last executing test programs: 20m40.35520763s ago: executing program 3 (id=1780): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r7}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb50600b9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1018}], 0x1, 0x40804) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 20m36.804214504s ago: executing program 3 (id=1799): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c9a311771000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef0000001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) 20m36.534892756s ago: executing program 3 (id=1802): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000240)={0x6, 'veth1_to_bond\x00', {0x8001}, 0x7171}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f00000002c0)={0x8000000000000000, 0x4}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x9, 0x3, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000004, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0xfffffffc, 0x7]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x4, 0x32, @mcast1, @mcast2, 0x20, 0x7, 0x5, 0x1}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x0, 0x1a, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x7f, [0x3, 0x0, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x917}, @pad1, @generic={0xb, 0xa7, "5b2ef7a4b08c92e2b9344b6dc66f50401a5d28550ceb0fd63733ca7d6a9333be13f4583d4d0dc439281b20b3cbf69d1eca792317d983b44dd45755fce180523f4e83f7d1ba945727279ddfdf21607161fdd8bba4131ef22aece5d4bd48c5dccfe1977f57d18d261bf00a6b978ea340750bee278792d3c869765ea3c2be66cb8cfb5ff242482e8907f3ec6019e5b27f4919b1a8b74f146a656970c2446d3f6868a372bccb34bbe1"}]}, 0xe0) 20m36.316264235s ago: executing program 3 (id=1805): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x2400c800) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000423f677c40000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020600000000000000797a300000000008000340000000010c0006400000000000000002140000001100010000000000000000000000000a"], 0x98}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000002c0)={'veth0_vlan\x00'}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00dce3b5adbaa6993195ce8daca96372ffd55c3376079efad14557d3e79038972ed2d8f7f6905a65166e240ab0f38a037b8a854ba114e51214c1a0ac149f83d9907a60fb0588bbfbd440"], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000600)) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f00000005c0)='./file0\x00', r11, &(0x7f0000000300)='./file0\x00', 0x234) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x210, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x19c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x400, @private2, 0x67}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffffd}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x631d}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x530}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x10}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "a693dc01aabe854ef3faaf0afefddbc4b53db50e10e67f36d1297fec43b27452a213025621f30a5e7e8fc469c0d234c5d4e2068c89c4990769f8dd6c1872cc9fce7b130c80d9466a71e44d94b371e6a602a7583ad65552"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x24000) 20m34.725517225s ago: executing program 3 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x101, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r5 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x818}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0xfc, 0x9, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8000, 0xfffff1e2, 0x38}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r11, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x1406, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000030000000500000000000000000000000100000001000000ffffffff"]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv4_getaddr={0x94, 0x16, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x1, 0x1, 0xfd, r8}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_CACHEINFO={0x14, 0x6, {0xffffc000, 0x97, 0x2400, 0x6}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8, 0x5566}}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LABEL={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x94}}, 0x4048004) 20m34.146418125s ago: executing program 3 (id=1817): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x31}, 0xffff0000, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000122900000002"], 0x28}}], 0x1, 0x40) 20m33.792630497s ago: executing program 32 (id=1817): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x31}, 0xffff0000, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000122900000002"], 0x28}}], 0x1, 0x40) 19m6.162453394s ago: executing program 5 (id=2249): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206012200000000000000000000000014000780080011400000000005001500020000000500050007000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574e5ff00"], 0x64}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x65d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf8}, 0x1c) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x10003, 0x0) 19m5.072372429s ago: executing program 5 (id=2253): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40080000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9f500", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffc, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0xf, 0x40, 0x4, "45bba11ded984569d836ea"}]}}}}}}}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 19m3.742820821s ago: executing program 5 (id=2258): socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) r0 = timerfd_create(0x0, 0x800) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}, {0x0}], 0x2}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) link(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000100)={0x4, r10}) unshare(0x2a020600) ioctl$DMA_BUF_SET_NAME_A(r12, 0x40086203, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x5e, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r13}}) io_uring_enter(r7, 0x47ba, 0xe439, 0x28, 0x0, 0x0) 19m3.615890821s ago: executing program 5 (id=2259): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x100, 0xec}, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0}) 19m3.592632918s ago: executing program 5 (id=2260): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)="db700e444da6dbb2d61da8c51c2f9e6ab6bc50a969", 0x15}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1000000000000000, 0x2000000000001]}}) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 19m1.856709748s ago: executing program 5 (id=2266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6, 0x1b, 0x0, 0x2, 0x2, 0xccd, 0x0, 0x7}, &(0x7f00000000c0)={0x7ff, 0x8, 0x3, 0x2, 0x7fff, 0x0, 0xb26d, 0x6}, &(0x7f0000000140)={0x7, 0x10001, 0x7, 0xdcf, 0x0, 0x3, 0xaec9, 0x5}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89be", 0x2}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x6, 0x1b, 0x0, 0x2, 0x2, 0xccd, 0x0, 0x7}, &(0x7f00000000c0)={0x7ff, 0x8, 0x3, 0x2, 0x7fff, 0x0, 0xb26d, 0x6}, &(0x7f0000000140)={0x7, 0x10001, 0x7, 0xdcf, 0x0, 0x3, 0xaec9, 0x5}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89be", 0x2}, {0x0}], 0x2) (async) 18m46.761792204s ago: executing program 33 (id=2266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6, 0x1b, 0x0, 0x2, 0x2, 0xccd, 0x0, 0x7}, &(0x7f00000000c0)={0x7ff, 0x8, 0x3, 0x2, 0x7fff, 0x0, 0xb26d, 0x6}, &(0x7f0000000140)={0x7, 0x10001, 0x7, 0xdcf, 0x0, 0x3, 0xaec9, 0x5}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89be", 0x2}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x6, 0x1b, 0x0, 0x2, 0x2, 0xccd, 0x0, 0x7}, &(0x7f00000000c0)={0x7ff, 0x8, 0x3, 0x2, 0x7fff, 0x0, 0xb26d, 0x6}, &(0x7f0000000140)={0x7, 0x10001, 0x7, 0xdcf, 0x0, 0x3, 0xaec9, 0x5}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89be", 0x2}, {0x0}], 0x2) (async) 2m34.701849804s ago: executing program 1 (id=6821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 2m33.510844384s ago: executing program 1 (id=6825): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x8a, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0xff, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf9, 0x58, 0x4}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0x74, 0x7, 0x10, 0x7}, 0x46, &(0x7f0000000080)={0x5, 0xf, 0x46, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0c040c9312e1fea5f58a32f2a4606d69"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "328edd8545d156ad8876d1ae0276cb46"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xf, 0x7, 0x1, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x8, 0x2, 0x3}]}, 0x2, [{0x27, &(0x7f0000000100)=@string={0x27, 0x3, "0613751b3fdb133d3a92fe2255ea381c9ebf794e056a5451fdda57e492a2c4aa2988b6c2db"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1401}}]}) 2m31.55655776s ago: executing program 1 (id=6832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x400000000, 0x8, 0x0, 0x4, 0x5, 0x8001], 0x5000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 2m31.368363576s ago: executing program 1 (id=6833): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r5, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0xc00, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x70, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x61, 0x40100) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x8008551d, &(0x7f0000000140)={0xf696, 0x1b, [{0xa}, {0x3}, {0xc, 0x1}, {0xd, 0x1}, {0xf}, {0x6}, {0x4, 0x1}, {0x8}, {0xf}, {0x7}, {0x6}, {0xa}, {0xd}, {0xe, 0x1}, {0xd}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0xb, 0x1}, {0xb}, {0x1}, {0xd}, {0xe, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}]}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000580)={0x20, 0x5, 0x5}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x8, 0x2, 0x8, 0x4, 0x7fffffffffffffff, 0x4d, 0x0, 0x6, 0xffffffffffffffff, 0x800081, 0x7, 0x7f, 0x6, 0x5fbe, 0x6], 0x4, 0x201c07}) 2m29.116938607s ago: executing program 1 (id=6841): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffff38}}, 0x20) r1 = socket(0x28, 0x4, 0xfffffffd) setsockopt(r1, 0xff, 0x401, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f00000000c0)={0x1000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r6, 0xb}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='/pro\x0e/bus/inpu\f\x00\x00\x00\x00\x00\x00\x00rs\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m28.700481206s ago: executing program 1 (id=6844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x560d, 0x1000000000003) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r3, &(0x7f0000001dc0), 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000019c0)=ANY=[@ANYBLOB="12010102c36ef1402b050318867901021801090212000104fd00400904d505002ddec77f"], &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x6, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r8) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="2682", 0x2}], 0x1) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x1fd, 0x9}) 5.648659359s ago: executing program 0 (id=7548): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x2) (async) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x2) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r0, &(0x7f0000000000)=0x7e, 0x0) preadv(r2, &(0x7f0000000780)=[{0x0}], 0x1, 0x8, 0xfffffffe) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) unshare(0x20400) (async) unshare(0x20400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xb) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xb) sendfile(r3, r3, 0x0, 0x20004) 4.5167165s ago: executing program 0 (id=7553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 3) 4.371871851s ago: executing program 0 (id=7556): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x78c, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x54c, 0x1, [@m_ipt={0xdc, 0x11, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x47, 0x6, {0x32, 'raw\x00', 0xd, 0x455, "0707ff98378866b22f398043763226d218be232ebf22bc6bdb2cf2179f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x35, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x84, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x59, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xc4, 0x3, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x84, 0x8}}]}, {0x65, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x20, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x2, 'mangle\x00', 0xff, 0x1}}]}, {0x35, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b07008007225891693a24cad555ae00"/49}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x234, 0x20, 0x0, 0x0, {{0x8}, {0x178, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0x7, 'nat\x00', 0x4, 0x4c2d, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_TARG={0x111, 0x6, {0x7, 'mangle\x00', 0x10, 0x3, "ee99717862bfbc5ead27b65720d4a3a0db6cd322ea80ab87121254fb5703d1f4cbaba72b6ed2cd065235d5f6e4acefc7fcb227f77292eaea25112580fa9e6778ac0edba30292680b087589e75c827316b093929486cbcf8f3b66346bb63940af7e0cd319aeb64f459c8c343958aeb6f691ce725195263680a759a6819171bea80e9286aef6fccc306fe21ef70b591b370aa422b9e93a92d0716ee729433c86cd1d30302878855ebc1cce982f385f9d7e89836de529d6a8ffcbb2453f1404b38e8415584588e7f2020123b1f9bec97fe4c7ab8d702732e0215675943bafdf7aa16c6a8aa7650fec"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x95, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a05b435c356867b27c8df5015f90bffb81405bdefff24381bd7e00c6ffe04f90427ef46feda1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d459f3137f1349ab013b3b5732e45d6b45f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xb8, 0x1, [@m_ipt={0xb4, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x8, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x174, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x78, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd1cec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4040805}, 0x20004000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="88050000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x588}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000400)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/150, 0x96}], 0x3}}], 0x1, 0x0, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)='4', 0x1}], 0x1}}], 0x1, 0x10) 4.207054006s ago: executing program 2 (id=7557): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7e, 0x8c, 0x8c, 0x2, [@var, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @func, @volatile, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x3ff, [{0xa, 0x3}, {0x0, 0x1, 0x6}, {0x5, 0x2, 0xa}]}]}}, 0x0, 0xa6}, 0x28) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x325, 0x70bd2a, 0x0, {0x8}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'team0\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0xf, 0x6, 0x6, 0x7, 0x2, 0x6, 0x6c, 0x7, 0xfb, 0x4, 0x4, 0x2, 0x2, 0x7, 0x3, [0x2, 0x71]}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000020a000000000000000400040030db918bc8cc"], 0x1c}}, 0x0) 4.100441991s ago: executing program 6 (id=7558): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x802) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 4.04983357s ago: executing program 0 (id=7559): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x32314742}}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) openat$fb0(0xffffffffffffff9c, 0x0, 0x2a000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) fgetxattr(r1, &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000140)=""/2, 0xffffffffffffffc3) ptrace$poke(0x5, r2, &(0x7f0000000080), 0xffffffffffffffd) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) 3.981414583s ago: executing program 2 (id=7560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000ffffffe50000000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x2c) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r4, 0x0, 0xfd, 0x4, 0x3, 0xc, @local, @loopback={0xff00000000000000, 0x460c6}, 0x20, 0x8, 0x1, 0x69d}}) utimensat(r7, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x0) madvise(&(0x7f000032f000/0x3000)=nil, 0x3000, 0x16) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x2000000, 0x110, r2, 0xd05c2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a1f0e0000000000000000020000000900020073797a32000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402020424020004fc020244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.588545991s ago: executing program 2 (id=7564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000196c01000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000004d22b00000000000000ac14140c000000000000000000000000000000000001ff00000000000000000000000000fc020000000000000000000000000000000000006c00000000000000640101020000000000000000000000000235000004"], 0x1fc}}, 0x0) 2.406805633s ago: executing program 2 (id=7565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000101000000000800410000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}], 0x1}, 0x20000000) r1 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x1, 0x70fd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x40810, 0x8003}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x438, 0x10000}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x67}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 2.020363404s ago: executing program 2 (id=7566): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a03", 0x2c}], 0x1) 1.847530902s ago: executing program 2 (id=7567): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000008c0)={{r2}, "434f7916156b1febcfbca8713acb30fdd1ebbf2eb930ee11be36536e4f7b3874d534d5936c447490ab5fb7b1961d57b2ce057c85730d326792513dec3eb34bd7af3546e1de5b9315387510b8f96f1dd966df05613bdbfc8992f14c6605e5f752d46e0aeeae54878c1cd0823699136e5598eeca84623de26898da497e9b8361abc7e4e9e34f5c68dd7d164168e8c673399b37f3c635e24dc5f412d63547ea3b41fdcd825efec1cc7006c50194589adaab34e2e89a61a61d066351067e3a4bdff8202099c7af3f8ef6df8f04f551b46bac35662fc8e3282682b85387f2ea2d2a8941e5254b713dd21d2dfb017e461a63ee52376c7a655be5466363035292f1d3220af87c3d8e59fa9a7e740af4bcac36e0233a053a5b41da78dfdb6511c74c400c595f78cc45c764aee63fc019f4aa0fbda392869a0f37a6b0ef6b7b2e801c482afb264036a58067a13144c485d5a8c743f021d337ce93bfb62a10aa71d18ed7bb38516428754a566e5645db10b9e84f3cf43729277c02027c4b84f862f1d7d32a1ea0ef12570351abfc66708d2e5bf0380b450f21b43c29e6b3267066a942e23c59134829513081d41534029af5d10e8e2a39f240e0bd957a9a86155dd694237cf1de4e4a9fab93bdd1c87665eef0cdba0b377dd6dd9c2f0c952a4942c6963c82c5e74eb17bd9314bcb4b33ed87f2e14ba4c0fa2e355170b567085154448e0e1cc5190297706e31b902004f887d32e4885742c70dd0cf06748767e8cd560a58279a9f5178e42787cf07451f1aaa1e206062d57a1809f4c518ba1d6520fc168f76f60ff2c9149b453e2c946dc64b108720a5b5360dc4c7264ea73b7d0de90b1d0a936a37e9a3ed7f8e72d382e43d018ba9a7f8801e58645b15a5aab32b8cf25c2471c9cb966cf193aedb02358e804989a12f9a25631f8a6be3fd3953ae407933a06d5227ee7d4852625bc4df69d6c71c481c5e7584054dba13c6629b087fec24e2fc3528a0956749b24a1dbdae7145eabb6abb62b08782142b981a4712e9509b949ff51acd33457aad22d79332093ad0d7b9b8ad8393c89e265ea1807ad7c233df19261ef9ef02c1777a689da9ef1f3943feadb4643e8d74940b097f89d45d2b05a8f10a764d5fc5e5048c5d3982c2b78e8eca6834a00aaa40228f380a48d5a862458721eb56db12f214bc9bab3a6004e1ae638a5724f9e1a9a130e700b81e32921922f2c467bf61a4c3b22f39b920ec414598a4922a7d665e69d8e449317e0ee40820c5c5e5bd12415465c3a7d59baf00b7f864dace12a182195731b6aac87385c86fd1cae4872b9c28c1bf285708bd24c14189f5813cfe7d730536b0f7ae82559a8187ebce5bbc1058a27254f0cf29181a265ca4a398e49537427fae85446f095c5aceb9b4d82d109208a8756eda88a7daaf17cf0a5d2c2ed4923e3c75eb7729eb02e2feb3159db45a603b754ce6515e180c67ffb7857c5cfd8fc6743e129b2a214df75410d14b455d826f6d7aa117363c26c8e7137d6c5b104dcf23d0be447c76dc7ce40ed256758b567cbffc29214c2240b6563dc79079fb6511df39497ccafbb1fbfac655b3e4a9f1b965339da78ad4e030c3946d34e90cab808544114786e0961189bab24d6da389f28f6852de70ba8338cebaaad5cd5eb986c0be6412a60fa9c179761350ce17861e7cc632e8193afe7d96920ad5d3d7a5cea8347513508ff82a2de300ca7050f5ea74b283582a4d1a9fe04f297162ba0ccdff474df39ae2e5bdc8953646bf976cd100f80fe69fa481bded4320bc2a4ae5b7e9eea17af6f9019d94175cbf87f2b3fc1403913493886186e74c6d286416f669bb6271c84d9340acfc660037c67abb3d37b928ce06e684fe7ed724fde460a49458bd1536b72b57f4fb2d8d2a8f32a47fd85ea196fe3523600facacf8b4160bd0548230093b72413aa559ff3e0be2980f00fe738d7b77b01539883beabeed287a8dc25ea2507cde577e225a53387669e50248fca0d65149cbb19364f270fcdb933b6510b424f8db6f8faacc9dea89fa64c020c246c1099a01e57358bcf2fefe87d69bf9c4013b2cc3e455f3af998506df87c821b658e8338b55ab495f3449343e1bf2c068604a13e0849d626bc5c77eb4a39af64dab9247c08bda37b85f17c9237cc86c94ae0f754ca2746fbce4ec0a0e0ef1acc63b3883f71ed115d9328c2964f3c386e7ce15104c5443087e8106894b5a8a8b89e374f0e54f944a956f09f969c37c29312a60b43eb35704358fec0819023246bd10664326fe5859bcfe2271e0f5c4d5ca8200172213244a60531552811d3ad38f2147da40f12ad55c3c9aa90c4d129a9dafc96f05250bd48048405c96f52fda95df7644c66afb8eb66486458db6c08c7816b2cd2dda83e9d97dc6789b9065865dd765ae32ac563b4698509ad99e099d8c42720494c73a263c66e3b863ba73428398e26cef575289ddbb44058c239910a797effabd4607f8b602be3cc4a76ed13122e383e19a2f7330c97f4d3e7207ac9c5d5453c0379f2b05d0e63646eaaeb185cead8d0cdeac4a429389bab2438304fc553463b1da1f9c862a27779d16771bb034e9b4f09c7eb46a398ed38892a87e256bc931b87b86db0a2ddbdbfa62d262c8d5ab1ea281d3132f7f74a4f208a4ad3db71204d73e5a18e0aeb11e86e486f86953e387fe6e814daf77497f0de48e03212362f4d7a7f2629cd6f8d8e1c676e0a08433c7eedc4a08b8e1ecd5b5530b6691c1376b40f3f8251de908051deb57578aad3a12dcda867c9ef08997cd1dc16ec2d0189f548bac954629315f9bd811971804f3883e1c0225e52a8f5e4625191692ff7739ea12b1a6c253252a07d42039e6f8e0bbab50aaf968b2de527729b722f629fe52128b67cc5db9c3e30e5f354e6da6f75538338f5c1d03ce6d0ce1e372b3c1fb707162d25ce3c79a69427b643a5de588c0b85c247fd0d05f66938fd7df7cfa47c9398effe97932b743762288f529b8b28abc93b23e3a22f7ff57c2ce6611d84bf8c017f18ff71b8983b3e3b46ae8763b0923a853344a6dd71612496a6dc77e6330dc417700cfb50094d9976f18e7951348446cf288d1a6d0629b5defa80a0138717a45e17f97a5ea06d7e89ac877f8045d69994db4233f5ae9fbe1c022d98bc45c260125e7cfb3420bb508f1509009aa59907f6109d2e1d23eadad72af46e273f8ad49f0836d2687255375ffaef509443ea3e5a1670b4898b2e0c861985099c50e952f3a83772f2b7ae3dcb015f95bd830ff68c6ae65ad549d8218fcc291e0aa8c1d735accc201bc32288024660b952debc7c4ecb01728cd278cdb8b0bd14cdf4506bf54da828f0c230d016108015f7d296468022fb3f880f6b67ecf24537d0b73c15cbfb80f21583ee906745335be6558d76d61342381d63cc637e8b1bf1dd9ece44345da5f71e5742d89651aa2b03254cd5af5e1395d89892681159583b1c7ccc4ca47fdb6ad81cac46ec0b87eb61fdbf34d5910ff0c49dc0f7b95d87f89fddb9cc4b12e63d55ee0cd81da2975bd12c3cba84fd45e193350ef430c1373f3fd810182e2fddfcab9b305238e123379a961d4f851a9655afb3c795edb916f2c7484329c0abe51134eb69e371feb468aaba2e81babd87401c7f997a44b72e512fa2dbcacfd0dd8970def7693af15c68468e9a81f993ff7525f02584197b76683cf17fd796bae033d53d5fbad157204b2078b96b0b9bd8d60e2844cc5235732ffb290b5cc3560e977dc8e55eccd3dca4bd344a651b8ddbbdd8f651fcc782814302ed7baaac945fcbdea19b82a71459748de914808c216aabed878040468e115ea7a6ce3cd446f14f1a100abaf773f4d363b845f77098220adadd98d92d4d290caaee0f2e4dd502c888ffcc0c4e57e4eba932084f0f8fb9c3beb702a37efa1a8d9edee0542a81e8a5fad0ce85f5bf3a9873b41edf30ab4a3b02c5511f5cc98146beb23a7b577e94e4f60d3241426528a738add1d7f512efeabfc49985f5af9770be7d2a40d037b8cb60d7c0189f4db7c8f6b8aac1db5d0eeabd5bb9de842f5f73a7c163299a306667e77b27757ef8cc0aac173fd9ee176f79cf0339d5c45660bcac09cbad03431edb8dbc561fcda1db30a30b1f87b7b9b0e3e155fa751ae5e1d75d7f0b7001e7ade7810b7e6443384bd421cf69ba75ae16dc9e477f544364291768ee4519de344a5b7e1e579660c6a419314dfd5e5fcf86794e7577f7bd4cbbd58aafce01f2f18a378eb96df01e60a90f522864e531900d203c55633a875a49b27a77863c9ca586d81b018fa8f529252db2ebb49fa23e27c14e8d48efdf4dfa47053ff0c34f1c162257af0c3d2ad4a4f3447de7100c676f6982b6f4eb9eca6dc874f27a2ceaeb4035c8bc9cb7389cfb689ceb27af4e26294bf07fcbf0e9c68ce7a106d0d8f1b949aa75fdbdf2bfb766fa09c510e8443086161baf11153e95fb9352ff30f085d328a45538e6bbd488cf1b76da8b866a8a833b4b17269ac6fbf2fad37ed5df68953321b2d8bf2566775e2855e8010514015cd3d7a68f97dfb9a078d59196f07565e1ec19ee0240ab63af4990124950b5b70a5873b2dab9dbe3f6af323c9ab0a45e66f44233d434cb89e16909c504e98fcebf632de0b635729fb3bbeccdd30179815bdbc1c7d80a4ed0cec7ab8ef8025df751645fab41d6270677dcd4711888e6a37d31e149483053d4116e0f5b37615b7116e0ffe078397a43e14fe1439c34e51f3ff8694ec3434383a6170a7d4179bca4aefefcdb601ba1431a9a378d4f423136cc142cbef5b1b0245f00abbfe601843be44c6fc70d0abc40fe25ac44407866d9157c134df0537a673d344134d7360365cdd868eecedc6b6bf97d88911b6bce2355f4030b3fc5e88eb4f9b38e40b13c777fe08d6ca73354c5eaf5f9b911ab458a69345f0f2c0e90abc45c90056b8517e4dfb0ef53c3d6a71c204b436bcf4ca3d4829804d9c2a86ba71499ba51c4527a5542484a3ca8ef2abd614ed8154516c13da6306eac55097dce73d57b568848af906dea23311c1b6e77f837a5e0a8d646a852cf72b741b29ccb2fb91ac1cf78586d1ccbb76940f57d0fa9ac0dcd5d2a62d5a8a5aa6dd0969a234333784628cdc4f23f6c4dcc894a9d9d46108e80b9ee2f337cc9f07c745534d670cd75fc1ce18059080aa1659ed50faa7b6430ac73351d9a6e3bfb7c0437ef6134329383645cdfc642983318399f1de83fb226bb51b211539b969505a5f76956d49668a0406981e76f4673df0c198c757656008467326a7611f5de3b6f66fabbbff4cb1aa155dbcb9084d360145a948c4f274bd0f5e168408924f9d60fa85f66279725def239d7270fddbf3b6499a46ea1e81880313ce7ad86f52109620f6678e5b736d92a59281e018dd6fe3424b32e4749671256fdae917c87d82571c78f1dc18849ff416e8d40f0d6725d612d96937a51f5b58263d6bf616eff8b9e0c8f6e68a37112b6ece91238d68660a353364def30015b47a25f10ce013425c6d82b6c54e1af869307e57097cc754242ab6bbca3453e9e7503850d9ae953e9a5f2a921187abf781ddea6348b5e1c73a58e7bc0a115862fc8596c0fceabe6f65b7d12b3ff3a2f78350e66c0428861f521574a73f10c23a7f281905e0b9c056990bc3deb761215e695eb7e5ec281cceb461ba7e8d15c390b83083ef147a3c2d3b39ec1d1b0805c130709572628f213b8a26b1458e3a038313ab05d3d2b12e8fef15d186958557669316da4679e046"}) write$dsp(r1, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000080)={0x2, "77ad75ed2a76ed28e426bdb9bfc18e3af6914f4194be5331fd8f5a04505dcd4b", 0x8, 0x3d, 0xbf6, 0x4, 0x5}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x3, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_tcp(0x2, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.548516467s ago: executing program 6 (id=7569): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x181820, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000001c0)) (async) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "2731662d7e78cfebcf2431f64f54045e"}) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000300)=0x4, 0x4) (async) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r7, 0x7, r6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000000c0)) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0f"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 1.44404676s ago: executing program 6 (id=7571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x6108c3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800c00018006000600800a00000d000280080007"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) recvmmsg(r8, &(0x7f000000bf00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000500)=""/161, 0xa1}], 0x6, &(0x7f0000002740)=""/112, 0x70}, 0x1ff}, {{&(0x7f00000027c0)=@nfc, 0x80, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f00000039c0)=""/147, 0x93}, {&(0x7f0000003a80)=""/100, 0x64}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/45, 0x2d}], 0x7}, 0x5}, {{&(0x7f0000004e40)=@alg, 0x80, 0x0, 0x0, &(0x7f0000005f00)=""/41, 0x29}, 0x401}, {{0x0, 0x0, &(0x7f0000006fc0)=[{0x0}], 0x1, &(0x7f0000007000)=""/59, 0x3b}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009980)=""/168, 0xa8}, 0xff}, {{&(0x7f0000009a40)=@ll, 0x80, &(0x7f0000009c00)=[{0x0}], 0x1}, 0x7}], 0x7, 0x40008269, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r8, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.375876001s ago: executing program 4 (id=7572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$usbip_server(r2, &(0x7f00000002c0)=@ret_unlink={{0x4, 0x6, 0x0, 0x0, 0x5}, {0x2}}, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) close_range(r5, r5, 0x2) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x100}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x3}, 0x60002000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.252844102s ago: executing program 4 (id=7573): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000104000000080000000000000000", @ANYRES32=r2, @ANYBLOB="00000000051c0000480012800e00010069703665727370616e000000340002800400120006000300040000000500160002000000050017000100000014000700fe8000000000000000000000000000aa"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x12) write$sndseq(r0, &(0x7f0000000500)=[{0x8f, 0x0, 0x3, 0xfd, @tick=0xd, {0x5, 0x1}, {0xb}, @connect={{0xf0, 0x7}, {0xfb, 0x1}}}, {0x5, 0xf, 0xfd, 0xff, @time={0x7, 0x9}, {0x1}, {0x2, 0x1}, @quote={{0xf, 0x25}, 0x1ff}}], 0x38) 1.056440514s ago: executing program 4 (id=7574): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)={0x2, 0x0, [{0x1000, 0xfffffffffffffca2, &(0x7f0000000040)=""/16}, {0x80a0000, 0xf8, &(0x7f00000005c0)=""/248}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x204, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000fc0)="89000000120081ae08060cdc030ec0007f0600ff1f00000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32cb83c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) recvfrom$packet(r0, &(0x7f0000000380), 0x0, 0x40010042, 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000080)={0x9f, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="020029bd7000fddbdf256d00000008000300", @ANYRES32=r9, @ANYBLOB="5ff693dba87dd911ee7b65440f6eb2c8ba21f10999d607b4dd1a8c6d87439bf6e18be4cc555ac2f4e68f80135299f4134731144d1f68def195f7c5d62e7c1dc84da2cd86d3530d1f"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) 970.237123ms ago: executing program 0 (id=7575): setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0xf}, 0x90) r0 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 486.781543ms ago: executing program 6 (id=7576): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 416.899534ms ago: executing program 6 (id=7577): r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r1 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ed0a0025000000feffff7fcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x100000000) 276.034229ms ago: executing program 6 (id=7578): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={0x0, 0x0, 0x0, r1}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40091) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000240)) r7 = gettid() ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000002c0)) prlimit64(r7, 0x1, &(0x7f0000000200)={0x991, 0x1400000000000000}, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r8 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r9 = socket(0xa, 0x3, 0x3a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042406001c002b8008000800d54d6e216a0ae116cb0af23c32cb202e0a03cf922f5db3bd7b420a2845b4674cba", @ANYRES32=r10, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_emit_ethernet(0x13a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843501040600fe8000000000000000000000000000bbfe8000000000000000000000000000aa8802040104400900fe8000000000000000000000000000bb880e040703080400ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000bbfe800000000000000000000000000014fc02000000000000000000000000000000000000000000000000000000000001fc0200000000000000000000000000003b0201800000000020010000000000000000000000000002080800080000000000000000000000000000000000000000fe880000000000000000000000000101ff010000000000000000000000000001fe80000000000000000000000000001800004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50304f0f5c411fd8793c7817b01cb2da14ef22952168c1bc89b8ba8b1132006d8ab8dd770b7c7dfa4a0de487ca7c3321a4e319fbcb623a30f90b08cddf7567e81fac4a1ef13659ea7d0ea60600000047f5ce87156c76fffd92a2860035ad1c6f3bd4fd047cf695e679552da8ccc9a93784011676d65f7b35fc8d36967cf758ac0971282b80518731cfbdf0744f85bc117e55c703852a016a622795543211877fdd"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4d0500", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) 198.394268ms ago: executing program 4 (id=7579): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x7) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 91.014862ms ago: executing program 4 (id=7580): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x20000000) 523.417µs ago: executing program 0 (id=7581): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x3, 0xfffffffffffbfffc, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x100000) socket$netlink(0x10, 0x3, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r6 = socket(0x10, 0x3, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4e3f793ffffffffe, 0x19dff}}}, 0x90) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r9 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000002060500000000a02d00000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073957a300092000054073222750ae04a74a06282d8a7240007801800028014009d37af15b6d48bd29ba39df54619024000"/112], 0x70}}, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r9, 0x100fff, {0x0, 0x0, 0x0, 0x440, 0x8, 0x0, 0x6, 0x10001c, 0x1d, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c138ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d328b137f0374c72a964a019363e8772fd2900", "24431a3977a68e174f000500", [0x9, 0x3]}}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 0s ago: executing program 4 (id=7582): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x578, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000000), 0x400000000000000, 0x400000) kernel console output (not intermixed with test programs): 0x7fac9078f749 code=0x7ffc0000 [ 1562.960659][ T30] audit: type=1326 audit(1763637272.317:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29354 comm="syz.6.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac9078f749 code=0x7ffc0000 [ 1562.985126][ T30] audit: type=1326 audit(1763637272.317:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29354 comm="syz.6.