last executing test programs: 2m43.225723189s ago: executing program 2 (id=2282): r0 = socket(0x28, 0x1, 0x0) unshare(0x6a040000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) lseek(0xffffffffffffffff, 0x1, 0x1) r3 = socket(0xb, 0x4, 0x7) syz_open_dev$vim2m(&(0x7f0000000280), 0x47b, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="a6", 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x28, 0x6, 0x0, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xf0f045, 0x100000, '\x00', @p_u16=0x0}}) 2m40.920877074s ago: executing program 2 (id=2286): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x39, 0x4, 0x8, 0x800, 0x50, 0x4, "09d597a84f2e91eb244bd100cbb9835668d1fd14181795f28d0ee79aafe8600bbce940f103c4134d986d5b881b60b6e597fe4b5cc272a4a3f5"}}, 0x151) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000040)={0x8000000, 0x4}) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2m40.818626578s ago: executing program 1 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000440)=0x4010000, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x79, 0x8d, &(0x7f00000000c0)) sysinfo(&(0x7f00000004c0)=""/31) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dbdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m40.333991918s ago: executing program 2 (id=2289): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b7080000000000004301090292"], 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x40010, r1, 0x7d6e7000) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETSF(r7, 0x5404, &(0x7f00000005c0)={0x40009, 0xc2cb, 0x2, 0x8000, 0x19, "00ded0fffdab7923e56de8bd024af900"}) io_setup(0x20fe, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x488003, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r9 = dup(r8) r10 = syz_io_uring_setup(0xf1f, &(0x7f0000000500)={0x0, 0x88d0, 0x2, 0x2, 0x1a}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r10, 0x47f5, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m37.934363283s ago: executing program 1 (id=2295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000100)={0xc021, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0b9800dd5ea3b6115a402609e254d61dea87b43f1a950cbff90ea6dc6b59a339b01c70d0a6db3e7fe7ca7492cb45564bda9d86a4fcf17eca780192c6e4dad62f2e201d35a04e28502c92f03490d445383e152cc1a577f3f6ea1c6ae0431589e6bf65cd40ca8a37ed45d8ae4dd2af7525206925f964cff54c887b8845be6130472df493d72e2399a8ff57dc2ee7b4442ed5c6b7cf0cf258d1c9d14230976726725f735c6", @ANYRES32=0x0, @ANYBLOB="0000000019500000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) landlock_restrict_self(r0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x551f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x6, 0xd}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x24044844) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r8, &(0x7f0000000440)=[{0x0}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2, 0x8c0, 0x2bd6) 2m36.662031952s ago: executing program 1 (id=2299): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x2014}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x2, 0x4, 0x101, 0x5, 0x1}, &(0x7f0000000180)=0x98) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xf9}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x23, 0x0, 0x1}, 0x8) 2m36.048345044s ago: executing program 2 (id=2303): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0x9}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7945}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x50ced1b1c9c5d066) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0x9}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7945}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) shutdown(r3, 0x50ced1b1c9c5d066) (async) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) (async) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m35.82768309s ago: executing program 1 (id=2306): socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m35.593871782s ago: executing program 2 (id=2308): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 2m35.555179762s ago: executing program 1 (id=2310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(0xffffffffffffffff, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt(r5, 0x1, 0xe, &(0x7f0000000640)=""/105, &(0x7f00000006c0)=0x69) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x200, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "c54ec7", 0x1ca, 0x2f, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, {[@srh={0x2e, 0x2, 0x4, 0x1, 0x4, 0x48, 0x7, [@local]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x7, 0x67}, @hopopts={0xf7, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x8ca, [0x7, 0xc2abf19]}}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfa5f}, @jumbo={0xc2, 0x4, 0x41fc}, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x2c, 0x3, '\x00', [@generic={0x0, 0x1b, "b5eb2608d08b098067e3e4e01a9e0b044f705701a379b75f9ac89f"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x45, 