last executing test programs: 2m21.783396965s ago: executing program 1 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 2m21.455909188s ago: executing program 1 (id=54): r0 = syz_ublk_setup_io_uring(0xc69, &(0x7f0000000000)={0x0, 0xd6b3, 0x800, 0x1, 0x15c}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x8, 0x8, 0x6, 0x8000000000000001, 0x1, 0x7}, {0x6, 0x4, 0xcd18, 0x4, 0x0, 0x8}], ['\x00']}) io_setup(0x2db3, &(0x7f0000000240)=0x0) r2 = eventfd2(0x1020000, 0x1) r3 = eventfd2(0x6, 0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000280)="bd7fd8b35d947de01f221dc57456692d29f64bb3027c2b87a5e2b6e7f0137601716e34e6aaa8cc2a57411918db77c505c82da4edc69309964deff73ec3117458878f311c0aa7003cff7758f23c5282aa5c83ea9e3d04bb1a369c2164f434de27f2e4fcba672781a9cc2de8c713eac006178ebef46047e3be5a2a4590dcd83d48077dc2", 0x83, 0xb1d2, 0x0, 0x3, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000380)="03e438d40ec747336212ff3c2fc88bf4aaa5175cc417eef2a776", 0x1a, 0x8000, 0x0, 0x3, r3}]) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) lseek(r2, 0x9, 0x4) r4 = syz_usb_connect$midi(0x3, 0xcf, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x1, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x48cb2e6c70f02ad8, 0x6, 0x8}], [{{0x9, 0x5, 0x4, 0x1, 0x400, 0x9, 0x2, 0x9, {0xe, 0x25, 0x1, 0xa, "332f3e2cbac341d9465b"}}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x4, 0x5, {0x8, 0x25, 0x1, 0x4, "e448a66a"}}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x5d, 0x4, 0x8, {0x10, 0x25, 0x1, 0xc, "b924408a20b2e611239c9f04"}}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x80, 0x2, 0xff, {0xb, 0x25, 0x1, 0x7, "6cc82ade1d437e"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0x9, 0x0, {0x6, 0x25, 0x1, 0x2, "e472"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x64, 0x1, 0x5, {0x8, 0x25, 0x1, 0x4, "7ee9da02"}}}, {{0x9, 0x5, 0x2, 0x10, 0x76fc0f35f2f501ee, 0x3, 0xa7, 0x8, {0xe, 0x25, 0x1, 0xa, "5635db5925cb5e62a5a8"}}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x5, 0x6, {0x10, 0x25, 0x1, 0xc, "9761d04e0a13ff07cd487146"}}}]}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x0, 0xa, 0xa9, 0x8, 0x81}, 0x42, &(0x7f0000000580)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xd111ed791a5a972c, 0xe, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0xe, 0x8, 0x1ff, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fe530b533b23c410a9552a99bbdc4935"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a622b81a09c94fcf63ec74fe92e82380"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3401}}, {0x28, &(0x7f0000000640)=@string={0x28, 0x3, "8eed4ccd5d2bbc66e2f77270dcdc258d3c13a5220daa86210cd5ebbd120f5df1b805cee8bef6"}}]}) syz_usb_disconnect(r4) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000006c0)={{0xfffffffffffffffd, 0x3, 0xffffffff, 0x3, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001800)={0x8, 0x0, &(0x7f0000001740)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/38, 0x26}], &(0x7f0000001780)=[0xa, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2, 0xf, 0x9, 0x3ff, 0x10], 0x2}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000018c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001900)=r7) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x7, '\x00', 0x0, r5, 0xb, 0x2, 0x5}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2a4b}, [@map_val={0x18, 0x1, 0x2, 0x0, r2}, @alu={0x4, 0x1, 0x2, 0x4, 0xa, 0x20, 0xfffffffffffffff0}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000001d80)='syzkaller\x00', 0x9e34, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x17, r5, 0x8, &(0x7f0000001dc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001e00)={0x1, 0x9, 0x7, 0xb0bd}, 0x10, 0x2714, r5, 0x7, &(0x7f0000001e40)=[r5, r5, r6, r5, r5, r6, r5], &(0x7f0000001e80)=[{0x4, 0x5, 0xa, 0x3}, {0x0, 0x2, 0xa}, {0x3, 0x3, 0xb, 0x1}, {0x2, 0x4, 0x9, 0x5}, {0x5, 0x1, 0x8}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x3, 0x4, 0x8}], 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x15, 0x1d, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x4, 0x0, 0x6, 0xb, 0x0, 0x80, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='GPL\x00', 0x3bb5, 0x52, &(0x7f0000001b00)=""/82, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1b, r5, 0x8, &(0x7f0000001b80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001bc0)={0x5, 0x3, 0x2, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x0, &(0x7f0000001fc0)=[r6, r5], 0x0, 0x10, 0x8}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) write(r6, &(0x7f00000020c0)="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", 0x1000) fcntl$setflags(r0, 0x2, 0x1) read$FUSE(r5, &(0x7f00000030c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000005100)={0x50, 0x0, r10, {0x7, 0x2d, 0xffffffff, 0x2000, 0x0, 0x2, 0x6eae, 0xa, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005180), 0x71a6a41a51f1e885, 0x0) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f00000051c0), 0x24200, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000005200)) landlock_create_ruleset(&(0x7f0000005240)={0x2350, 0x9, 0x0, 0x9a4, 0xb, 0x3}, 0x30, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000005500)={{0x5065112, 0x2, 0x9, 0x10, 0xfffffffd}, &(0x7f00000052c0)=[{}, {}, {}]}) 2m19.460024353s ago: executing program 1 (id=61): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback, 0xb}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000001080)) r1 = creat(&(0x7f0000001040)='./cgroup/../file0\x00', 0x20) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sctp\x00') open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x2, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) 2m17.980027933s ago: executing program 1 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsmount(r1, 0x0, 0x76) r2 = socket(0x2, 0x80805, 0x4000003) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000c97000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x9456, 0xc000, 0x0, 0xce, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x42, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') io_uring_enter(r4, 0x5c12, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x8d, 0x0, &(0x7f0000000440)="70ff1ba356e510ad9c8cef08f9e7cac02ce5c100861bf161fda1c040f256a35d8ec011680638f20bfebba70100c763a26daddc21fa6e4dd1c399a440d8c7f15e9b71c389653e75d12aba47cc9239602ed1b772109800b960f19c73a03290f0cb669c5e7e4cc9fdfc657b9c06241226116a3c34a825a28a489de79bfa85e60096fc8fba1d983aab6b6c3e9b4c6c", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="0315000040000000"], 0x20}, 0x1, 0x0, 0x0, 0x2005d808}, 0x2004c881) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) syz_io_uring_complete(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000006800010004000000000000000a00000000000000060007000500000008000500", @ANYRES32=r8, @ANYBLOB="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"], 0x50}}, 0x0) 2m16.33877449s ago: executing program 1 (id=83): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000200)='m', 0x1}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000200)='m', 0x1}], 0x2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) (async) 2m15.839408775s ago: executing program 1 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 2m14.929191898s ago: executing program 32 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 1m15.315337294s ago: executing program 0 (id=390): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f0000000500)="86e9a0", 0x3}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 1m15.286577638s ago: executing program 0 (id=391): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x8) lseek(r0, 0x851, 0x0) mknodat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x200, 0xfffffb4b) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x3fffff) clock_adjtime(0x0, &(0x7f0000000140)={0x1, 0x6, 0x80, 0xffffffff, 0x80, 0xc, 0x8000000000000000, 0x7fffffffffffffff, 0x800, 0xffffffff, 0x9, 0x7f, 0x1, 0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0xfffffffffffffc01, 0x826, 0x8, 0x6, 0x0, 0x800, 0x800, 0x1, 0x0, 0x2}) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200)={0xc, {0x16, ' \x00'/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200), 0x6) clock_gettime(0x0, &(0x7f0000007a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000078c0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000880)=""/168, 0xa8}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000a40)=""/240, 0xf0}, {&(0x7f0000000b40)=""/114, 0x72}], 0xa, &(0x7f0000000c80)=""/52, 0x34}, 0x7}, {{&(0x7f0000000cc0)=@ax25={{0x3, @rose}, [@bcast, @bcast, @rose, @null, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/205, 0xcd}, {&(0x7f0000004300)=""/47, 0x2f}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/161, 0xa1}, {&(0x7f0000005400)=""/151, 0x97}, {&(0x7f00000054c0)=""/155, 0x9b}, {&(0x7f0000005580)=""/22, 0x16}], 0x9, &(0x7f0000005680)=""/182, 0xb6}, 0x9}, {{&(0x7f0000005740)=@sco, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/1, 0x1}, {&(0x7f0000005800)=""/27, 0x1b}], 0x2, &(0x7f0000005880)=""/4096, 0x1000}, 0x10}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000006880)=""/102, 0x66}, {&(0x7f0000006900)=""/22, 0x16}, {&(0x7f0000006940)=""/186, 0xba}, {&(0x7f0000006a00)=""/143, 0x8f}, {&(0x7f0000006ac0)=""/19, 0x13}, {&(0x7f0000006b00)=""/178, 0xb2}, {&(0x7f0000006bc0)=""/10, 0xa}, {&(0x7f0000006c00)=""/134, 0x86}], 0x8, &(0x7f0000006d40)=""/40, 0x28}, 0x1}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000006d80)=""/196, 0xc4}, {&(0x7f0000006e80)=""/138, 0x8a}, {&(0x7f0000006f40)=""/5, 0x5}, {&(0x7f0000006f80)=""/237, 0xed}, {&(0x7f0000007080)=""/142, 0x8e}, {&(0x7f0000007140)=""/222, 0xde}, {&(0x7f0000007240)=""/146, 0x92}, {&(0x7f0000007300)=""/7, 0x7}, {&(0x7f0000007340)=""/72, 0x48}, {&(0x7f00000073c0)=""/118, 0x76}], 0xa, &(0x7f0000007500)=""/182, 0xb6}, 0x2}, {{&(0x7f00000075c0)=@nl, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007640)=""/118, 0x76}, {&(0x7f00000076c0)=""/252, 0xfc}], 0x2, &(0x7f0000007800)=""/164, 0xa4}}], 0x6, 0x2001, &(0x7f0000007a80)={r5, r6+10000000}) write$UHID_INPUT2(r1, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x2) write$UHID_INPUT2(r1, 0x0, 0x0) 1m11.079104806s ago: executing program 4 (id=404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xc}}}, 0x24}}, 0xc840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x2, r4, 0x80000}) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000400)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x2a4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "ea6baa401e93a9ea77336abea02de0efdcb7cef4e7656f5ca81da398eb536f5a62b4707a6b410c1170f8d5a7f0cada8b89c98695d150c1377899271e8db4aca3f520f8b4f3bc764cfd0e7110b0f3defdd11ff2d6cc726564f9aeaa93697124c4ad2d613e9d182f3aa5005f56c866d9d117e6c027128d688a1f585c8734e7e5117aee4dbe0d9f3f19e03c0ea68f251eda679f902fa3275c1970a0d6fd279d51a439ee3adb9ebbc5ec267d911736b64c0213d6991ade17b21ef8ab905f1d30b663558135cba0c721f5229c563d7eb4cab749706cba4f46d26174c7"}, @NFTA_TABLE_USERDATA={0xb4, 0x6, "795721256134f2b26e88e45561f5b53c48baadb26b4b943cc4df9aeffb1b5c124d39f8eb3bd6c4d44c22ae801f18aa29256da93021c5d1d2eedb7358bdac22df839fd9466c31537cd9749302a2e02787d576ade3a76e780bcfb9dc9a5da3fea4282ac991573224ab917cada50d6d8b5457ceb2834e28452930ba2e009564ee37d7d8e2e4121a739e2a69229e69437bc0a641f6b6e063a9c481292f7929d840e2481895c7ab127846548ebd603b540fd7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x38, 0x6, "d693b29dbd3a8c6d9e8497f04fd5412bd818ec76d2fc46049ec627a4dfc36c2ae38899165ab2c9f9ea83b59eb9f498f6b7ae5c2d"}, @NFTA_TABLE_USERDATA={0x88, 0x6, "f1be981610c4f8a1ead543f1faa361aa2e17f5bc449c13977398e43dd82cebf5ed559b2439f68ef76c4a8c14e5cb5975671b2e40b02a3850a687e780d67792a4b40d8b1895430403f12836042e03bfc37c776f3e78870991f361e3416f1557f7ff98ed462d399f7993ee5b5be18540a506ccbf47536fc29041c354760ec3a6303120ac37"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0x310}, 0x1, 0x0, 0x0, 0x4040855}, 0x404c010) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) r7 = syz_open_dev$usbmon(&(0x7f0000000380), 0x9, 0x40980) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, &(0x7f0000005400)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17d1}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff0d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000280)={&(0x7f0000000100)=[{0xb7, 0x1, 0x8, 0x4}], 0x1, 0x20, 0xfffd}) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000060f2d339e7c8c000009b5fdf2505000000180001801400020073796a5f74756ee0493bfd3a000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) 1m10.17203537s ago: executing program 4 (id=409): unshare(0x42020d00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x1000000, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000000440)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r4, 0x0, 0x3d, 0x4088010, 0x0, 0x0) unshare(0xfe060000) 1m9.799029203s ago: executing program 4 (id=410): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1, 0x3}, 0x18, 0x0) unshare(0x60040000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0xec, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xc}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xbc, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_connmark={0x34, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x80, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfffa, 0x9, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x846}, {0x37a2, 0x2, 0x2, "8d2e"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x1, 0x7ff, 0x1, 0x5, 0xc, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x81}, {0xe7, 0x4, 0x8, 0x9}}}]}]}]}}]}, 0xec}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x7, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x2000c844) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x7, 0xe8, 0x6}, 0x10) write(r10, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) landlock_restrict_self(r0, 0x4) r11 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) link(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r11, 0x51cf8000) 1m9.012059187s ago: executing program 4 (id=412): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d1a090509000000e9ffff08050b01"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000018140100000000000000a94a525ddcb40001080001000100007428b665a907ca871e2f50244da57f58c26550e9c000000000b93cbb79a6f3d1680de01b00f30798"], 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8c0, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) io_uring_setup(0x3f81, &(0x7f0000000140)={0x0, 0xd738, 0x4, 0x1, 0x4e, 0x0, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x4040) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 1m6.957777719s ago: executing program 3 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000080003", @ANYRES32=r2], 0x40}}, 0x4000000) (fail_nth: 7) 1m6.575341883s ago: executing program 3 (id=421): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x0, 0xb, 0xfffc, 0x1, 0x7fff, 0x4, 0x2009a11, 0x4, 0xa000, 0x0, 0x0, 0xffffffffffffffff, 0x505, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x40ffff, 0xa6400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x98, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd5387542", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000004b534452000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0xa, 0x8000000000000000]}}) 1m6.038457055s ago: executing program 3 (id=425): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}, 0x1c) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10905, 0x0, '\x00', @ptr}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xad49, @loopback, 0x9}}, 0x8, 0xffc0}, 0x90) 1m5.755797329s ago: executing program 3 (id=428): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x1670c0, 0x0) epoll_create1(0x80000) r1 = epoll_create1(0x80000) socket(0x9, 0x1, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x980914, 0x1}) r3 = io_uring_setup(0x759d, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x2, 0x375}) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x80041) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x22, 0x0, 0x0}) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="c8ab2ce8e711c8d4d24a4ee0ecd780", 0xff20}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xf}) 1m5.311281069s ago: executing program 3 (id=429): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x48840) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x10001, 0x104c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read$ublk_bdev(r3, &(0x7f0000000200)=""/105, 0x69) r4 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x10000}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x7}, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$NFT_BATCH(r6, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x31c}}, 0x4000040) io_uring_enter(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={r3, &(0x7f00000000c0)='/dev/adsp1\x00', 0x400800, &(0x7f0000000100)={@_ha_fsid={[0x2, 0xfff]}, {0x3fb, 0x8, 0xbe52, 