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9078f749 code=0x7ffc0000 [ 1563.043774][ T5904] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1563.052181][ T5904] usb 3-1: config 0 has no interface number 0 [ 1563.058311][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1563.081365][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1563.092649][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1563.107313][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1563.118588][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1563.129667][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1563.143013][ T5904] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1563.152138][ T5920] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1563.159840][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.181216][ T5904] usb 3-1: config 0 descriptor?? [ 1563.187186][T29353] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1563.194728][T29353] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1563.215481][ T5904] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1563.505295][ T5920] usb 5-1: device descriptor read/64, error -71 [ 1563.512711][ T5904] usb 3-1: USB disconnect, device number 124 [ 1563.548364][ T5904] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1563.640786][ T5920] usb usb5-port1: attempt power cycle [ 1564.005860][ T5920] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1564.060955][ T5920] usb 5-1: device descriptor read/8, error -71 [ 1564.300587][ T5920] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1564.958830][ T5920] usb 5-1: device descriptor read/8, error -71 [ 1565.072854][ T5920] usb usb5-port1: unable to enumerate USB device [ 1565.229213][T29389] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1565.350682][T29386] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1565.374743][T29386] bond3 (unregistering): Released all slaves [ 1566.756945][T29417] netlink: 'syz.2.7121': attribute type 5 has an invalid length. [ 1566.829832][T29422] raw_sendmsg: syz.6.7122 forgot to set AF_INET. Fix it! [ 1567.442965][T29426] syzkaller0: entered promiscuous mode [ 1567.448517][T29426] syzkaller0: entered allmulticast mode [ 1567.497804][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1567.802662][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1567.802683][ T30] audit: type=1326 audit(1763637277.447:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1567.854425][T29432] binder_alloc: 29430: pid 29430 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1567.887113][ T30] audit: type=1326 audit(1763637277.447:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1567.913943][ T30] audit: type=1326 audit(1763637277.477:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1567.963847][ T30] audit: type=1326 audit(1763637277.477:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1567.991460][ T30] audit: type=1326 audit(1763637277.477:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.014984][ T30] audit: type=1326 audit(1763637277.477:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.038741][ T30] audit: type=1326 audit(1763637277.477:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.068294][ T30] audit: type=1326 audit(1763637277.477:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.092918][ T30] audit: type=1326 audit(1763637277.477:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.116096][ T30] audit: type=1326 audit(1763637277.477:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1568.754890][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1570.024341][T29473] bridge0: port 4(bond0) entered blocking state [ 1570.078096][T29473] bridge0: port 4(bond0) entered disabled state [ 1570.108287][T29473] bond0: entered allmulticast mode [ 1570.113988][T29473] bond_slave_0: entered allmulticast mode [ 1570.119958][T29473] bond_slave_1: entered allmulticast mode [ 1570.150013][T29473] bond0: entered promiscuous mode [ 1570.155715][T29473] bond_slave_0: entered promiscuous mode [ 1570.167696][T29473] bond_slave_1: entered promiscuous mode [ 1570.177533][T29473] bridge0: port 4(bond0) entered blocking state [ 1570.183973][T29473] bridge0: port 4(bond0) entered forwarding state [ 1570.577509][T29480] IPVS: length: 24 != 12312 [ 1571.440451][ T5830] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1571.582492][ T5830] usb 5-1: device descriptor read/64, error -71 [ 1571.597414][T29493] program syz.2.7149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1571.822442][ T5830] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1571.867348][T29499] FAULT_INJECTION: forcing a failure. [ 1571.867348][T29499] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.882068][T29499] CPU: 0 UID: 0 PID: 29499 Comm: syz.2.7152 Not tainted syzkaller #0 PREEMPT(full) [ 1571.882097][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1571.882111][T29499] Call Trace: [ 1571.882119][T29499] [ 1571.882128][T29499] dump_stack_lvl+0x189/0x250 [ 1571.882162][T29499] ? __pfx____ratelimit+0x10/0x10 [ 1571.882192][T29499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1571.882220][T29499] ? __pfx__printk+0x10/0x10 [ 1571.882245][T29499] ? __pfx___might_resched+0x10/0x10 [ 1571.882268][T29499] ? fs_reclaim_acquire+0x7d/0x100 [ 1571.882306][T29499] should_fail_ex+0x414/0x560 [ 1571.882343][T29499] should_failslab+0xa8/0x100 [ 1571.882367][T29499] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1571.882397][T29499] ? __kernfs_new_node+0xd7/0x7e0 [ 1571.882439][T29499] __kernfs_new_node+0xd7/0x7e0 [ 1571.882464][T29499] ? __lock_acquire+0xab9/0xd20 [ 1571.882494][T29499] ? __pfx___kernfs_new_node+0x10/0x10 [ 1571.882523][T29499] ? kernfs_root+0x1c/0x230 [ 1571.882562][T29499] ? kernfs_root+0x1c/0x230 [ 1571.882587][T29499] ? kernfs_root+0x1c/0x230 [ 1571.882609][T29499] ? kernfs_root+0x1c/0x230 [ 1571.882639][T29499] kernfs_new_node+0x102/0x210 [ 1571.882674][T29499] __kernfs_create_file+0x4b/0x2e0 [ 1571.882698][T29499] sysfs_add_file_mode_ns+0x238/0x300 [ 1571.882731][T29499] sysfs_merge_group+0x177/0x310 [ 1571.882762][T29499] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1571.882790][T29499] ? kobject_put+0x43f/0x480 [ 1571.882817][T29499] dpm_sysfs_add+0xd2/0x270 [ 1571.882849][T29499] device_add+0x4d8/0xb50 [ 1571.882879][T29499] device_create+0x25b/0x2f0 [ 1571.882909][T29499] ? format_decode+0x5ee/0xe30 [ 1571.882931][T29499] ? string+0x279/0x2b0 [ 1571.882952][T29499] ? widen_string+0x3b/0x2a0 [ 1571.882978][T29499] ? __pfx_device_create+0x10/0x10 [ 1571.883022][T29499] bdi_register_va+0x9c/0x740 [ 1571.883054][T29499] super_setup_bdi_name+0xe6/0x200 [ 1571.883082][T29499] ? fuse_dev_install+0x8d/0x1a0 [ 1571.883114][T29499] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1571.883152][T29499] ? do_raw_spin_unlock+0x122/0x240 [ 1571.883186][T29499] fuse_fill_super_common+0x754/0x1330 [ 1571.883224][T29499] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 1571.883253][T29499] ? __init_swait_queue_head+0xa9/0x150 [ 1571.883285][T29499] ? shrinker_register+0x16b/0x230 [ 1571.883312][T29499] ? sget_fc+0x962/0xa40 [ 1571.883341][T29499] fuse_fill_super+0x176/0x1f0 [ 1571.883366][T29499] ? __pfx_fuse_fill_super+0x10/0x10 [ 1571.883393][T29499] get_tree_nodev+0xbb/0x150 [ 1571.883433][T29499] fuse_get_tree+0x2fb/0x4f0 [ 1571.883468][T29499] vfs_get_tree+0x92/0x2b0 [ 1571.883500][T29499] do_new_mount+0x302/0xa10 [ 1571.883530][T29499] ? apparmor_capable+0x137/0x1b0 [ 1571.883561][T29499] ? __pfx_do_new_mount+0x10/0x10 [ 1571.883592][T29499] ? ns_capable+0x8a/0xf0 [ 1571.883617][T29499] ? path_mount+0x61c/0xfe0 [ 1571.883645][T29499] ? kmem_cache_free+0x19b/0x690 [ 1571.883687][T29499] __se_sys_mount+0x313/0x410 [ 1571.883716][T29499] ? __pfx___se_sys_mount+0x10/0x10 [ 1571.883741][T29499] ? do_syscall_64+0xbe/0xfa0 [ 1571.883769][T29499] ? __x64_sys_mount+0x20/0xc0 [ 1571.883792][T29499] do_syscall_64+0xfa/0xfa0 [ 1571.883820][T29499] ? lockdep_hardirqs_on+0x9c/0x150 [ 1571.883849][T29499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.883870][T29499] ? clear_bhb_loop+0x60/0xb0 [ 1571.883896][T29499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.883916][T29499] RIP: 0033:0x7fc438d8f749 [ 1571.883936][T29499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.883954][T29499] RSP: 002b:00007fc439bd2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.883978][T29499] RAX: ffffffffffffffda RBX: 00007fc438fe5fa0 RCX: 00007fc438d8f749 [ 1571.883993][T29499] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1571.884007][T29499] RBP: 00007fc439bd2090 R08: 0000200000002140 R09: 0000000000000000 [ 1571.884021][T29499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.884033][T29499] R13: 00007fc438fe6038 R14: 00007fc438fe5fa0 R15: 00007fc43910fa28 [ 1571.884070][T29499] [ 1572.285959][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.410689][ T5830] usb 5-1: device descriptor read/64, error -71 [ 1572.520789][ T5830] usb usb5-port1: attempt power cycle [ 1572.870438][ T5830] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1572.931098][ T5830] usb 5-1: device descriptor read/8, error -71 [ 1573.180418][ T5830] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1573.225584][ T5830] usb 5-1: device descriptor read/8, error -71 [ 1573.314675][T29522] FAULT_INJECTION: forcing a failure. [ 1573.314675][T29522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.349978][T29522] CPU: 1 UID: 0 PID: 29522 Comm: syz.6.7161 Not tainted syzkaller #0 PREEMPT(full) [ 1573.350008][T29522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1573.350022][T29522] Call Trace: [ 1573.350030][T29522] [ 1573.350041][T29522] dump_stack_lvl+0x189/0x250 [ 1573.350076][T29522] ? __pfx____ratelimit+0x10/0x10 [ 1573.350105][T29522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1573.350133][T29522] ? __pfx__printk+0x10/0x10 [ 1573.350155][T29522] ? __might_fault+0xb0/0x130 [ 1573.350196][T29522] should_fail_ex+0x414/0x560 [ 1573.350234][T29522] fpu__restore_sig+0x1bb/0x1100 [ 1573.350269][T29522] ? __lock_acquire+0xab9/0xd20 [ 1573.350299][T29522] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1573.350358][T29522] __ia32_sys_rt_sigreturn+0x704/0x860 [ 1573.350410][T29522] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1573.350440][T29522] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1573.350499][T29522] ? __task_pid_nr_ns+0x28/0x490 [ 1573.350533][T29522] ? do_syscall_64+0xbe/0xfa0 [ 1573.350568][T29522] do_syscall_64+0xfa/0xfa0 [ 1573.350595][T29522] ? lockdep_hardirqs_on+0x9c/0x150 [ 1573.350624][T29522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.350645][T29522] ? clear_bhb_loop+0x60/0xb0 [ 1573.350671][T29522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.350692][T29522] RIP: 0033:0x7fac9078f747 [ 1573.350711][T29522] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1573.350729][T29522] RSP: 002b:00007fac91585038 EFLAGS: 00000246 [ 1573.350749][T29522] RAX: 00000000000000ca RBX: 00007fac909e5fa0 RCX: 00007fac9078f749 [ 1573.350764][T29522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000020000000cffc [ 1573.350778][T29522] RBP: 00007fac91585090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.350791][T29522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.350803][T29522] R13: 00007fac909e6038 R14: 00007fac909e5fa0 R15: 00007fac90b0fa28 [ 1573.350838][T29522] [ 1573.370528][ T5830] usb usb5-port1: unable to enumerate USB device [ 1574.486908][T29534] FAULT_INJECTION: forcing a failure. [ 1574.486908][T29534] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.531734][T29534] CPU: 1 UID: 0 PID: 29534 Comm: syz.4.7165 Not tainted syzkaller #0 PREEMPT(full) [ 1574.531764][T29534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1574.531778][T29534] Call Trace: [ 1574.531786][T29534] [ 1574.531796][T29534] dump_stack_lvl+0x189/0x250 [ 1574.531831][T29534] ? __pfx____ratelimit+0x10/0x10 [ 1574.531859][T29534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1574.531887][T29534] ? __pfx__printk+0x10/0x10 [ 1574.531914][T29534] ? __pfx___might_resched+0x10/0x10 [ 1574.531937][T29534] ? fs_reclaim_acquire+0x7d/0x100 [ 1574.531973][T29534] should_fail_ex+0x414/0x560 [ 1574.532011][T29534] should_failslab+0xa8/0x100 [ 1574.532034][T29534] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1574.532062][T29534] ? __alloc_skb+0x112/0x2d0 [ 1574.532081][T29534] ? netlink_autobind+0xdb/0x300 [ 1574.532109][T29534] __alloc_skb+0x112/0x2d0 [ 1574.532133][T29534] netlink_sendmsg+0x5c6/0xb30 [ 1574.532164][T29534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.532189][T29534] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1574.532221][T29534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1574.532241][T29534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.532264][T29534] __sock_sendmsg+0x21c/0x270 [ 1574.532297][T29534] ____sys_sendmsg+0x505/0x830 [ 1574.532326][T29534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1574.532358][T29534] ? import_iovec+0x74/0xa0 [ 1574.532387][T29534] ___sys_sendmsg+0x21f/0x2a0 [ 1574.532423][T29534] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.532486][T29534] ? __fget_files+0x2a/0x420 [ 1574.532505][T29534] ? __fget_files+0x3a0/0x420 [ 1574.532537][T29534] __x64_sys_sendmsg+0x19b/0x260 [ 1574.532564][T29534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1574.532598][T29534] ? __pfx_ksys_write+0x10/0x10 [ 1574.532632][T29534] ? do_syscall_64+0xbe/0xfa0 [ 1574.532666][T29534] do_syscall_64+0xfa/0xfa0 [ 1574.532699][T29534] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.532729][T29534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.532748][T29534] ? clear_bhb_loop+0x60/0xb0 [ 1574.532774][T29534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.532794][T29534] RIP: 0033:0x7fc15d78f749 [ 1574.532814][T29534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.532831][T29534] RSP: 002b:00007fc15e571038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.532854][T29534] RAX: ffffffffffffffda RBX: 00007fc15d9e5fa0 RCX: 00007fc15d78f749 [ 1574.532869][T29534] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1574.532882][T29534] RBP: 00007fc15e571090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.532895][T29534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.532906][T29534] R13: 00007fc15d9e6038 R14: 00007fc15d9e5fa0 R15: 00007fc15db0fa28 [ 1574.532941][T29534] [ 1575.090245][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1575.118514][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1575.127628][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1575.136865][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1575.145274][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1575.179537][T29535] could not allocate digest TFM handle xcbc-aes-ce [ 1575.203500][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1575.211218][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1575.218624][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1575.234038][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1575.242341][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1576.329032][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1576.329053][ T30] audit: type=1326 audit(1763637285.967:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.389870][T29544] chnl_net:caif_netlink_parms(): no params data found [ 1576.412967][ T30] audit: type=1326 audit(1763637285.967:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.503084][ T30] audit: type=1326 audit(1763637285.967:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.596755][ T30] audit: type=1326 audit(1763637285.967:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.826511][ T30] audit: type=1326 audit(1763637285.967:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.861595][ T30] audit: type=1326 audit(1763637285.977:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.910807][ T30] audit: type=1326 audit(1763637285.977:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.934588][ T30] audit: type=1326 audit(1763637285.977:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1576.960795][ T30] audit: type=1326 audit(1763637285.977:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1577.091605][ T30] audit: type=1326 audit(1763637285.977:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29566 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1577.323331][T29544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.330784][ T5838] Bluetooth: hci3: command tx timeout [ 1577.338451][T29544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.347378][T29544] bridge_slave_0: entered allmulticast mode [ 1577.363364][T29544] bridge_slave_0: entered promiscuous mode [ 1577.377140][T29544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.388934][T29544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.401046][T29544] bridge_slave_1: entered allmulticast mode [ 1577.415312][T29544] bridge_slave_1: entered promiscuous mode [ 1577.665025][T29544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.690451][T29544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.022660][T29544] team0: Port device team_slave_0 added [ 1578.174515][T29544] team0: Port device team_slave_1 added [ 1578.303710][T29544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.344340][T29544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.494268][T29544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.566850][T29544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.585437][T29544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.618644][T29544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.634354][T29592] x_tables: duplicate underflow at hook 1 [ 1578.657424][T29594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1578.784049][T29544] hsr_slave_0: entered promiscuous mode [ 1578.793334][T29599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1578.814235][T29544] hsr_slave_1: entered promiscuous mode [ 1578.828849][T29544] debugfs: 'hsr0' already exists in 'hsr' [ 1578.849742][T29544] Cannot create hsr debugfs directory [ 1579.420517][ T5838] Bluetooth: hci3: command tx timeout [ 1581.042725][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7187'. [ 1581.490599][ T5829] Bluetooth: hci3: command tx timeout [ 1581.530433][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1581.680557][T14810] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1581.690388][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 1581.750960][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1581.761012][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1581.780502][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1581.790759][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1581.804292][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1581.820486][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.900566][T14810] usb 7-1: Using ep0 maxpacket: 32 [ 1581.913183][T14810] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1581.929859][T14810] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1581.937520][T14810] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1581.946917][T14810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.963559][T14810] usb 7-1: config 0 descriptor?? [ 1582.361679][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1582.361701][ T30] audit: type=1326 audit(1763637292.007:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.391340][ T30] audit: type=1326 audit(1763637292.007:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.417452][ T30] audit: type=1326 audit(1763637292.007:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.444016][ T30] audit: type=1326 audit(1763637292.007:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.454595][T14810] aquacomputer_d5next 0003:0C70:F00E.008E: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.6-1/input0 [ 1582.482479][ T30] audit: type=1326 audit(1763637292.007:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.504922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.512296][ T30] audit: type=1326 audit(1763637292.007:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.546420][ T30] audit: type=1326 audit(1763637292.007:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.569983][ T30] audit: type=1326 audit(1763637292.007:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.592458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.599027][ T30] audit: type=1326 audit(1763637292.007:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.621507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.641617][ T30] audit: type=1326 audit(1763637292.007:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29636 comm="syz.2.