps_record_flow+0x19/0x400 [ 1459.246780][T27139] ? inet_sendmsg+0x2f4/0x370 [ 1459.246801][T27139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1459.246824][T27139] __sock_sendmsg+0x19c/0x270 [ 1459.246854][T27139] ____sys_sendmsg+0x4d7/0x810 [ 1459.246885][T27139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.246915][T27139] ? import_iovec+0x73/0xa0 [ 1459.246941][T27139] ___sys_sendmsg+0x2a5/0x360 [ 1459.246961][T27139] ? __lock_acquire+0x6b5/0x2cf0 [ 1459.246994][T27139] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.247054][T27139] ? __fget_files+0x2a/0x420 [ 1459.247078][T27139] ? __fget_files+0x3a0/0x420 [ 1459.247114][T27139] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1459.247139][T27139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1459.247171][T27139] ? __pfx_ksys_write+0x10/0x10 [ 1459.247204][T27139] do_syscall_64+0xe2/0xf80 [ 1459.247234][T27139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.247254][T27139] ? trace_irq_disable+0x37/0x100 [ 1459.247280][T27139] ? clear_bhb_loop+0x60/0xb0 [ 1459.247305][T27139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.247326][T27139] RIP: 0033:0x7f502e59acb9 [ 1459.247344][T27139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.247362][T27139] RSP: 002b:00007f502f3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.247385][T27139] RAX: ffffffffffffffda RBX: 00007f502e815fa0 RCX: 00007f502e59acb9 [ 1459.247401][T27139] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1459.247414][T27139] RBP: 00007f502f3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.247428][T27139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.247439][T27139] R13: 00007f502e816038 R14: 00007f502e815fa0 R15: 00007f502e93fa48 [ 1459.247474][T27139] [ 1459.317828][T27140] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1459.602932][ T12] batadv_slave_1: left promiscuous mode [ 1459.630758][ T12] veth1_macvtap: left promiscuous mode [ 1459.639620][ T12] veth0_macvtap: left promiscuous mode [ 1459.674371][ T12] veth1_vlan: left promiscuous mode [ 1459.695541][ T12] veth0_vlan: left promiscuous mode [ 1461.194359][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1461.267215][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1462.212236][T27008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1462.301921][T27008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1462.333736][T27008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1462.369425][T27008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1462.454660][T21745] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1462.717901][T21745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.764488][T21745] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 1462.826243][T21745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.946780][T21745] usb 5-1: config 0 descriptor?? [ 1462.982046][ T12] IPVS: stop unused estimator thread 0... [ 1463.113368][T27187] syzkaller0: entered promiscuous mode [ 1463.120424][T27187] syzkaller0: entered allmulticast mode [ 1463.433487][T21745] hid (null): usage index exceeded [ 1463.461199][T21745] hid-corsair-void 0003:1B1C:0A30.003E: ignoring exceeding usage max [ 1463.478630][T21745] hid-corsair-void 0003:1B1C:0A30.003E: ignoring exceeding usage max [ 1463.498792][T21745] hid-corsair-void 0003:1B1C:0A30.003E: usage index exceeded [ 1463.511757][T21745] hid-corsair-void 0003:1B1C:0A30.003E: item 0 1 2 2 parsing failed [ 1463.550093][T21745] hid-corsair-void 0003:1B1C:0A30.003E: parse failed (reason: -22) [ 1463.572139][T21745] hid-corsair-void 0003:1B1C:0A30.003E: probe with driver hid-corsair-void failed with error -22 [ 1463.791911][T27008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.896646][T27008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.978224][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.985497][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.070004][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.077242][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.353614][T27008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.482622][T27008] veth0_vlan: entered promiscuous mode [ 1464.529768][T27008] veth1_vlan: entered promiscuous mode [ 1464.648574][T27008] veth0_macvtap: entered promiscuous mode [ 1464.672278][T27008] veth1_macvtap: entered promiscuous mode [ 1464.729223][T27008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.757617][T27008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.799259][ T2996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.843564][ T2996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.863275][ T2996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.872833][ T2996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.195463][ T5922] usb 5-1: USB disconnect, device number 94 [ 1465.316273][T27213] geneve2: entered promiscuous mode [ 1465.410669][ T6788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.448124][ T6788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.831637][T12532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.850112][T12532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.424599][ T5907] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1466.555853][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1466.834555][ T5907] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1466.984188][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1467.095573][ T5907] usb usb3-port1: attempt power cycle [ 1467.434563][ T5907] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1467.455498][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1467.704894][ T5907] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1467.734648][ T5922] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1467.756023][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1467.891374][ T5907] usb usb3-port1: unable to enumerate USB device [ 1467.978047][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1468.019150][ T5922] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1468.052327][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.091271][ T5922] usb 6-1: config 0 descriptor?? [ 1468.131672][T27250] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1468.907063][ T5922] elan 0003:04F3:0755.003F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1468.946632][T27270] netlink: 'syz.6.5952': attribute type 9 has an invalid length. [ 1468.972189][T27270] netlink: 'syz.6.5952': attribute type 11 has an invalid length. [ 1469.007987][T27270] netlink: 'syz.6.5952': attribute type 12 has an invalid length. [ 1469.048238][T27270] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5952'. [ 1469.073657][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5952'. [ 1469.826075][T27290] FAULT_INJECTION: forcing a failure. [ 1469.826075][T27290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1469.864534][T27290] CPU: 1 UID: 0 PID: 27290 Comm: syz.6.5957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.864569][T27290] Tainted: [L]=SOFTLOCKUP [ 1469.864578][T27290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1469.864592][T27290] Call Trace: [ 1469.864601][T27290] [ 1469.864610][T27290] dump_stack_lvl+0xe8/0x150 [ 1469.864642][T27290] should_fail_ex+0x412/0x560 [ 1469.864677][T27290] _copy_from_user+0x2d/0xb0 [ 1469.864701][T27290] input_event_from_user+0xb1/0x290 [ 1469.864725][T27290] ? __pfx_input_event_from_user+0x10/0x10 [ 1469.864760][T27290] evdev_write+0x2c7/0x4c0 [ 1469.864786][T27290] ? __pfx_evdev_write+0x10/0x10 [ 1469.864808][T27290] ? bpf_lsm_file_permission+0x9/0x20 [ 1469.864830][T27290] ? security_file_permission+0x75/0x260 [ 1469.864855][T27290] ? rw_verify_area+0x255/0x4d0 [ 1469.864885][T27290] ? __pfx_evdev_write+0x10/0x10 [ 1469.864906][T27290] vfs_write+0x29a/0xb90 [ 1469.864935][T27290] ? __pfx_vfs_write+0x10/0x10 [ 1469.864957][T27290] ? __fget_files+0x2a/0x420 [ 1469.864987][T27290] ? __fget_files+0x2a/0x420 [ 1469.865011][T27290] ? __fget_files+0x3a0/0x420 [ 1469.865036][T27290] ? __fget_files+0x2a/0x420 [ 1469.865078][T27290] ksys_write+0x150/0x270 [ 1469.865102][T27290] ? __pfx_ksys_write+0x10/0x10 [ 1469.865135][T27290] do_syscall_64+0xe2/0xf80 [ 1469.865164][T27290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.865184][T27290] ? trace_irq_disable+0x37/0x100 [ 1469.865211][T27290] ? clear_bhb_loop+0x60/0xb0 [ 1469.865237][T27290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.865257][T27290] RIP: 0033:0x7f4cb259acb9 [ 1469.865276][T27290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.865294][T27290] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1469.865317][T27290] RAX: ffffffffffffffda RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1469.865333][T27290] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 1469.865346][T27290] RBP: 00007f4cb33ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1469.865360][T27290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.865372][T27290] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1469.865407][T27290] [ 1470.122263][T27295] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5956'. [ 1470.154587][ T5907] usb 6-1: reset full-speed USB device number 13 using dummy_hcd [ 1470.249015][T27297] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 1470.268632][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1471.296202][ T5922] usb 6-1: USB disconnect, device number 13 [ 1471.440714][T27308] FAULT_INJECTION: forcing a failure. [ 1471.440714][T27308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.471052][T27308] CPU: 1 UID: 0 PID: 27308 Comm: syz.2.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.471086][T27308] Tainted: [L]=SOFTLOCKUP [ 1471.471095][T27308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1471.471108][T27308] Call Trace: [ 1471.471117][T27308] [ 1471.471127][T27308] dump_stack_lvl+0xe8/0x150 [ 1471.471160][T27308] should_fail_ex+0x412/0x560 [ 1471.471196][T27308] _copy_from_user+0x2d/0xb0 [ 1471.471221][T27308] input_event_from_user+0xb1/0x290 [ 1471.471245][T27308] ? __pfx_input_event_from_user+0x10/0x10 [ 1471.471279][T27308] evdev_write+0x2c7/0x4c0 [ 1471.471306][T27308] ? __pfx_evdev_write+0x10/0x10 [ 1471.471328][T27308] ? bpf_lsm_file_permission+0x9/0x20 [ 1471.471350][T27308] ? security_file_permission+0x75/0x260 [ 1471.471376][T27308] ? rw_verify_area+0x255/0x4d0 [ 1471.471407][T27308] ? __pfx_evdev_write+0x10/0x10 [ 1471.471429][T27308] vfs_write+0x29a/0xb90 [ 1471.471459][T27308] ? __pfx_vfs_write+0x10/0x10 [ 1471.471482][T27308] ? __fget_files+0x2a/0x420 [ 1471.471512][T27308] ? __fget_files+0x2a/0x420 [ 1471.471537][T27308] ? __fget_files+0x3a0/0x420 [ 1471.471562][T27308] ? __fget_files+0x2a/0x420 [ 1471.471620][T27308] ksys_write+0x150/0x270 [ 1471.471645][T27308] ? __pfx_ksys_write+0x10/0x10 [ 1471.471677][T27308] do_syscall_64+0xe2/0xf80 [ 1471.471708][T27308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.471728][T27308] ? trace_irq_disable+0x37/0x100 [ 1471.471756][T27308] ? clear_bhb_loop+0x60/0xb0 [ 1471.471781][T27308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.471802][T27308] RIP: 0033:0x7f4f6f39acb9 [ 1471.471821][T27308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.471839][T27308] RSP: 002b:00007f4f702fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1471.471863][T27308] RAX: ffffffffffffffda RBX: 00007f4f6f615fa0 RCX: 00007f4f6f39acb9 [ 1471.471879][T27308] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 1471.471893][T27308] RBP: 00007f4f702fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.471906][T27308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.471919][T27308] R13: 00007f4f6f616038 R14: 00007f4f6f615fa0 R15: 00007f4f6f73fa48 [ 1471.471953][T27308] [ 1472.474671][ T5907] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1472.614764][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1472.795846][T27323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5968'. [ 1472.874296][ T5907] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1473.037898][T27325] fuse: Unknown parameter '' [ 1473.154517][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1473.285113][ T5907] usb usb3-port1: attempt power cycle [ 1473.664526][ T5907] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1473.725887][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1473.948567][T21745] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1473.994730][ T5907] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1474.047602][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1474.177344][ T5907] usb usb3-port1: unable to enumerate USB device [ 1474.211146][T21745] usb 5-1: Using ep0 maxpacket: 8 [ 1474.225642][T21745] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1474.278383][T21745] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1474.321441][T21745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.341998][T27344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5974'. [ 1474.401271][T21745] usb 5-1: config 0 descriptor?? [ 1474.865604][T27338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.902631][T27338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.952622][T27338] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1475.393482][T21745] usbhid 5-1:0.0: can't add hid device: -71 [ 1475.404703][T21745] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1475.448019][T21745] usb 5-1: USB disconnect, device number 95 [ 1475.844208][T21745] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1476.005807][T21745] usb 3-1: Using ep0 maxpacket: 32 [ 1476.013806][T21745] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1476.074587][T21745] usb 3-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 1476.103384][T21745] usb 3-1: Manufacturer: syz [ 1476.111443][T21745] usb 3-1: config 0 descriptor?? [ 1476.419604][T21745] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1476.459565][T21745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1476.496000][T21745] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1476.531224][T21745] usb 3-1: media controller created [ 1476.561036][T27376] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1476.581959][T21745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1476.685455][T21745] az6027: usb out operation failed. (-71) [ 1476.703186][T21745] az6027: usb out operation failed. (-71) [ 1476.719675][T21745] stb0899_attach: Driver disabled by Kconfig [ 1476.734513][T21745] az6027: no front-end attached [ 1476.734513][T21745] [ 1476.751959][T21745] az6027: usb out operation failed. (-71) [ 1476.780102][T21745] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1476.815013][T21745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 