0x651}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21ffffffff7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d3d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6ac357ad009a0a5be7d00f0183f29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c54440ec820e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36fd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039cd5a1737013026a0b33764de63d655ee44abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a41662d9a91cfd"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20) socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x400000000010, 0x3, 0x0) 1m5.129410073s ago: executing program 4 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xc, 0xc}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(r6) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0xa) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) close(r3) 1m5.0256774s ago: executing program 0 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) 1m4.955536126s ago: executing program 5 (id=432): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 1m4.767724829s ago: executing program 0 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) gettid() (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.611954238s ago: executing program 2 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='\n', 0x1}, {0x0}], 0x2) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x22040) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000580)={"a0453822", 0x0, 0x6, 0x2, 0xc0, 0x8, "3377f877c734c40400", "0001d615", '\x00', "04ffffbf", ["c3869a0000f9ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000001200)={&(0x7f0000000dc0)={{@local, 0x10}, {@any, 0x9}, 0x400, "fcd6fb41d61e28a133093540b8e5ab97beb3a8df1c691b20290cfa781535b9a236f2f0df59350b468223f7efb853bd4de2904544ece00d2a5d9a0fd9a454de56accfbff8ea10472a3257b19b5a241b307a5912358a60e83764566654e8c77efb2dccee4dc44c6cefa20fd2baa7fce02aaf6136d434a230f1f3a2c34659abce2c2699032ae9327cea9b99aaa0a3def791aa97adb129d516c3952fa680321eaad8312e142b42749ccf989816a73fb21bb358f8893615008664287a974919e00f73ba30ff9921fb11bb6e18b8c17f051fd1ef4e8ab387b5f40116d7e6a0d1cfc4aa36b4d7806c7e429ab3eea9602f73a4020693c68a0914cd060ef7d3e28885841f6aee253eeb2f4ea95883537212cc0395eef5a7369446b20fa4a8494c1ccb2c49a0985c44b5c97f8d19cfb16f1ab6bcc0b361b314a966c66a187e1849560bf0645aef0c4a4a15d9fb2708701b2efbf8f392527cd0baa62a195640bccd18d9472438ed518fbffd86d6a985595b9d8fa51d9a90c75d845bf53c45d6daf4d3eeef1531416a2c68eb3f930c7259c76e674ea474d1252e9d4f52ce568f1cb7ec38c1b50d21b7be4a96a97a3ece275e45fe28c4012910e747d286ae54c53538e8f9afff581339a1d362a37f017a342e795aeecab6f5b3d9cd8b7d39f2adb2554284691c10f754d30441168c60320b9b4ed686469a3819e4cc16e28524896a39821b543f7306fc15f824852eef4f13c3dd3c3ba5e5265490258bcd88051a22306f613f04801d855b66d75c6e9b1b8a9eb09f569b74958e4fd14d26d71b0cfdec9d48225860769ed3ea866543714266c97cf223d6c77b11bdfe58312f4b23fcc0bb34a8f4c98d9353eee3485e238b8175b3c37006d7e1cc6ef8da1db0e2a4fe6f915732dc108b6f20928fa278603cc59248903bd1a57685570d75169d2d1c4cfe1c4cbefb7334ca103fe4798425082b76dc08683b0e1f57411f32cd0ed1a4230f25c4fa5691ef77d534b3c128be267fdd34c9235f618fe76e4404549622c5c08ed948861464b91f9c0c4a7619d39d4d5534391613b4bea97ea91a04acbc07b23ebaf9aeb874af645b5969e57b1e3a31a9eb9ecfad37fd3d11167f88ada986992ca4ecb0f5d5e5c0758c37463ba1bddca2368e332f530ad10c115bd9724682bc5c6d74498d504b16fbcd13e7d9c6c46c2c60414b29eb2600a8e7b88d733b4524ef4f00128dc4ecbafded4c028ab39e960e8cbec996ea71c42899a1f3ec066cd79d40df0d109e342582387867377f931318254e17e63dc3a0198759fabaf679861c9d38f596c1b2c0d06ce6713da69e377afa1440504ef00585b76afecfc5e2d6434f242ca12860af163fa60977932a00c19fcbe195e7584dfb312af006fe981b52cb24df54a0cbbc4f59849761097c8c2ff628edfbe68ae8bcec5e18cca8ef553a8ef5ee23"}, 0x418}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x82316000) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000200)={0x0, r2, r2, 0xa78, 0xb07, '\x00', {0x2, 0x5, 0x7, 0xfffffffb, 0x400, 0x2, 0x80000000, 0x3, {0x8000000000000, 0x4}, {0x2, 0x3}, {0xa7d3, 0x3}, 0xffffffff, 0x400, 0x7, 0x3, 0x40, 0x2, 0xf, 0xfff, 0x0, 0xffad, '\x00', 0x8f38, 0x80000000, 0x0, 0x1b}}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0b", 0x84a}], 0x5) r4 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000340)='$\x00\\\xef\xc5\xd0\xfbf\xc6_\xc0\xa1I]\xa9\xfeg\xd9\x81!F\xb3\xa6R_5T\x1e\x19\xf1\x8bt\xeey%\n\x05,\xba\xed\x040\xa9\xb9`f\xfa\xaa\x1bN\x95\x80\x8a\x90\xcf\x17\xc7;&C\x1aY+\xd4\x05\xda\xc6=\xa0\xfeU1q/\x9b0\xd2\x83\x8a#X\x9c\xb1\xcc\xe2\xb8?.9\xd5\xb0\xcbg\x964\xcb4\x98\x04_\x99\xc3\xe5\xe6\xb4W\x15^MPrrD\xec]\xb2?VR\x96\xa7B&\b\xfbP\xd9S\xd3\x04!\xd0\b\xce\x8a\x9df\xea\xf3\xdc\xa3\xf2\xa7#\r\xd9\x85\x86\xdf\x94\xc3A\xa8\x0f?\xc5v\x05\xac\x9b\x19\xeb\'(\xf84\xecP\xa2=\n\f\x1f\x16\xca4\x82\xe7\xa0\xc1\xe9@&P\x97.C?w\xb3\x80\xbf\x17QP\xba\xfb\x9a\xd3t\xa96\x1e\x1d', 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m4.523892963s ago: executing program 5 (id=436): unshare(0x2c020400) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703001428feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f040100000000005504000001ed0aff94000000f1000000bf040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x103, @empty}, {0xa, 0x4e22, 0x0, @dev, 0x3}, 0xfffe, {[0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffffffd]}}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='cpuacct.stat\x00', 0x7a44, 0x1700) openat$iommufd(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c0002800600050001800000080001", @ANYRES32=r6, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) write(r3, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) close(0x4) 1m4.313921344s ago: executing program 2 (id=437): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {0x0}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 1m4.114781458s ago: executing program 5 (id=438): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x39}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000040}, 0xc010) 1m4.065720467s ago: executing program 2 (id=439): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000006300000009000000000000007f0000000000000006000000000000000700000000000000008e98f635236b3723e9000000000000000000000000000000000000000000000006000000070000000002000000000000f40000000000000001040000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffffffffff"]) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 1m3.906260718s ago: executing program 4 (id=440): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d1a090509000000e9ffff08050b01"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000018140100000000000000a94a525ddcb40001080001000100007428b665a907ca871e2f50244da57f58c26550e9c000000000b93cbb79a6f3d1680de01b00f30798"], 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8c0, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) io_uring_setup(0x3f81, &(0x7f0000000140)={0x0, 0xd738, 0x4, 0x1, 0x4e, 0x0, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x4040) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 1m3.402032084s ago: executing program 5 (id=441): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x2, 0xfffffffd, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000380)=0x8) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x804) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r2, r1}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000440006803c000400676300006165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x54}, 0x1, 0x0, 0x0, 0x2000401c}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 1m3.401552924s ago: executing program 5 (id=442): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$inet(0x2, 0xa, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000280)={0x11, 0x11, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r5) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbea1ec0d3939d97665f995e3af6fdb20000000000000800cadeb1400a9e936b450000780000000000019078ac1e0001ac1414aa05009078e00000e047000009000000000011000000000000ac1414aa070300070700640130b36aa700030a01012f00000000e00000ca3c001000ac1e000100000000ac1414aa00000000526f9f0d8fb833cd8c0000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1m3.401146759s ago: executing program 0 (id=443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback, 0xb}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace$pokeuser(0x6, 0x0, 0x2, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) 1m2.939058571s ago: executing program 2 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) 1m2.730221097s ago: executing program 5 (id=445): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0x12) r2 = syz_open_dev$video(&(0x7f0000000240), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff", 0x8) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0xe, 0x0, 0x0, {}, {0x0, 0x2}, 0x2, 0x2, {&(0x7f0000001000)}, 0x401000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x28, {0x8001, 0x4, 0x7fff, 0x9, 0x8001, 0x6, 0x40, 0x80, 0x0, 0xeba9, 0x8, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m2.361252037s ago: executing program 2 (id=446): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 1m1.794957128s ago: executing program 2 (id=447): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200142cfefe8000000000000000000000000002bbfe80000000000000000000aa06150003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260025010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4048095}, 0x0) (async) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000040)=""/105, 0x69}, {&(0x7f0000000500)=""/209, 0xd1}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x5, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20002845) (async) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$uac2(r5, 0x0, 0x0) (async) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/39, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001740)) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f00000001c0)={0x25, 0x2, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r11}) (async) socket$inet6_udp(0xa, 0x2, 0x0) 1m1.100077643s ago: executing program 0 (id=448): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20040040) socket$inet6(0xa, 0x1, 0x8010800000000084) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m1.051725984s ago: executing program 3 (id=449): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {0x0}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 0s ago: executing program 33 (id=445): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0x12) r2 = syz_open_dev$video(&(0x7f0000000240), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff", 0x8) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0xe, 0x0, 0x0, {}, {0x0, 0x2}, 0x2, 0x2, {&(0x7f0000001000)}, 0x401000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x28, {0x8001, 0x4, 0x7fff, 0x9, 0x8001, 0x6, 0x40, 0x80, 0x0, 0xeba9, 0x8, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1: Using ep0 maxpacket: 16 [ 125.273508][ T5680] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 125.279324][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.279352][ T5680] usb 6-1: Product: syz [ 125.279366][ T5680] usb 6-1: Manufacturer: syz [ 125.279376][ T5680] usb 6-1: SerialNumber: syz [ 125.322076][ T5680] usb 6-1: config 0 descriptor?? [ 125.329537][ T5687] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.343794][ T5680] usb 6-1: selecting invalid altsetting 1 [ 125.343816][ T5680] technisat-usb2: could not set alternate setting to 0 [ 125.489774][ T5687] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.506875][ T5687] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 125.506930][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.506981][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 125.547109][ T5680] technisat-usb2: firmware version: 0.0 [ 125.547161][ T5680] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 125.551678][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.551706][ T5687] usb 4-1: Product: syz [ 125.551721][ T5687] usb 4-1: Manufacturer: syz [ 125.551763][ T5687] usb 4-1: SerialNumber: syz [ 125.594910][ T5687] usb 4-1: config 0 descriptor?? [ 125.807583][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 125.970410][ T5680] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.971273][ T5680] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 125.971770][ T5680] usb 6-1: media controller created [ 125.971877][ T5680] technisat-usb2: i2c-error: out failed 53 = -22 [ 125.971929][ T5680] dvb-usb: MAC address reading failed. [ 126.060880][ T5680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.151244][ T6392] technisat-usb2: i2c-error: out failed 41 = -22 [ 126.171774][ T6392] syz.5.164: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.171847][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.5.164 Not tainted syzkaller #0 PREEMPT(full) [ 126.171870][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.171884][ T6392] Call Trace: [ 126.171893][ T6392] [ 126.171902][ T6392] dump_stack_lvl+0xe8/0x150 [ 126.171938][ T6392] warn_alloc+0x24d/0x270 [ 126.171960][ T6392] ? __lock_acquire+0x747/0x2de0 [ 126.171987][ T6392] ? __pfx_warn_alloc+0x10/0x10 [ 126.172028][ T6392] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.172061][ T6392] __vmalloc_node_range_noprof+0x127/0x1540 [ 126.172106][ T6392] ? __pfx___mutex_trylock_common+0x10/0x10 [ 126.172137][ T6392] ? rcu_is_watching+0x16/0xb0 [ 126.172163][ T6392] ? trace_contention_end+0x3d/0x140 [ 126.172193][ T6392] ? __mutex_lock+0x30b/0x1550 [ 126.172220][ T6392] ? tomoyo_path_number_perm+0x219/0x5f0 [ 126.172247][ T6392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.172276][ T6392] ? dvb_demux_do_ioctl+0x320/0x540 [ 126.172309][ T6392] ? __pfx___mutex_lock+0x10/0x10 [ 126.172335][ T6392] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.172365][ T6392] vmalloc_noprof+0xb2/0xe0 [ 126.172395][ T6392] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.172428][ T6392] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.172467][ T6392] dvb_demux_do_ioctl+0x45d/0x540 [ 126.172502][ T6392] dvb_usercopy+0x199/0x2e0 [ 126.172529][ T6392] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 126.172560][ T6392] ? __pfx_dvb_usercopy+0x10/0x10 [ 126.172604][ T6392] ? __fget_files+0x3a2/0x420 [ 126.172632][ T6392] ? __fget_files+0x2a/0x420 [ 126.172661][ T6392] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 126.172690][ T6392] dvb_demux_ioctl+0x29/0x40 [ 126.172722][ T6392] __se_sys_ioctl+0xfc/0x170 [ 126.172747][ T6392] do_syscall_64+0x166/0x520 [ 126.172769][ T6392] ? trace_irq_disable+0x3b/0x140 [ 126.172789][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.172810][ T6392] ? clear_bhb_loop+0x70/0xc0 [ 126.172833][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.172853][ T6392] RIP: 0033:0x7f9d1899e159 [ 126.172873][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.172889][ T6392] RSP: 002b:00007f9d16bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.172910][ T6392] RAX: ffffffffffffffda RBX: 00007f9d18c25fa0 RCX: 00007f9d1899e159 [ 126.172925][ T6392] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 126.172938][ T6392] RBP: 00007f9d18a3506b R08: 0000000000000000 R09: 0000000000000000 [ 126.172950][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.172962][ T6392] R13: 00007f9d18c26038 R14: 00007f9d18c25fa0 R15: 00007f9d18d4fa48 [ 126.172995][ T6392] [ 126.186367][ T6392] Mem-Info: [ 126.186383][ T6392] active_anon:9033 inactive_anon:0 isolated_anon:0 [ 126.186383][ T6392] active_file:0 inactive_file:53124 isolated_file:0 [ 126.186383][ T6392] unevictable:0 dirty:197 writeback:0 [ 126.186383][ T6392] slab_reclaimable:10818 slab_unreclaimable:96170 [ 126.186383][ T6392] mapped:30164 shmem:1549 pagetables:1467 [ 126.186383][ T6392] sec_pagetables:0 bounce:0 [ 126.186383][ T6392] kernel_misc_reclaimable:0 [ 126.186383][ T6392] free:1316020 free_pcp:11117 free_cma:0 [ 126.186428][ T6392] Node 0 active_anon:36132kB inactive_anon:0kB active_file:0kB inactive_file:212240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120604kB dirty:784kB writeback:0kB shmem:6196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:12764kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.186513][ T6392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.186558][ T6392] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.186612][ T6392] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 126.186647][ T6392] Node 0 DMA32 free:1302788kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36132kB inactive_anon:0kB active_file:0kB inactive_file:212240kB unevictable:0kB writepending:784kB zspages:0kB present:3129332kB managed:2547000kB mlocked:0kB bounce:0kB free_pcp:42420kB local_pcp:18892kB free_cma:0kB [ 126.186698][ T6392] lowmem_reserve[]: 0 0 0 0 0 [ 126.186731][ T6392] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.186779][ T6392] lowmem_reserve[]: 0 0 0 0 0 [ 126.186811][ T6392] Node 1 Normal free:3945932kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 126.186860][ T6392] lowmem_reserve[]: 0 0 0 0 0 [ 126.186891][ T6392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.187000][ T6392] Node 0 DMA32: 623*4kB (UME) 581*8kB (UM) 364*16kB (UME) 425*32kB (UME) 173*64kB (UME) 124*128kB (UM) 84*256kB (UM) 28*512kB (UM) 7*1024kB (UM) 1*2048kB (M) 294*4096kB (UM) = 1302788kB [ 126.187165][ T6392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.187273][ T6392] Node 1 Normal: 9*4kB (U) 9*8kB (U) 8*16kB (UM) 9*32kB (U) 11*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3945932kB [ 126.187446][ T6392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.187463][ T6392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.187479][ T6392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.187495][ T6392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.187511][ T6392] 54669 total pagecache pages [ 126.187519][ T6392] 0 pages in swap cache [ 126.187526][ T6392] Free swap = 124996kB [ 126.187534][ T6392] Total swap = 124996kB [ 126.187543][ T6392] 2097051 pages RAM [ 126.187550][ T6392] 0 pages HighMem/MovableOnly [ 126.187557][ T6392] 428685 pages reserved [ 126.187564][ T6392] 0 pages cma reserved [ 126.256912][ T5680] DVB: Unable to find symbol stv090x_attach() [ 126.483046][ T2256] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 126.645092][ T2256] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 126.647736][ T2256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.647764][ T2256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.647799][ T2256] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.647836][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.655835][ T2256] usb 5-1: config 0 descriptor?? [ 126.765047][ T5680] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 126.911659][ T6426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.174'. [ 126.935992][ T6426] IPv6: addrconf: prefix option has invalid lifetime [ 127.084200][ T5680] rc_core: IR keymap rc-technisat-usb2 not found [ 127.084222][ T5680] Registered IR keymap rc-empty [ 127.090397][ T5680] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 127.144404][ T5680] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input14 [ 127.149765][ T5680] dvb-usb: schedule remote query interval to 100 msecs. [ 127.150679][ T5680] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 127.182455][ T5680] usb 6-1: USB disconnect, device number 3 [ 127.210726][ T1282] IPVS: starting estimator thread 0... [ 127.282329][ T6433] FAULT_INJECTION: forcing a failure. [ 127.282329][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 127.282363][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 127.282385][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.282395][ T6433] Call Trace: [ 127.282403][ T6433] [ 127.282412][ T6433] dump_stack_lvl+0xe8/0x150 [ 127.282450][ T6433] should_fail_ex+0x410/0x560 [ 127.282478][ T6433] should_failslab+0xa8/0x100 [ 127.282502][ T6433] ? __kernfs_new_node+0xe6/0x980 [ 127.282523][ T6433] kmem_cache_alloc_noprof+0xa1/0x600 [ 127.282553][ T6433] ? __kernfs_new_node+0xe6/0x980 [ 127.282580][ T6433] __kernfs_new_node+0xe6/0x980 [ 127.282619][ T6433] ? __pfx___kernfs_new_node+0x10/0x10 [ 127.282641][ T6433] ? kernfs_root+0x1c/0x230 [ 127.282667][ T6433] ? kernfs_root+0x1c/0x230 [ 127.282684][ T6433] ? kernfs_root+0x1c/0x230 [ 127.282700][ T6433] ? kernfs_root+0x1c/0x230 [ 127.282724][ T6433] kernfs_new_node+0xea/0x140 [ 127.282748][ T6433] __kernfs_create_file+0x4b/0x2e0 [ 127.282775][ T6433] sysfs_add_file_mode_ns+0x237/0x300 [ 127.282810][ T6433] internal_create_group+0x679/0x1180 [ 127.282854][ T6433] ? __pfx_internal_create_group+0x10/0x10 [ 127.282885][ T6433] ? up_write+0x19d/0x4a0 [ 127.282916][ T6433] sysfs_create_groups+0x59/0x120 [ 127.282947][ T6433] device_add_attrs+0xde/0x600 [ 127.282972][ T6433] ? __pfx_device_add_attrs+0x10/0x10 [ 127.282995][ T6433] ? device_add_class_symlinks+0x21f/0x240 [ 127.283018][ T6433] device_add+0x488/0xb80 [ 127.283040][ T6433] netdev_register_kobject+0x197/0x350 [ 127.283068][ T6433] register_netdevice+0x1433/0x1eb0 [ 127.283092][ T6433] ? rcu_is_watching+0x16/0xb0 [ 127.283129][ T6433] ? __pfx_register_netdevice+0x10/0x10 [ 127.283160][ T6433] ? macvlan_changelink_sources+0xc7d/0x1650 [ 127.283199][ T6433] macvlan_common_newlink+0x12e5/0x1a50 [ 127.283224][ T6433] ? alloc_netdev_mqs+0xd44/0x12a0 [ 127.283249][ T6433] ? alloc_netdev_mqs+0xd44/0x12a0 [ 127.283289][ T6433] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 127.283318][ T6433] ? rtnl_create_link+0xa04/0xd70 [ 127.283339][ T6433] ? __pfx_macvlan_newlink+0x10/0x10 [ 127.283361][ T6433] rtnl_newlink_create+0x305/0x7b0 [ 127.283395][ T6433] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 127.283424][ T6433] ? __pfx___mutex_lock+0x10/0x10 [ 127.283457][ T6433] ? ns_capable+0x89/0xe0 [ 127.283488][ T6433] rtnl_newlink+0x166d/0x1c30 [ 127.283528][ T6433] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.283549][ T6433] ? do_syscall_64+0x166/0x520 [ 127.283569][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.283637][ T6433] ? kasan_quarantine_put+0xbb/0x1f0 [ 127.283659][ T6433] ? lockdep_hardirqs_on+0x7b/0x110 [ 127.283686][ T6433] ? nlmon_xmit+0xb0/0x100 [ 127.283705][ T6433] ? kmem_cache_free+0x182/0x650 [ 127.283738][ T6433] ? __lock_acquire+0x747/0x2de0 [ 127.283770][ T6433] ? __local_bh_enable_ip+0xd6/0x140 [ 127.283795][ T6433] ? lockdep_hardirqs_on+0x7b/0x110 [ 127.283815][ T6433] ? __dev_queue_xmit+0x29b/0x3820 [ 127.283841][ T6433] ? __local_bh_enable_ip+0xd6/0x140 [ 127.283861][ T6433] ? __dev_queue_xmit+0x29b/0x3820 [ 127.283894][ T6433] ? lock_acquire+0x115/0x350 [ 127.283930][ T6433] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.283954][ T6433] rtnetlink_rcv_msg+0x802/0xc00 [ 127.283982][ T6433] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 127.284004][ T6433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.284025][ T6433] ? ref_tracker_free+0x689/0x830 [ 127.284052][ T6433] ? __pfx_ref_tracker_free+0x10/0x10 [ 127.284075][ T6433] ? __asan_memcpy+0x40/0x70 [ 127.284092][ T6433] ? __skb_clone+0x5c/0x6c0 [ 127.284127][ T6433] netlink_rcv_skb+0x226/0x4a0 [ 127.284156][ T6433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.284180][ T6433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.284225][ T6433] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.284250][ T6433] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.284283][ T6433] netlink_unicast+0x7bd/0x940 [ 127.284322][ T6433] netlink_sendmsg+0x813/0xb40 [ 127.284361][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.284397][ T6433] ? apparmor_socket_sendmsg+0x98/0x360 [ 127.284421][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.284447][ T6433] sock_sendmsg_nosec+0x13a/0x180 [ 127.284469][ T6433] ____sys_sendmsg+0x54e/0x850 [ 127.284502][ T6433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.284537][ T6433] ? import_iovec+0x73/0xa0 [ 127.284564][ T6433] ___sys_sendmsg+0x2a5/0x360 [ 127.284596][ T6433] ? __lock_acquire+0x747/0x2de0 [ 127.284622][ T6433] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.284688][ T6433] ? __fget_files+0x2a/0x420 [ 127.284713][ T6433] ? __fget_files+0x3a2/0x420 [ 127.284750][ T6433] __x64_sys_sendmsg+0x1b1/0x290 [ 127.284780][ T6433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.284831][ T6433] do_syscall_64+0x166/0x520 [ 127.284852][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.284870][ T6433] ? clear_bhb_loop+0x70/0xc0 [ 127.284894][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.284914][ T6433] RIP: 0033:0x7ffb3c59e159 [ 127.284934][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.284949][ T6433] RSP: 002b:00007ffb3d381028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.284972][ T6433] RAX: ffffffffffffffda RBX: 00007ffb3c825fa0 RCX: 00007ffb3c59e159 [ 127.284986][ T6433] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.284998][ T6433] RBP: 00007ffb3d381090 R08: 0000000000000000 R09: 0000000000000000 [ 127.285009][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.285020][ T6433] R13: 00007ffb3c826038 R14: 00007ffb3c825fa0 R15: 00007ffb3c94fa48 [ 127.285054][ T6433] [ 127.339150][ T6431] IPVS: using max 26 ests per chain, 62400 per kthread [ 127.383289][ T31] kauditd_printk_skb: 246 callbacks suppressed [ 127.383308][ T31] audit: type=1326 audit(1789689951.528:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f325419e159 code=0x0 [ 128.013136][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x6 [ 128.013181][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013208][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013236][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013262][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013287][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013312][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013337][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013362][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.013388][ T2256] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 128.107862][ T5680] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 128.171410][ T2256] acrux 0003:1A34:0802.0004: hidraw0: USB HID v0.0a Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 128.195245][ T5687] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 128.394417][ T6441] kvm [6440]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 128.447509][ T5687] usb 4-1: USB disconnect, device number 4 [ 128.510472][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'. [ 128.526240][ T6450] netlink: 'syz.3.178': attribute type 2 has an invalid length. [ 128.526263][ T6450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.178'. [ 128.539956][ T6450] lo: entered allmulticast mode [ 128.714412][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.717998][ T6450] lo: left allmulticast mode [ 128.834840][ T2256] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.983145][ T2256] usb 1-1: Using ep0 maxpacket: 32 [ 128.984963][ T2256] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 128.986179][ T2256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.011099][ T2256] usb 1-1: config 0 descriptor?? [ 129.201383][ T5687] usb 5-1: USB disconnect, device number 5 [ 129.335732][ T2256] as10x_usb: device has been detected [ 129.336784][ T2256] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 129.437904][ T2256] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 129.728915][ T2256] as10x_usb: error during firmware upload part1 [ 129.735694][ T2256] Registered device nBox DVB-T Dongle [ 129.747318][ T2256] usb 1-1: USB disconnect, device number 5 [ 129.855161][ T5687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.984002][ T5687] usb 4-1: device descriptor read/64, error -71 [ 130.044868][ T2256] Unregistered device nBox DVB-T Dongle [ 130.094469][ T2256] as10x_usb: device has been disconnected [ 130.244026][ T5687] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.375533][ T5687] usb 4-1: device descriptor read/64, error -71 [ 130.416871][ T6487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.185'. [ 130.422557][ T6487] IPv6: addrconf: prefix option has invalid lifetime [ 130.484086][ T5687] usb usb4-port1: attempt power cycle [ 130.596454][ T6492] ip_tables: iptables: counters copy to user failed while replacing table [ 130.714037][ T5731] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.779040][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 130.843345][ T5687] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.864169][ T5687] usb 4-1: device descriptor read/8, error -71 [ 130.873169][ T5731] usb 3-1: Using ep0 maxpacket: 16 [ 130.886636][ T5731] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 130.896915][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.896940][ T5731] usb 3-1: Product: syz [ 130.896953][ T5731] usb 3-1: Manufacturer: syz [ 130.896966][ T5731] usb 3-1: SerialNumber: syz [ 130.924768][ T5731] usb 3-1: config 0 descriptor?? [ 130.930582][ T5731] usb 3-1: selecting invalid altsetting 1 [ 130.930601][ T5731] technisat-usb2: could not set alternate setting to 0 [ 130.951065][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.104299][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.105694][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.105742][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.132983][ T5687] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.133394][ T5731] technisat-usb2: firmware version: 0.0 [ 131.133433][ T5731] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 131.166697][ T5687] usb 4-1: device descriptor read/8, error -71 [ 131.183735][ T9] usb 5-1: config 0 descriptor?? [ 131.263337][ T5687] usb usb4-port1: unable to enumerate USB device [ 131.393543][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 131.393658][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.401132][ T9] usb 5-1: USB disconnect, device number 6 [ 131.572285][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.574611][ T5731] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 131.574664][ T5731] usb 3-1: media controller created [ 131.575554][ T5731] technisat-usb2: i2c-error: out failed 53 = -22 [ 131.575606][ T5731] dvb-usb: MAC address reading failed. [ 131.668497][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.759858][ T6489] technisat-usb2: i2c-error: out failed 41 = -22 [ 131.854960][ T5687] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.952379][ T5731] DVB: Unable to find symbol stv090x_attach() [ 131.970889][ T5731] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 132.008303][ T5687] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.018052][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.018100][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.035582][ T5687] usb 5-1: config 0 descriptor?? [ 132.068614][ T5716] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.204760][ T5731] rc_core: IR keymap rc-technisat-usb2 not found [ 132.204783][ T5731] Registered IR keymap rc-empty [ 132.218635][ T5731] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 132.232372][ T5731] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15 [ 132.232959][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 132.234166][ T5716] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.235966][ T5716] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.235993][ T5716] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.236040][ T5716] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.236061][ T5716] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.236098][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.272490][ T5731] dvb-usb: schedule remote query interval to 100 msecs. [ 132.277732][ T5731] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 132.292591][ T5731] usb 3-1: USB disconnect, device number 7 [ 132.449899][ T6494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.527809][ T5716] usb 1-1: GET_CAPABILITIES returned 0 [ 132.527894][ T5716] usbtmc 1-1:16.0: can't read capabilities [ 132.588993][ T5687] usbhid 5-1:0.0: can't add hid device: -71 [ 132.589111][ T5687] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.710933][ T5687] usb 5-1: USB disconnect, device number 7 [ 132.750487][ T31] audit: type=1326 audit(1789689956.908:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.750733][ T31] audit: type=1326 audit(1789689956.908:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.778884][ T5731] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 132.818120][ T31] audit: type=1326 audit(1789689956.978:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.818174][ T31] audit: type=1326 audit(1789689956.978:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.818217][ T31] audit: type=1326 audit(1789689956.978:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.819196][ T31] audit: type=1326 audit(1789689956.978:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d43d5e98e code=0x7ffc0000 [ 132.819673][ T31] audit: type=1326 audit(1789689956.978:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d43d5e98e code=0x7ffc0000 [ 132.820100][ T31] audit: type=1326 audit(1789689956.978:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.820607][ T31] audit: type=1326 audit(1789689956.978:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 132.820981][ T31] audit: type=1326 audit(1789689956.978:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.2.193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d43d9e159 code=0x7ffc0000 [ 133.066018][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066104][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136815][ T6539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.244578][ T6544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.197'. [ 133.245507][ T6544] IPv6: addrconf: prefix option has invalid lifetime [ 133.999614][ T6551] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 134.053379][ T5695] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.203088][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 134.204383][ T5695] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 134.210568][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.210597][ T5695] usb 3-1: Product: syz [ 134.210611][ T5695] usb 3-1: Manufacturer: syz [ 