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1582.844818][T29630] dvmrp8: entered allmulticast mode [ 1582.853349][T29630] dvmrp8: left allmulticast mode [ 1582.917304][T29646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.927970][T29646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.986686][T25915] usb 7-1: USB disconnect, device number 58 [ 1583.002372][T29648] syzkaller0: entered promiscuous mode [ 1583.008202][T29648] syzkaller0: entered allmulticast mode [ 1583.262690][T29648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7197'. [ 1583.571354][ T5829] Bluetooth: hci3: command tx timeout [ 1583.940543][T23639] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1584.080748][T23639] usb 7-1: device descriptor read/64, error -71 [ 1584.315404][ T5920] usb 5-1: usb_control_msg returned -71 [ 1584.320571][T23639] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1584.333733][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 1584.474893][ T5920] usb 5-1: USB disconnect, device number 38 [ 1584.561728][T23639] usb 7-1: device descriptor read/64, error -71 [ 1584.678294][T23639] usb usb7-port1: attempt power cycle [ 1585.030483][T23639] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1585.051190][T23639] usb 7-1: device descriptor read/8, error -71 [ 1585.087506][T29673] FAULT_INJECTION: forcing a failure. [ 1585.087506][T29673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.140511][T29673] CPU: 1 UID: 0 PID: 29673 Comm: syz.4.7206 Not tainted syzkaller #0 PREEMPT(full) [ 1585.140541][T29673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1585.140554][T29673] Call Trace: [ 1585.140562][T29673] [ 1585.140569][T29673] dump_stack_lvl+0x189/0x250 [ 1585.140591][T29673] ? __pfx____ratelimit+0x10/0x10 [ 1585.140608][T29673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1585.140624][T29673] ? __pfx__printk+0x10/0x10 [ 1585.140644][T29673] should_fail_ex+0x414/0x560 [ 1585.140665][T29673] _copy_to_user+0x31/0xb0 [ 1585.140682][T29673] video_usercopy+0xe32/0x1450 [ 1585.140708][T29673] ? __pfx___video_do_ioctl+0x10/0x10 [ 1585.140723][T29673] ? __pfx_video_usercopy+0x10/0x10 [ 1585.140747][T29673] ? __fget_files+0x3a0/0x420 [ 1585.140762][T29673] v4l2_ioctl+0x18d/0x1e0 [ 1585.140776][T29673] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1585.140789][T29673] __se_sys_ioctl+0xfc/0x170 [ 1585.140806][T29673] do_syscall_64+0xfa/0xfa0 [ 1585.140823][T29673] ? lockdep_hardirqs_on+0x9c/0x150 [ 1585.140839][T29673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.140851][T29673] ? clear_bhb_loop+0x60/0xb0 [ 1585.140867][T29673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.140879][T29673] RIP: 0033:0x7fc15d78f749 [ 1585.140891][T29673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.140902][T29673] RSP: 002b:00007fc15e571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1585.140917][T29673] RAX: ffffffffffffffda RBX: 00007fc15d9e5fa0 RCX: 00007fc15d78f749 [ 1585.140927][T29673] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1585.140935][T29673] RBP: 00007fc15e571090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.140944][T29673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.140955][T29673] R13: 00007fc15d9e6038 R14: 00007fc15d9e5fa0 R15: 00007fc15db0fa28 [ 1585.140989][T29673] [ 1585.339741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.375345][T29675] Invalid logical block size (570425344) [ 1585.620879][T23639] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1585.672017][T23639] usb 7-1: device descriptor read/8, error -71 [ 1585.677501][T29677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7208'. [ 1585.781413][T23639] usb usb7-port1: unable to enumerate USB device [ 1585.849580][T29686] syzkaller0: entered promiscuous mode [ 1585.857224][T29686] syzkaller0: entered allmulticast mode [ 1585.880882][T29686] syzkaller0: tun_net_xmit 14 [ 1585.948815][T29689] FAULT_INJECTION: forcing a failure. [ 1585.948815][T29689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1585.963530][T29689] CPU: 0 UID: 0 PID: 29689 Comm: syz.0.7213 Not tainted syzkaller #0 PREEMPT(full) [ 1585.963559][T29689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1585.963572][T29689] Call Trace: [ 1585.963581][T29689] [ 1585.963597][T29689] dump_stack_lvl+0x189/0x250 [ 1585.963631][T29689] ? __pfx____ratelimit+0x10/0x10 [ 1585.963661][T29689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1585.963690][T29689] ? __pfx__printk+0x10/0x10 [ 1585.963715][T29689] ? fs_reclaim_acquire+0x7d/0x100 [ 1585.963756][T29689] should_fail_ex+0x414/0x560 [ 1585.963803][T29689] prepare_alloc_pages+0x213/0x610 [ 1585.963834][T29689] __alloc_frozen_pages_noprof+0x123/0x370 [ 1585.963861][T29689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1585.963895][T29689] ? policy_nodemask+0x27c/0x720 [ 1585.963924][T29689] alloc_pages_mpol+0x232/0x4a0 [ 1585.963952][T29689] vma_alloc_folio_noprof+0xe4/0x200 [ 1585.963977][T29689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1585.964013][T29689] folio_prealloc+0x30/0x180 [ 1585.964045][T29689] do_wp_page+0x1231/0x5800 [ 1585.964105][T29689] ? __pfx_do_wp_page+0x10/0x10 [ 1585.964128][T29689] ? do_raw_spin_lock+0x121/0x290 [ 1585.964159][T29689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1585.964200][T29689] __handle_mm_fault+0x1033/0x5400 [ 1585.964248][T29689] ? __pfx___handle_mm_fault+0x10/0x10 [ 1585.964301][T29689] ? follow_page_pte+0xd03/0x13e0 [ 1585.964339][T29689] handle_mm_fault+0x40a/0x8e0 [ 1585.964379][T29689] __get_user_pages+0x165c/0x2a00 [ 1585.964445][T29689] __gup_longterm_locked+0xde4/0x1660 [ 1585.964488][T29689] ? sanity_check_pinned_pages+0x123a/0x1300 [ 1585.964523][T29689] gup_fast_fallback+0x1d65/0x22d0 [ 1585.964549][T29689] ? is_bpf_text_address+0x26/0x2b0 [ 1585.964615][T29689] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1585.964639][T29689] ? stack_trace_save+0x9c/0xe0 [ 1585.964677][T29689] ? stack_depot_save_flags+0x40/0x860 [ 1585.964715][T29689] ? pin_user_pages_fast+0x4d/0xb0 [ 1585.964743][T29689] iov_iter_extract_pages+0x35f/0x5e0 [ 1585.964768][T29689] ? __x64_sys_recvmmsg+0x190/0x240 [ 1585.964797][T29689] extract_iter_to_sg+0xe46/0x24e0 [ 1585.964832][T29689] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1585.964875][T29689] ? __asan_memset+0x22/0x50 [ 1585.964903][T29689] af_alg_get_rsgl+0x436/0x810 [ 1585.964949][T29689] skcipher_recvmsg+0x3d1/0x11d0 [ 1585.965002][T29689] ? aa_sk_perm+0x81e/0x950 [ 1585.965042][T29689] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1585.965070][T29689] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1585.965081][T29689] ? security_socket_recvmsg+0x7e/0x2e0 [ 1585.965101][T29689] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1585.965118][T29689] sock_recvmsg+0x22c/0x270 [ 1585.965137][T29689] ____sys_recvmsg+0x1c9/0x460 [ 1585.965156][T29689] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1585.965180][T29689] ? import_iovec+0x74/0xa0 [ 1585.965197][T29689] ___sys_recvmsg+0x1b5/0x510 [ 1585.965215][T29689] ? __pfx____sys_recvmsg+0x10/0x10 [ 1585.965245][T29689] ? __fget_files+0x3a0/0x420 [ 1585.965264][T29689] do_recvmmsg+0x307/0x770 [ 1585.965283][T29689] ? __pfx_do_recvmmsg+0x10/0x10 [ 1585.965306][T29689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1585.965336][T29689] __x64_sys_recvmmsg+0x190/0x240 [ 1585.965355][T29689] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1585.965372][T29689] ? do_syscall_64+0xbe/0xfa0 [ 1585.965391][T29689] do_syscall_64+0xfa/0xfa0 [ 1585.965406][T29689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1585.965422][T29689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.965435][T29689] ? clear_bhb_loop+0x60/0xb0 [ 1585.965450][T29689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.965461][T29689] RIP: 0033:0x7ffa5f38f749 [ 1585.965474][T29689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.965485][T29689] RSP: 002b:00007ffa60212038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1585.965500][T29689] RAX: ffffffffffffffda RBX: 00007ffa5f5e5fa0 RCX: 00007ffa5f38f749 [ 1585.965510][T29689] RDX: 0000000000000001 RSI: 0000200000002b80 RDI: 0000000000000004 [ 1585.965518][T29689] RBP: 00007ffa60212090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.965526][T29689] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 1585.965533][T29689] R13: 00007ffa5f5e6038 R14: 00007ffa5f5e5fa0 R15: 00007ffa5f70fa28 [ 1585.965554][T29689] [ 1586.586925][T29697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1586.596364][T29697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1586.609076][T29698] netlink: 'syz.2.7215': attribute type 23 has an invalid length. [ 1586.857351][T29697] dummy0: entered promiscuous mode [ 1586.872828][T29697] bond0: entered promiscuous mode [ 1586.891166][T29697] bond_slave_0: entered promiscuous mode [ 1586.897169][T29697] bond_slave_1: entered promiscuous mode [ 1586.903657][T29697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1586.946769][T29697] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1586.979222][T29697] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1587.029498][T29702] syzkaller0: left promiscuous mode [ 1587.035971][T29702] syzkaller0: left allmulticast mode [ 1587.360595][T23639] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 1587.521082][T23639] usb 7-1: device descriptor read/64, error -71 [ 1587.666877][T29717] delete_channel: no stack [ 1587.762017][T23639] usb 7-1: new low-speed USB device number 64 using dummy_hcd [ 1587.780893][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1587.780906][ T30] audit: type=1326 audit(1763637297.417:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1587.829504][ T30] audit: type=1326 audit(1763637297.447:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1587.869155][ T30] audit: type=1326 audit(1763637297.447:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1587.910567][T23639] usb 7-1: device descriptor read/64, error -71 [ 1587.920768][ T30] audit: type=1326 audit(1763637297.447:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.030790][T23639] usb usb7-port1: attempt power cycle [ 1588.052018][ T30] audit: type=1326 audit(1763637297.457:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.064699][T29727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7227'. [ 1588.100963][ T30] audit: type=1326 audit(1763637297.457:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.135063][ T30] audit: type=1326 audit(1763637297.457:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.158891][ T30] audit: type=1326 audit(1763637297.457:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.183031][T29727] dummy0 (unregistering): left promiscuous mode [ 1588.183101][ T30] audit: type=1326 audit(1763637297.457:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.228330][ T30] audit: type=1326 audit(1763637297.457:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29722 comm="syz.0.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1588.270463][ T5830] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1588.380452][T23639] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 1588.401270][T23639] usb 7-1: device descriptor read/8, error -71 [ 1588.433052][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.445200][ T5830] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1588.474722][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1588.493824][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.510866][ T5830] usb 3-1: Product: syz [ 1588.525350][ T5830] usb 3-1: Manufacturer: syz [ 1588.531838][ T5830] usb 3-1: SerialNumber: syz [ 1588.551202][ T5830] cdc_mbim 3-1:1.0: skipping garbage [ 1588.647075][T23639] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 1588.681294][T23639] usb 7-1: device descriptor read/8, error -71 [ 1588.920509][T25915] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1588.930070][T23639] usb usb7-port1: unable to enumerate USB device [ 1588.977695][T29729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1589.072354][T25915] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1589.088866][T25915] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1589.105475][T25915] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1589.124195][T25915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1589.139451][T25915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1589.152151][T25915] usb 5-1: SerialNumber: syz [ 1589.397366][T25915] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 1589.411173][T25915] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 1589.492043][T25915] usb 5-1: USB disconnect, device number 39 [ 1589.610974][T29729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1589.618596][ T5830] cdc_mbim 3-1:1.0: setting tx_max = 48 [ 1589.636165][ T5830] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1589.659576][ T5830] wwan wwan0: port wwan0mbim0 attached [ 1589.678512][ T5830] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ba:f9:f4:1f:3b:8d [ 1589.857178][ T5830] usb 3-1: USB disconnect, device number 125 [ 1589.873695][ T5830] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1589.926743][ T5830] wwan wwan0: port wwan0mbim0 disconnected [ 1590.318590][T29763] FAULT_INJECTION: forcing a failure. [ 1590.318590][T29763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.335356][T29763] CPU: 0 UID: 0 PID: 29763 Comm: syz.6.7234 Not tainted syzkaller #0 PREEMPT(full) [ 1590.335385][T29763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1590.335397][T29763] Call Trace: [ 1590.335405][T29763] [ 1590.335415][T29763] dump_stack_lvl+0x189/0x250 [ 1590.335448][T29763] ? __pfx____ratelimit+0x10/0x10 [ 1590.335475][T29763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.335503][T29763] ? __pfx__printk+0x10/0x10 [ 1590.335537][T29763] should_fail_ex+0x414/0x560 [ 1590.335573][T29763] _copy_to_user+0x31/0xb0 [ 1590.335601][T29763] simple_read_from_buffer+0xe1/0x170 [ 1590.335639][T29763] proc_fail_nth_read+0x1b3/0x220 [ 1590.335670][T29763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1590.335699][T29763] ? rw_verify_area+0x2a6/0x4d0 [ 1590.335727][T29763] ? __lock_acquire+0xab9/0xd20 [ 1590.335746][T29763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1590.335772][T29763] vfs_read+0x200/0xa30 [ 1590.335797][T29763] ? fdget_pos+0x247/0x320 [ 1590.335822][T29763] ? __pfx___mutex_lock+0x10/0x10 [ 1590.335853][T29763] ? __pfx_vfs_read+0x10/0x10 [ 1590.335884][T29763] ? __fget_files+0x2a/0x420 [ 1590.335908][T29763] ? __fget_files+0x3a0/0x420 [ 1590.335926][T29763] ? __fget_files+0x2a/0x420 [ 1590.335961][T29763] ksys_read+0x145/0x250 [ 1590.335992][T29763] ? __pfx_ksys_read+0x10/0x10 [ 1590.336024][T29763] ? do_syscall_64+0xbe/0xfa0 [ 1590.336057][T29763] do_syscall_64+0xfa/0xfa0 [ 1590.336085][T29763] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.336113][T29763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.336144][T29763] ? clear_bhb_loop+0x60/0xb0 [ 1590.336169][T29763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.336188][T29763] RIP: 0033:0x7fac9078e15c [ 1590.336207][T29763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1590.336224][T29763] RSP: 002b:00007fac9153f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1590.336247][T29763] RAX: ffffffffffffffda RBX: 00007fac909e6090 RCX: 00007fac9078e15c [ 1590.336263][T29763] RDX: 000000000000000f RSI: 00007fac9153f0a0 RDI: 000000000000000a [ 1590.336276][T29763] RBP: 00007fac9153f090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.336287][T29763] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1590.336300][T29763] R13: 00007fac909e6128 R14: 00007fac909e6090 R15: 00007fac90b0fa28 [ 1590.336335][T29763] [ 1590.804256][T29771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7235'. [ 1591.751290][ T5904] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1591.920597][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 1591.968663][ T5904] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1592.065742][ T5904] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1592.080511][ T5830] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1592.095606][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1592.120453][ T5904] usb 7-1: Product: syz [ 1592.124694][ T5904] usb 7-1: Manufacturer: syz [ 1592.149826][ T5904] usb 7-1: SerialNumber: syz [ 1592.173365][ T5904] usb 7-1: config 0 descriptor?? [ 1592.180040][T29794] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1592.279003][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1592.399893][ T5904] usb 7-1: USB disconnect, device number 67 [ 1592.585205][ T5830] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1592.622187][T29794] loop6: detected capacity change from 0 to 524288000 [ 1592.689167][T29794] bond1: option ad_user_port_key: invalid value (8039) [ 1592.696973][T29794] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1592.714151][T29794] bond1 (unregistering): Released all slaves [ 1592.818599][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.004896][ T5830] usb 5-1: Product: syz [ 1593.030900][ T5830] usb 5-1: Manufacturer: syz [ 1593.035594][ T5830] usb 5-1: SerialNumber: syz [ 1593.055961][ T5830] usb 5-1: config 0 descriptor?? [ 1593.329167][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 1593.329218][ T30] audit: type=1326 audit(1763637302.967:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.399705][ T30] audit: type=1326 audit(1763637303.007:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.450531][ T30] audit: type=1326 audit(1763637303.007:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.510576][ T30] audit: type=1326 audit(1763637303.017:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.560615][ T30] audit: type=1326 audit(1763637303.017:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.610426][ T30] audit: type=1326 audit(1763637303.037:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.767009][ T30] audit: type=1326 audit(1763637303.037:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.916845][ T30] audit: type=1326 audit(1763637303.037:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1593.997773][ T30] audit: type=1326 audit(1763637303.077:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1594.033143][ T30] audit: type=1326 audit(1763637303.077:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29818 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1594.740214][T29836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.826407][T29836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.914426][T29836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.970514][ T5904] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1594.978551][T29836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.035189][T29836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.045276][T29836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.170844][ T5904] usb 7-1: device descriptor read/64, error -71 [ 1595.307122][T29841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1595.410507][ T5904] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1595.486436][T23639] usb 5-1: USB disconnect, device number 41 [ 1595.540632][ T5904] usb 7-1: device descriptor read/64, error -71 [ 1595.650881][ T5904] usb usb7-port1: attempt power cycle [ 1595.758153][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1595.847779][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1595.991408][ T5904] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1596.021280][ T5904] usb 7-1: device descriptor read/8, error -71 [ 1596.176707][T29858] xt_l2tp: wrong L2TP version: 0 [ 1596.291308][ T5904] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1596.321507][ T5904] usb 7-1: device descriptor read/8, error -71 [ 1596.430933][ T5904] usb usb7-port1: unable to enumerate USB device [ 1597.674065][T29864] macvtap0: refused to change device tx_queue_len [ 1597.690000][T29864] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1597.875901][T29867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7264'. [ 1598.126274][T29882] netlink: 'syz.0.7269': attribute type 1 has an invalid length. [ 1598.247091][T29885] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1598.284002][T29887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1598.407810][T29882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1598.548353][T29892] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1598.747148][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 1598.747168][ T30] audit: type=1326 audit(1763637308.387:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1598.829634][ T30] audit: type=1326 audit(1763637308.427:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1598.875016][ T30] audit: type=1326 audit(1763637308.427:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1598.935687][ T30] audit: type=1326 audit(1763637308.427:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1598.990414][ T30] audit: type=1326 audit(1763637308.427:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1599.038276][ T30] audit: type=1326 audit(1763637308.537:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1599.090380][ T30] audit: type=1326 audit(1763637308.537:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.0.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f38f749 code=0x7ffc0000 [ 1599.157507][ T30] audit: type=1326 audit(1763637308.757:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29910 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1599.232307][ T30] audit: type=1326 audit(1763637308.757:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29910 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1599.270436][ T30] audit: type=1326 audit(1763637308.757:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29910 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1599.318395][T29919] syz_tun: entered promiscuous mode [ 1599.330257][T29916] ipvlan0: entered promiscuous mode [ 1599.345016][T29916] ipvlan0: left promiscuous mode [ 1599.493827][T29915] syz_tun: left promiscuous mode [ 1599.870468][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1600.022099][ T5904] usb 5-1: config 0 has no interfaces? [ 1600.029763][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1600.039213][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.050741][ T5904] usb 5-1: Product: syz [ 1600.057352][ T5904] usb 5-1: Manufacturer: syz [ 1600.065262][ T5904] usb 5-1: SerialNumber: syz [ 1600.086915][ T5904] usb 5-1: config 0 descriptor?? [ 1600.332109][T29929] syz_tun: entered promiscuous mode [ 1600.343612][T29929] vlan0: entered promiscuous mode [ 1600.565292][ T5830] usb 5-1: USB disconnect, device number 42 [ 1600.607282][T29933] syzkaller0: entered promiscuous mode [ 1600.622944][T29933] syzkaller0: entered allmulticast mode [ 1600.672083][T29933] syzkaller0: tun_net_xmit 14 [ 1600.880513][T14810] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1601.030787][T14810] usb 3-1: Using ep0 maxpacket: 16 [ 1601.042114][T14810] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1601.060695][T14810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.072124][T14810] usb 3-1: config 0 descriptor?? [ 1601.110850][ T5830] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1601.523569][T14810] cherry 0003:046A:0027.008F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 1601.733129][T25915] usb 3-1: USB disconnect, device number 126 [ 1603.533146][T29966] syzkaller0: entered promiscuous mode [ 1603.538681][T29966] syzkaller0: entered allmulticast mode [ 1603.548074][T29966] syzkaller0: tun_net_xmit 14 [ 1603.879908][ T5830] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1603.890801][ T5830] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1603.899042][ T5830] usb 7-1: can't read configurations, error -71 [ 1603.960822][ T5904] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1604.110450][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1604.117168][ T5904] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1604.125773][ T5904] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1604.134632][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1604.143744][ T5904] usb 3-1: config 1 has no interface number 0 [ 1604.149871][ T5904] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.161628][ T5904] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1604.174653][ T5904] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1604.183857][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.202761][ T5904] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1604.250657][ T5830] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1604.402873][ T5830] usb 7-1: config 0 has no interfaces? [ 1604.408697][ T5830] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1604.418281][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.438261][ T5830] usb 7-1: config 0 descriptor?? [ 1604.661194][T29971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.670993][T29971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.682005][T25915] usb 7-1: USB disconnect, device number 73 [ 1604.770949][ T5830] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1604.923102][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1604.933142][ T5830] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1604.943634][ T5830] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1605.310480][T25915] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1605.460548][T25915] usb 7-1: Using ep0 maxpacket: 8 [ 1605.468917][T25915] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 1605.480980][T25915] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1605.516925][T25915] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1605.580855][T25915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.589256][T25915] usb 7-1: Product: syz [ 1605.594235][T25915] usb 7-1: Manufacturer: syz [ 1605.635486][T25915] usb 7-1: SerialNumber: syz [ 1605.894643][T29983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1605.995865][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1606.817668][ T5904] snd_usb_pod 3-1:1.1: set_interface failed [ 1606.824226][ T5904] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1606.837769][ T5904] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1606.881726][ T5904] usb 3-1: USB disconnect, device number 127 [ 1607.288610][T25915] usb 7-1: USB disconnect, device number 74 [ 1607.576756][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.583166][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.626845][ T5830] usb 5-1: New USB device found, idVendor=2a41, idProduct=3073, bcdDevice=5e.2f [ 1607.670740][ T5830] usb 5-1: New USB device strings: Mfr=44, Product=204, SerialNumber=3 [ 1607.698063][ T5830] usb 5-1: can't set config #1, error -71 [ 1607.737217][ T5830] usb 5-1: USB disconnect, device number 43 [ 1607.760983][T29995] syzkaller0: entered promiscuous mode [ 1607.777025][T29995] syzkaller0: entered allmulticast mode [ 1607.787615][T29995] syzkaller0: tun_net_xmit 14 [ 1607.908083][T25915] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1607.940616][T25915] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1608.080956][ T5830] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1608.250921][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 1608.258507][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.279985][ T5830] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1608.289839][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.298324][ T5830] usb 5-1: Product: syz [ 1608.302641][ T5830] usb 5-1: Manufacturer: syz [ 1608.307262][ T5830] usb 5-1: SerialNumber: syz [ 1608.328884][ T5830] usb 5-1: config 0 descriptor?? [ 1608.353557][T30017] FAULT_INJECTION: forcing a failure. [ 1608.353557][T30017] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.366629][T30017] CPU: 1 UID: 0 PID: 30017 Comm: syz.6.7317 Not tainted syzkaller #0 PREEMPT(full) [ 1608.366648][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1608.366656][T30017] Call Trace: [ 1608.366662][T30017] [ 1608.366667][T30017] dump_stack_lvl+0x189/0x250 [ 1608.366688][T30017] ? __pfx____ratelimit+0x10/0x10 [ 1608.366706][T30017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1608.366722][T30017] ? __pfx__printk+0x10/0x10 [ 1608.366739][T30017] ? __pfx___might_resched+0x10/0x10 [ 1608.366752][T30017] ? fs_reclaim_acquire+0x7d/0x100 [ 1608.366773][T30017] should_fail_ex+0x414/0x560 [ 1608.366794][T30017] should_failslab+0xa8/0x100 [ 1608.366807][T30017] __kmalloc_noprof+0xcb/0x7f0 [ 1608.366823][T30017] ? tcf_idr_create+0x5d/0x6b0 [ 1608.366836][T30017] ? tcf_idr_check_alloc+0x637/0x7b0 [ 1608.366854][T30017] tcf_idr_create+0x5d/0x6b0 [ 1608.366869][T30017] ? __nla_parse+0x40/0x60 [ 1608.366884][T30017] tcf_police_init+0x32b/0x1420 [ 1608.366906][T30017] ? __lock_acquire+0xab9/0xd20 [ 1608.366919][T30017] ? __pfx_tcf_police_init+0x10/0x10 [ 1608.366953][T30017] ? tc_action_load_ops+0x18a/0x4e0 [ 1608.366972][T30017] tcf_action_init_1+0x2a8/0x6d0 [ 1608.366992][T30017] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1608.367007][T30017] ? _raw_read_unlock+0x28/0x50 [ 1608.367023][T30017] ? tc_action_load_ops+0x214/0x4e0 [ 1608.367049][T30017] ? kasan_save_track+0x3e/0x80 [ 1608.367065][T30017] ? __kasan_kmalloc+0x93/0xb0 [ 1608.367085][T30017] tcf_exts_validate_ex+0x2dd/0x530 [ 1608.367097][T30017] ? do_syscall_64+0xfa/0xfa0 [ 1608.367112][T30017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.367128][T30017] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 1608.367157][T30017] tcf_exts_validate+0x42/0x60 [ 1608.367171][T30017] fw_set_parms+0x18d/0x8c0 [ 1608.367189][T30017] ? tcf_exts_init_ex+0x110/0x750 [ 1608.367202][T30017] ? __pfx_fw_set_parms+0x10/0x10 [ 1608.367219][T30017] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1608.367240][T30017] fw_change+0x694/0xeb0 [ 1608.367262][T30017] ? __pfx_fw_change+0x10/0x10 [ 1608.367288][T30017] tc_new_tfilter+0xdca/0x15b0 [ 1608.367331][T30017] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1608.367343][T30017] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1608.367378][T30017] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1608.367392][T30017] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1608.367412][T30017] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1608.367429][T30017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1608.367445][T30017] ? ref_tracker_free+0x63a/0x7d0 [ 1608.367458][T30017] ? __asan_memcpy+0x40/0x70 [ 1608.367474][T30017] ? __pfx_ref_tracker_free+0x10/0x10 [ 1608.367492][T30017] netlink_rcv_skb+0x208/0x470 [ 1608.367506][T30017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1608.367524][T30017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1608.367544][T30017] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.367561][T30017] netlink_unicast+0x82f/0x9e0 [ 1608.367584][T30017] ? __pfx_netlink_unicast+0x10/0x10 [ 1608.367602][T30017] ? netlink_sendmsg+0x642/0xb30 [ 1608.367613][T30017] ? skb_put+0x11b/0x210 [ 1608.367628][T30017] netlink_sendmsg+0x805/0xb30 [ 1608.367646][T30017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1608.367661][T30017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1608.367679][T30017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1608.367691][T30017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1608.367705][T30017] __sock_sendmsg+0x21c/0x270 [ 1608.367723][T30017] ____sys_sendmsg+0x505/0x830 [ 1608.367740][T30017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1608.367759][T30017] ? import_iovec+0x74/0xa0 [ 1608.367777][T30017] ___sys_sendmsg+0x21f/0x2a0 [ 1608.367792][T30017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1608.367827][T30017] ? __fget_files+0x2a/0x420 [ 1608.367838][T30017] ? __fget_files+0x3a0/0x420 [ 1608.367856][T30017] __x64_sys_sendmsg+0x19b/0x260 [ 1608.367872][T30017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1608.367891][T30017] ? __pfx_ksys_write+0x10/0x10 [ 1608.367910][T30017] ? do_syscall_64+0xbe/0xfa0 [ 1608.367929][T30017] do_syscall_64+0xfa/0xfa0 [ 1608.367945][T30017] ? lockdep_hardirqs_on+0x9c/0x150 [ 1608.367961][T30017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.367973][T30017] ? clear_bhb_loop+0x60/0xb0 [ 1608.367988][T30017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.368000][T30017] RIP: 0033:0x7fac9078f749 [ 1608.368011][T30017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1608.368022][T30017] RSP: 002b:00007fac91585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1608.368037][T30017] RAX: ffffffffffffffda RBX: 00007fac909e5fa0 RCX: 00007fac9078f749 [ 1608.368047][T30017] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1608.368055][T30017] RBP: 00007fac91585090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.368063][T30017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1608.368070][T30017] R13: 00007fac909e6038 R14: 00007fac909e5fa0 R15: 00007fac90b0fa28 [ 1608.368090][T30017] [ 1608.863564][ T5904] usb 5-1: USB disconnect, device number 44 [ 1609.330627][T25915] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1609.508073][T25915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1609.529168][T25915] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1609.550447][T25915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.590465][T25915] usb 7-1: Product: syz [ 1609.594873][T25915] usb 7-1: Manufacturer: syz [ 1609.610008][T25915] usb 7-1: SerialNumber: syz [ 1609.631193][T25915] usb 7-1: config 0 descriptor?? [ 1609.665394][T30025] syzkaller0: entered promiscuous mode [ 1609.671812][T30025] syzkaller0: entered allmulticast mode [ 1610.832726][T30037] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1610.848395][T30037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1611.093461][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7325'. [ 1611.869870][T30057] program syz.2.7333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.052935][ T5904] usb 7-1: USB disconnect, device number 75 [ 1612.388772][T30076] loop2: detected capacity change from 0 to 7 [ 1612.400122][ T5882] loop2: [ 1612.403484][ T5882] loop2: partition table partially beyond EOD, truncated [ 1612.422248][T30076] loop2: [ 1612.425268][T30076] loop2: partition table partially beyond EOD, truncated [ 1612.640430][ T5904] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1612.792680][ T5904] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1612.801483][ T5904] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1612.811866][ T5904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1612.820907][ T5904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1612.832008][ T5904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1612.844755][ T5904] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1612.854165][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1612.862292][ T5904] usb 7-1: Product: syz [ 1612.866485][ T5904] usb 7-1: Manufacturer: syz [ 1612.879051][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 1612.888904][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 1612.908557][ T5904] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1612.914827][ T5904] cdc_wdm 7-1:1.0: Unknown control protocol [ 1613.081658][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.095030][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.106487][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.115818][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.126899][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.138279][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.149246][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.158552][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.177923][T30075] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1613.215348][ T7224] usb 7-1: USB disconnect, device number 76 [ 1613.442688][T25915] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1613.620541][T25915] usb 5-1: Using ep0 maxpacket: 32 [ 1613.627818][T25915] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1613.637608][T25915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.662706][T25915] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1613.987827][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1613.987851][ T30] audit: type=1326 audit(1763637323.627:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30092 comm="syz.6.7346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac9078f749 code=0x0 [ 1614.064306][T30091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.075614][T30091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.099888][T25915] gspca_nw80x: reg_r err -71 [ 1614.104982][T25915] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1614.118366][T25915] usb 5-1: USB disconnect, device number 45 [ 1614.702316][T30110] syzkaller0: entered promiscuous mode [ 1614.709250][T30110] syzkaller0: entered allmulticast mode [ 1614.739293][T30110] syzkaller0: tun_net_xmit 14 [ 1615.584523][T25915] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1615.770476][T25915] usb 7-1: Using ep0 maxpacket: 8 [ 1615.782548][T25915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.798962][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.811787][T25915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.826648][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.838118][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1615.852071][T25915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.859526][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.871779][T25915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.883789][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.895850][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1615.908817][T25915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.916855][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.930500][T25915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.945366][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.956997][T25915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1615.971853][T25915] usb 7-1: string descriptor 0 read error: -22 [ 1615.978110][T25915] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1615.987805][T25915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.007514][T25915] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1616.259299][ T7225] usb 7-1: USB disconnect, device number 77 [ 1616.401539][T25915] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1616.562475][T25915] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1616.571058][T25915] usb 3-1: config 179 has no interface number 0 [ 1616.577354][T25915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1616.588628][T25915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1616.599814][T25915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1616.611730][T25915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1616.623228][T25915] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1616.636794][T25915] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1616.645873][T25915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.656760][T30163] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1616.664709][T30163] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1616.680476][ T7225] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1616.831945][ T7225] usb 5-1: device descriptor read/64, error -71 [ 1617.027063][T25915] usb 3-1: USB disconnect, device number 2 [ 1617.027127][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1617.041392][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1617.073874][ T7225] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1617.210519][ T7225] usb 5-1: device descriptor read/64, error -71 [ 1617.321217][ T7225] usb usb5-port1: attempt power cycle [ 1617.340659][ T7224] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1617.510522][ T7224] usb 7-1: Using ep0 maxpacket: 8 [ 1617.517418][ T7224] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.527670][ T7224] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1617.536842][ T7224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.546772][ T7224] usb 7-1: config 0 descriptor?? [ 1617.555630][ T7224] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1617.663191][ T7225] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1617.701103][ T7225] usb 5-1: device descriptor read/8, error -71 [ 1617.773006][ T7224] gspca_vc032x: reg_r err -71 [ 1617.788737][ T7224] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1617.812145][ T7224] usb 7-1: USB disconnect, device number 78 [ 1617.941055][ T7225] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1617.972655][ T7225] usb 5-1: device descriptor read/8, error -71 [ 1618.080963][ T7225] usb usb5-port1: unable to enumerate USB device [ 1618.360538][ T7224] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1618.531028][ T7224] usb 7-1: Using ep0 maxpacket: 32 [ 1618.538176][ T7224] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1618.547527][ T7224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.557906][ T7224] usb 7-1: config 0 descriptor?? [ 1618.567519][ T7224] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1618.700514][ T5904] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1618.854401][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.864673][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1618.873952][ T5904] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1618.883175][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.894250][ T5904] usb 3-1: config 0 descriptor?? [ 1618.907339][ T5904] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1618.914184][ T5904] dvb-usb: bulk message failed: -22 (3/0) [ 1618.923717][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1618.933766][ T5904] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1618.941460][ T5904] usb 3-1: media controller created [ 1618.948624][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1618.962305][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 1618.968195][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1618.982832][ T7224] gspca_sunplus: reg_w_riv err -71 [ 1618.985379][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input131 [ 1618.998959][ T7224] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1619.003982][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 1619.014419][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1619.021574][ T7224] usb 7-1: USB disconnect, device number 79 [ 1619.173157][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1619.190885][ T5904] dvb-usb: error while querying for an remote control event. [ 1619.335943][ T5904] usb 3-1: USB disconnect, device number 3 [ 1619.362877][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1619.496231][T30229] __nla_validate_parse: 44 callbacks suppressed [ 1619.496254][T30229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1620.671320][ T5830] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1620.677332][T30251] syzkaller0: entered promiscuous mode [ 1620.684613][T30251] syzkaller0: entered allmulticast mode [ 1620.811195][T30254] Set syz0 is full, maxelem 0 reached [ 1620.860675][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 1620.868159][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1620.893188][ T5830] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1620.902552][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.924474][ T5830] usb 5-1: config 0 descriptor?? [ 1621.290477][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1621.450455][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1622.335088][T30275] FAULT_INJECTION: forcing a failure. [ 1622.335088][T30275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.350224][T30275] CPU: 0 UID: 0 PID: 30275 Comm: syz.0.7407 Not tainted syzkaller #0 PREEMPT(full) [ 1622.350259][T30275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1622.350273][T30275] Call Trace: [ 1622.350281][T30275] [ 1622.350291][T30275] dump_stack_lvl+0x189/0x250 [ 1622.350326][T30275] ? __pfx____ratelimit+0x10/0x10 [ 1622.350355][T30275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.350381][T30275] ? __pfx__printk+0x10/0x10 [ 1622.350403][T30275] ? __might_fault+0xb0/0x130 [ 1622.350445][T30275] should_fail_ex+0x414/0x560 [ 1622.350482][T30275] _copy_from_iter+0x1de/0x1790 [ 1622.350514][T30275] ? rcu_is_watching+0x15/0xb0 [ 1622.350543][T30275] ? kmalloc_reserve+0xbd/0x290 [ 1622.350564][T30275] ? __pfx__copy_from_iter+0x10/0x10 [ 1622.350590][T30275] ? __build_skb_around+0x262/0x3f0 [ 1622.350613][T30275] ? netlink_sendmsg+0x642/0xb30 [ 1622.350633][T30275] ? skb_put+0x11b/0x210 [ 1622.350658][T30275] netlink_sendmsg+0x6b2/0xb30 [ 1622.350689][T30275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.350714][T30275] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1622.350747][T30275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1622.350768][T30275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.350791][T30275] __sock_sendmsg+0x21c/0x270 [ 1622.350822][T30275] ____sys_sendmsg+0x505/0x830 [ 1622.350852][T30275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.350887][T30275] ? import_iovec+0x74/0xa0 [ 1622.350916][T30275] ___sys_sendmsg+0x21f/0x2a0 [ 1622.350942][T30275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.351006][T30275] ? __fget_files+0x2a/0x420 [ 1622.351026][T30275] ? __fget_files+0x3a0/0x420 [ 1622.351058][T30275] __x64_sys_sendmsg+0x19b/0x260 [ 1622.351085][T30275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.351130][T30275] ? __pfx_ksys_write+0x10/0x10 [ 1622.351163][T30275] ? do_syscall_64+0xbe/0xfa0 [ 1622.351197][T30275] do_syscall_64+0xfa/0xfa0 [ 1622.351225][T30275] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.351255][T30275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.351275][T30275] ? clear_bhb_loop+0x60/0xb0 [ 1622.351301][T30275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.351321][T30275] RIP: 0033:0x7ffa5f38f749 [ 1622.351340][T30275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.351357][T30275] RSP: 002b:00007ffa60212038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.351380][T30275] RAX: ffffffffffffffda RBX: 00007ffa5f5e5fa0 RCX: 00007ffa5f38f749 [ 1622.351395][T30275] RDX: 0000000000000880 RSI: 0000200000000340 RDI: 0000000000000003 [ 1622.351409][T30275] RBP: 00007ffa60212090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.351422][T30275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.351434][T30275] R13: 00007ffa5f5e6038 R14: 00007ffa5f5e5fa0 R15: 00007ffa5f70fa28 [ 1622.351468][T30275] [ 1622.362147][ T5904] usb 3-1: too many configurations: 91, using maximum allowed: 8 [ 1622.936034][ T5904] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef [ 1622.950355][ T5904] usb 3-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77 [ 1623.090514][ T5904] usb 3-1: Product: syz [ 1623.270664][ T5904] usb 3-1: Manufacturer: syz [ 1623.285622][ T5904] usb 3-1: SerialNumber: syz [ 1623.466736][ T5830] usb 5-1: string descriptor 0 read error: -71 [ 1623.511680][T30263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.551880][ T5830] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input132 [ 1623.557102][T30263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.632298][ T5185] bcm5974 5-1:0.0: could not read from device [ 1623.651412][ T5904] ums-datafab 3-1:68.0: USB Mass Storage device detected [ 1623.712128][ T5830] usb 5-1: USB disconnect, device number 50 [ 1623.789772][ T5904] ums-sddr55 3-1:68.0: USB Mass Storage device detected [ 1623.904569][T30291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7412'. [ 1623.934710][ T5904] usb 3-1: USB disconnect, device number 4 [ 1624.610716][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1624.770525][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1624.778709][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.789739][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1624.803539][ T5830] usb 3-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1624.813191][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.826339][ T5830] usb 3-1: config 0 descriptor?? [ 1624.836899][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1625.416869][T30307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1625.571457][T30310] program syz.6.7419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1625.586906][T30310] syzkaller1: entered promiscuous mode [ 1625.592592][T30310] syzkaller1: entered allmulticast mode [ 1625.601031][T30310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7419'. [ 1626.510787][T30323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7422'. [ 1627.144242][T30327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7424'. [ 1627.153721][T30327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7424'. [ 1627.401203][ T5904] usb 3-1: USB disconnect, device number 5 [ 1629.727765][T30373] FAULT_INJECTION: forcing a failure. [ 1629.727765][T30373] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.759862][T30373] CPU: 1 UID: 0 PID: 30373 Comm: syz.0.7438 Not tainted syzkaller #0 PREEMPT(full) [ 1629.759895][T30373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1629.759909][T30373] Call Trace: [ 1629.759918][T30373] [ 1629.759927][T30373] dump_stack_lvl+0x189/0x250 [ 1629.759959][T30373] ? __pfx____ratelimit+0x10/0x10 [ 1629.759979][T30373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1629.759995][T30373] ? __pfx__printk+0x10/0x10 [ 1629.760026][T30373] should_fail_ex+0x414/0x560 [ 1629.760049][T30373] should_failslab+0xa8/0x100 [ 1629.760064][T30373] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1629.760080][T30373] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1629.760097][T30373] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1629.760112][T30373] ? sctp_add_bind_addr+0x8c/0x370 [ 1629.760127][T30373] ? sctp_add_bind_addr+0xb0/0x370 [ 1629.760145][T30373] sctp_add_bind_addr+0x8c/0x370 [ 1629.760164][T30373] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1629.760184][T30373] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1629.760200][T30373] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1629.760217][T30373] ? sctp_v6_is_any+0x64/0x80 [ 1629.760235][T30373] ? sctp_copy_one_addr+0x93/0x360 [ 1629.760257][T30373] sctp_bind_addr_copy+0xb3/0x3c0 [ 1629.760285][T30373] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1629.760316][T30373] sctp_connect_new_asoc+0x2e0/0x690 [ 1629.760342][T30373] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1629.760361][T30373] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1629.760392][T30373] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1629.760413][T30373] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1629.760442][T30373] sctp_sendmsg+0x155c/0x2810 [ 1629.760470][T30373] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1629.760485][T30373] ? aa_sk_perm+0x81e/0x950 [ 1629.760502][T30373] ? __lock_acquire+0xab9/0xd20 [ 1629.760516][T30373] ? __pfx_aa_sk_perm+0x10/0x10 [ 1629.760539][T30373] ? sock_rps_record_flow+0x19/0x410 [ 1629.760557][T30373] ? inet_sendmsg+0x2f4/0x370 [ 1629.760572][T30373] __sock_sendmsg+0x19c/0x270 [ 1629.760594][T30373] ____sys_sendmsg+0x52d/0x830 [ 1629.760612][T30373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1629.760641][T30373] ? import_iovec+0x74/0xa0 [ 1629.760672][T30373] ___sys_sendmsg+0x21f/0x2a0 [ 1629.760698][T30373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1629.760747][T30373] ? __fget_files+0x2a/0x420 [ 1629.760759][T30373] ? __fget_files+0x3a0/0x420 [ 1629.760778][T30373] __sys_sendmmsg+0x227/0x430 [ 1629.760795][T30373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1629.760815][T30373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1629.760850][T30373] ? ksys_write+0x22a/0x250 [ 1629.760868][T30373] ? __pfx_ksys_write+0x10/0x10 [ 1629.760888][T30373] __x64_sys_sendmmsg+0xa0/0xc0 [ 1629.760903][T30373] do_syscall_64+0xfa/0xfa0 [ 1629.760919][T30373] ? lockdep_hardirqs_on+0x9c/0x150 [ 1629.760935][T30373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.760948][T30373] ? clear_bhb_loop+0x60/0xb0 [ 1629.760963][T30373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.760976][T30373] RIP: 0033:0x7ffa5f38f749 [ 1629.760995][T30373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.761021][T30373] RSP: 002b:00007ffa60212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1629.761044][T30373] RAX: ffffffffffffffda RBX: 00007ffa5f5e5fa0 RCX: 00007ffa5f38f749 [ 