1476.862589][T21745] dvb-usb: schedule remote query interval to 400 msecs. [ 1476.878990][T21745] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1476.931757][T21745] usb 3-1: USB disconnect, device number 90 [ 1477.132046][T21745] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1477.835278][T10710] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1477.846840][T21929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1477.860256][T21929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1477.870251][T21929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1477.884665][T21929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1477.926321][T21929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1478.025584][T27391] erspan0: entered promiscuous mode [ 1478.047463][T27391] vlan2: entered promiscuous mode [ 1478.081574][T10710] usb 3-1: config 0 has no interfaces? [ 1478.108188][T10710] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1478.118442][T10710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1478.127101][T10710] usb 3-1: Product: syz [ 1478.131396][T10710] usb 3-1: Manufacturer: syz [ 1478.136447][T10710] usb 3-1: SerialNumber: syz [ 1478.144848][T10710] usb 3-1: config 0 descriptor?? [ 1478.857398][T27395] chnl_net:caif_netlink_parms(): no params data found [ 1479.147183][T27395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.155948][T27395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.192404][T27395] bridge_slave_0: entered allmulticast mode [ 1479.223400][T27395] bridge_slave_0: entered promiscuous mode [ 1479.256870][T27395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.265113][T27411] netlink: 'syz.6.5992': attribute type 21 has an invalid length. [ 1479.293601][T27411] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5992'. [ 1479.315292][T27395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.322607][T27395] bridge_slave_1: entered allmulticast mode [ 1479.366116][T27395] bridge_slave_1: entered promiscuous mode [ 1479.406003][T27411] netlink: 'syz.6.5992': attribute type 5 has an invalid length. [ 1479.417105][T27411] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5992'. [ 1479.577794][T27395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.608212][T27395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.720547][T27395] team0: Port device team_slave_0 added [ 1479.742428][T27395] team0: Port device team_slave_1 added [ 1479.842072][T27395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.866887][T27395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.922595][T27395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.937897][T27395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.945534][T27395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.984924][T27395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.005368][ T5842] Bluetooth: hci0: command tx timeout [ 1480.026271][T27398] loop6: detected capacity change from 0 to 7 [ 1480.046556][ T5958] Dev loop6: unable to read RDB block 7 [ 1480.052221][ T5958] loop6: AHDI p1 p2 [ 1480.061066][ T5958] loop6: partition table partially beyond EOD, truncated [ 1480.081571][T27398] Dev loop6: unable to read RDB block 7 [ 1480.087945][T27395] hsr_slave_0: entered promiscuous mode [ 1480.090723][T27395] hsr_slave_1: entered promiscuous mode [ 1480.106006][T27395] debugfs: 'hsr0' already exists in 'hsr' [ 1480.123671][T27395] Cannot create hsr debugfs directory [ 1480.144724][T27398] loop6: AHDI p1 p2 [ 1480.148942][T27398] loop6: partition table partially beyond EOD, truncated [ 1481.313844][T27395] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.524656][T27433] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1481.779332][T10710] usb 3-1: USB disconnect, device number 91 [ 1482.084728][ T5842] Bluetooth: hci0: command tx timeout [ 1482.380939][T27433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.464172][T27433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.535166][T27433] bond0 (unregistering): Released all slaves [ 1482.578213][T10710] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1482.615998][T27395] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.749590][T27395] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.766519][T10710] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1482.904611][T10710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.932175][T10710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.952225][T10710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1483.115724][T27395] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.223684][T10710] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1483.242846][T10710] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1483.269945][T10710] usb 3-1: Manufacturer: syz [ 1483.289017][T10710] usb 3-1: config 0 descriptor?? [ 1483.709500][T10710] hid_parser_main: 1015 callbacks suppressed [ 1483.709527][T10710] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1483.723073][T27456] bridge_slave_0: default FDB implementation only supports local addresses [ 1483.840431][T10710] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1483.948753][T27395] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1484.002349][T27395] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1484.083322][T27395] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1484.137424][T27395] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1484.197158][ T5842] Bluetooth: hci0: command tx timeout [ 1484.588660][T10710] usb 3-1: USB disconnect, device number 92 [ 1484.914954][T27479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1485.194831][T27395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.356583][T27395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.396005][T19996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.403355][T19996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.498244][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.505554][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.982343][T27395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.094182][T21745] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1486.218305][T27395] veth0_vlan: entered promiscuous mode [ 1486.244804][ T5842] Bluetooth: hci0: command tx timeout [ 1486.285576][T27395] veth1_vlan: entered promiscuous mode [ 1486.298354][T21745] usb 3-1: config 0 has no interfaces? [ 1486.314014][T21745] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1486.415550][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6013'. [ 1486.425174][T27499] netem: invalid attributes len -7 [ 1486.430367][T27499] netem: change failed [ 1486.501795][T21745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1486.542457][T21745] usb 3-1: Product: syz [ 1486.551441][T27482] fuse: Bad value for 'user_id' [ 1486.573131][T21745] usb 3-1: Manufacturer: syz [ 1486.633561][T21745] usb 3-1: SerialNumber: syz [ 1486.664527][T21745] usb 3-1: config 0 descriptor?? [ 1486.696732][T27395] veth0_macvtap: entered promiscuous mode [ 1486.742538][T27395] veth1_macvtap: entered promiscuous mode [ 1486.841483][T27482] fuse: Bad value for 'user_id' [ 1487.296851][T27395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.409412][T27395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.448944][T27505] hsr0: mtu greater than