0x1, [], "48a5e3efe19d3ff7fc7a53cfa749f93d5957f95a911a867d549b43ebbc3eff6ff50761306c472a6f5586fd4b62985c21ed4eacdc6c4886b6730576a722100a7ac30ae6ae8d"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "e60ce4505b420f6bb0d4272144c7aa717c495f090b64d5d7d1c62b76b7267d64f6d274220204e5349b387ea13f75a14e03cfb3f6c37da980afc5238532a2623b26a65341a4a07eaf1a28e9ead5ae3625650e48c3"}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x3, 0x3, 0x1, 0x3, 0x3}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x29, 0x1, 0x1, 0x3, 0x1, 0x2b}, 0x2, {0x0, 0x5, 0x2, 0x5, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1, "d2047ff209d15238ad518f544498dc766622fae6d9dff95427ae17a1f1f6fc0f9c4cef8eab722123a95d165ab609acf3a6a56e34cecbf6ef519fa76bd454c0cc2bbfb1895c6d846b0f1fe55fcbfe436ce77ab19784dad3543ad208a4c5"}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000c00000000002000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000001000000000002000100000000000080feffffffff7f400002000000000000080200000000000000010100004b024350fc35a7de7193dc41cfb216e772a42957799bf347db0b3c736688b005819e04d2ef04b593e8a3ae2e7302a85e588d1f9adcaa16d112a104d9b2e42ce4f58080ffac1918039038e23f3645e9f55bb14db6dba6b91e8cad5c06d416a9eecd30167cdba42a7408922310bd10d4dc1ef834156aab129784e4142be8bb8121d51803"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m35.146006821s ago: executing program 2 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) setpgid(0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r2, 0xbc4cd000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000080)={'\x00', 0xa6, 0x74c6, 0x23137, 0x4, 0x15c3adec}) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 2m33.691118314s ago: executing program 1 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) setpgid(0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r2, 0xbc4cd000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000080)={'\x00', 0xa6, 0xc, 0x23137, 0x4, 0x15c3adec}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000100)) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x64, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 2m19.669625709s ago: executing program 32 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) setpgid(0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r2, 0xbc4cd000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000080)={'\x00', 0xa6, 0x74c6, 0x23137, 0x4, 0x15c3adec}) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 2m18.534648817s ago: executing program 33 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) setpgid(0x0, 0x0) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r2, 0xbc4cd000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000080)={'\x00', 0xa6, 0xc, 0x23137, 0x4, 0x15c3adec}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000100)) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x64, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1m56.410561101s ago: executing program 4 (id=2407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1m55.473682719s ago: executing program 4 (id=2411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000000c0)={0x77359400}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) unshare(0x3030980) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000640)="0ce1fb8aadae8893a5e0fa14f6dc4a0a32fec299babea19105fa9690505df01fe1640b8eca431ef04b3a834c5bfb4b9ba81f8b7a455cc974ca90f260b4a774c48ef0acd040cee05564fe0bf90f5d4865d8e2b25e51934e2c2b1e3540c9ffcf3a498dccff43b26467cd417767ee894aeb4a9d0656cb37e284949eb768f787b60900df1c886d3903690f17d30b4bdf9ef3179a77252b42783f4b2f3cf26b95f3d2b16d4f8f3d4c60f8ecc0729c4844a754427eb81be426ec5b110a4d223c672a2de3edf4eb6a2aa2b757e1b6b6b7ff44623e272eb8a31e6b5dbaf9298985d9e89ee41afab8f8556a0d1e277abf9cf38e7e495b8a84bc475a09dded3ad779e3599a5cd9093c339e77d7ba83a990c5b7b5dc9f9700f8badc17bbd08ad67ad297bf1890a4211aea96b59d09c6674ea3257416d84ba5d075b6ed1706c5b1182963597660dcfe6592f0364956fb8cbd389dcb23b8c2afc435d5624cb8d4b56607d422411caffc494514422dcddee77886fc74f86b8d260e6b73e6fe8e7e95a8855b29e1c7c01aa52a521be4de77acb72080256501d6df32987c9d0ec8f74c5d3d4893019e81bcfffd322b2f9376445794712ddb905e41df3bf365e1a6ce66f6d1ed6f50d1f02a52aa778d17f15578107e971ec8d18f37d35339f40c429d93a68ae880fcc1b1abdb8b04fc0d852e7e61e465169a5c3c385cdce22ff08a6c353eab7dec686f0bb9d73a20d7790e7752577137f44a0ae15dbc84e24aa7794e1551bc464083b8c7a7363d59368026fd1af0de6c12c4426cab73e84b3515683ed9e704c8d00fa41d61a0e0536ab1d5fd434aeaa7ddf5b35ef5f00cd2156e9a089dd3be9050d804b34d5d73bd69082cb2e9ac4351de5440df48b708e7a64827636e37d5771c565c771cf0518a63313912cbf1a3d0f6d201523a6002f3c6e574d1d7605e9544b456ada7200079d1010cd4f05cba85ae6ce351e00e924c5f574ec9b70e5764ab76685d5e8591a05b32221d36557f1bd9b9edd747f5898dfb21b5a9bd6f9834a11fa7ed18a50d56a3042415a9de8629dc979639d6d61d0344483dc221e9f7d837c708abcc76a83cdb1cb1fc087e8253d12fe627279dfd277be8845c9a8ebf9b64d838