1629.761059][T30373] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1629.761073][T30373] RBP: 00007ffa60212090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.761085][T30373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.761097][T30373] R13: 00007ffa5f5e6038 R14: 00007ffa5f5e5fa0 R15: 00007ffa5f70fa28 [ 1629.761129][T30373] [ 1630.120491][ T5904] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1630.440492][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 1630.447625][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.457961][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1630.470927][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1630.479952][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.490728][ T5904] usb 5-1: config 0 descriptor?? [ 1630.503455][ T5904] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1630.657570][ T5904] hid-generic 0000:0000:0000.0091: unknown main item tag 0x7 [ 1630.666947][ T5904] hid-generic 0000:0000:0000.0091: ignoring exceeding usage max [ 1630.676398][ T5904] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 1630.685953][ T5904] hid-generic 0000:0000:0000.0091: unknown main item tag 0x6 [ 1630.693642][ T5904] hid-generic 0000:0000:0000.0091: reserved main item tag 0xd [ 1630.714400][ T5904] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1630.721117][T30383] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1630.755144][T30383] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1630.827342][T30385] fido_id[30385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1631.020576][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1631.342181][T30398] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1631.349589][T30398] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1631.380671][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1631.397318][ T5904] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1631.408392][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.423154][ T5904] usb 3-1: Product: syz [ 1631.427453][ T5904] usb 3-1: Manufacturer: syz [ 1631.446440][ T5904] usb 3-1: SerialNumber: syz [ 1631.465642][ T5904] usb 3-1: config 0 descriptor?? [ 1631.501333][ T5904] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1631.523683][ T5904] usb 3-1: Detected FT232H [ 1631.683548][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1631.727194][T30409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7449'. [ 1631.921354][T30411] netlink: 'syz.6.7449': attribute type 30 has an invalid length. [ 1632.555350][ T5920] usb 5-1: USB disconnect, device number 51 [ 1632.864844][T30424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7453'. [ 1632.960433][ T30] audit: type=1326 audit(1763637342.587:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960496][ T30] audit: type=1326 audit(1763637342.587:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960543][ T30] audit: type=1326 audit(1763637342.587:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960589][ T30] audit: type=1326 audit(1763637342.587:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960634][ T30] audit: type=1326 audit(1763637342.587:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960679][ T30] audit: type=1326 audit(1763637342.587:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960721][ T30] audit: type=1326 audit(1763637342.597:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960767][ T30] audit: type=1326 audit(1763637342.597:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960823][ T30] audit: type=1326 audit(1763637342.597:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1632.960869][ T30] audit: type=1326 audit(1763637342.597:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30428 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1633.049696][T30429] netlink: 'syz.0.7455': attribute type 10 has an invalid length. [ 1633.054884][T30429] bond0: (slave netdevsim0): Releasing backup interface [ 1633.061469][T30429] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1633.064815][T30429] team0: Port device netdevsim0 added [ 1633.626707][ T5904] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1633.638674][ T5904] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1633.665502][ T5904] usb 3-1: USB disconnect, device number 6 [ 1633.759770][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1633.797606][ T5904] ftdi_sio 3-1:0.0: device disconnected [ 1634.181095][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7462'. [ 1634.410848][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1634.411568][T30458] vivid-000: disconnect [ 1634.665328][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 1634.683126][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.710411][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1634.743454][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1634.766868][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.801496][ T5920] usb 3-1: config 0 descriptor?? [ 1634.937760][ T5920] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1635.759231][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1635.774148][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1635.784624][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1635.794029][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1635.803193][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1636.563800][T30476] chnl_net:caif_netlink_parms(): no params data found [ 1636.653117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e70000: rx timeout, send abort [ 1636.671801][ T5904] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1636.710991][T30476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.718188][T30476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.725633][T30476] bridge_slave_0: entered allmulticast mode [ 1636.733664][T30476] bridge_slave_0: entered promiscuous mode [ 1636.742538][T30476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.749692][T30476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.758351][T30476] bridge_slave_1: entered allmulticast mode [ 1636.766380][T30476] bridge_slave_1: entered promiscuous mode [ 1636.801540][T30476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.813791][T30476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.833056][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 1636.844635][ T5904] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1636.854442][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.863507][ T5904] usb 5-1: Product: syz [ 1636.867769][ T5904] usb 5-1: Manufacturer: syz [ 1636.872469][T30476] team0: Port device team_slave_0 added [ 1636.876168][T30476] team0: Port device team_slave_1 added [ 1636.879475][ T5904] usb 5-1: SerialNumber: syz [ 1636.922130][T30476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.929137][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.956143][T30476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.969615][T30476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.982810][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.009231][T30476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.025277][T25915] usb 3-1: USB disconnect, device number 7 [ 1637.129068][T30476] hsr_slave_0: entered promiscuous mode [ 1637.138521][ T5904] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1637.142845][T30476] hsr_slave_1: entered promiscuous mode [ 1637.153258][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067504000: rx timeout, send abort [ 1637.157218][T30476] debugfs: 'hsr0' already exists in 'hsr' [ 1637.161670][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e70000: abort rx timeout. Force session deactivation [ 1637.179406][T30476] Cannot create hsr debugfs directory [ 1637.207047][ T5904] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1637.217221][T30507] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1637.222787][ T5904] usb 5-1: USB disconnect, device number 52 [ 1637.297744][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.371441][T30506] syzkaller0: entered promiscuous mode [ 1637.377713][T30506] syzkaller0: entered allmulticast mode [ 1637.445735][T30506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1637.661547][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067504000: abort rx timeout. Force session deactivation [ 1637.901949][ T5829] Bluetooth: hci6: command tx timeout [ 1637.952475][T30530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7487'. [ 1638.170889][T23639] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1638.219536][T30537] binder: 30536:30537 ioctl 40286608 200000000080 returned -22 [ 1638.300650][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1638.330743][T23639] usb 3-1: Using ep0 maxpacket: 16 [ 1638.346031][T23639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.357846][T23639] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1638.374368][T23639] usb 3-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1638.385427][T23639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.396025][T23639] usb 3-1: config 0 descriptor?? [ 1638.405534][T23639] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1638.560438][T14810] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1638.600593][ T5920] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1638.714264][T14810] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1638.723473][T14810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.734364][T14810] usb 5-1: config 0 descriptor?? [ 1638.743091][T14810] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1638.760557][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1638.768397][ T5920] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1638.776692][ T5920] usb 7-1: can't read configurations, error -61 [ 1638.920483][ T5920] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1639.070378][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1639.077875][ T5920] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1639.085871][ T5920] usb 7-1: can't read configurations, error -61 [ 1639.092750][ T5920] usb usb7-port1: attempt power cycle [ 1639.148340][T14810] gp8psk: usb in 128 operation failed. [ 1639.155819][T14810] gp8psk: usb in 137 operation failed. [ 1639.162175][T14810] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1639.173087][T14810] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1639.184580][T14810] usb 5-1: USB disconnect, device number 53 [ 1639.440434][ T5920] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1639.461607][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1639.468921][ T5920] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1639.476762][ T5920] usb 7-1: can't read configurations, error -61 [ 1639.610529][ T5920] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1639.631595][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1639.638648][ T5920] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1639.646455][ T5920] usb 7-1: can't read configurations, error -61 [ 1639.653408][ T5920] usb usb7-port1: unable to enumerate USB device [ 1639.970658][ T5829] Bluetooth: hci6: command tx timeout [ 1640.656808][T30550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1640.908437][T30558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1640.987728][ T5920] usb 3-1: USB disconnect, device number 8 [ 1641.499443][T30572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7500'. [ 1641.561036][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7500'. [ 1642.178725][ T5829] Bluetooth: hci6: command tx timeout [ 1643.424978][T30584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1643.483986][T30584] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1643.500705][T23639] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1643.691980][T23639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.766334][T23639] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1643.785937][T23639] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1643.805545][T23639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.819826][T23639] usb 3-1: config 0 descriptor?? [ 1644.029517][T23639] Bluetooth: Can't get state to change to load ram patch err [ 1644.037244][T23639] Bluetooth: Loading patch file failed [ 1644.181649][T23639] ath3k 3-1:0.0: probe with driver ath3k failed with error -121 [ 1644.222153][ T5829] Bluetooth: hci6: command tx timeout [ 1644.246080][ T5830] usb 3-1: USB disconnect, device number 9 [ 1645.229641][T30615] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7512'. [ 1645.287836][T30615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1645.310409][T23639] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1645.363778][T30617] FAULT_INJECTION: forcing a failure. [ 1645.363778][T30617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.408140][T30617] CPU: 1 UID: 0 PID: 30617 Comm: syz.0.7513 Not tainted syzkaller #0 PREEMPT(full) [ 1645.408169][T30617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1645.408182][T30617] Call Trace: [ 1645.408191][T30617] [ 1645.408200][T30617] dump_stack_lvl+0x189/0x250 [ 1645.408236][T30617] ? __pfx____ratelimit+0x10/0x10 [ 1645.408266][T30617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1645.408293][T30617] ? __pfx__printk+0x10/0x10 [ 1645.408315][T30617] ? __might_fault+0xb0/0x130 [ 1645.408355][T30617] should_fail_ex+0x414/0x560 [ 1645.408391][T30617] _copy_from_iter+0x1de/0x1790 [ 1645.408423][T30617] ? rcu_is_watching+0x15/0xb0 [ 1645.408453][T30617] ? kmalloc_reserve+0xbd/0x290 [ 1645.408475][T30617] ? __pfx__copy_from_iter+0x10/0x10 [ 1645.408500][T30617] ? __build_skb_around+0x262/0x3f0 [ 1645.408525][T30617] ? netlink_sendmsg+0x642/0xb30 [ 1645.408546][T30617] ? skb_put+0x11b/0x210 [ 1645.408571][T30617] netlink_sendmsg+0x6b2/0xb30 [ 1645.408603][T30617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.408629][T30617] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1645.408661][T30617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1645.408681][T30617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.408703][T30617] __sock_sendmsg+0x21c/0x270 [ 1645.408735][T30617] ____sys_sendmsg+0x505/0x830 [ 1645.408765][T30617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.408799][T30617] ? import_iovec+0x74/0xa0 [ 1645.408831][T30617] ___sys_sendmsg+0x21f/0x2a0 [ 1645.408857][T30617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.408920][T30617] ? __fget_files+0x2a/0x420 [ 1645.408940][T30617] ? __fget_files+0x3a0/0x420 [ 1645.408972][T30617] __x64_sys_sendmsg+0x19b/0x260 [ 1645.408999][T30617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.409033][T30617] ? __pfx_ksys_write+0x10/0x10 [ 1645.409067][T30617] ? do_syscall_64+0xbe/0xfa0 [ 1645.409112][T30617] do_syscall_64+0xfa/0xfa0 [ 1645.409138][T30617] ? lockdep_hardirqs_on+0x9c/0x150 [ 1645.409167][T30617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.409189][T30617] ? clear_bhb_loop+0x60/0xb0 [ 1645.409214][T30617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.409235][T30617] RIP: 0033:0x7ffa5f38f749 [ 1645.409255][T30617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.409272][T30617] RSP: 002b:00007ffa60212038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.409296][T30617] RAX: ffffffffffffffda RBX: 00007ffa5f5e5fa0 RCX: 00007ffa5f38f749 [ 1645.409311][T30617] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1645.409324][T30617] RBP: 00007ffa60212090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.409337][T30617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.409349][T30617] R13: 00007ffa5f5e6038 R14: 00007ffa5f5e5fa0 R15: 00007ffa5f70fa28 [ 1645.409383][T30617] [ 1645.684181][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.760438][T23639] usb 3-1: Using ep0 maxpacket: 16 [ 1645.767347][T23639] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.780583][T23639] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1645.816840][T23639] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1645.826148][T23639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.834343][T23639] usb 3-1: Product: syz [ 1645.838563][T23639] usb 3-1: Manufacturer: syz [ 1645.843461][T23639] usb 3-1: SerialNumber: syz [ 1645.869335][T30622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7516'. [ 1646.063337][T23639] usb 3-1: 0:2 : does not exist [ 1646.072885][T23639] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1646.102450][T23639] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1646.134158][T23639] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1646.152602][T23639] usb 3-1: USB disconnect, device number 10 [ 1646.168932][ T5881] udevd[5881]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1646.676584][T14810] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1646.722333][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1646.722353][ T30] audit: type=1326 audit(1763637356.367:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1646.758786][T30635] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1646.769024][ T30] audit: type=1326 audit(1763637356.397:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1646.795246][ T30] audit: type=1326 audit(1763637356.397:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1646.844186][T14810] usb 7-1: device descriptor read/64, error -71 [ 1646.873414][ T30] audit: type=1326 audit(1763637356.397:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1646.920569][ T30] audit: type=1326 audit(1763637356.397:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1646.980419][ T30] audit: type=1326 audit(1763637356.397:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1647.005511][ T30] audit: type=1326 audit(1763637356.397:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1647.036840][ T30] audit: type=1326 audit(1763637356.397:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1647.060474][T30642] loop9: detected capacity change from 0 to 7 [ 1647.068042][T30642] Dev loop9: unable to read RDB block 7 [ 1647.077541][T30642] loop9: unable to read partition table [ 1647.084456][T30642] loop9: partition table beyond EOD, truncated [ 1647.091455][T30642] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1647.100768][T14810] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1647.109130][ T30] audit: type=1326 audit(1763637356.397:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1647.133731][ T30] audit: type=1326 audit(1763637356.397:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30634 comm="syz.2.