device maximum [ 1487.564666][ T2996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.596628][ T2996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.644707][ T2996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.707625][ T2996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.235758][T27482] netlink: 'syz.5.6004': attribute type 21 has an invalid length. [ 1488.286623][T27482] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6004'. [ 1488.667217][T27482] netlink: 'syz.5.6004': attribute type 5 has an invalid length. [ 1489.268723][T27482] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6004'. [ 1489.281089][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.301230][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.324708][ T5922] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1489.383760][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.395400][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.520663][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1489.539843][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1489.589850][ T5922] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1489.613401][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.642595][ T5922] usb 5-1: Product: syz [ 1489.652777][ T5922] usb 5-1: Manufacturer: syz [ 1489.662972][ T5922] usb 5-1: SerialNumber: syz [ 1489.688474][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.695337][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.705438][ T5922] usb 5-1: config 0 descriptor?? [ 1489.759198][ T5922] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 1489.945924][T27521] netlink: 'syz.4.6018': attribute type 12 has an invalid length. [ 1489.953851][T27521] netlink: 'syz.4.6018': attribute type 29 has an invalid length. [ 1489.962565][T27521] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1489.973269][T27521] netlink: 'syz.4.6018': attribute type 1 has an invalid length. [ 1490.070666][ T5922] usb 5-1: USB disconnect, device number 96 [ 1490.555778][ T5922] usb 3-1: USB disconnect, device number 93 [ 1490.964931][T27539] FAULT_INJECTION: forcing a failure. [ 1490.964931][T27539] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.978704][T27539] CPU: 1 UID: 0 PID: 27539 Comm: syz.4.6023 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.978739][T27539] Tainted: [L]=SOFTLOCKUP [ 1490.978748][T27539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1490.978761][T27539] Call Trace: [ 1490.978770][T27539] [ 1490.978779][T27539] dump_stack_lvl+0xe8/0x150 [ 1490.978813][T27539] should_fail_ex+0x412/0x560 [ 1490.978848][T27539] should_failslab+0xa8/0x100 [ 1490.978876][T27539] __kmalloc_noprof+0xde/0x7e0 [ 1490.978897][T27539] ? io_cache_alloc_new+0x40/0x100 [ 1490.978935][T27539] io_cache_alloc_new+0x40/0x100 [ 1490.978978][T27539] __io_prep_rw+0x2bf/0xed0 [ 1490.979012][T27539] ? __pfx___io_prep_rw+0x10/0x10 [ 1490.979034][T27539] ? percpu_ref_get_many+0x21/0x1e0 [ 1490.979053][T27539] ? percpu_ref_get_many+0x21/0x1e0 [ 1490.979085][T27539] io_prep_rwv+0x8e/0x440 [ 1490.979108][T27539] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1490.979142][T27539] ? __pfx_io_prep_rwv+0x10/0x10 [ 1490.979174][T27539] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 1490.979203][T27539] io_submit_sqes+0xad2/0x2130 [ 1490.979265][T27539] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 1490.979295][T27539] ? rcu_is_watching+0x15/0xb0 [ 1490.979328][T27539] ? trace_sched_exit_tp+0x36/0xf0 [ 1490.979360][T27539] ? __schedule+0x1505/0x4fb0 [ 1490.979401][T27539] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1490.979440][T27539] ? __pfx___schedule+0x10/0x10 [ 1490.979480][T27539] ? fput+0xa0/0xd0 [ 1490.979508][T27539] ? ksys_write+0x242/0x270 [ 1490.979532][T27539] ? rcu_is_watching+0x15/0xb0 [ 1490.979559][T27539] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1490.979585][T27539] do_syscall_64+0xe2/0xf80 [ 1490.979614][T27539] ? rcu_is_watching+0x15/0xb0 [ 1490.979637][T27539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.979659][T27539] ? clear_bhb_loop+0x60/0xb0 [ 1490.979685][T27539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.979706][T27539] RIP: 0033:0x7f502e59acb9 [ 1490.979726][T27539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.979744][T27539] RSP: 002b:00007f502f3b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1490.979767][T27539] RAX: ffffffffffffffda RBX: 00007f502e816180 RCX: 00007f502e59acb9 [ 1490.979783][T27539] RDX: 0000000000003e82 RSI: 00000000000047ba RDI: 0000000000000007 [ 1490.979796][T27539] RBP: 00007f502f3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.979809][T27539] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 1490.979822][T27539] R13: 00007f502e816218 R14: 00007f502e816180 R15: 00007f502e93fa48 [ 1490.979857][T27539] [ 1493.674501][ T5935] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1493.765508][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'. [ 1493.924316][T27572] netlink: 'syz.2.6034': attribute type 5 has an invalid length. [ 1493.952609][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.972690][T27572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6034'. [ 1494.048742][ T3019] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.057843][ T3019] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.082994][ T3019] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.099682][ T3019] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.139706][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1494.160950][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.174819][ T5935] usb 5-1: Product: syz [ 1494.179057][ T5935] usb 5-1: Manufacturer: syz [ 1494.184725][ T5935] usb 5-1: SerialNumber: syz [ 1494.191518][ T5935] usb 5-1: config 0 descriptor?? [ 1494.354723][T27578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1494.361340][T27578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1494.454350][ T5935] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1494.537112][T27568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1494.548486][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.565248][ T5922] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1494.742382][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1494.755530][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1494.783192][ T5922] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 1494.820306][ T5922] usb 3-1: config 0 has no interface number 0 [ 1494.861020][ T5922] usb 3-1: config 0 interface 63 has no altsetting 0 [ 1494.901196][ T5922] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 1494.922516][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.952991][ T5922] usb 3-1: Product: syz [ 1494.963421][ T5922] usb 3-1: Manufacturer: syz [ 1494.981852][ T5922] usb 3-1: SerialNumber: syz [ 1495.064623][ T5922] usb 3-1: config 0 descriptor?? [ 1495.352660][ T5922] kvaser_usb 3-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 1495.428500][ T5922] usb 3-1: USB disconnect, device number 94 [ 1496.288293][T27587] netlink: 'syz.2.6039': attribute type 21 has an invalid length. [ 1496.296781][T27587] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6039'. [ 1496.795281][T10710] usb 5-1: USB disconnect, device number 97 [ 1497.545232][T27596] netlink: 'syz.7.6041': attribute type 1 has an invalid length. [ 