fecdc8e62799a2892f05cd5101a97fabe77f4a55a8b6f07950879fc9c60bf6df3c24a4c85359543de3fe76da9246196b2ea11ee83b5c489e0fd4bc2e44423acfbd9b288f84a9cff24499628b736cef7004ac08398a783992022cbc44026a6ff861f9324dbe84b00f8fb1115c498df4a2014792a73fa269f6ea2af455fd4757afffb7cc51383d1de1018e10fd2ab8fd760571ddf662c589d5c23bf730ddc7ca1be09b2622d5792c3535413e0acb5d17048e6ccaf8789feab1b8c5bbb1a9fda079087d7247a471da986260deefbe9aa2f5871fb021aa656bfc7073e7271a2a7b195238d4084933d8bf8119b65a25b4c8264a8a076a0e1e81eb18f3da6cf1a3a320107ad1148a3f6d3dfd6c1825de6436686fd22001db33db401dd68fb6d1fd6b3056c30a4f51b63b1ff7b26c05df61673318980186f843e3c07321aaf3c7fbb5252406dc3ebfb46ac0f16746f4228e4c1c2d79200bda2b231e079656a9cbf725b6173bea626f0b9f37adf20b2856c7addba4d4e27e83d3edeee976b6d92c59321104a227e511f077673a35159c32f3fbb5a4efc49f66a7d8257fd44ca04d03bdb1c463e49a5f6bf23cbf6e7e490f3108aa6497a30dc91ea18fa46c17b52622b98e217fbd545ba9d8fc7ca9698ca87bfef2b4687f650e8ae5ab70c2bf733472f04f9da8202af2ac7140eccc2e6dd5860eccf961cb2168a182a27690701a069c1c2684cf1ca8c640409f216d73f545ab917a6806035e0facf516fb6c054dc6fd0c248015df77a5e057f1e9fc5db8936994a4072ce00e9499f3fd40e0a9443ca76a12ff8f413e6214f5e0c9f1a4fdc5f7e2dd4cc10404baa838c65a7f27e159fbc64ae9f56047a47cb55323d5e757534aa20d36619093196084efbf4dbcd1334da7e900489d35d7d810d0ed5f51492046c461b3228a6241598f863cf66359de6dc3b851cd7f484936991cbfe260c00c3d73c25dcd9c6f1399fdf4697bb281b47e2a69a397e56292792e3041b6c961431ac5bbd5b327fcf6c5a0c22671fe66d3ff2bfdaa81b9b8a22b6be73980c0ea2c31e9f6c17a9e83f07c81347be4fd0b34a0a2ef672083a19b94d7b7e4b49b3c781ea0ab924ec79447b0f2f864dc1f1df3e52499f7da4da8d0e9445777d95cc3e769f3934331368adc10dcc864d02378e30e82e7dddb352a426c587517f63bcff805cdb49d07f94f5ce4ff0dd3a35d96a16917f3571ed68f4327e6363372a505468f63361c09f73c7a80bcd229b38bb955be7bf9d041b1e149557f7ba22b529b339a80c08201cf9579bb9984f297531944d66be8688f614a17ac1a80ee82eb85e82a89f03271d859746c54a1b2158b2bb732f48afd482f0c7ab2d1abe774a309496159cf3e861568357f6717a7f78ff6bb762cc95dfd9838ed6e2ddaf73c0d3159ceb5cfed6e201f607b51eabb86210eede9e2ad5aa615feeee2b941a2f92d0d3c3c4a06860b2d4dbf3c247b24fb69c15f31acc12b50a3233e1fac6ea2cd68c799f2d8d80177405c33b595b51a364d9135d8b8903b645b29364e50c995923df9fef2db7c48a8fd9eccc40ece058811416b152b5283bab0c0909d83207a4699a34132e380f95b7de53b383de1a238bf6c0352b3e34bfc809c1cd272a5ce876c1e22ea638226b150457b3d53c05c4b6f8e439ead804fc43f32a96e9b62759694191026b4b8aa6c941cf25073740015644481ae7572e693b87dd529bf7876996ddf765a3f2aec8edb496dffa290f8a346d756f04a5917dbbbed40464f5577f940b03c7fd7dfece860da927cf569d15b95eb9f1c87069c6cb76955f99710cc1c462e4b61ab407bf7162897ecd622bc557be28c67a6ee9d6b6dbfc6ee6d6631ed5daddc24ec8274524c9ae9dee2d3e0a1333cc6c4f0825aba2fe3889e9dce36da217ac31fcf7a0ad9e74ba6b882cbad939d7299a0e1439ccc499833a37cf283a1c5895f0bc1bea04b4ff7708396e8fd9a648d8966ccdb5a47044dcf808fb4bbfffca7d5f6e5f71582865cadf89bd676f2ff4f2da4d2405e5cdc93b2d3b26bb6971a679411524b8849139c17a97b6f06d32c358228190bd780fbd744d886a6e6a61baad4e4e5917cdecf33fd91fce92c0252c29df154106c9d6f259eed7a44bb4a3f7972d7b1cd5be77034a8d9ca42eccb128586a7683f6f4e337886acfde3ebbce17d16280dba7874c62cd5aa9b49255848fe603feba989ab0491db6997be96605ec443e537e474b3d4a33e2e05155ec1e3182309ee4a800d8b3a0816b9da0fedd28d0a7c93ddf17ada905ed989585557e80e64a6cd2a211fd8d52e5ff925c5dba0daafe4a7684ec91909d4571fa0eeed6325bb0ccdec0e436f8d171cf238b56661fd7f613fce529ba337036535aaeb099131808e87215b71abbdabfec23069b4ebfe4208211be95bfaa857c1a2b8f3c8d9867dbf63d6053809a4399bc9f6b69f776e6866a813675466360f82ba29dfa6121efc88c8318efd7bec066f37cb70982075ad01747ac1bce3eb62f1add6902bd982171f5700919b191aa2443c40d881e523ac3a6012ac036a26c8f920fef95001622c8b9bf34e31f19b56942312e39237be59a06ad73764f471907dfa9061dc37b4b58e3f4ec030a015ea8e837d0e9f712097fbe8da33e1e71eb7fe808a35a5d972a992832f4aa9e3308af5ea56759b85346f10e7482138486fc10481b57a40bd2c4256d344d4bc89e0f742be508e4b9a4049a78f423f5ade596cfaefd2dae9a228c16fe49989827e2cd5a0336b840c835451500992fb42bd52752dca6fc40726859e244cbde832f42d4bd3b42559b95138913e7d0322542f7928d083c7901a2d00d43441035a6ba236b69f377529db4ee815e27fdeb3155a28e5a146adbd70e84e1a7f41d3d79d4f95bf155c646eab936d936a6bdf49a53730c31db3421405b7684bc6463793a7daafff4fa007a514fad647121d17d11d65ef2d527e4f143655d5b0adb0d675a789925f0bc2b6daa156a98b665b9b36316449efb5d06f492124f8c8003b572866596ecab5e26c471622ef9ab64cfba410d5b8da253f0faebd9ae6735bb970f325c923d959c31816d9050112793a48f8a960c70efd571c127264bd4938f20f4fcb95e67025d4ffbfad76aca5554dd6136312dc055ff988c36d1be7fb1e7a2ab2d317ebb16e528f4b64e2d66a468c9b87013cc8856a74a212bcde0c455f2a8b4792e246961a09392df217ac621303949efea3a69bec49227eba0dce769d03da4f5fd20527a7d2b061a86e2a573b9b2a2ed145a75761cd502c4731102df6417017534971cb8d1369e28b731fcef4d9ae8bf9deea31b9787faeb733f75e0f43ab144c0a6b5f641defe735ab03d7252871935892eb840ce252e1b4246ec9e367ec364f4b078e2bf5a9f12f44d0332812e75b938d2168ebb3dbbc49794f7b35aa9a2d96ac2c4dfd3723a2e67bf486dd32f1d4e89659a1d3e925f54d8