134.210625][ T5695] usb 3-1: SerialNumber: syz [ 134.255012][ T5695] usb 3-1: config 0 descriptor?? [ 134.272476][ T5695] usb 3-1: selecting invalid altsetting 1 [ 134.272498][ T5695] technisat-usb2: could not set alternate setting to 0 [ 134.458851][ T5695] technisat-usb2: firmware version: 0.0 [ 134.458914][ T5695] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 134.862921][ T5716] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.885503][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.886976][ T5695] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 134.888746][ T5695] usb 3-1: media controller created [ 134.888810][ T5695] technisat-usb2: i2c-error: out failed 53 = -22 [ 134.888864][ T5695] dvb-usb: MAC address reading failed. [ 134.972711][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.5.208'. [ 134.975195][ T6576] IPv6: addrconf: prefix option has invalid lifetime [ 135.008068][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.033583][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 135.035650][ T5716] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.039564][ T5716] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 135.039635][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.039662][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.039686][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.039710][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.039733][ T5716] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.039776][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.089720][ T6558] technisat-usb2: i2c-error: out failed 41 = -22 [ 135.244748][ T5695] DVB: Unable to find symbol stv090x_attach() [ 135.293782][ T9] usb 1-1: USB disconnect, device number 6 [ 135.374962][ T5716] usb 4-1: GET_CAPABILITIES returned 0 [ 135.375088][ T5716] usbtmc 4-1:16.0: can't read capabilities [ 135.624078][ T6587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.657468][ T5695] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 135.677597][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.678114][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.744926][ T5731] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 135.782419][ T6592] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 135.903302][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.921118][ T5731] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.934007][ T5695] rc_core: IR keymap rc-technisat-usb2 not found [ 135.934021][ T5695] Registered IR keymap rc-empty [ 135.935125][ T5731] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 135.935175][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.935196][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 135.936549][ T5695] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 136.003382][ T5695] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input16 [ 136.009187][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.009217][ T5731] usb 6-1: Product: syz [ 136.009232][ T5731] usb 6-1: Manufacturer: syz [ 136.009246][ T5731] usb 6-1: SerialNumber: syz [ 136.036824][ T5731] usb 6-1: config 0 descriptor?? [ 136.062371][ T5695] dvb-usb: schedule remote query interval to 100 msecs. [ 136.074845][ T5695] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 136.075677][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 136.076420][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 136.098614][ T9] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 136.098644][ T9] usb 5-1: config 2 has no interface number 0 [ 136.098689][ T9] usb 5-1: config 2 interface 31 has no altsetting 0 [ 136.139195][ T5695] usb 3-1: USB disconnect, device number 8 [ 136.155394][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.155422][ T9] usb 5-1: Product: syz [ 136.155437][ T9] usb 5-1: Manufacturer: syz [ 136.155450][ T9] usb 5-1: SerialNumber: syz [ 136.238242][ T5687] usb 4-1: USB disconnect, device number 9 [ 136.284187][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.209'. [ 136.510417][ T5695] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 136.538797][ T9] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 136.596342][ T9] usb 5-1: USB disconnect, device number 8 [ 136.673163][ T5680] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.832958][ T5680] usb 1-1: Using ep0 maxpacket: 8 [ 136.835702][ T5680] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.837774][ T5680] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 136.837831][ T5680] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.837878][ T5680] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.837902][ T5680] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.838077][ T5680] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.838120][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.115965][ T5680] usb 1-1: GET_CAPABILITIES returned 0 [ 137.116021][ T5680] usbtmc 1-1:16.0: can't read capabilities [ 137.148301][ T6612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.219'. [ 137.149630][ T6612] IPv6: addrconf: prefix option has invalid lifetime [ 137.327508][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.327705][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.327732][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.327756][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328034][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328060][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328083][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328106][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328128][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328150][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328471][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328520][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328550][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328773][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328798][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 137.328819][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 137.331584][ T6599] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.335411][ T5716] usb 1-1: USB disconnect, device number 7 [ 137.504446][ T5680] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.598804][ T6620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.656142][ T5680] usb 4-1: Using ep0 maxpacket: 16 [ 137.657663][ T5680] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.659597][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.659626][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.659648][ T5680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.659691][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.687344][ T5680] usb 4-1: config 0 descriptor?? [ 137.998294][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.142909][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 138.144577][ T9] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 138.172257][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.172277][ T9] usb 5-1: Product: syz [ 138.172286][ T9] usb 5-1: Manufacturer: syz [ 138.172294][ T9] usb 5-1: SerialNumber: syz [ 138.210609][ T9] usb 5-1: config 0 descriptor?? [ 138.211626][ T5680] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 138.237168][ T9] usb 5-1: selecting invalid altsetting 1 [ 138.237192][ T9] technisat-usb2: could not set alternate setting to 0 [ 138.312664][ T5731] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 138.368751][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.369314][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.417799][ T9] technisat-usb2: firmware version: 0.0 [ 138.417843][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 138.429785][ T5688] usb 4-1: USB disconnect, device number 10 [ 138.515375][ T6638] fido_id[6638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.573228][ T5680] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.614158][ T5731] usb 6-1: USB disconnect, device number 4 [ 138.718661][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.723372][ T5680] usb 3-1: Using ep0 maxpacket: 32 [ 138.724678][ T5680] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 138.757724][ T5680] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.757755][ T5680] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.757777][ T5680] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.795372][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.795399][ T5680] usb 3-1: Product: syz [ 138.795413][ T5680] usb 3-1: Manufacturer: syz [ 138.795427][ T5680] usb 3-1: SerialNumber: syz [ 138.800678][ T5680] usb 3-1: config 0 descriptor?? [ 138.880492][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.882057][ T9] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 138.883924][ T9] usb 5-1: media controller created [ 138.883983][ T9] technisat-usb2: i2c-error: out failed 53 = -22 [ 138.884029][ T9] dvb-usb: MAC address reading failed. [ 138.946517][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.047863][ T6622] technisat-usb2: i2c-error: out failed 41 = -22 [ 139.067051][ T6622] warn_alloc: 2 callbacks suppressed [ 139.067097][ T6622] syz.4.224: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 139.067163][ T6622] CPU: 1 UID: 0 PID: 6622 Comm: syz.4.224 Not tainted syzkaller #0 PREEMPT(full) [ 139.067186][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.067198][ T6622] Call Trace: [ 139.067206][ T6622] [ 139.067220][ T6622] dump_stack_lvl+0xe8/0x150 [ 139.067253][ T6622] warn_alloc+0x24d/0x270 [ 139.067276][ T6622] ? __lock_acquire+0x747/0x2de0 [ 139.067302][ T6622] ? __pfx_warn_alloc+0x10/0x10 [ 139.067341][ T6622] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 139.067375][ T6622] __vmalloc_node_range_noprof+0x127/0x1540 [ 139.067411][ T6622] ? __pfx___mutex_trylock_common+0x10/0x10 [ 139.067439][ T6622] ? rcu_is_watching+0x16/0xb0 [ 139.067463][ T6622] ? trace_contention_end+0x3d/0x140 [ 139.067502][ T6622] ? __mutex_lock+0x30b/0x1550 [ 139.067531][ T6622] ? tomoyo_path_number_perm+0x219/0x5f0 [ 139.067559][ T6622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.067589][ T6622] ? dvb_demux_do_ioctl+0x320/0x540 [ 139.067618][ T6622] ? __pfx___mutex_lock+0x10/0x10 [ 139.067644][ T6622] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 139.067676][ T6622] vmalloc_noprof+0xb2/0xe0 [ 139.067705][ T6622] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 139.067733][ T6622] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 139.067771][ T6622] dvb_demux_do_ioctl+0x45d/0x540 [ 139.067805][ T6622] dvb_usercopy+0x199/0x2e0 [ 139.067830][ T6622] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 139.067858][ T6622] ? __pfx_dvb_usercopy+0x10/0x10 [ 139.067894][ T6622] ? __fget_files+0x3a2/0x420 [ 139.067919][ T6622] ? __fget_files+0x2a/0x420 [ 139.067947][ T6622] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 139.067974][ T6622] dvb_demux_ioctl+0x29/0x40 [ 139.068001][ T6622] __se_sys_ioctl+0xfc/0x170 [ 139.068027][ T6622] do_syscall_64+0x166/0x520 [ 139.068050][ T6622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.068070][ T6622] ? clear_bhb_loop+0x70/0xc0 [ 139.068096][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.068117][ T6622] RIP: 0033:0x7f325419e159 [ 139.068138][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.068154][ T6622] RSP: 002b:00007f325508e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.068175][ T6622] RAX: ffffffffffffffda RBX: 00007f3254425fa0 RCX: 00007f325419e159 [ 139.068188][ T6622] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 139.068201][ T6622] RBP: 00007f325423506b R08: 0000000000000000 R09: 0000000000000000 [ 139.068214][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.068226][ T6622] R13: 00007f3254426038 R14: 00007f3254425fa0 R15: 00007f325454fa48 [ 139.068260][ T6622] [ 139.069251][ T6622] Mem-Info: [ 139.069264][ T6622] active_anon:7784 inactive_anon:27 isolated_anon:0 [ 139.069264][ T6622] active_file:3 inactive_file:53379 isolated_file:0 [ 139.069264][ T6622] unevictable:0 dirty:287 writeback:0 [ 139.069264][ T6622] slab_reclaimable:10435 slab_unreclaimable:96742 [ 139.069264][ T6622] mapped:30375 shmem:1552 pagetables:1514 [ 139.069264][ T6622] sec_pagetables:0 bounce:0 [ 139.069264][ T6622] kernel_misc_reclaimable:0 [ 139.069264][ T6622] free:1313030 free_pcp:10201 free_cma:0 [ 139.069316][ T6622] Node 0 active_anon:31136kB inactive_anon:108kB active_file:12kB inactive_file:213260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121448kB dirty:1140kB writeback:0kB shmem:6208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12640kB pagetables:5940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 139.069398][ T6622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 139.069449][ T6622] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.069562][ T6622] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 139.069604][ T6622] Node 0 DMA32 free:1288780kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31136kB inactive_anon:108kB active_file:12kB inactive_file:213260kB unevictable:0kB writepending:1140kB zspages:256kB present:3129332kB managed:2547000kB mlocked:0kB bounce:0kB free_pcp:40804kB local_pcp:20640kB free_cma:0kB [ 139.070698][ T6622] lowmem_reserve[]: 0 0 0 0 0 [ 139.070795][ T6622] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.070854][ T6622] lowmem_reserve[]: 0 0 0 0 0 [ 139.070924][ T6622] Node 1 Normal free:3947980kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.070984][ T6622] lowmem_reserve[]: 0 0 0 0 0 [ 139.071021][ T6622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.071169][ T6622] Node 0 DMA32: 955*4kB (UME) 664*8kB (UME) 338*16kB (UME) 230*32kB (ME) 169*64kB (ME) 107*128kB (ME) 90*256kB (UME) 31*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 290*4096kB (UM) = 1288524kB [ 139.071391][ T6622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 139.071534][ T6622] Node 1 Normal: 9*4kB (U) 9*8kB (U) 8*16kB (UM) 9*32kB (U) 11*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947980kB [ 139.071727][ T6622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.072583][ T6622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.072603][ T6622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.072620][ T6622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.072633][ T6622] 55077 total pagecache pages [ 139.072641][ T6622] 19 pages in swap cache [ 139.072648][ T6622] Free swap = 124760kB [ 139.072655][ T6622] Total swap = 124996kB [ 139.072692][ T6622] 2097051 pages RAM [ 139.072700][ T6622] 0 pages HighMem/MovableOnly [ 139.072707][ T6622] 428685 pages reserved [ 139.072714][ T6622] 0 pages cma reserved [ 139.230665][ T5680] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 139.337889][ T9] DVB: Unable to find symbol stv090x_attach() [ 139.339487][ T9] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 139.365828][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.232'. [ 139.390484][ T6654] IPv6: addrconf: prefix option has invalid lifetime [ 139.525198][ T9] rc_core: IR keymap rc-technisat-usb2 not found [ 139.525217][ T9] Registered IR keymap rc-empty [ 139.538115][ T9] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 139.541405][ T9] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 139.566205][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 139.567046][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 139.584638][ T9] usb 5-1: USB disconnect, device number 9 [ 139.633885][ T5680] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 139.729169][ T5680] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 139.871353][ T6659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.923237][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 140.010637][ T6661] syzkaller0: entered promiscuous mode [ 140.010662][ T6661] syzkaller0: entered allmulticast mode [ 140.379794][ T9] usb 3-1: USB disconnect, device number 9 [ 140.506666][ T5695] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.629866][ T6682] IPv6: addrconf: prefix option has invalid lifetime [ 140.663136][ T5695] usb 6-1: Using ep0 maxpacket: 8 [ 140.663893][ T5695] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.665475][ T5695] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 140.665529][ T5695] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.665551][ T5695] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.665576][ T5695] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.665598][ T5695] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.665638][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.707058][ T5716] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.784834][ T5688] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.875070][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.875127][ T5716] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 140.876121][ T5716] usb 4-1: config index 0 descriptor too short (expected 198, got 134) [ 