1497.553257][T27596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.799844][T27587] netlink: 'syz.2.6039': attribute type 5 has an invalid length. [ 1497.814556][T27587] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6039'. [ 1498.391638][ T5935] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1498.580323][ T5935] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1498.603490][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.635965][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.666428][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1498.750960][ T5935] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1498.769162][ T5935] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1498.782966][ T5935] usb 5-1: Manufacturer: syz [ 1498.818453][ T5935] usb 5-1: config 0 descriptor?? [ 1499.318893][ T5935] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 1499.331514][ T5935] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1501.224537][T22216] usb 5-1: reset high-speed USB device number 98 using dummy_hcd [ 1501.501356][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1501.501378][ T30] audit: type=1804 audit(1769367880.353:923): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6052" name="/newroot/117/file1" dev="fuse" ino=1 res=1 errno=0 [ 1501.901184][T27640] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1501.921253][T27640] PKCS7: Only support pkcs7_signedData type [ 1502.007142][T10710] usb 5-1: USB disconnect, device number 98 [ 1502.289543][T27650] FAULT_INJECTION: forcing a failure. [ 1502.289543][T27650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.349455][T27650] CPU: 1 UID: 0 PID: 27650 Comm: syz.6.6057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.349487][T27650] Tainted: [L]=SOFTLOCKUP [ 1502.349495][T27650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1502.349509][T27650] Call Trace: [ 1502.349518][T27650] [ 1502.349528][T27650] dump_stack_lvl+0xe8/0x150 [ 1502.349561][T27650] should_fail_ex+0x412/0x560 [ 1502.349595][T27650] _copy_from_iter+0x1d3/0x1670 [ 1502.349638][T27650] ? do_raw_spin_lock+0x12b/0x2f0 [ 1502.349668][T27650] ? __pfx__copy_from_iter+0x10/0x10 [ 1502.349709][T27650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1502.349741][T27650] write_pool_user+0x101/0x310 [ 1502.349769][T27650] ? __pfx_write_pool_user+0x10/0x10 [ 1502.349790][T27650] ? common_file_perm+0x1b4/0x220 [ 1502.349822][T27650] ? bpf_lsm_file_permission+0x9/0x20 [ 1502.349843][T27650] ? security_file_permission+0x75/0x260 [ 1502.349876][T27650] vfs_write+0x61d/0xb90 [ 1502.349905][T27650] ? __pfx_vfs_write+0x10/0x10 [ 1502.349936][T27650] ? __fget_files+0x2a/0x420 [ 1502.349971][T27650] ksys_write+0x150/0x270 [ 1502.349994][T27650] ? __pfx_ksys_write+0x10/0x10 [ 1502.350025][T27650] do_syscall_64+0xe2/0xf80 [ 1502.350055][T27650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.350076][T27650] ? trace_irq_disable+0x37/0x100 [ 1502.350103][T27650] ? clear_bhb_loop+0x60/0xb0 [ 1502.350129][T27650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.350149][T27650] RIP: 0033:0x7f4cb259acb9 [ 1502.350176][T27650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.350194][T27650] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1502.350218][T27650] RAX: ffffffffffffffda RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1502.350233][T27650] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000004 [ 1502.350247][T27650] RBP: 00007f4cb33ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.350261][T27650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.350273][T27650] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1502.350307][T27650] [ 1502.361366][T27651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.667465][T27655] FAULT_INJECTION: forcing a failure. [ 1502.667465][T27655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.742883][T27655] CPU: 0 UID: 0 PID: 27655 Comm: syz.6.6059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.742916][T27655] Tainted: [L]=SOFTLOCKUP [ 1502.742925][T27655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1502.742938][T27655] Call Trace: [ 1502.742947][T27655] [ 1502.742957][T27655] dump_stack_lvl+0xe8/0x150 [ 1502.742989][T27655] should_fail_ex+0x412/0x560 [ 1502.743025][T27655] _copy_from_user+0x2d/0xb0 [ 1502.743049][T27655] __copy_msghdr+0x3c5/0x5b0 [ 1502.743074][T27655] ___sys_sendmsg+0x213/0x360 [ 1502.743094][T27655] ? __lock_acquire+0x6b5/0x2cf0 [ 1502.743120][T27655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.743174][T27655] ? __fget_files+0x2a/0x420 [ 1502.743199][T27655] ? __fget_files+0x3a0/0x420 [ 1502.743235][T27655] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1502.743259][T27655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.743290][T27655] ? __pfx_ksys_write+0x10/0x10 [ 1502.743335][T27655] do_syscall_64+0xe2/0xf80 [ 1502.743365][T27655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.743386][T27655] ? trace_irq_disable+0x37/0x100 [ 1502.743413][T27655] ? clear_bhb_loop+0x60/0xb0 [ 1502.743438][T27655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.743459][T27655] RIP: 0033:0x7f4cb259acb9 [ 1502.743477][T27655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.743495][T27655] RSP: 002b:00007f4cb33ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.743518][T27655] RAX: ffffffffffffffda RBX: 00007f4cb2815fa0 RCX: 00007f4cb259acb9 [ 1502.743533][T27655] RDX: 0000000020044001 RSI: 0000200000000200 RDI: 0000000000000003 [ 1502.743547][T27655] RBP: 00007f4cb33ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.743560][T27655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.743573][T27655] R13: 00007f4cb2816038 R14: 00007f4cb2815fa0 R15: 00007f4cb293fa48 [ 1502.743604][T27655] [ 1503.322568][T27660] netlink: 208316 bytes leftover after parsing attributes in process `syz.2.6061'. [ 1503.584379][T21745] psmouse serio6: Failed to reset mouse on : -5 [ 1503.674053][T10710] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1503.826380][T10710] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1503.838290][T10710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.850538][T10710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.870098][T10710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1503.889189][T10710] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1503.899197][T10710] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1503.911354][T10710] usb 5-1: Manufacturer: syz [ 1503.924720][T10710] usb 5-1: config 0 descriptor?? [ 1504.069068][T27675] fuse: Bad value for 'fd' [ 1504.276499][ T30] audit: type=1326 audit(1769367883.163:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.397320][T10710] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 1504.409761][ T30] audit: type=1326 audit(1769367883.163:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.491446][T27679] netlink: 'syz.2.6066': attribute type 1 has an invalid length. [ 1504.504518][T27679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1504.546304][T27679] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1504.553500][T27679] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1504.574753][T27679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1504.591293][ T30] audit: type=1326 audit(1769367883.193:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.633727][T10710] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1504.646989][ T30] audit: type=1326 audit(1769367883.193:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.727094][ T30] audit: type=1326 audit(1769367883.193:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.799948][ T30] audit: type=1326 audit(1769367883.193:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1504.888815][ T30] audit: type=1326 audit(1769367883.193:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1505.006370][T27676] ALSA: mixer_oss: invalid OSS volume '' [ 1505.060425][ T30] audit: type=1326 audit(1769367883.193:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1505.156797][ T30] audit: type=1326 audit(1769367883.193:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f6f39acb9 code=0x7ffc0000 [ 1505.319726][T27684] misc userio: The device must be registered before sending interrupts [ 1505.926035][ T984] usb 5-1: reset high-speed USB device number 99 using dummy_hcd [ 1507.004569][T22216] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1507.116067][T18730] usb 5-1: USB disconnect, device number 99 [ 1507.144574][T22216] usb 3-1: device descriptor read/64, error -71 [ 1507.387534][T22216] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1507.452588][T27705] FAULT_INJECTION: forcing a failure. [ 1507.452588][T27705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.469229][T27705] CPU: 0 UID: 0 PID: 27705 Comm: syz.7.6074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.469266][T27705] Tainted: [L]=SOFTLOCKUP [ 1507.469275][T27705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1507.469289][T27705] Call Trace: [ 1507.469299][T27705] [ 1507.469308][T27705] dump_stack_lvl+0xe8/0x150 [ 1507.469345][T27705] should_fail_ex+0x412/0x560 [ 1507.469382][T27705] _copy_from_user+0x2d/0xb0 [ 1507.469409][T27705] ppp_async_ioctl+0x19e/0x760 [ 1507.469453][T27705] ? __pfx_ppp_async_ioctl+0x10/0x10 [ 1507.469492][T27705] ? down_read+0x272/0x2e0 [ 1507.469516][T27705] ? __pfx_ppp_async_ioctl+0x10/0x10 [ 1507.469545][T27705] ppp_ioctl+0x95f/0x1ab0 [ 1507.469580][T27705] ? __pfx_ppp_ioctl+0x10/0x10 [ 1507.469612][T27705] ? __fget_files+0x2a/0x420 [ 1507.469638][T27705] ? __fget_files+0x3a0/0x420 [ 1507.469662][T27705] ? __fget_files+0x2a/0x420 [ 1507.469692][T27705] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1507.469715][T27705] ? __pfx_ppp_ioctl+0x10/0x10 [ 1507.469743][T27705] __se_sys_ioctl+0xfc/0x170 [ 1507.469778][T27705] do_syscall_64+0xe2/0xf80 [ 1507.469808][T27705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.469828][T27705] ? trace_irq_disable+0x37/0x100 [ 1507.469856][T27705] ? clear_bhb_loop+0x60/0xb0 [ 1507.469882][T27705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.469903][T27705] RIP: 0033:0x7f8616d9acb9 [ 1507.469922][T27705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.469941][T27705] RSP: 002b:00007f8617cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.469964][T27705] RAX: ffffffffffffffda RBX: 00007f8617015fa0 RCX: 00007f8616d9acb9 [ 1507.469980][T27705] RDX: 0000200000000000 RSI: 000000004020744f RDI: 0000000000000004 [ 1507.469994][T27705] RBP: 00007f8617cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.470007][T27705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.470020][T27705] R13: 00007f8617016038 R14: 00007f8617015fa0 R15: 00007f861713fa48 [ 1507.470055][T27705] [ 1507.475788][T21745] misc userio: Buffer overflowed, userio client isn't keeping up [ 1507.545944][T22216] usb 3-1: device descriptor read/64, error -71 [ 1507.774399][T27707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1507.905201][T22216] usb usb3-port1: attempt power cycle [ 1508.294578][T22216] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1508.324091][T21743] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1508.327744][T22216] usb 3-1: device descriptor read/8, error -71 [ 1508.474434][T21743] usb 5-1: Using ep0 maxpacket: 8 [ 1508.501078][T21743] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1508.509549][T21743] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1508.524601][T21743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.567471][T21743] usb 5-1: config 0 descriptor?? [ 1508.596896][T22216] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1508.646068][T22216] usb 3-1: device descriptor read/8, error -71 [ 1508.709697][T21745] input: PS/2 Generic Mouse as /devices/serio6/input/input105 [ 1508.764478][T22216] usb usb3-port1: unable to enumerate USB device [ 1508.944379][T21745] psmouse serio6: Failed to enable mouse on [ 1508.999426][T27715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.012030][T27715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.027991][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1509.073109][T21743] usbhid 5-1:0.0: can't add hid device: -71 [ 1509.085872][T21743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1509.144956][T21743] usb 5-1: USB disconnect, device number 100 [ 1509.870474][T27732] tipc: Started in network mode [ 1509.875658][T27732] tipc: Node identity ee9e8d687d78, cluster identity 4711 [ 1509.883135][T27732] tipc: Enabled bearer , priority 0 [ 1509.912299][T27732] syzkaller0: entered promiscuous mode [ 1509.919942][T27732] syzkaller0: entered allmulticast mode [ 1509.978705][T27732] team_slave_0: mtu less than device minimum [ 1510.064569][T22216] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1510.141461][T27741] fuse: Bad value for 'rootmode' [ 1510.270846][T27743] xt_TCPMSS: Only works on TCP SYN packets [ 1510.338184][T22216] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1510.363568][T22216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.405996][T22216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.452217][T22216] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1510.764496][T22216] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1510.797560][T22216] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1510.824406][T22216] usb 6-1: Manufacturer: syz [ 1510.845567][T22216] usb 6-1: config 0 descriptor?? [ 1510.875357][T21745] tipc: Node number set to 2481360232 [ 1511.406462][T22216] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 1511.433582][T22216] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1512.281391][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 1512.774612][T10710] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 1513.102491][T27766] input: syz0 as /devices/virtual/input/input106 [ 1513.299729][T27732] tipc: Resetting bearer [ 1513.566557][T27732] tipc: Disabling bearer [ 1513.794411][ T5907] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1513.803204][T22216] usb 6-1: USB disconnect, device number 14 [ 1513.836805][T27777] FAULT_INJECTION: forcing a failure. [ 1513.836805][T27777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.924957][T27777] CPU: 1 UID: 0 PID: 27777 Comm: syz.7.6093 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.924992][T27777] Tainted: [L]=SOFTLOCKUP [ 1513.925000][T27777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1513.925013][T27777] Call Trace: [ 1513.925021][T27777] [ 1513.925030][T27777] dump_stack_lvl+0xe8/0x150 [ 1513.925072][T27777] should_fail_ex+0x412/0x560 [ 1513.925098][T27777] _copy_from_user+0x2d/0xb0 [ 1513.925115][T27777] __sys_bind+0x1c6/0x410 [ 1513.925138][T27777] ? __pfx___sys_bind+0x10/0x10 [ 1513.925167][T27777] ? __pfx_ksys_write+0x10/0x10 [ 1513.925186][T27777] __x64_sys_bind+0x7a/0x90 [ 1513.925207][T27777] do_syscall_64+0xe2/0xf80 [ 1513.925228][T27777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.925243][T27777] ? trace_irq_disable+0x37/0x100 [ 1513.925262][T27777] ? clear_bhb_loop+0x60/0xb0 [ 1513.925279][T27777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.925294][T27777] RIP: 0033:0x7f8616d9acb9 [ 1513.925307][T27777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.925320][T27777] RSP: 002b:00007f8617cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1513.925337][T27777] RAX: ffffffffffffffda RBX: 00007f8617015fa0 RCX: 00007f8616d9acb9 [ 1513.925348][T27777] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1513.925357][T27777] RBP: 00007f8617cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.925367][T27777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.925376][T27777] R13: 00007f8617016038 R14: 00007f8617015fa0 R15: 00007f861713fa48 [ 1513.925398][T27777] [ 1514.102149][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 1514.326752][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1514.333467][ T5907] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1514.359939][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.417009][ T5907] usb 5-1: config 0 descriptor?? [ 1514.613280][T27782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1514.797254][T27788] veth1_to_batadv: entered promiscuous mode [ 1514.849003][T27771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.860432][T27771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.881143][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1514.908232][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 1514.919024][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1514.959146][ T5907] usb 5-1: USB disconnect, device number 101 [ 1514.996953][T27793] FAULT_INJECTION: forcing a failure. [ 1514.996953][T27793] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.014284][T21743] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1515.048239][T27793] CPU: 0 UID: 0 PID: 27793 Comm: syz.6.6099 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.048276][T27793] Tainted: [L]=SOFTLOCKUP [ 1515.048286][T27793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1515.048300][T27793] Call Trace: [ 1515.048310][T27793] [ 1515.048320][T27793] dump_stack_lvl+0xe8/0x150 [ 1515.048354][T27793] should_fail_ex+0x412/0x560 [ 1515.048391][T27793] should_failslab+0xa8/0x100 [ 1515.048420][T27793] __kmalloc_noprof+0xde/0x7e0 [ 1515.048441][T27793] ? iter_file_splice_write+0x1d4/0x1100 [ 1515.048472][T27793] iter_file_splice_write+0x1d4/0x1100 [ 1515.048498][T27793] ? __lock_acquire+0x6b5/0x2cf0 [ 1515.048543][T27793] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1515.048569][T27793] ? direct_splice_actor+0x49/0x160 [ 1515.048597][T27793] ? direct_splice_actor+0x49/0x160 [ 1515.048638][T27793] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1515.048665][T27793] direct_splice_actor+0x101/0x160 [ 1515.048697][T27793] splice_direct_to_actor+0x53a/0xc70 [ 1515.048744][T27793] ? __pfx_direct_splice_actor+0x10/0x10 [ 1515.048780][T27793] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1515.048818][T27793] do_splice_direct+0x195/0x290 [ 1515.048848][T27793] ? __pfx_do_splice_direct+0x10/0x10 [ 1515.048872][T27793] ? common_file_perm+0x1b4/0x220 [ 1515.048901][T27793] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1515.048937][T27793] ? rw_verify_area+0x255/0x4d0 [ 1515.048974][T27793] do_sendfile+0x535/0x7c0 [ 1515.049010][T27793] ? __pfx_do_sendfile+0x10/0x10 [ 1515.049036][T27793] ? __fget_files+0x3a0/0x420 [ 1515.049074][T27793] __se_sys_sendfile64+0x144/0x1a0 [ 1515.049103][T27793] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1515.049141][T27793] do_syscall_64+0xe2/0xf80 [ 1515.049171][T27793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.049191][T27793] ? trace_irq_disable+0x37/0x100 [ 1515.049218][T27793] ? clear_bhb_loop+0x60/0xb0 [ 1515.049243][T27793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.049263][T27793] RIP: 0033:0x7f4cb259acb9 [ 1515.049283][T27793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.049302][T27793] RSP: 002b:00007f4cb33ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1515.049325][T27793] RAX: ffffffffffffffda RBX: 00007f4cb2816090 RCX: 00007f4cb259acb9 [ 1515.049341][T27793] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1515.049354][T27793] RBP: 00007f4cb33ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.049367][T27793] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.049381][T27793] R13: 00007f4cb2816128 R14: 00007f4cb2816090 R15: 00007f4cb293fa48 [ 1515.049415][T27793] [ 1515.255815][T21743] usb 6-1: Using ep0 maxpacket: 16 [ 1515.727167][T21743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.749261][T21743] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1515.781460][T21743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.820569][T21743] usb 6-1: config 0 descriptor?? [ 1515.947431][T27799] usb usb8: selecting invalid altsetting 2047 [ 1516.306890][T21743] mcp2221 0003:04D8:00DD.0044: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1516.741994][T27799] cgroup: fork rejected by pids controller in /syz6 [ 1517.714667][T22216] usb 6-1: USB disconnect, device number 15 [ 1519.219806][T27853] hsr0: mtu greater than device maximum [ 1519.820704][T22216] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1520.024710][T22216] usb 3-1: Using ep0 maxpacket: 8 [ 1520.035178][T22216] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.052392][T22216] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1520.103018][T22216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.220093][T22216] usb 3-1: config 0 descriptor?? [ 1520.641139][T27859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.651346][T27859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.692242][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6112'. [ 1520.817696][T22216] usbhid 3-1:0.0: can't add hid device: -71 [ 1520.823770][T22216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1520.923456][T22216] usb 3-1: USB disconnect, device number 99 [ 1521.665336][T27879] FAULT_INJECTION: forcing a failure. [ 1521.665336][T27879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.707028][T27879] CPU: 1 UID: 0 PID: 27879 Comm: syz.4.6117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.707094][T27879] Tainted: [L]=SOFTLOCKUP [ 1521.707103][T27879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1521.707117][T27879] Call Trace: [ 1521.707132][T27879] [ 1521.707142][T27879] dump_stack_lvl+0xe8/0x150 [ 1521.707175][T27879] should_fail_ex+0x412/0x560 [ 1521.707210][T27879] _copy_from_user+0x2d/0xb0 [ 1521.707234][T27879] ___sys_recvmsg+0x175/0x590 [ 1521.707263][T27879] ? __pfx____sys_recvmsg+0x10/0x10 [ 1521.707289][T27879] ? __fget_files+0x2a/0x420 [ 1521.707346][T27879] do_recvmmsg+0x334/0x800 [ 1521.707377][T27879] ? __pfx_do_recvmmsg+0x10/0x10 [ 1521.707412][T27879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.707460][T27879] __x64_sys_recvmmsg+0x198/0x250 [ 1521.707486][T27879] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1521.707521][T27879] do_syscall_64+0xe2/0xf80 [ 