dbb8f52c8fa7898be4a56917b66bc8492fbb9311226f037e94ce5f0b00aa4991f203f2885987ff6939cd2efb56e2449a18bf7e2669b62fa43d9f03324cdd00891242c3d8b615710e1340b43bb02eeadfd28b4d4a16ae625eb4e4186ece322cf1bd91c47ac8c171d2a7847cf58ce2f020f5e1e7f2ffe1d0cb14732f11696b7882d0d4ea3f9835d22ff917b0b87270a7e80c34eabfa63c547cd71414f54a4830f8b475410f7331a2e2f9589682fa15bfca049d9ddeef6c06e75ef0da611db5fd083c58318f8000fe3ee5100e07150fe7422b8d934c3b0916d800f25416e09aea89790967a5fa58f35428c7109f359f0b71fc061994d7cb89285d97fcc4d4c59f8bc2ca237b4a8985e7bf5646389c4c64bf71921eaedfe2bdde2ad002700c488e07c5afcf4893b8c49a6b301c75df821c789b9d78b2329a955af6ec212ff632bbf2f15e6b1525ac02b1e1c32b34b3aa6d609a49e6786830ab8d8f0316260cd75526a4660a7e4f1357b0c5c741586ac90997cc02e691dc0ef29fa30d840581b3c4ae90a7c98aae2d235f762b6858161fb995f9753db3e80859aeb84fcefae9ae4e98bc522793642f6a78e638c4a8881969bbbed5b57a49632bdd4ca81d38bae5c68cb16e6dcb83d5593749c96df567383cefbdb011e4327d1558a45b3ce319e972f854faf1aa5db03dbde4b9c39ab509421c866847028eb9f6d1f7445e989a11124ae7ed0a44462c9c2fee43d9cbb348105fc9351caa947002b4aff0246b66b78ebbac0fd88d6244e77e470d8f5d0f1f3cdb1b0830edbe4cf196b0f9fb5a31a429a1604ef812651bf5581fd6cfa35a24aa7b3b6f219a227425785bff01bd84088349199f76761ff1cc8032f81acc91c51074e247873cdd4291ec8f14c25202a45b0b9bbe8b3019db783c6cc1f8daf7c65ded6e1ede3340cdd150ee796db52516a8dbe8bd5de3c969166cef6c7b8f29c47e111409ac4e41d68e1f6cfea782eaa51b174d83407e3bbb35c361b99d9a2bab06bc7e99516dbd64907daa68dad760efcb1dc4a7efaa1a149d1e605503bf63b1d17f2d4faa97e6a22d14d209af1dd2f5f20681c767ca3421ace03a9dc758be49eb16d885cbe9b05d03eb20b8a4f781b0505ca7fac4acab82aef7d4be07496b4e09aa393f5c0396891ce860ab246ff7f9a8b5d482be3b4", 0x1000}, {&(0x7f0000000140)="a6dc18920e93d1625a789d3cfedfe3452f00", 0x12}, {&(0x7f0000000240)="8f9a07d455eea6c13b86bd4dea2379e09f8c804eb383e5658ddcfe750356827151fdce624b1801af5a1ecfd2c9b9aa1d41f1cf6991470cddaaf367f288df1ff1db3c95f3bc92", 0x46}, {&(0x7f0000001640)="38fb32419be116f82874315df35b62464e6a56ff59288567efb22772e77fb51a99753e6ae57024bf43cd72a34152c8d3e5ad8c0e5cf1f5de059a76448240f8ad0b416a912b0e0e72a85b493025bd7b263b3555e3f4fed5db24a8dd154e31ec7412b034d96b237374ca1b0ec3741b12d600ee99847d6823e74d69c7546415fbf19944db48ebe1c3fbea00e0cb9df0719c0db534301a11122ee365ea52ae9a9b3d43701a23435d9794a062f1e2b853ce54d83a86ecc6a1331fb880e02a1de29ec7a2e2296d9d85eec894969a262097eec266d0bd4f30d9", 0xd6}, {&(0x7f0000001740)="5fdc08d359136d5d9d0075645e8214c13b83ef4ce6d63568804cbebb225d74229e2cb90d29c4555a7e0f529ad8ac2244d76f3ed6a0e6b454de3861678b8f059b6a6ffd885a5743f07f57ab7aac9b0c6e5abcdc7b6327b64cd5c31a29006c7e6079ff66e71f0e62530d8d0a2c1d9be79b1cbc36e878d9324e555608801f519acdc4263ff443cb58d7c632360a335e1f23d35314535d6b40eb45f873eb69f561efbfadc64a5fc63f92bb6df4ba856b104c2f46d639e4fc2c05be0e9091b515208df7b4097f685e5c96e822dce463615186d2d026083ce9b8e86f0554edb4bc16a1f3cd5f164770eb5018b1e31c9dc4c78dc5f32eda360c76c29b828bcb2295f8a60ef07bf7aac90e5f00911a67f7048df095c136817196114d41e22f762f18c8a35c4258443a8d9770ee3e99a8de9c3d14af1e7a6d910e29e2377d8455f15a1e7341a6d189eea1950f72ae0b2a2035ad478d39d98ecf6635eee3e649345acb8ce8aaf0af990ea364ab85d1f55cc4e2827689ed31c3da7b71a8a277e4098545214e8bcfe4a9d0f78e4ce8ca947365907659119198e33595942cbd73bf44672553fe296dc959d59d63eef7866205177804d4971af7f66f1c4166cef0c3d8af8441eb71d823eb8816e8a1186f436afcd888945813c2cdf383703296d7bc6061cb8439d33b987a6d51e4a981b4e19cd99680128bf4ae2ab438e1875dcde61336afd6f6712bdd8088d1a8b3060c9cae0e802c8d4770e25db0fe9762383a17062d9938aca816a2619e5434d8ef230c9c14b4069138f3dd7e65d17b5ad6bffbe9d9b781969ef65fc6a9eb17dde7f9edd34e18ce8392f026b8e3e2871483fd8d7da97cf90d23960d32a13dc3d2ee594ba7b66e8dc86b9a3c966f440be5f7438c17b9380521a343fb5a872fd6efb7f412bcb6a889f9bdc9a5848f844b6d85493120026b2be1c90e1af23a7886138368ee6be07393aeba05e92d808cea39b111b0627195d97dd3fe021605d16f4ef3d81ce07396205da8a7c09cc4ba653df820ef63bc97a54cba970705994c5a3665cce2efbf81ee578ce88ef5e5ad3c2aa2f5a04a923a863fbf523e0ef0f3ca9cf552886c7f46fb063c4764c27cb5d666c2979d51c32f0d244151ef4abc0d948085141e7a677f1f0a7dce1ede4a573da4de4410c1592a56fa5f970925ef5021940bbadb99ada0454789cdd095d21faeb25f72c40f6847bfdc740ee8d081f24188a59d648581366c8fce5a177fc8b38a04b41dcf7ac07f12e90ac3df762307b4fa2391ec6ab4f74cb4401db08c68b1120e6c3c490317d41ccba08f5394262593be1c90745155b0b2b91aa29de9596f676afacc9d48376c5b3e9e6a9ef8d0e5386f0aa76e7444f40c626b05c2dc92767a12c6d8e2a22695e4ab2c8d50909353064d088d9355f333f0b7de527b3c9b2d7817aa24114914137f17c556416493499c34b104fab7c2960f1e5ab748ae2a3259988db92a38f1c0326dde6033ecd86557eed506019a294cc36537041ee3cd2c3f2b5841747f46ecb8f34515498b302f00bf59bfe0e957d93ce2ee0dc1be5dd0d87f61f2ce11488396b672674d59667ad3b5befb21d38f95d4074c566b98ce195479c2bda4921eb9e315a570bbb6d4fd8b7a27c1bae32fc6104adde84244489e618bb91e7ac522358debaba0e35a78808ef9075a0f981ce558aebbc6473677ae3917bba90d1ece4fbdd54f28d43f261c4255c3467454b7c434c7d9da000d3cdcca30b396bf27ad4915afa566604a0c68663206d895