140.876147][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.876165][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.878517][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.878541][ T5716] usb 4-1: Product: syz [ 140.878555][ T5716] usb 4-1: Manufacturer: syz [ 140.878568][ T5716] usb 4-1: SerialNumber: syz [ 140.890028][ T5695] usb 6-1: GET_CAPABILITIES returned 0 [ 140.890082][ T5695] usbtmc 6-1:16.0: can't read capabilities [ 140.952016][ T5688] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.973058][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.977258][ T5688] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 140.977309][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.977332][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 141.030976][ T5716] usb 4-1: 0:1 : does not exist [ 141.031041][ T5716] usb 4-1: unit 0 not found! [ 141.056729][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.056758][ T5688] usb 5-1: Product: syz [ 141.056773][ T5688] usb 5-1: Manufacturer: syz [ 141.056787][ T5688] usb 5-1: SerialNumber: syz [ 141.076747][ T5688] usb 5-1: config 0 descriptor?? [ 141.124237][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 141.125074][ T9] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 141.137429][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.137483][ T9] usb 3-1: Product: syz [ 141.137496][ T9] usb 3-1: Manufacturer: syz [ 141.137508][ T9] usb 3-1: SerialNumber: syz [ 141.147610][ T9] usb 3-1: config 0 descriptor?? [ 141.165399][ T9] usb 3-1: selecting invalid altsetting 1 [ 141.165453][ T9] technisat-usb2: could not set alternate setting to 0 [ 141.177712][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.177768][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.177811][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178051][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178094][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178134][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178371][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178414][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178464][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178702][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178905][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178948][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.178990][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.179939][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.189118][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.189166][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 141.201284][ T6686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.203832][ T6675] process 'syz.3.242' launched '/dev/fd/5' with NULL argv: empty string added [ 141.208517][ T6666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.217130][ T973] usb 6-1: USB disconnect, device number 5 [ 141.337651][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 141.375977][ T9] technisat-usb2: firmware version: 0.0 [ 141.376048][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 141.456074][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.485549][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.541577][ T973] usb 4-1: USB disconnect, device number 11 [ 141.635030][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.786599][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.787194][ T9] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 141.787229][ T9] usb 3-1: media controller created [ 141.787283][ T9] technisat-usb2: i2c-error: out failed 53 = -22 [ 141.787311][ T9] dvb-usb: MAC address reading failed. [ 141.799477][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.886754][ T9] DVB: Unable to find symbol stv090x_attach() [ 142.255036][ T6698] FAULT_INJECTION: forcing a failure. [ 142.255036][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.257177][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.5.249 Not tainted syzkaller #0 PREEMPT(full) [ 142.257199][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.257208][ T6698] Call Trace: [ 142.257218][ T6698] [ 142.257226][ T6698] dump_stack_lvl+0xe8/0x150 [ 142.257253][ T6698] should_fail_ex+0x410/0x560 [ 142.257276][ T6698] _copy_to_user+0x31/0xb0 [ 142.257299][ T6698] simple_read_from_buffer+0xe1/0x170 [ 142.257324][ T6698] proc_fail_nth_read+0x1bb/0x230 [ 142.257346][ T6698] ? common_file_perm+0x20e/0x2b0 [ 142.257367][ T6698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.257393][ T6698] ? rw_verify_area+0x24a/0x4c0 [ 142.257416][ T6698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.257440][ T6698] vfs_read+0x213/0xa80 [ 142.257467][ T6698] ? __pfx___mutex_lock+0x10/0x10 [ 142.257485][ T6698] ? __pfx_vfs_read+0x10/0x10 [ 142.257514][ T6698] ? __fget_files+0x2a/0x420 [ 142.257538][ T6698] ? __fget_files+0x3a2/0x420 [ 142.257557][ T6698] ? __fget_files+0x2a/0x420 [ 142.257583][ T6698] ksys_read+0x150/0x270 [ 142.257607][ T6698] ? __pfx_ksys_read+0x10/0x10 [ 142.257638][ T6698] do_syscall_64+0x166/0x520 [ 142.257654][ T6698] ? trace_irq_disable+0x3b/0x140 [ 142.257669][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.257684][ T6698] ? clear_bhb_loop+0x70/0xc0 [ 142.257704][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.257723][ T6698] RIP: 0033:0x7f9d1895e98e [ 142.257738][ T6698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.257752][ T6698] RSP: 002b:00007f9d16bb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.257770][ T6698] RAX: ffffffffffffffda RBX: 00007f9d16bb46c0 RCX: 00007f9d1895e98e [ 142.257789][ T6698] RDX: 000000000000000f RSI: 00007f9d16bb40a0 RDI: 000000000000000b [ 142.257799][ T6698] RBP: 00007f9d16bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 142.257808][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.257818][ T6698] R13: 00007f9d18c26218 R14: 00007f9d18c26180 R15: 00007f9d18d4fa48 [ 142.257844][ T6698] [ 142.403245][ T6684] technisat-usb2: i2c-error: out failed 41 = -22 [ 142.403400][ T9] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 142.687996][ T9] rc_core: IR keymap rc-technisat-usb2 not found [ 142.688010][ T9] Registered IR keymap rc-empty [ 142.689355][ T9] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 142.716679][ T9] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input20 [ 142.784613][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 142.788280][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 142.795924][ T9] usb 3-1: USB disconnect, device number 10 [ 143.023720][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 143.107484][ T6716] IPv6: addrconf: prefix option has invalid lifetime [ 143.207418][ T5695] wiimote 0005:057E:0330.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 143.207868][ T5695] wiimote 0005:057E:0330.0006: New device registered [ 143.275779][ T6720] x_tables: duplicate underflow at hook 3 [ 143.323449][ T6720] af_packet: packet size is too long (33022 > 2016) [ 143.429223][ T6713] wiimote 0005:057E:0330.0006: Device removed [ 143.458913][ T5688] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 143.481936][ T6722] fido_id[6722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.632307][ T6724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.679839][ T5688] usb 5-1: USB disconnect, device number 10 [ 143.764707][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.144471][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 144.144492][ T31] audit: type=1326 audit(1789689968.308:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.5.260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x0 [ 144.269406][ T973] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 144.402892][ T973] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input22 [ 144.435142][ T973] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input23 [ 144.487125][ T973] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input21 [ 145.081309][ T6751] IPv6: addrconf: prefix option has invalid lifetime [ 145.233841][ T5688] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.316622][ T6758] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.385971][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 145.387562][ T5688] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 145.396381][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.396406][ T5688] usb 5-1: Product: syz [ 145.396418][ T5688] usb 5-1: Manufacturer: syz [ 145.396431][ T5688] usb 5-1: SerialNumber: syz [ 145.408906][ T5688] usb 5-1: config 0 descriptor?? [ 145.415102][ T5688] usb 5-1: selecting invalid altsetting 1 [ 145.415121][ T5688] technisat-usb2: could not set alternate setting to 0 [ 145.617938][ T5688] technisat-usb2: firmware version: 0.0 [ 145.617986][ T5688] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 145.729254][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.729917][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.962989][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 146.042309][ T5688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.049298][ T5688] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 146.049352][ T5688] usb 5-1: media controller created [ 146.050543][ T5688] technisat-usb2: i2c-error: out failed 53 = -22 [ 146.050600][ T5688] dvb-usb: MAC address reading failed. [ 146.120263][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.131538][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.131592][ T5716] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 146.151066][ T5716] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 146.167795][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.167825][ T5716] usb 3-1: Product: syz [ 146.167839][ T5716] usb 3-1: Manufacturer: syz [ 146.167852][ T5716] usb 3-1: SerialNumber: syz [ 146.230655][ T6749] technisat-usb2: i2c-error: out failed 41 = -22 [ 146.337128][ T5688] DVB: Unable to find symbol stv090x_attach() [ 146.337534][ T5688] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 146.430351][ T5716] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.432490][ T5716] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 146.432519][ T5716] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 146.432579][ T5716] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 146.432775][ T5716] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 146.432796][ T5716] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 146.432904][ T5716] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 146.464551][ T5688] rc_core: IR keymap rc-technisat-usb2 not found [ 146.464572][ T5688] Registered IR keymap rc-empty [ 146.475589][ T5688] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 146.490688][ T5688] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input24 [ 146.501310][ T5688] dvb-usb: schedule remote query interval to 100 msecs. [ 146.502681][ T5688] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 146.521929][ T5688] usb 5-1: USB disconnect, device number 11 [ 146.561350][ T5716] usb 3-1: failed to enable PITCH for EP 0x82 [ 146.604069][ T5688] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 146.734973][ T5716] usb 3-1: USB disconnect, device number 11 [ 146.847732][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.947018][ T6796] IPv6: addrconf: prefix option has invalid lifetime [ 147.111319][ T6799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.160025][ T6800] fuse: Bad value for 'fd' [ 147.433156][ T5688] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.439831][ T6812] xt_hl: Unknown Hop Limit match mode: 206 [ 147.583005][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 147.584555][ T5688] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 147.586297][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.589999][ T5688] usb 3-1: config 0 descriptor?? [ 147.772984][ T5687] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.794717][ T5688] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 147.798960][ T5688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.801246][ T5688] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 147.801315][ T5688] usb 3-1: media controller created [ 147.843275][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.923068][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 147.924912][ T5687] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 147.928005][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.928026][ T5687] usb 1-1: Product: syz [ 147.928039][ T5687] usb 1-1: Manufacturer: syz [ 147.928052][ T5687] usb 1-1: SerialNumber: syz [ 147.931544][ T5687] usb 1-1: config 0 descriptor?? [ 147.938833][ T5687] usb 1-1: selecting invalid altsetting 1 [ 147.938852][ T5687] technisat-usb2: could not set alternate setting to 0 [ 148.002000][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.002704][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.146120][ T5687] technisat-usb2: firmware version: 0.0 [ 148.146172][ T5687] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 148.207922][ T6828] loop8: detected capacity change from 0 to 16384 [ 148.474155][ T6830] loop8: detected capacity change from 16384 to 16383 [ 148.476850][ T6828] I/O error, dev loop8, sector 4480 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 148.477162][ T6828] I/O error, dev loop8, sector 4480 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.477342][ T6828] Buffer I/O error on dev loop8, logical block 560, async page read [ 148.482399][ T6830] I/O error, dev loop8, sector 1152 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 148.482435][ T6830] Buffer I/O error on dev loop8, logical block 144, lost async page write [ 148.482515][ T6830] Buffer I/O error on dev loop8, logical block 145, lost async page write [ 148.482539][ T6830] Buffer I/O error on dev loop8, logical block 146, lost async page write [ 148.482561][ T6830] Buffer I/O error on dev loop8, logical block 147, lost async page write [ 148.482584][ T6830] Buffer I/O error on dev loop8, logical block 148, lost async page write [ 148.482608][ T6830] Buffer I/O error on dev loop8, logical block 149, lost async page write [ 148.482659][ T6830] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 148.482683][ T6830] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 148.482705][ T6830] Buffer I/O error on dev loop8, logical block 152, lost async page write [ 148.528533][ T6830] I/O error, dev loop8, sector 2176 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 148.542878][ T6830] I/O error, dev loop8, sector 3200 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 148.557762][ T6830] I/O error, dev loop8, sector 4224 op 0x1:(WRITE) flags 0x800800 phys_seg 32 prio class 2 [ 148.601562][ T5687] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.605233][ T5687] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 148.605285][ T5687] usb 1-1: media controller created [ 148.605339][ T5687] technisat-usb2: i2c-error: out failed 53 = -22 [ 148.605386][ T5687] dvb-usb: MAC address reading failed. [ 148.607313][ T6830] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.607385][ T6830] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.607430][ T6830] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.607475][ T6830] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.607636][ T6830] ldm_validate_partition_table(): Disk read failed. [ 148.607749][ T6830] Dev loop8: unable to read RDB block 0 [ 148.608027][ T6830] loop8: unable to read partition table [ 148.609444][ T6830] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 148.672619][ T5687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.975088][ T5687] DVB: Unable to find symbol stv090x_attach() [ 148.975506][ T5687] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 148.994842][ T6842] IPv6: addrconf: prefix option has invalid lifetime [ 149.134837][ T5687] rc_core: IR keymap rc-technisat-usb2 not found [ 149.134859][ T5687] Registered IR keymap rc-empty [ 149.140355][ T5687] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 149.148840][ T5687] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input25 [ 149.160069][ T5687] dvb-usb: schedule remote query interval to 100 msecs. [ 149.162295][ T5687] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 149.189695][ T5687] usb 1-1: USB disconnect, device number 8 [ 149.439259][ T5687] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 149.890182][ T6852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.947973][ T5688] az6027: usb out operation failed. (-110) [ 149.949937][ T5688] az6027: usb out operation failed. (-32) [ 149.949953][ T5688] stb0899_attach: Driver disabled by Kconfig [ 149.949963][ T5688] az6027: no front-end attached [ 149.949963][ T5688] [ 149.950366][ T5688] az6027: usb out operation failed. (-32) [ 149.950379][ T5688] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 149.994864][ T5688] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 150.000163][ T5688] dvb-usb: schedule remote query interval to 400 msecs. [ 150.000188][ T5688] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.108601][ T6854] FAULT_INJECTION: forcing a failure. [ 150.108601][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 