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d8f749 code=0x7ffc0000 [ 1647.240458][T14810] usb 7-1: device descriptor read/64, error -71 [ 1647.350847][T14810] usb usb7-port1: attempt power cycle [ 1647.640422][ T5920] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1647.690511][T14810] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1647.711195][T14810] usb 7-1: device descriptor read/8, error -71 [ 1647.832267][ T5920] usb 5-1: config index 0 descriptor too short (expected 8457, got 36) [ 1647.842769][ T5920] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1647.860692][ T5920] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 1647.891711][ T5920] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 1647.901663][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1647.912562][ T5920] usb 5-1: Product: syz [ 1647.925069][ T5920] usb 5-1: config 0 descriptor?? [ 1647.960654][T14810] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1647.981368][T14810] usb 7-1: device descriptor read/8, error -71 [ 1648.090953][T14810] usb usb7-port1: unable to enumerate USB device [ 1648.138812][T30654] macvlan0: entered promiscuous mode [ 1648.147993][T30654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7527'. [ 1648.383756][ T5920] usb 5-1: USB disconnect, device number 54 [ 1649.043020][ T5920] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1649.046996][T30670] xt_bpf: check failed: parse error [ 1649.200514][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 1649.207371][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1649.215932][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1649.225725][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1649.235513][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1649.245489][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1649.259147][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1649.268271][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.499356][ T5920] usb 5-1: GET_CAPABILITIES returned 20 [ 1649.510483][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 1649.544974][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7534'. [ 1649.800453][ T5830] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1649.841763][ T5920] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1649.953068][ T5830] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1649.961557][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1649.976285][ T5830] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1649.985527][ T5920] usb 7-1: device descriptor read/64, error -71 [ 1649.991883][ T5830] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1649.999872][ T5830] usb 3-1: Manufacturer: syz [ 1650.006946][ T5830] usb 3-1: config 0 descriptor?? [ 1650.016118][ T5830] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1650.260413][ T5920] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1650.353960][ T7224] usb 3-1: USB disconnect, device number 11 [ 1650.390534][ T5920] usb 7-1: device descriptor read/64, error -71 [ 1650.501601][ T5920] usb usb7-port1: attempt power cycle [ 1650.840384][ T5920] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 1650.862252][ T5920] usb 7-1: device descriptor read/8, error -71 [ 1651.100467][ T5920] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 1651.121108][ T5920] usb 7-1: device descriptor read/8, error -71 [ 1651.231217][ T5920] usb usb7-port1: unable to enumerate USB device [ 1651.240511][ T7225] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1651.410973][ T7225] usb 3-1: Using ep0 maxpacket: 32 [ 1651.419548][ T7225] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1651.428868][ T7225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.440713][ T7225] usb 3-1: config 0 descriptor?? [ 1651.677977][ T7224] usb 5-1: USB disconnect, device number 55 [ 1651.863364][ T7225] viewsonic 0003:2133:0018.0092: item fetching failed at offset 0/4 [ 1651.872700][ T7225] viewsonic 0003:2133:0018.0092: probe with driver viewsonic failed with error -22 [ 1651.939097][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 1651.939119][ T30] audit: type=1326 audit(1763637361.577:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1651.970216][ T30] audit: type=1326 audit(1763637361.577:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1651.996406][ T30] audit: type=1326 audit(1763637361.577:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.020831][ T30] audit: type=1326 audit(1763637361.577:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.045259][T30689] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7541'. [ 1652.073259][ T30] audit: type=1326 audit(1763637361.587:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.077513][ T7225] usb 3-1: USB disconnect, device number 12 [ 1652.118136][ T30] audit: type=1326 audit(1763637361.587:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.142075][ T30] audit: type=1326 audit(1763637361.587:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.165201][ T30] audit: type=1326 audit(1763637361.587:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.189220][ T30] audit: type=1326 audit(1763637361.587:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.212275][ T30] audit: type=1326 audit(1763637361.587:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30686 comm="syz.4.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15d78f749 code=0x7ffc0000 [ 1652.300437][ T7224] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1652.454122][ T7224] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1652.466380][ T7224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.534931][ T7224] usb 5-1: config 0 descriptor?? [ 1652.543658][ T7224] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1652.754428][ T7224] gspca_spca508: reg_read err -32 [ 1653.070430][T14810] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1653.434114][ T7225] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1653.434841][ T7224] gspca_spca508: reg_read err -110 [ 1653.448807][T14810] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1653.463727][T14810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.464766][ T7224] gspca_spca508: reg_read err -32 [ 1653.477755][ T7224] gspca_spca508: reg_read err -32 [ 1653.493391][ T7224] gspca_spca508: reg_read err -32 [ 1653.493442][T14810] usb 7-1: Product: syz [ 1653.498998][ T7224] gspca_spca508: reg write: error -32 [ 1653.510443][ T7224] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 1653.539867][T14810] usb 7-1: Manufacturer: syz [ 1653.549063][T14810] usb 7-1: SerialNumber: syz [ 1653.565602][T14810] usb 7-1: config 0 descriptor?? [ 1653.595690][ T7225] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1653.614675][ T7225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.646601][ T7225] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1653.661097][ T7225] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1653.690531][ T7225] usb 3-1: Manufacturer: syz [ 1653.748227][ T7225] usb 3-1: config 0 descriptor?? [ 1653.880645][ T7225] rc_core: IR keymap rc-hauppauge not found [ 1653.886627][ T7225] Registered IR keymap rc-empty [ 1653.895212][ T7225] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1653.907291][ T7225] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input133 [ 1654.174281][ T7224] usb 3-1: USB disconnect, device number 13 [ 1654.466094][T14810] usb 7-1: Firmware version (0.0) predates our first public release. [ 1654.475742][T14810] usb 7-1: Please update to version 0.2 or newer [ 1654.514488][T14810] usb 7-1: USB disconnect, device number 92 [ 1655.055560][ T7224] usb 5-1: USB disconnect, device number 56 [ 1655.096902][T30723] FAULT_INJECTION: forcing a failure. [ 1655.096902][T30723] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1655.150452][T30723] CPU: 0 UID: 0 PID: 30723 Comm: syz.6.7551 Not tainted syzkaller #0 PREEMPT(full) [ 1655.150484][T30723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1655.150497][T30723] Call Trace: [ 1655.150506][T30723] [ 1655.150515][T30723] dump_stack_lvl+0x189/0x250 [ 1655.150548][T30723] ? __pfx____ratelimit+0x10/0x10 [ 1655.150577][T30723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1655.150605][T30723] ? __pfx__printk+0x10/0x10 [ 1655.150637][T30723] ? __lock_acquire+0xab9/0xd20 [ 1655.150662][T30723] should_fail_ex+0x414/0x560 [ 1655.150699][T30723] get_futex_key+0x1a8/0x1660 [ 1655.150739][T30723] ? __pfx_get_futex_key+0x10/0x10 [ 1655.150787][T30723] futex_wait_setup+0x4f/0x590 [ 1655.150815][T30723] ? __futex_wait+0xb3/0x3d0 [ 1655.150843][T30723] __futex_wait+0x148/0x3d0 [ 1655.150874][T30723] ? __pfx___futex_wait+0x10/0x10 [ 1655.150901][T30723] ? __pfx_futex_wake_mark+0x10/0x10 [ 1655.150932][T30723] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1655.150974][T30723] futex_wait+0x104/0x360 [ 1655.150999][T30723] ? __pfx_futex_wait+0x10/0x10 [ 1655.151041][T30723] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 1655.151082][T30723] do_futex+0x333/0x420 [ 1655.151112][T30723] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1655.151149][T30723] ? __pfx_do_futex+0x10/0x10 [ 1655.151189][T30723] __se_sys_futex+0x36f/0x400 [ 1655.151227][T30723] ? __pfx___se_sys_futex+0x10/0x10 [ 1655.151256][T30723] ? __task_pid_nr_ns+0x28/0x490 [ 1655.151288][T30723] ? __x64_sys_futex+0x21/0xf0 [ 1655.151320][T30723] do_syscall_64+0xfa/0xfa0 [ 1655.151347][T30723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1655.151376][T30723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.151397][T30723] ? clear_bhb_loop+0x60/0xb0 [ 1655.151423][T30723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.151444][T30723] RIP: 0033:0x7fac9078f749 [ 1655.151463][T30723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1655.151480][T30723] RSP: 002b:00007fac91585038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1655.151504][T30723] RAX: ffffffffffffffda RBX: 00007fac909e5fa0 RCX: 00007fac9078f749 [ 1655.151519][T30723] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000020000000cffc [ 1655.151532][T30723] RBP: 00007fac91585090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.151545][T30723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.151557][T30723] R13: 00007fac909e6038 R14: 00007fac909e5fa0 R15: 00007fac90b0fa28 [ 1655.151592][T30723] [ 1656.193859][T30750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7560'. [ 1656.280450][ T7224] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1656.450069][ T7224] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1656.462341][ T7224] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.484237][ T7224] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1656.493892][ T7224] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1656.524869][ T7224] usb 7-1: Manufacturer: syz [ 1656.566550][ T7224] usb 7-1: config 0 descriptor?? [ 1656.690531][ T7224] rc_core: IR keymap rc-hauppauge not found [ 1656.698944][ T7224] Registered IR keymap rc-empty [ 1656.701886][T30760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1656.714784][ T7224] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1656.724141][T30757] can: request_module (can-proto-0) failed. [ 1656.742623][ T7224] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input134 [ 1657.007591][T30765] program syz.4.7563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1657.028171][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7563'. [ 1657.609361][T14810] usb 7-1: USB disconnect, device number 93 [ 1657.950813][T30770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1658.397551][T30779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1658.743257][T30788] netlink: 'syz.6.7571': attribute type 1 has an invalid length. [ 1658.755264][T30788] netlink: 'syz.6.7571': attribute type 2 has an invalid length. [ 1658.874403][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7573'. [ 1659.829148][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 1659.895706][T30808] pim6reg: entered allmulticast mode [ 1660.061399][T28572] unregister_netdevice: waiting for dev67 to become free. Usage count = 3 [ 1660.077366][T28572] ref_tracker: netdev@ffff88806f730618 has 1/2 users at [ 1660.077366][T28572] inetdev_init+0x211/0x500 [ 1660.077366][T28572] inetdev_event+0x24e/0x15b0 [ 1660.077366][T28572] notifier_call_chain+0x1b6/0x3e0 [ 1660.077366][T28572] netif_set_mtu_ext+0x594/0x7d0 [ 1660.077366][T28572] netif_set_mtu+0xa4/0x150 [ 1660.077366][T28572] dev_set_mtu+0x126/0x260 [ 1660.077366][T28572] team_port_del+0xabe/0xc50 [ 1660.077366][T28572] team_device_event+0x4c3/0x600 [ 1660.077366][T28572] notifier_call_chain+0x1b6/0x3e0 [ 1660.077366][T28572] __dev_change_net_namespace+0xd33/0x2030 [ 1660.077366][T28572] do_setlink+0x292/0x41c0 [ 1660.077366][T28572] rtnl_newlink+0x1619/0x1c80 [ 1660.077366][T28572] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1660.077366][T28572] netlink_rcv_skb+0x208/0x470 [ 1660.077366][T28572] netlink_unicast+0x82f/0x9e0 [ 1660.077366][T28572] netlink_sendmsg+0x805/0xb30 [ 1660.077366][T28572] [ 1660.167206][T28572] ref_tracker: netdev@ffff88806f730618 has 1/2 users at [ 1660.167206][T28572] neigh_parms_alloc+0x1f4/0x510 [ 1660.167206][T28572] inetdev_init+0x128/0x500 [ 1660.167206][T28572] inetdev_event+0x24e/0x15b0 [ 1660.167206][T28572] notifier_call_chain+0x1b6/0x3e0 [ 1660.167206][T28572] netif_set_mtu_ext+0x594/0x7d0 [ 1660.167206][T28572] netif_set_mtu+0xa4/0x150 [ 1660.167206][T28572] dev_set_mtu+0x126/0x260 [ 1660.167206][T28572] team_port_del+0xabe/0xc50 [ 1660.167206][T28572] team_device_event+0x4c3/0x600 [ 1660.167206][T28572] notifier_call_chain+0x1b6/0x3e0 [ 1660.167206][T28572] __dev_change_net_namespace+0xd33/0x2030 [ 1660.167206][T28572] do_setlink+0x292/0x41c0 [ 1660.167206][T28572] rtnl_newlink+0x1619/0x1c80 [ 1660.167206][T28572] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1660.167206][T28572] netlink_rcv_skb+0x208/0x470 [ 1660.167206][T28572] netlink_unicast+0x82f/0x9e0 [ 1660.167206][T28572] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1660.230653][ T7224] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1660.256563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.476722][T30824] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1660.643456][T30823] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1660.691135][ T7224] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.703903][ T7224] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.706213][T30823] bond3 (unregistering): Released all slaves [ 1660.714415][ T7224] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1660.733241][ T7224] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1660.742572][ T7224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.123805][ T7224] usb 7-1: config 0 descriptor?? [ 1661.149997][ T7224] hub 7-1:0.0: USB hub found [ 1661.350839][ T7224] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1661.474668][ T5920] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1661.483734][ T7224] usb 7-1: USB disconnect, device number 94 [ 1662.171973][T29094] vivid-000: reconnect [ 1663.507319][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.517930][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.585598][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.596067][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.692952][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.704321][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.767215][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.777558][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.953143][ T13] bridge_slave_1: left allmulticast mode [ 1663.958814][ T13] bridge_slave_1: left promiscuous mode [ 1663.965805][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.975441][ T13] bridge_slave_0: left allmulticast mode [ 1663.981654][ T13] bridge_slave_0: left promiscuous mode [ 1663.987373][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.998605][ T13] batman_adv: batadv0: Interface deactivated: vxlan0 [ 1664.238385][ T13] batman_adv: batadv0: Removing interface: vxlan0 [ 1664.306635][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.318106][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.328251][ T13] bond0 (unregistering): Released all slaves [ 1664.343047][ T13] bond1 (unregistering): Released all slaves [ 1664.434911][ T13] tipc: Left network mode [ 1664.657293][ T13] hsr_slave_0: left promiscuous mode [ 1664.677336][ T13] hsr_slave_1: left promiscuous mode [ 1664.685013][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.692611][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.702687][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.710102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.738495][ T13] veth1_vlan: left promiscuous mode [ 1664.746774][ T13] veth0_vlan: left promiscuous mode [ 1664.885266][ T13] pim6reg (unregistering): left allmulticast mode [ 1665.273747][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1665.323396][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1666.113900][ T13] IPVS: stop unused estimator thread 0... [ 1669.015357][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.021770][ T1303] ieee802154 phy1 wpan1: encryption failed: -22