984baf8ea275d212df15dfc18c9739ad96c01f14b9c5f845b6b52141fb809990f1bca8c1391caf83c2f07d834d4661676c4d9c14e31c5cce4e809a814d71aa999ece111edb149ffcf8a73ea34f0fc56abe31cf997efd3e0ab82f2863a5f83a313401344345dcd30b2f386d59a3b4f9097324dd19fb342d1bb2b1276dcdd2ea5f4d58448ad3fed62ac90e3de0964c5c4ce4029db916583ca028a5639ada8ee1370b113ec361e3c34f060d11a169be3882130d85c16fe1e70d31946a326d4595b72765677c17b87c35b57a2732ee6bcc6978dfdbc1ccbca396c828b936dfb4202f8f553bdf8c2f66a79df2b121f67393c034d3caad3f8bb8512314f0d6eec19f00731ffafe56cc56f3c9fb1e76d36f50dcac6d677b2e31c8663805a99ddd1c0b8b034772d82e5c63e19e261c8b3bc71ee2c75e18e760a3bba754a729ed8df5b4d5ac6059fe7fe8df3960c5fbac4726534dbf33b3bd4b686530904cae8babdda31a5df1228677d0787ba6e5a7400eca09834547804c099c1e379e78d4a10aa7afb0cc0a33fb74b37ddc46e50bc0fb86fc22500e8bb1693332c3032f652cb69d4ef67631c602f11b771f6e54e58ff21b03617ef7ca3209762d4f7f360ed0fb299f22daed4a67b07da3a56a026de9945f13a700abfc1eee7f06d59c304edcf1e98c9ff90eb4e30e22283c65e17d33f89c59b24e48385085fdeb1c7b9a7e2b49b82d76f0fbe4148b27cdfd99c2757c900d3b6523a9ade6a9f6b0b06b498a177d2d7fe8f891c51537f478fedee73ec058872a2959520448275630a208bb68724f813b729a8b93dfc03ba4c8e4307259a123b4dc83f67508a4e5492946c92b2db320bbec986fc256321d7b45466f0d3a22e48a3ada7d05db4c6f162e31c727a3c1a85afb40ee09b969b81fe0281bfb22e76b0e1bfd681e1718d181cb5ce0665932a6209bf1622d66c509302a6b41d2b53b7b070c2845ca44002f252f4e96b88a882c4d3762b33b100edc815c87ec8fb185f4331247b706469cdd995657926f3abc7fbf61ff4435d01dc5aad0e4da11e5284e3671a296c7cb3b4ac350e1c97c57c1d9d464c38c0c9934494cf22a8c3ce8e9823a408476bc54f67235fe9103f5e3c125c562cb8a26c49f252c662b937c78834997f7c8d45392d2da8b4127971d1e7578b6ba7e953190788efece95b9dd5fe5e24270466439d26a788cc7ddd507601a412427fb7df4ccd5fad81224643ffe9c03fc685affebf187fa84b34af00cea572e708e814d563437af51b4544e53626adf8b215958d5695d24607488510989189b41bb7b57679efff70be190578dad8085f3e0cfa51f78cf2a39c17719cd7d92df9665fd4acb411478abcb15f6d7c75591af927ee2ff45ac2c1420d55c8d9a5934a4ff1c7bb37bf919badf3b63536bc1b8a20f6f8bf59e044f89adff4a06c7827644ada26899b8e6b26931a5c7596e73c43a525c8ebf15106198cc28385d371188a5142dcedd6dd299189f00feed8a43d4ccc50dc8a81544a5fbc996796f6e620fe990067db761b5fa17f123a5ca16bace2b0403b7e6b68d64ab796913e526171258326b2b79c4fa3875268a5251986d55a648d1a8649ec285ab445caf7cbd2c1becf4fa201522e600f9629a88b065718257c9e085957d8a68525a6fbdc0a2e4a65225acec3895a501ed44a5faaaaaadcc77c5b1f15f0b84492051aabc8540ce3c728b5092fb51964a6f80308454ef621d1970e3022618b12ba7dc933c999870af8def80879c69fecc0d3d3cd17f7506684fa2683b92cc4c7ae416c0a1bd8511e25493729cf2bba8357af5efd2ff42438a826df26cac99e80ce1b8c85e52e19ac0fb9d05989ecdf292be1fb8b8eae22b449beccc34157a4b6bf06f327039a9090235cc094398c6dbee75dfa3a75e98bc99808b27cd48f2ac784bf9bb9ffc8bf08e33ef910f511affda56d506a5fccea95153dda8277f6f372f37072a7f3612bd32b771d2f76d03c4eeebd6d7d928ff07c313b4c84db2e7fd714220f9b8a726de283cd65f12160d0c8936e7144d1ca68427169889e5bfa20e31c9ca1aac5bc4ebd2f47343a6bd34065d5c45b6eabb2244caa4cc8b3b83824c1bfeba703d6eac1dd2ab9abe39365dc702dffc2be79f0478fbd0e64856f1fa8d5f40968e455a97104823cbf9d0d992c3575c756e4e4f3d0b04c324389115c1e6e2f6f10fbc509221d9ef80b7beaec11293d8f6ae9f25a7734a537a7f05de4bfa07b2937c46534317d044b8687faf0e93054b2bd285dcfb62ab12a557fee19c15659c7529aa6fe10f014623f3c1862fa515aaf0c0140d70502be1907d5025617c98a67f0d64dd0d574e6681ac869452094fcf3706170a79e78af7c5397b0db1a9bfb7825047478b0ff15319327faf68e2146365c5c4ce61f5092d408e45c9a371b702a0fbf97433b8dd5a81c302aabadb8458541d6b45c919911ac51ca7447fbab2a1b8f532a7e73e30be9eeca15d6983457d994321a2e02e759c8c2053b7c1c6195d4fb9ec8984abca207dd380eb96fc7aa4e59039ef0763880dd4bc59dc5ddbe4a80731f48e1d797d9013b634e2ab0c5662277663abb2b03b4ad382ddd65fecba706c3348389656003ad4021b6edc170844ee64fcbb59ab6773adf3fb4cfc88781b0ccd8f0beddeb73f84424aba89d1905a8b4729ecb36b916e3990a05a6f3c87ce724e12f6a8314bc8e7291c1e17f33ab75e38f7470952f23b32b5c100dfbef9be02a840c1137b1d570108d141e8a01f9f5b29afdf03258f7c7be77a725ce12d0d1e05c250bff028f8be4fdf60c97ec88c0946f7c81d850bbb03a94372e1ea128c82d4537d03fbd103ecbd8aab096ea58979911d32afaa51e587ec9e895adbc5667751ea4881086b4bfb9f3661c34afd01719cd5920eabc262aa629223fac8c544be91ecfedad958fc507a7a8de2bb382a5ff1ec16d2e81d491c4e39b62fc60b10d364e50fc9855cd5080cb83b9e62cbb69c53d24db19127e7832af315fc3b579ed233be93cca2ce336d7dcd8d0f53e5ee8a5a1dcc16f2a1db7815570ca06bc881694898bc0e8c5b1126f83e616d03147e7c1274ba69f385c647ec0767181ea6ce34a58c3b5eda96aaa4b265cf94e40a259188853c24bf8dc2af00e96e574e3c94c9059991ee056bb3703c6eaa17718b1ecd331333a0ead2b9760f7540dd6124489a6d23051f6ceb8c68893e957b30b94a929adecc658df3963c68cb3c54c92527d9c0d9a941a0fe6b17079c076b6e3e2b2c3c204c3d8a35abda4168dad37a4d9dfc6a10094bec054326ac0d4cfe7e201a6229d7b5186cf31e18f7bffa48945cf01f9299d45503a7bc36bdaba23a7444a453f507c53e3e22e9f65cc37a02b8bf1b7088dd56f87bb1a4ba03168a1177df3c2f0c23c6f754afa3f0c6592b69f4fcec1f7ee93b469483b491acf80318f7ceeff7cdf44a6c49d72f9404ce9d4d287480b1c54