150.108635][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 150.108657][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.108670][ T6854] Call Trace: [ 150.108679][ T6854] [ 150.108688][ T6854] dump_stack_lvl+0xe8/0x150 [ 150.108724][ T6854] should_fail_ex+0x410/0x560 [ 150.108753][ T6854] ? __alloc_skb+0x1db/0x7a0 [ 150.108786][ T6854] should_failslab+0xa8/0x100 [ 150.108813][ T6854] ? __alloc_skb+0x1db/0x7a0 [ 150.108835][ T6854] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 150.108865][ T6854] ? __alloc_skb+0x18d/0x7a0 [ 150.108889][ T6854] ? __alloc_skb+0x1db/0x7a0 [ 150.108919][ T6854] __alloc_skb+0x1db/0x7a0 [ 150.108948][ T6854] netlink_sendmsg+0x5d4/0xb40 [ 150.108988][ T6854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.109027][ T6854] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.109052][ T6854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.109084][ T6854] sock_sendmsg_nosec+0x13a/0x180 [ 150.109109][ T6854] ____sys_sendmsg+0x54e/0x850 [ 150.109141][ T6854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.109178][ T6854] ? import_iovec+0x73/0xa0 [ 150.109206][ T6854] ___sys_sendmsg+0x2a5/0x360 [ 150.109232][ T6854] ? __lock_acquire+0x747/0x2de0 [ 150.109258][ T6854] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.109320][ T6854] ? __fget_files+0x2a/0x420 [ 150.109347][ T6854] ? __fget_files+0x3a2/0x420 [ 150.109402][ T6854] __x64_sys_sendmsg+0x1b1/0x290 [ 150.109432][ T6854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.109481][ T6854] do_syscall_64+0x166/0x520 [ 150.109504][ T6854] ? trace_irq_disable+0x3b/0x140 [ 150.109523][ T6854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.109543][ T6854] ? clear_bhb_loop+0x70/0xc0 [ 150.109568][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.109589][ T6854] RIP: 0033:0x7ffb3c59e159 [ 150.109610][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.109627][ T6854] RSP: 002b:00007ffb3d381028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.109650][ T6854] RAX: ffffffffffffffda RBX: 00007ffb3c825fa0 RCX: 00007ffb3c59e159 [ 150.109665][ T6854] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 150.109678][ T6854] RBP: 00007ffb3d381090 R08: 0000000000000000 R09: 0000000000000000 [ 150.109691][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.109703][ T6854] R13: 00007ffb3c826038 R14: 00007ffb3c825fa0 R15: 00007ffb3c94fa48 [ 150.109737][ T6854] [ 150.500556][ T6857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 150.677150][ T6865] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 150.911249][ T6868] IPv6: addrconf: prefix option has invalid lifetime [ 151.101609][ T6879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.192130][ T5688] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 151.264891][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 151.330937][ T973] usb 3-1: USB disconnect, device number 12 [ 151.345395][ T5688] usb 6-1: Using ep0 maxpacket: 16 [ 151.346117][ T5688] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 151.352376][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.352402][ T5688] usb 6-1: Product: syz [ 151.352415][ T5688] usb 6-1: Manufacturer: syz [ 151.352428][ T5688] usb 6-1: SerialNumber: syz [ 151.419725][ T5688] usb 6-1: config 0 descriptor?? [ 151.437799][ T5688] usb 6-1: selecting invalid altsetting 1 [ 151.437823][ T5688] technisat-usb2: could not set alternate setting to 0 [ 151.460759][ T6890] netlink: 76 bytes leftover after parsing attributes in process `syz.4.310'. [ 151.515929][ T973] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 151.637018][ T5688] technisat-usb2: firmware version: 0.0 [ 151.637073][ T5688] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 151.672989][ T5695] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.822982][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 151.823943][ T5695] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 151.825369][ T5695] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 151.825393][ T5695] usb 1-1: config 164 has no interface number 0 [ 151.825424][ T5695] usb 1-1: config 164 interface 195 has no altsetting 0 [ 151.833718][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.833743][ T5695] usb 1-1: Product: syz [ 151.833756][ T5695] usb 1-1: Manufacturer: syz [ 151.833768][ T5695] usb 1-1: SerialNumber: syz [ 152.111694][ T5688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.121114][ T5688] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 152.121170][ T5688] usb 6-1: media controller created [ 152.121250][ T5688] technisat-usb2: i2c-error: out failed 53 = -22 [ 152.121297][ T5688] dvb-usb: MAC address reading failed. [ 152.229504][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.286238][ T6870] technisat-usb2: i2c-error: out failed 41 = -22 [ 152.309108][ T6870] warn_alloc: 3 callbacks suppressed [ 152.309128][ T6870] syz.5.303: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.309226][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.5.303 Not tainted syzkaller #0 PREEMPT(full) [ 152.309251][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.309264][ T6870] Call Trace: [ 152.309274][ T6870] [ 152.309284][ T6870] dump_stack_lvl+0xe8/0x150 [ 152.309321][ T6870] warn_alloc+0x24d/0x270 [ 152.309370][ T6870] ? __lock_acquire+0x747/0x2de0 [ 152.309399][ T6870] ? __pfx_warn_alloc+0x10/0x10 [ 152.309440][ T6870] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 152.309475][ T6870] __vmalloc_node_range_noprof+0x127/0x1540 [ 152.309544][ T6870] ? __pfx___mutex_trylock_common+0x10/0x10 [ 152.309576][ T6870] ? rcu_is_watching+0x16/0xb0 [ 152.309604][ T6870] ? trace_contention_end+0x3d/0x140 [ 152.309634][ T6870] ? __mutex_lock+0x30b/0x1550 [ 152.309672][ T6870] ? tomoyo_path_number_perm+0x219/0x5f0 [ 152.309701][ T6870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.309733][ T6870] ? dvb_demux_do_ioctl+0x320/0x540 [ 152.309768][ T6870] ? __pfx___mutex_lock+0x10/0x10 [ 152.309796][ T6870] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 152.309829][ T6870] vmalloc_noprof+0xb2/0xe0 [ 152.309861][ T6870] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 152.309896][ T6870] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 152.309936][ T6870] dvb_demux_do_ioctl+0x45d/0x540 [ 152.309973][ T6870] dvb_usercopy+0x199/0x2e0 [ 152.310004][ T6870] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 152.310041][ T6870] ? __pfx_dvb_usercopy+0x10/0x10 [ 152.310084][ T6870] ? __fget_files+0x3a2/0x420 [ 152.310113][ T6870] ? __fget_files+0x2a/0x420 [ 152.310145][ T6870] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 152.310175][ T6870] dvb_demux_ioctl+0x29/0x40 [ 152.310206][ T6870] __se_sys_ioctl+0xfc/0x170 [ 152.310233][ T6870] do_syscall_64+0x166/0x520 [ 152.310257][ T6870] ? trace_irq_disable+0x3b/0x140 [ 152.310278][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.310301][ T6870] ? clear_bhb_loop+0x70/0xc0 [ 152.310328][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.310349][ T6870] RIP: 0033:0x7f9d1899e159 [ 152.310369][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.310386][ T6870] RSP: 002b:00007f9d16bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.310410][ T6870] RAX: ffffffffffffffda RBX: 00007f9d18c25fa0 RCX: 00007f9d1899e159 [ 152.310425][ T6870] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 152.310440][ T6870] RBP: 00007f9d18a3506b R08: 0000000000000000 R09: 0000000000000000 [ 152.310453][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.310466][ T6870] R13: 00007f9d18c26038 R14: 00007f9d18c25fa0 R15: 00007f9d18d4fa48 [ 152.310502][ T6870] [ 152.310540][ T6870] Mem-Info: [ 152.310551][ T6870] active_anon:9728 inactive_anon:14 isolated_anon:0 [ 152.310551][ T6870] active_file:3 inactive_file:55018 isolated_file:0 [ 152.310551][ T6870] unevictable:0 dirty:169 writeback:0 [ 152.310551][ T6870] slab_reclaimable:10497 slab_unreclaimable:96280 [ 152.310551][ T6870] mapped:32118 shmem:3436 pagetables:1485 [ 152.310551][ T6870] sec_pagetables:0 bounce:0 [ 152.310551][ T6870] kernel_misc_reclaimable:0 [ 152.310551][ T6870] free:1306755 free_pcp:12680 free_cma:0 [ 152.310606][ T6870] Node 0 active_anon:38912kB inactive_anon:56kB active_file:12kB inactive_file:219816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128420kB dirty:648kB writeback:0kB shmem:13744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12528kB pagetables:5824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.310696][ T6870] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:28kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.327634][ T6870] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.327704][ T6870] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 152.327769][ T6870] Node 0 DMA32 free:1263680kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39112kB inactive_anon:56kB active_file:12kB inactive_file:219816kB unevictable:0kB writepending:648kB zspages:76kB present:3129332kB managed:2547000kB mlocked:0kB bounce:0kB free_pcp:50776kB local_pcp:22672kB free_cma:0kB [ 152.327825][ T6870] lowmem_reserve[]: 0 0 0 0 0 [ 152.327884][ T6870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.327934][ T6870] lowmem_reserve[]: 0 0 0 0 0 [ 152.327968][ T6870] Node 1 Normal free:3947980kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:28kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.328045][ T6870] lowmem_reserve[]: 0 0 0 0 0 [ 152.328079][ T6870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.328215][ T6870] Node 0 DMA32: 2030*4kB (UME) 1235*8kB (UM) 626*16kB (UM) 311*32kB (UM) 197*64kB (ME) 74*128kB (ME) 22*256kB (ME) 16*512kB (UME) 8*1024kB (UM) 1*2048kB (M) 288*4096kB (UM) = 1263760kB [ 152.328390][ T6870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.328507][ T6870] Node 1 Normal: 9*4kB (U) 9*8kB (U) 8*16kB (UM) 9*32kB (U) 11*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947980kB [ 152.328686][ T6870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.328701][ T6870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.328715][ T6870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.328729][ T6870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.328767][ T6870] 58524 total pagecache pages [ 152.328775][ T6870] 21 pages in swap cache [ 152.328782][ T6870] Free swap = 124896kB [ 152.328789][ T6870] Total swap = 124996kB [ 152.328797][ T6870] 2097051 pages RAM [ 152.328804][ T6870] 0 pages HighMem/MovableOnly [ 152.328811][ T6870] 428685 pages reserved [ 152.328817][ T6870] 0 pages cma reserved [ 152.826762][ T5688] DVB: Unable to find symbol stv090x_attach() [ 152.829934][ T5688] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 153.132119][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.145944][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.245988][ T6914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.253000][ T5688] rc_core: IR keymap rc-technisat-usb2 not found [ 153.253020][ T5688] Registered IR keymap rc-empty [ 153.254553][ T5688] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 153.280904][ T5688] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input27 [ 153.306596][ T5688] dvb-usb: schedule remote query interval to 100 msecs. [ 153.311803][ T5688] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 153.342640][ T5688] usb 6-1: USB disconnect, device number 7 [ 153.427208][ T5695] usb 1-1: USB disconnect, device number 9 [ 153.592661][ T5688] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 153.872919][ T5695] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.024366][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 154.036831][ T5695] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 154.040034][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.054454][ T5695] usb 5-1: config 0 descriptor?? [ 154.084457][ T5695] usb 5-1: probing VID:PID(0424:012C) [ 154.093342][ T5695] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 154.093366][ T5695] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 154.093382][ T5695] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 154.093414][ T5695] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 154.093430][ T5695] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 154.479613][ T5695] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 154.687162][ T5695] vub300 5-1:0.0: probe with driver vub300 failed with error -71 [ 154.719201][ T5695] usb 5-1: USB disconnect, device number 12 [ 155.092553][ T6945] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 155.133196][ T6945] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 155.392738][ T6951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.405003][ T6950] IPv6: addrconf: prefix option has invalid lifetime [ 155.433452][ T2256] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.582924][ T2256] usb 4-1: Using ep0 maxpacket: 16 [ 155.583693][ T2256] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 155.590918][ T2256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.590947][ T2256] usb 4-1: Product: syz [ 155.590961][ T2256] usb 4-1: Manufacturer: syz [ 155.590974][ T2256] usb 4-1: SerialNumber: syz [ 155.621282][ T2256] usb 4-1: config 0 descriptor?? [ 155.661433][ T2256] usb 4-1: selecting invalid altsetting 1 [ 155.661457][ T2256] technisat-usb2: could not set alternate setting to 0 [ 155.852722][ T2256] technisat-usb2: firmware version: 0.0 [ 155.852771][ T2256] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 156.273111][ T2256] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.274035][ T2256] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 156.274093][ T2256] usb 4-1: media controller created [ 156.274150][ T2256] technisat-usb2: i2c-error: out failed 53 = -22 [ 156.274200][ T2256] dvb-usb: MAC address reading failed. [ 156.297633][ T2256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.430513][ T6968] netlink: 60 bytes leftover after parsing attributes in process `syz.5.336'. [ 156.470018][ T6947] technisat-usb2: i2c-error: out failed 41 = -22 [ 156.651985][ T2256] DVB: Unable to find symbol stv090x_attach() [ 156.654838][ T2256] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 156.886358][ T2256] rc_core: IR keymap rc-technisat-usb2 not found [ 156.886382][ T2256] Registered IR keymap rc-empty [ 156.891883][ T2256] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 156.911579][ T2256] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28 [ 156.934990][ T2256] dvb-usb: schedule remote query interval to 100 msecs. [ 156.935806][ T2256] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 156.951868][ T2256] usb 4-1: USB disconnect, device number 12 [ 157.208906][ T6985] netlink: 'syz.2.338': attribute type 4 has an invalid length. [ 157.252178][ T6986] netlink: 'syz.2.338': attribute type 4 has an invalid length. [ 157.268222][ T6976] bond1: entered allmulticast mode [ 157.271273][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.287526][ T6983] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 157.287572][ T6983] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 157.295065][ T2256] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 157.621871][ T6996] IPv6: addrconf: prefix option has invalid lifetime [ 158.882931][ T2256] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.939461][ T7031] IPv6: addrconf: prefix option has invalid lifetime [ 159.013641][ T2256] usb 5-1: device descriptor read/64, error -71 [ 159.253064][ T2256] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.384200][ T2256] usb 5-1: device descriptor read/64, error -71 [ 159.453921][ T5688] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.498906][ T2256] usb usb5-port1: attempt power cycle [ 159.586260][ T5688] usb 4-1: device descriptor read/64, error -71 [ 159.832984][ T5688] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 159.843248][ T2256] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 159.864070][ T2256] usb 5-1: device descriptor read/8, error -71 [ 159.962975][ T5688] usb 4-1: device descriptor read/64, error -71 [ 160.074429][ T5688] usb usb4-port1: attempt power cycle [ 160.103200][ T2256] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.126269][ T2256] usb 5-1: device descriptor read/8, error -71 [ 160.238084][ T2256] usb usb5-port1: unable to enumerate USB device [ 160.416646][ T5688] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.444724][ T5688] usb 4-1: device descriptor read/8, error -71 [ 160.682986][ T5688] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 160.703549][ T5688] usb 4-1: device descriptor read/8, error -71 [ 160.813386][ T5688] usb usb4-port1: unable to enumerate USB device [ 161.182924][ T5688] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.337817][ T5688] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.339361][ T5688] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 161.339398][ T5688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 161.339412][ T5688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 161.390704][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.390725][ T5688] usb 1-1: Product: syz [ 161.390733][ T5688] usb 1-1: Manufacturer: syz [ 161.390741][ T5688] usb 1-1: SerialNumber: syz [ 161.394971][ T5688] usb 1-1: config 0 descriptor?? [ 161.599177][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 163.600605][ T7096] FAULT_INJECTION: forcing a failure. [ 163.600605][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 163.600643][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.5.375 Not tainted syzkaller #0 PREEMPT(full) [ 163.600667][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.600679][ T7096] Call Trace: [ 163.600688][ T7096] [ 163.600697][ T7096] dump_stack_lvl+0xe8/0x150 [ 163.600736][ T7096] should_fail_ex+0x410/0x560 [ 163.600765][ T7096] should_failslab+0xa8/0x100 [ 163.600790][ T7096] ? __kernfs_new_node+0xe6/0x980 [ 163.600811][ T7096] kmem_cache_alloc_noprof+0xa1/0x600 [ 163.600846][ T7096] ? __kernfs_new_node+0xe6/0x980 [ 163.600875][ T7096] __kernfs_new_node+0xe6/0x980 [ 163.600893][ T7096] ? do_syscall_64+0x166/0x520 [ 163.600926][ T7096] ? __pfx___kernfs_new_node+0x10/0x10 [ 163.600947][ T7096] ? kernfs_root+0x1c/0x230 [ 163.600973][ T7096] ? kernfs_root+0x1c/0x230 [ 163.600991][ T7096] ? kernfs_root+0x1c/0x230 [ 163.601008][ T7096] ? kernfs_root+0x1c/0x230 [ 163.601033][ T7096] kernfs_new_node+0xea/0x140 [ 163.601060][ T7096] __kernfs_create_file+0x4b/0x2e0 [ 163.601090][ T7096] sysfs_add_file_mode_ns+0x237/0x300 [ 163.601127][ T7096] internal_create_group+0x679/0x1180 [ 163.601177][ T7096] ? __pfx_internal_create_group+0x10/0x10 [ 163.601211][ T7096] ? up_write+0x19d/0x4a0 [ 163.601245][ T7096] sysfs_create_groups+0x59/0x120 [ 163.601280][ T7096] device_add_attrs+0xde/0x600 [ 163.601306][ T7096] ? __pfx_device_add_attrs+0x10/0x10 [ 163.601332][ T7096] ? device_add_class_symlinks+0x21f/0x240 [ 163.601358][ T7096] device_add+0x488/0xb80 [ 163.601383][ T7096] netdev_register_kobject+0x197/0x350 [ 163.601411][ T7096] register_netdevice+0x1433/0x1eb0 [ 163.601438][ T7096] ? rcu_is_watching+0x16/0xb0 [ 163.601488][ T7096] ? __pfx_register_netdevice+0x10/0x10 [ 163.601520][ T7096] ? macvlan_changelink_sources+0xc7d/0x1650 [ 163.601563][ T7096] macvlan_common_newlink+0x12e5/0x1a50 [ 163.601590][ T7096] ? alloc_netdev_mqs+0xd44/0x12a0 [ 163.601618][ T7096] ? alloc_netdev_mqs+0xd44/0x12a0 [ 163.601659][ T7096] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 163.601689][ T7096] ? rtnl_create_link+0xa04/0xd70 [ 163.601710][ T7096] ? __pfx_macvlan_newlink+0x10/0x10 [ 163.601734][ T7096] rtnl_newlink_create+0x305/0x7b0 [ 163.601768][ T7096] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 163.601799][ T7096] ? __pfx___mutex_lock+0x10/0x10 [ 163.601834][ T7096] ? ns_capable+0x89/0xe0 [ 163.601862][ T7096] rtnl_newlink+0x166d/0x1c30 [ 163.601905][ T7096] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.601927][ T7096] ? do_syscall_64+0x166/0x520 [ 163.601948][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.602006][ T7096] ? kasan_quarantine_put+0xbb/0x1f0 [ 163.602026][ T7096] ? lockdep_hardirqs_on+0x7b/0x110 [ 163.602053][ T7096] ? nlmon_xmit+0xb0/0x100 [ 163.602074][ T7096] ? kmem_cache_free+0x182/0x650 [ 163.602108][ T7096] ? __lock_acquire+0x747/0x2de0 [ 163.602141][ T7096] ? __local_bh_enable_ip+0xd6/0x140 [ 163.602167][ T7096] ? lockdep_hardirqs_on+0x7b/0x110 [ 163.602188][ T7096] ? __dev_queue_xmit+0x29b/0x3820 [ 163.602215][ T7096] ? __local_bh_enable_ip+0xd6/0x140 [ 163.602239][ T7096] ? __dev_queue_xmit+0x29b/0x3820 [ 163.602276][ T7096] ? lock_acquire+0x115/0x350 [ 163.602314][ T7096] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.602337][ T7096] rtnetlink_rcv_msg+0x802/0xc00 [ 163.602366][ T7096] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 163.602390][ T7096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.602412][ T7096] ? ref_tracker_free+0x689/0x830 [ 163.602440][ T7096] ? __pfx_ref_tracker_free+0x10/0x10 [ 163.602464][ T7096] ? __asan_memcpy+0x40/0x70 [ 163.602491][ T7096] ? __skb_clone+0x5c/0x6c0 [ 163.602525][ T7096] netlink_rcv_skb+0x226/0x4a0 [ 163.602556][ T7096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.602583][ T7096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.602627][ T7096] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.602657][ T7096] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.602692][ T7096] netlink_unicast+0x7bd/0x940 [ 163.602732][ T7096] netlink_sendmsg+0x813/0xb40 [ 163.602773][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.602811][ T7096] ? apparmor_socket_sendmsg+0x98/0x360 [ 163.602834][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.602862][ T7096] sock_sendmsg_nosec+0x13a/0x180 [ 163.602888][ T7096] ____sys_sendmsg+0x54e/0x850 [ 163.602921][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.602958][ T7096] ? import_iovec+0x73/0xa0 [ 163.602986][ T7096] ___sys_sendmsg+0x2a5/0x360 [ 163.603011][ T7096] ? __lock_acquire+0x747/0x2de0 [ 163.603037][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.603105][ T7096] ? __fget_files+0x2a/0x420 [ 163.603131][ T7096] ? __fget_files+0x3a2/0x420 [ 163.603170][ T7096] __x64_sys_sendmsg+0x1b1/0x290 [ 163.603200][ T7096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.603252][ T7096] do_syscall_64+0x166/0x520 [ 163.603273][ T7096] ? trace_irq_disable+0x3b/0x140 [ 163.603293][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.603314][ T7096] ? clear_bhb_loop+0x70/0xc0 [ 163.603340][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.603360][ T7096] RIP: 0033:0x7f9d1899e159 [ 163.603381][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.603398][ T7096] RSP: 002b:00007f9d16bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.603422][ T7096] RAX: ffffffffffffffda RBX: 00007f9d18c25fa0 RCX: 00007f9d1899e159 [ 163.603436][ T7096] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 163.603463][ T7096] RBP: 00007f9d16bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.603484][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.603496][ T7096] R13: 00007f9d18c26038 R14: 00007f9d18c25fa0 R15: 00007f9d18d4fa48 [ 163.603532][ T7096] [ 164.435142][ T5688] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 164.802153][ T5688] usb 1-1: USB disconnect, device number 10 [ 165.059626][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.367045][ T7119] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 165.859492][ T7136] FAULT_INJECTION: forcing a failure. [ 165.859492][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 165.859528][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT(full) [ 165.859550][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.859561][ T7136] Call Trace: [ 165.859569][ T7136] [ 165.859578][ T7136] dump_stack_lvl+0xe8/0x150 [ 165.859612][ T7136] should_fail_ex+0x410/0x560 [ 165.859642][ T7136] should_failslab+0xa8/0x100 [ 165.859669][ T7136] __kmalloc_noprof+0xfe/0x720 [ 165.859691][ T7136] ? attach_auth+0xb3/0x3f0 [ 165.859713][ T7136] ? attach_auth+0xb3/0x3f0 [ 165.859743][ T7136] attach_auth+0xb3/0x3f0 [ 165.859772][ T7136] xfrm_add_sa+0x22ce/0x40a0 [ 165.859803][ T7136] ? __pfx_xfrm_add_sa+0x10/0x10 [ 165.859826][ T7136] ? apparmor_capable+0x126/0x170 [ 165.859861][ T7136] ? __nla_parse+0x40/0x60 [ 165.859889][ T7136] xfrm_user_rcv_msg+0x7a8/0xf30 [ 165.859918][ T7136] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 165.859975][ T7136] ? __mutex_trylock_common+0x15f/0x270 [ 165.860014][ T7136] ? __pfx___mutex_trylock_common+0x10/0x10 [ 165.860042][ T7136] ? rcu_is_watching+0x16/0xb0 [ 165.860066][ T7136] ? trace_contention_end+0x3d/0x140 [ 165.860101][ T7136] netlink_rcv_skb+0x226/0x4a0 [ 165.860131][ T7136] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 165.860155][ T7136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.860199][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.860229][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.860260][ T7136] xfrm_netlink_rcv+0x79/0x90 [ 165.860282][ T7136] netlink_unicast+0x7bd/0x940 [ 165.860322][ T7136] netlink_sendmsg+0x813/0xb40 [ 165.860360][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.860399][ T7136] ? apparmor_socket_sendmsg+0x98/0x360 [ 165.860423][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.860451][ T7136] sock_sendmsg_nosec+0x13a/0x180 [ 165.860476][ T7136] ____sys_sendmsg+0x54e/0x850 [ 165.860506][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.860543][ T7136] ? import_iovec+0x73/0xa0 [ 165.860572][ T7136] ___sys_sendmsg+0x2a5/0x360 [ 165.860598][ T7136] ? __lock_acquire+0x747/0x2de0 [ 165.860624][ T7136] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.860686][ T7136] ? __fget_files+0x2a/0x420 [ 165.860712][ T7136] ? __fget_files+0x3a2/0x420 [ 165.860749][ T7136] __x64_sys_sendmsg+0x1b1/0x290 [ 165.860779][ T7136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.860828][ T7136] do_syscall_64+0x166/0x520 [ 165.860850][ T7136] ? trace_irq_disable+0x3b/0x140 [ 165.860870][ T7136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.860889][ T7136] ? clear_bhb_loop+0x70/0xc0 [ 165.860913][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.860934][ T7136] RIP: 0033:0x7ffb3c59e159 [ 165.860953][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.860970][ T7136] RSP: 002b:00007ffb3d381028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.860993][ T7136] RAX: ffffffffffffffda RBX: 00007ffb3c825fa0 RCX: 00007ffb3c59e159 [ 165.861017][ T7136] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 165.861030][ T7136] RBP: 00007ffb3d381090 R08: 0000000000000000 R09: 0000000000000000 [ 165.861041][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.861053][ T7136] R13: 00007ffb3c826038 R14: 00007ffb3c825fa0 R15: 00007ffb3c94fa48 [ 165.861087][ T7136] [ 166.047181][ T5687] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.264721][ T5687] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.267599][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.300388][ T5721] wiimote 0005:057E:0330.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 166.300603][ T5721] wiimote 0005:057E:0330.0007: New device registered [ 166.301969][ T5687] usb 3-1: config 0 descriptor?? [ 166.327669][ T5687] cp210x 3-1:0.0: cp210x converter detected [ 166.400147][ T2256] wiimote 0005:057E:0330.0007: detected device: Nintendo Wii Remote Plus (Gen 2) [ 166.493291][ T5688] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.534427][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.548733][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.561638][ T2256] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input30 [ 166.619294][ T2256] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input31 [ 166.648070][ T5688] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.653786][ T5688] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 166.653835][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.653882][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 166.676902][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.676930][ T5688] usb 5-1: Product: syz [ 166.676951][ T5688] usb 5-1: Manufacturer: syz [ 166.676965][ T5688] usb 5-1: SerialNumber: syz [ 166.701554][ T2256] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input29 [ 166.772713][ T5688] usb 5-1: config 0 descriptor?? [ 166.783815][ T5687] usb 3-1: cp210x converter now attached to ttyUSB0 [ 166.996374][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 167.189221][ T7142] wiimote 0005:057E:0330.0007: Device removed [ 168.278104][ T7161] FAULT_INJECTION: forcing a failure. [ 168.278104][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 168.278131][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.5.395 Not tainted syzkaller #0 PREEMPT(full) [ 168.278151][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.278163][ T7161] Call Trace: [ 168.278171][ T7161] [ 168.278180][ T7161] dump_stack_lvl+0xe8/0x150 [ 168.278213][ T7161] should_fail_ex+0x410/0x560 [ 168.278246][ T7161] should_failslab+0xa8/0x100 [ 168.278272][ T7161] __kmalloc_cache_noprof+0xa3/0x600 [ 168.278293][ T7161] ? __kmalloc_cache_noprof+0x14d/0x600 [ 168.278309][ T7161] ? sctp_add_bind_addr+0x8c/0x370 [ 168.278334][ T7161] ? sctp_add_bind_addr+0x8c/0x370 [ 168.278367][ T7161] sctp_add_bind_addr+0x8c/0x370 [ 168.278399][ T7161] sctp_copy_local_addr_list+0x31a/0x4e0 [ 168.278430][ T7161] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 168.278459][ T7161] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 168.278492][ T7161] ? sctp_v4_is_any+0x35/0x60 [ 168.278509][ T7161] ? sctp_copy_one_addr+0x93/0x360 [ 168.278539][ T7161] sctp_bind_addr_copy+0xb3/0x3c0 [ 168.278568][ T7161] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 168.278598][ T7161] sctp_connect_new_asoc+0x2ff/0x6b0 [ 168.278623][ T7161] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 168.278653][ T7161] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 168.278687][ T7161] __sctp_connect+0x5cb/0xdc0 [ 168.278722][ T7161] ? __pfx___sctp_connect+0x10/0x10 [ 168.278740][ T7161] ? sctp_setsockopt+0x21c/0x12c0 [ 168.278759][ T7161] ? security_sctp_bind_connect+0x7e/0x2c0 [ 168.278782][ T7161] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 168.278812][ T7161] sctp_setsockopt+0x480/0x12c0 [ 168.278832][ T7161] ? sock_common_setsockopt+0x36/0xc0 [ 168.278852][ T7161] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.278876][ T7161] do_sock_setsockopt+0x17c/0x1b0 [ 168.278906][ T7161] __x64_sys_setsockopt+0x13d/0x1b0 [ 168.278937][ T7161] do_syscall_64+0x166/0x520 [ 168.278966][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.278984][ T7161] ? clear_bhb_loop+0x70/0xc0 [ 168.279009][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.279035][ T7161] RIP: 0033:0x7f9d1899e159 [ 168.279055][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.279071][ T7161] RSP: 002b:00007f9d16bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.279094][ T7161] RAX: ffffffffffffffda RBX: 00007f9d18c25fa0 RCX: 00007f9d1899e159 [ 168.279108][ T7161] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 168.279121][ T7161] RBP: 00007f9d16bf6090 R08: 0000000000000021 R09: 0000000000000000 [ 168.279134][ T7161] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 168.279146][ T7161] R13: 00007f9d18c26038 R14: 00007f9d18c25fa0 R15: 00007f9d18d4fa48 [ 168.279188][ T7161] [ 168.782397][ T5731] usb 3-1: USB disconnect, device number 13 [ 168.806690][ T5731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 168.807661][ T5731] cp210x 3-1:0.0: device disconnected [ 168.858124][ T7163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.246934][ T7169] netlink: 40 bytes leftover after parsing attributes in process `syz.5.398'. [ 169.246989][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.398'. [ 169.758344][ T5688] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 169.795882][ T5731] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 169.942902][ T5731] usb 6-1: Invalid ep0 maxpacket: 64 [ 169.943563][ T5688] usb 5-1: USB disconnect, device number 17 [ 170.017800][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.074013][ T5731] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 170.223091][ T5731] usb 6-1: Invalid ep0 maxpacket: 64 [ 170.223426][ T5731] usb usb6-port1: attempt power cycle [ 170.563988][ T5731] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 170.583745][ T5731] usb 6-1: Invalid ep0 maxpacket: 64 [ 170.622336][ T7192] FAULT_INJECTION: forcing a failure. [ 170.622336][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 170.622363][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(full) [ 170.622377][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.622384][ T7192] Call Trace: [ 170.622389][ T7192] [ 170.622395][ T7192] dump_stack_lvl+0xe8/0x150 [ 170.622416][ T7192] should_fail_ex+0x410/0x560 [ 170.622432][ T7192] should_failslab+0xa8/0x100 [ 170.622448][ T7192] __kmalloc_noprof+0xfe/0x720 [ 170.622460][ T7192] ? io_cache_alloc_new+0x40/0x100 [ 170.622471][ T7192] ? io_cache_alloc_new+0x40/0x100 [ 170.622485][ T7192] io_cache_alloc_new+0x40/0x100 [ 170.622508][ T7192] __io_prep_rw+0x281/0xe70 [ 170.622521][ T7192] ? __pfx_io_write+0x10/0x10 [ 170.622537][ T7192] ? __pfx___io_prep_rw+0x10/0x10 [ 170.622550][ T7192] ? __io_issue_sqe+0x207/0x4d0 [ 170.622567][ T7192] io_prep_write+0x36/0x110 [ 170.622581][ T7192] io_submit_sqes+0xbde/0x2310 [ 170.622611][ T7192] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 170.622629][ T7192] ? __fget_files+0x3a2/0x420 [ 170.622650][ T7192] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 170.622670][ T7192] ? fput+0xa0/0xd0 [ 170.622693][ T7192] ? ksys_write+0x242/0x270 [ 170.622721][ T7192] ? __pfx_ksys_write+0x10/0x10 [ 170.622754][ T7192] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 170.622778][ T7192] do_syscall_64+0x166/0x520 [ 170.622793][ T7192] ? trace_irq_disable+0x3b/0x140 [ 170.622814][ T7192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.622833][ T7192] ? clear_bhb_loop+0x70/0xc0 [ 170.622857][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.622875][ T7192] RIP: 0033:0x7f3d43d9e159 [ 170.622895][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.622911][ T7192] RSP: 002b:00007f3d44be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 170.622929][ T7192] RAX: ffffffffffffffda RBX: 00007f3d44025fa0 RCX: 00007f3d43d9e159 [ 170.622938][ T7192] RDX: 0000000000007721 RSI: 0000000000002299 RDI: 0000000000000000 [ 170.622946][ T7192] RBP: 00007f3d44be7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.622953][ T7192] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 170.622960][ T7192] R13: 00007f3d44026038 R14: 00007f3d44025fa0 R15: 00007f3d4414fa48 [ 170.622979][ T7192] [ 170.787351][ T5731] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 170.825057][ T5731] usb 6-1: Invalid ep0 maxpacket: 64 [ 170.825469][ T5731] usb usb6-port1: unable to enumerate USB device [ 171.004921][ T5716] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.190034][ T5716] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.205959][ T5716] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 171.206006][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.206019][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 171.252478][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.252518][ T5716] usb 4-1: Product: syz [ 171.252534][ T5716] usb 4-1: Manufacturer: syz [ 171.252547][ T5716] usb 4-1: SerialNumber: syz [ 171.262020][ T5716] usb 4-1: config 0 descriptor?? [ 171.522467][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 172.871970][ T7221] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.953181][ T5687] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 173.115952][ T5687] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.122961][ T5687] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 173.123040][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.123060][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 173.173136][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.173155][ T5687] usb 5-1: Product: syz [ 173.173164][ T5687] usb 5-1: Manufacturer: syz [ 173.173172][ T5687] usb 5-1: SerialNumber: syz [ 173.180636][ T5687] usb 5-1: config 0 descriptor?? [ 173.412135][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 173.594718][ T7226] netlink: 188 bytes leftover after parsing attributes in process `syz.2.416'. [ 173.886795][ T31] audit: type=1326 audit(1789689998.048:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.887162][ T31] audit: type=1326 audit(1789689998.048:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.887356][ T31] audit: type=1326 audit(1789689998.048:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.889674][ T31] audit: type=1326 audit(1789689998.048:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.891675][ T31] audit: type=1326 audit(1789689998.048:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.892057][ T31] audit: type=1326 audit(1789689998.048:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.917514][ T31] audit: type=1326 audit(1789689998.048:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.917577][ T31] audit: type=1326 audit(1789689998.058:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.917620][ T31] audit: type=1326 audit(1789689998.058:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 173.995352][ T31] audit: type=1326 audit(1789689998.138:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1899e159 code=0x7ffc0000 [ 174.271065][ T5716] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 174.473750][ T7235] FAULT_INJECTION: forcing a failure. [ 174.473750][ T7235] name failslab, interval 1, probability 0, space 0, times 0 [ 174.473780][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(full) [ 174.473797][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.473807][ T7235] Call Trace: [ 174.473816][ T7235] [ 174.473825][ T7235] dump_stack_lvl+0xe8/0x150 [ 174.473860][ T7235] should_fail_ex+0x410/0x560 [ 174.473890][ T7235] should_failslab+0xa8/0x100 [ 174.473926][ T7235] __kvmalloc_node_noprof+0x176/0x820 [ 174.473953][ T7235] ? alloc_netdev_mqs+0xa9/0x12a0 [ 174.473980][ T7235] ? alloc_netdev_mqs+0xa9/0x12a0 [ 174.474015][ T7235] alloc_netdev_mqs+0xa9/0x12a0 [ 174.474043][ T7235] ? __pfx___mutex_trylock_common+0x10/0x10 [ 174.474068][ T7235] ? __pfx_gtp_link_setup+0x10/0x10 [ 174.474098][ T7235] rtnl_create_link+0x321/0xd70 [ 174.474126][ T7235] rtnl_newlink_create+0x258/0x7b0 [ 174.474160][ T7235] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 174.474191][ T7235] ? __pfx___mutex_lock+0x10/0x10 [ 174.474223][ T7235] ? full_name_hash+0x89/0xe0 [ 174.474246][ T7235] ? __dev_get_by_name+0x36/0x130 [ 174.474273][ T7235] rtnl_newlink+0x166d/0x1c30 [ 174.474309][ T7235] ? __pfx_rtnl_newlink+0x10/0x10 [ 174.474326][ T7235] ? do_syscall_64+0x166/0x520 [ 174.474381][ T7235] ? kasan_quarantine_put+0xbb/0x1f0 [ 174.474396][ T7235] ? lockdep_hardirqs_on+0x7b/0x110 [ 174.474418][ T7235] ? nlmon_xmit+0xb0/0x100 [ 174.474434][ T7235] ? kmem_cache_free+0x182/0x650 [ 174.474463][ T7235] ? __lock_acquire+0x747/0x2de0 [ 174.474489][ T7235] ? __local_bh_enable_ip+0xd6/0x140 [ 174.474511][ T7235] ? lockdep_hardirqs_on+0x7b/0x110 [ 174.474527][ T7235] ? __dev_queue_xmit+0x29b/0x3820 [ 174.474547][ T7235] ? __local_bh_enable_ip+0xd6/0x140 [ 174.474565][ T7235] ? __dev_queue_xmit+0x29b/0x3820 [ 174.474595][ T7235] ? lock_acquire+0x115/0x350 [ 174.474626][ T7235] ? __pfx_rtnl_newlink+0x10/0x10 [ 174.474644][ T7235] rtnetlink_rcv_msg+0x802/0xc00 [ 174.474668][ T7235] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 174.474686][ T7235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.474703][ T7235] ? ref_tracker_free+0x689/0x830 [ 174.474726][ T7235] ? __pfx_ref_tracker_free+0x10/0x10 [ 174.474744][ T7235] ? __asan_memcpy+0x40/0x70 [ 174.474758][ T7235] ? __skb_clone+0x5c/0x6c0 [ 174.474785][ T7235] netlink_rcv_skb+0x226/0x4a0 [ 174.474822][ T7235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.474843][ T7235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.474879][ T7235] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.474917][ T7235] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.474945][ T7235] netlink_unicast+0x7bd/0x940 [ 174.474977][ T7235] netlink_sendmsg+0x813/0xb40 [ 174.475010][ T7235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.475041][ T7235] ? apparmor_socket_sendmsg+0x98/0x360 [ 174.475061][ T7235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.475083][ T7235] sock_sendmsg_nosec+0x13a/0x180 [ 174.475103][ T7235] ____sys_sendmsg+0x54e/0x850 [ 174.475131][ T7235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.475162][ T7235] ? import_iovec+0x73/0xa0 [ 174.475186][ T7235] ___sys_sendmsg+0x2a5/0x360 [ 174.475206][ T7235] ? __lock_acquire+0x747/0x2de0 [ 174.475228][ T7235] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.475285][ T7235] ? __fget_files+0x2a/0x420 [ 174.475306][ T7235] ? __fget_files+0x3a2/0x420 [ 174.475337][ T7235] __x64_sys_sendmsg+0x1b1/0x290 [ 174.475364][ T7235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.475410][ T7235] do_syscall_64+0x166/0x520 [ 174.475432][ T7235] ? trace_irq_disable+0x3b/0x140 [ 174.475451][ T7235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.475466][ T5716] usb 4-1: USB disconnect, device number 17 [ 174.475471][ T7235] ? clear_bhb_loop+0x70/0xc0 [ 174.475497][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.475517][ T7235] RIP: 0033:0x7f948359e159 [ 174.475536][ T7235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.475553][ T7235] RSP: 002b:00007f9484533028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.475577][ T7235] RAX: ffffffffffffffda RBX: 00007f9483825fa0 RCX: 00007f948359e159 [ 174.475592][ T7235] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.475605][ T7235] RBP: 00007f9484533090 R08: 0000000000000000 R09: 0000000000000000 [ 174.475618][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.475630][ T7235] R13: 00007f9483826038 R14: 00007f9483825fa0 R15: 00007f948394fa48 [ 174.475663][ T7235] [ 174.727254][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.052478][ T7238] loop9: detected capacity change from 0 to 7 [ 175.076338][ T7238] Dev loop9: unable to read RDB block 7 [ 175.076371][ T7238] loop9: unable to read partition table [ 175.076518][ T7238] loop9: partition table beyond EOD, truncated [ 175.076546][ T7238] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.126763][ T7242] openvswitch: netlink: Missing key (keys=50, expected=80) [ 176.181854][ T5687] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 176.373043][ T5688] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 176.475685][ T5687] usb 5-1: USB disconnect, device number 18 [ 176.533830][ T5688] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 176.535439][ T5688] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.535489][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.716925][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.887278][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.436'. [ 176.945152][ T5688] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 176.991958][ T7271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.993284][ T5688] wwan wwan0: port wwan0qmi0 attached [ 177.193978][ T5688] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 4a:05:ac:9c:6c:04 [ 178.103172][ T5687] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.270970][ T5687] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.273276][ T5687] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 178.273331][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.273351][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 178.296403][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.296430][ T5687] usb 5-1: Product: syz [ 178.296443][ T5687] usb 5-1: Manufacturer: syz [ 178.296455][ T5687] usb 5-1: SerialNumber: syz [ 178.307962][ T5687] usb 5-1: config 0 descriptor?? [ 178.528866][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 178.882550][ T5731] usb 4-1: USB disconnect, device number 18 [ 178.887628][ T5731] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 178.977723][ T5716] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 179.127868][ T5716] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.129574][ T5716] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.129622][ T5716] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 179.148565][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.148592][ T5716] usb 6-1: Product: syz [ 179.148605][ T5716] usb 6-1: Manufacturer: syz [ 179.148618][ T5716] usb 6-1: SerialNumber: syz [ 179.269743][ T5716] cdc_mbim 6-1:1.0: skipping garbage [ 179.432349][ T5731] wwan wwan0: port wwan0qmi0 disconnected [ 179.458609][ T7320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 180.023425][ T5688] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 180.188112][ T5688] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 180.245454][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.245520][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.290416][ T5688] usb 3-1: config 0 descriptor?? [ 180.600867][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.607245][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.725310][ T7320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 180.726235][ T5716] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 180.990115][ T5716] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 181.076378][ T5716] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 181.255559][ T5716] wwan wwan0: port wwan0mbim0 attached [ 181.258393][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.544780][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 181.892851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.962843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.982871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.043071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 182.180139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 182.213237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 182.861543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 184.879127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 185.963504][ C0] sched: DL replenish lagged too much [ 187.071382][ T5688] usbhid 3-1:0.0: can't add hid device: -32 [ 187.071502][ T5688] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 188.029521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 194.692637][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.709507][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.101882][ T4935] Bluetooth: hci0: command 0x0406 tx timeout [ 203.101929][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 203.102022][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 203.332514][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 236.795072][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 256.859896][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.875646][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.622356][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.642921][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.455959][ T32] INFO: task syz.0.448:7346 blocked for more than 143 seconds. [ 340.455991][ T32] Not tainted syzkaller #0 [ 340.456002][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.456013][ T32] task:syz.0.448 state:D stack:26912 pid:7346 tgid:7340 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 340.456081][ T32] Call Trace: [ 340.456089][ T32] [ 340.456103][ T32] __schedule+0x17db/0x58f0 [ 340.456164][ T32] ? __pfx___schedule+0x10/0x10 [ 340.456195][ T32] ? schedule+0x90/0x2b0 [ 340.456220][ T32] schedule+0x164/0x2b0 [ 340.456244][ T32] schedule_preempt_disabled+0x13/0x30 [ 340.456266][ T32] __mutex_lock+0x7c1/0x1550 [ 340.456296][ T32] ? __mutex_lock+0x5d4/0x1550 [ 340.456324][ T32] ? nl80211_pre_doit+0x5e/0x890 [ 340.456354][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 340.456380][ T32] ? trace_kmalloc+0x2a/0xf0 [ 340.456406][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 340.456430][ T32] ? __nla_parse+0x40/0x60 [ 340.456463][ T32] nl80211_pre_doit+0x5e/0x890 [ 340.456497][ T32] genl_family_rcv_msg_doit+0x1db/0x340 [ 340.456532][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 340.456571][ T32] ? bpf_lsm_capable+0x9/0x20 [ 340.456590][ T32] ? security_capable+0x7e/0x2c0 [ 340.456622][ T32] genl_rcv_msg+0x614/0x7a0 [ 340.456653][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.456676][ T32] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 340.456711][ T32] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 340.456731][ T32] ? __pfx_nl80211_post_doit+0x10/0x10 [ 340.456761][ T32] ? __asan_memcpy+0x40/0x70 [ 340.456779][ T32] ? __skb_clone+0x5c/0x6c0 [ 340.456814][ T32] netlink_rcv_skb+0x226/0x4a0 [ 340.456847][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.456873][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.456929][ T32] ? down_read+0x2be/0x330 [ 340.456960][ T32] genl_rcv+0x28/0x40 [ 340.456982][ T32] netlink_unicast+0x7bd/0x940 [ 340.457023][ T32] netlink_sendmsg+0x813/0xb40 [ 340.457065][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.457105][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 340.457131][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.457160][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 340.457185][ T32] ____sys_sendmsg+0x54e/0x850 [ 340.457220][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.457257][ T32] ? import_iovec+0x73/0xa0 [ 340.457288][ T32] ___sys_sendmsg+0x2a5/0x360 [ 340.457314][ T32] ? __lock_acquire+0x747/0x2de0 [ 340.457341][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.457372][ T32] ? futex_wait+0x2a2/0x390 [ 340.457436][ T32] ? __fget_files+0x2a/0x420 [ 340.457463][ T32] ? __fget_files+0x3a2/0x420 [ 340.457502][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 340.457534][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.457586][ T32] do_syscall_64+0x166/0x520 [ 340.457610][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.457632][ T32] ? clear_bhb_loop+0x70/0xc0 [ 340.457658][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.457679][ T32] RIP: 0033:0x7ffb3c59e159 [ 340.457708][ T32] RSP: 002b:00007ffb3a7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.457730][ T32] RAX: ffffffffffffffda RBX: 00007ffb3c826180 RCX: 00007ffb3c59e159 [ 340.457746][ T32] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000c [ 340.457759][ T32] RBP: 00007ffb3c63506b R08: 0000000000000000 R09: 0000000000000000 [ 340.457773][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.457786][ T32] R13: 00007ffb3c826218 R14: 00007ffb3c826180 R15: 00007ffb3c94fa48 [ 340.457821][ T32] [ 340.457835][ T32] [ 340.457835][ T32] Showing all locks held in the system: [ 340.457844][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 340.457858][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 340.457914][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 340.457928][ T32] #0: ffff888033dc3140 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 340.457989][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630