1521.707550][T27879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.707570][T27879] ? trace_irq_disable+0x37/0x100 [ 1521.707597][T27879] ? clear_bhb_loop+0x60/0xb0 [ 1521.707622][T27879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.707642][T27879] RIP: 0033:0x7f502e59acb9 [ 1521.707661][T27879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.707679][T27879] RSP: 002b:00007f502f3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1521.707701][T27879] RAX: ffffffffffffffda RBX: 00007f502e815fa0 RCX: 00007f502e59acb9 [ 1521.707717][T27879] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 0000000000000003 [ 1521.707731][T27879] RBP: 00007f502f3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.707745][T27879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.707758][T27879] R13: 00007f502e816038 R14: 00007f502e815fa0 R15: 00007f502e93fa48 [ 1521.707790][T27879] [ 1522.357542][T27888] netlink: 'syz.7.6121': attribute type 1 has an invalid length. [ 1523.014486][ T12] ------------[ cut here ]------------ [ 1523.020029][ T12] conntrack cleanup blocked for 60s [ 1523.020052][ T12] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:0/12 [ 1523.038053][ T12] Modules linked in: [ 1523.042447][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.053667][ T12] Tainted: [L]=SOFTLOCKUP [ 1523.058182][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1523.068337][ T12] Workqueue: netns cleanup_net [ 1523.073184][ T12] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.080302][ T12] Code: 08 48 89 df e8 8d b7 8d f8 4c 8b 3b 49 39 df 74 69 e8 40 b1 26 f8 45 31 e4 e9 8e fe ff ff e8 33 b1 26 f8 48 8d 3d bc a7 41 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1523.100349][ T12] RSP: 0000:ffffc90000117870 EFLAGS: 00010293 [ 1523.107421][ T12] RAX: ffffffff899be82d RBX: ffffc90000117a00 RCX: ffff88801ceadb80 [ 1523.115939][ T12] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff8fdd8ff0 [ 1523.124184][ T12] RBP: 0000000000000002 R08: ffff8880522df803 R09: 1ffff1100a45bf00 [ 1523.132237][ T12] R10: dffffc0000000000 R11: ffffed100a45bf01 R12: 0000000000000001 [ 1523.140548][ T12] R13: dffffc0000000000 R14: 000000010001dd04 R15: 000000010001dd05 [ 1523.148616][ T12] FS: 0000000000000000(0000) GS:ffff888125a26000(0000) knlGS:0000000000000000 [ 1523.157609][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1523.164551][ T12] CR2: 00002000000c5030 CR3: 0000000092fe4000 CR4: 00000000003526f0 [ 1523.172584][ T12] Call Trace: [ 1523.175960][ T12] [ 1523.178967][ T12] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1523.185142][ T12] ops_undo_list+0x52b/0x940 [ 1523.189884][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 1523.195666][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 1523.200851][ T12] cleanup_net+0x4df/0x7b0 [ 1523.205446][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 1523.210957][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1523.217198][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1523.222981][ T12] process_scheduled_works+0xaec/0x17a0 [ 1523.228939][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1523.235033][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1523.240128][ T12] ? assign_work+0x3d3/0x440 [ 1523.244827][ T12] worker_thread+0x89f/0xd90 [ 1523.249512][ T12] kthread+0x726/0x8b0 [ 1523.253613][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1523.259108][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.263792][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1523.269120][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.274001][ T12] ret_from_fork+0x51b/0xa40 [ 1523.278659][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.283781][ T12] ? __switch_to+0xc82/0x1410 [ 1523.288915][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.293581][ T12] ret_from_fork_asm+0x1a/0x30 [ 1523.298456][ T12] [ 1523.301496][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1523.308816][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.319681][ T12] Tainted: [L]=SOFTLOCKUP [ 1523.324026][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1523.334129][ T12] Workqueue: netns cleanup_net [ 1523.338951][ T12] Call Trace: [ 1523.342241][ T12] [ 1523.345199][ T12] vpanic+0x1e0/0x670 [ 1523.349231][ T12] panic+0xc5/0xd0 [ 1523.352966][ T12] ? __pfx_panic+0x10/0x10 [ 1523.357405][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1523.362387][ T12] __warn+0x315/0x4a0 [ 1523.366381][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.372553][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.378726][ T12] __report_bug+0x29a/0x540 [ 1523.383249][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.389423][ T12] ? __pfx___report_bug+0x10/0x10 [ 1523.394490][ T12] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 1523.400728][ T12] report_bug_entry+0x19a/0x290 [ 1523.405607][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.411795][ T12] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 1523.417969][ T12] handle_bug+0xca/0x200 [ 1523.422238][ T12] exc_invalid_op+0x1a/0x50 [ 1523.426750][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1523.431613][ T12] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1523.438397][ T12] Code: 08 48 89 df e8 8d b7 8d f8 4c 8b 3b 49 39 df 74 69 e8 40 b1 26 f8 45 31 e4 e9 8e fe ff ff e8 33 b1 26 f8 48 8d 3d bc a7 41 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1523.458020][ T12] RSP: 0000:ffffc90000117870 EFLAGS: 00010293 [ 1523.464112][ T12] RAX: ffffffff899be82d RBX: ffffc90000117a00 RCX: ffff88801ceadb80 [ 1523.472113][ T12] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff8fdd8ff0 [ 1523.480095][ T12] RBP: 0000000000000002 R08: ffff8880522df803 R09: 1ffff1100a45bf00 [ 1523.488082][ T12] R10: dffffc0000000000 R11: ffffed100a45bf01 R12: 0000000000000001 [ 1523.496068][ T12] R13: dffffc0000000000 R14: 000000010001dd04 R15: 000000010001dd05 [ 1523.504072][ T12] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 1523.510279][ T12] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1523.516365][ T12] ops_undo_list+0x52b/0x940 [ 1523.521004][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 1523.526134][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 1523.531273][ T12] cleanup_net+0x4df/0x7b0 [ 1523.535722][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 1523.540702][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1523.546435][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1523.552174][ T12] process_scheduled_works+0xaec/0x17a0 [ 1523.557817][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1523.563813][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1523.568869][ T12] ? assign_work+0x3d3/0x440 [ 1523.573509][ T12] worker_thread+0x89f/0xd90 [ 1523.578129][ T12] kthread+0x726/0x8b0 [ 1523.582241][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1523.587371][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.592015][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1523.597242][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.601869][ T12] ret_from_fork+0x51b/0xa40 [ 1523.606504][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.611653][ T12] ? __switch_to+0xc82/0x1410 [ 1523.616376][ T12] ? __pfx_kthread+0x10/0x10 [ 1523.621011][ T12] ret_from_fork_asm+0x1a/0x30 [ 1523.625842][ T12] [ 1523.629529][ T12] Kernel Offset: disabled [ 1523.633869][ T12] Rebooting in 86400 seconds..