b0a106a2e59c8635be37e216395323060e6e6c64e439e9ffe61580c0016f32093721adbfe1104f9ba7340e7a8c8dcf2f24cfd8073a5431097dee69f3ffe6de029bb65ecb2b9e2922d8d341819838192b42d5711a71d42298a1e5374efbcf2d35cf14782e5f49e0eaab4dc73688051899fddced11d79539279f8e8997c5d30ef8cdf3c6683f4fbb9a232589c0757e3f4322e8e56a709ed691eee36100aa3eeb5a7dab1e96fe0dca2a2c868ed1dd6823dc4497ea7e82ea9d546067d00dabcf63d3d88cea98a1d882dbe87c400b930b8461aeb01bade5c074c261052d7bc9dce1b0afe9f4f51ff1d6a543ce6a11e5cde0c95bc2464dda002ca6327ca2307a154dcddbdd0c91fdf3b4d406d0019df10d48312fc9c3751b183bc79571fd5bf36c9f0c32d88b5f9bbc16b2d0eb53efa8a7111edaa65bbb676275c055adf0869121074ae00d95992999d817104e1fb1dbc11e19a92afeab2faa6e9f946acdbe64d280dcd1307edbc4cd0a8f91f035e9a8044780f80b1d54494f4887d010219", 0x1000}, {&(0x7f0000002740)="eb1a8ee23a848db5c13c916a73b74a9043222cc90e1ff90470fa7f937de4a1c407f9519a7ae30f932cff9a1ff05a9d3ecc810c68a480ac49a7dff6918e15f7965ce605e97c12003546dcb275bc2b07f916897a130454645ff0089101129db69ac84f65d707fe04081499258e73f21ec7a5d1226a936e6af6dd649cd143923dee77e0eabfcb21", 0x86}, {&(0x7f0000002800)="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", 0x1000}], 0x8, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) syz_open_dev$amidi(0x0, 0x437d, 0x109000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000340)={{0x6}, 0x0, [0xfffffffc, 0x3, 0x34fc, 0x0, 0x938, 0x0, 0xffffffff, 0x4, 0x81, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x3, 0x0, 0xfffffffb, 0x10001, 0x0, 0xffff, 0x8, 0x800, 0x0, 0x10000, 0x7, 0x0, 0xfffffffc, 0x18c968c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x2, 0x9, 0x0, 0x9, 0x799, 0x0, 0x0, 0x3, 0x8, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffff, 0xfffffffc, 0x0, 0xc729985, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0xb0, 0xf, 0x0, 0x0, 0xfffffffd, 0x8332, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe38a, 0x6, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0x5b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.110896708s ago: executing program 4 (id=2419): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3e, 0xffffffffffffffff}) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000008, 0x80010, r0, 0x82000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x6ba3, &(0x7f0000000100)={0x0, 0xb8a3, 0x800, 0x3, 0x8c, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x200) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x38) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) 1m48.987729945s ago: executing program 4 (id=2435): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc39c, 0x100, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x130}}, 0x8000) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) 1m47.705102774s ago: executing program 4 (id=2437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(0xffffffffffffffff, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt(r5, 0x1, 0xe, &(0x7f0000000640)=""/105, &(0x7f00000006c0)=0x69) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x208, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "c54ec7", 0x1d2, 0x2f, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, {[@srh={0x2e, 0x2, 0x4, 0x1, 0x4, 0x48, 0x7, [@local]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x7, 0x67}, @hopopts={0xf7, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x8ca, [0x7, 0xc2abf19]}}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}, @jumbo={0xc2, 0x4, 0xfa5f}, @jumbo={0xc2, 0x4, 0x41fc}, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x2c, 0x3, '\x00', [@generic={0x0, 0x1b, "b5eb2608d08b098067e3e4e01a9e0b044f705701a379b75f9ac89f"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x45, 0x1, [], "48a5e3efe19d3ff7fc7a53cfa749f93d5957f95a911a867d549b43ebbc3eff6ff50761306c472a6f5586fd4b62985c21ed4eacdc6c4886b6730576a722100a7ac30ae6ae8d"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "e60ce4505b420f6bb0d4272144c7aa717c495f090b64d5d7d1c62b76b7267d64f6d274220204e5349b387ea13f75a14e03cfb3f6c37da980afc5238532a2623b26a65341a4a07eaf1a28e9ead5ae3625650e48c3"}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x3, 0x3, 0x1, 0x3, 0x3}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x29, 0x1, 0x1, 0x3, 0x1, 0x2b}, 0x2, {0x0, 0x5, 0x2, 0x5, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1, "d2047ff209d15238ad518f544498dc766622fae6d9dff95427ae17a1f1f6fc0f9c4cef8eab722123a95d165ab609acf3a6a56e34cecbf6ef519fa76bd454c0cc2bbfb1895c6d846b0f1fe55fcbfe436ce77ab19784dad3543ad208a4c5"}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000c00000000002000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000001000000000002000100000000000080feffffffff7f400002000000000000080200000000000000010100004b024350fc35a7de7193dc41cfb216e772a42957799bf347db0b3c736688b005819e04d2ef04b593e8a3ae2e7302a85e588d1f9adcaa16d112a104d9b2e42ce4f58080ffac1918039038e23f3645e9f55bb14db6dba6b91e8cad5c06d416a9eecd30167cdba42a7408922310bd10d4dc1ef834156aab129784e4142be8bb8121d51803"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m45.953659786s ago: executing program 4 (id=2446): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ff3000/0xa000)=nil, 0xa000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = syz_clone3(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1000, 0x6, 0xe227, 0x5, 0x0, r5}) 1m30.82350652s ago: executing program 34 (id=2446): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ff3000/0xa000)=nil, 0xa000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = syz_clone3(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1000, 0x6, 0xe227, 0x5, 0x0, r5}) 10.411613487s ago: executing program 0 (id=2711): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 10.154911958s ago: executing program 0 (id=2714): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x2, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x1b, &(0x7f0000000400)=""/27, 0x40f00, 0x2, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xb, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0x0, 0x8}, {0x2, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x7, 0x8}, {0x4, 0x1, 0x1, 0x3}, {0x4, 0x2, 0x10, 0xb}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x32, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x13, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf272, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x3, 0xd, 0x1, 0xfffffffa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001940)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001980)=[{0x4, 0x5, 0x7, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r5, r3, 0xb, 0x10, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) unshare(0x20000400) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 9.89387434s ago: executing program 7 (id=2715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004a23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r3, &(0x7f0000000300)="faab", 0x2, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) listen(r0, 0x0) unshare(0x22020400) r4 = socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="ecba", 0x2}, {0x0}], 0x2}, 0xe0) memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5(\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4\x06\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x92\x18\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\xc3\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x28) syz_emit_ethernet(0x42, &(0x7f00000006c0)=ANY=[@ANYBLOB="c199b805bdcc66ecc35f6152c657d61d8c4d79c3a32b7b015d1d78743daac5eebdf004ea7bbf36a80f45b25011e4c3484c7a68398541923b1c3cbaa6b67dabfdc50eb8ab43eb8b55fce3fdc6072495727b207e1e251be51b8b09bfa40edc2f7b8c7a353b69477a969ae128ee6d55d4e91d90cfe5ee5dc63c1b7d0927bde08baff1fac1bab389f2261934d8536d5c82595d250143e260357539a822d40321942697551de6dc8543b0ef68cd0c07e6662bf64efc8fae29eb56891052115fde1439e40d0ccd39c4df486a50085564bbb0f7b1bcb31c995b4093a3e5d55ec69d15c0922d1d2df2d9797c14745130c994e13ea295adc668573add4f6c08286c7f07cd1d51d8f45aa12f91f03aacc4f1a20b5f65a70d3d792bc99704d635924d5e8c315def0a655b9e5c93fe915c78772a4dc1e056d0daa17c519ef0993889e4d6b7fd7740a5bffc8c291b8d68f0f6a05719b375bf9125b3004be697693d24713134ee05b2f495c5bd768cadfecf5657392c1ceb572b41b9ddad7f312f3535648addc2ac61a29b54f5a355590c4d9b48c18f4142bd6984e4dfa23179eed7132608a1a10031c6d5933a14abe619d539badbd48b59e7c1a24aaf5fb520e685180f2fba52e8dc0101c58fe152ee6f191f8806047ca19a0b539ef9268fa2f727c85d756af4c1fc31ba99dd4c931792e803414dc3"], 0x0) 9.765409181s ago: executing program 0 (id=2716): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f00000006c0)=""/166, 0xa6}], 0x2, &(0x7f0000000780)=[@cred={{0x18}}], 0x18}}], 0x2, 0x40000000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 9.553554239s ago: executing program 7 (id=2718): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b"], 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x10000000, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 8.82046788s ago: executing program 5 (id=2721): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000600)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 6.872674331s ago: executing program 5 (id=2723): vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000000c0)="0796b95cabb5ab539bc4c08fcc3911298aee9eaa97fad87fc1873a8a5e97e00ce30e719ebd08", 0x26}], 0x1, 0x3) syz_usb_connect$cdc_ncm(0x6, 0x8d, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a440000102030109027b0002010420020904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed3d052415010005241500001524120004a317a88b045e4f0581"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040002"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.590005963s ago: executing program 7 (id=2725): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) write(r0, &(0x7f00000000c0)="7798", 0x2) 6.534030071s ago: executing program 3 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 6.442122475s ago: executing program 7 (id=2728): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00600, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 6.263233181s ago: executing program 3 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}, 0x16}, 0x0) 6.205881288s ago: executing program 7 (id=2730): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000034c0)=[{{&(0x7f00000004c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001680)=""/140, 0x8c}, {&(0x7f0000001740)=""/225, 0xe1}, {&(0x7f0000000180)=""/17, 0x11}], 0x3, &(0x7f0000001840)=""/95, 0x5f}, 0x1}, {{&(0x7f00000018c0)=@un=@abs, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001940)=""/132, 0x84}, {&(0x7f0000003540)=""/111, 0x6f}, {&(0x7f0000001a80)=""/200, 0xc8}, {&(0x7f0000001b80)=""/85, 0x55}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/71, 0x47}], 0x6, &(0x7f0000002cc0)=""/161, 0xa1}, 0x7}, {{&(0x7f0000002d80)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002e00)=""/21, 0x15}, {&(0x7f0000002e40)=""/222, 0xde}, {&(0x7f0000002f40)=""/111, 0x6f}, {&(0x7f0000002fc0)=""/141, 0x8d}, {&(0x7f0000003080)=""/230, 0xe6}, {&(0x7f0000003180)=""/21, 0x15}], 0x6, &(0x7f0000003200)=""/162, 0xa2}, 0x976d}, {{&(0x7f00000032c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003340)=""/131, 0x83}], 0x1, &(0x7f0000003440)=""/124, 0x7c}, 0x2}], 0x4, 0x40010000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r6, &(0x7f0000004280)=[{&(0x7f0000000140)="68901704", 0x4}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.890137816s ago: executing program 3 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.784626942s ago: executing program 3 (id=2733): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 5.28785481s ago: executing program 0 (id=2734): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000600)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 4.849970937s ago: executing program 5 (id=2735): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x38fff, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xfffffe3e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) getpid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1}, 0x1}) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000001010400000000141a00000200000018000280140001800800000017ffed010800164000000004"], 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400017d1400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r10 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETPID(r10, 0x3, 0xb, 0x0) 4.555747643s ago: executing program 6 (id=2737): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 3.698125505s ago: executing program 6 (id=2738): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x8040) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0000fbfb0180f7f7030004003139f8425ce6b98d2c3fbed0efb78492855688e8ad0fba45d53e0d0ce91f5e4eb2d9404149b5b794b8bbe492fe71b8341e0e22b18b84605a90d99198b873d3313ba3089c80f1e434ea83f12821a07cce68a2fc41a8abd9dea36048ca27b2888850ea9a0f000000fa6f65d77c8d5bd35157b3de48dd5a3b7854a3d81c288473a147b38593c0a32c9bc244eb7351010e511b9be17494dd80111fe54af2e8811e1a77f1720a4c60243e494b3443ba75de4e9a6a66be8a1d2054cd99bbcbc6c1cb19f5d94d01000000000000009500475a1697a3a699aa6a8d6ec74b532e16ffb6e443b9ef88b19fcdf1d43355"], 0xf7) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x42, 0x64) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000740)) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000000c0)='\x00', 0x1}]) 2.950926809s ago: executing program 3 (id=2739): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) io_setup(0x6, &(0x7f0000001380)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/32, 0x20) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r3, 0x0, 0x4000000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r6 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (fail_nth: 1) 2.309952309s ago: executing program 7 (id=2740): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) io_setup(0x6, &(0x7f0000001380)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/32, 0x20) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r3, 0x0, 0x4000000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r6 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.755659379s ago: executing program 0 (id=2741): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x2, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x1b, &(0x7f0000000400)=""/27, 0x40f00, 0x2, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xb, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0x0, 0x8}, {0x2, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x7, 0x8}, {0x4, 0x1, 0x1, 0x3}, {0x4, 0x2, 0x10, 0xb}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x32, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x13, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf272, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x3, 0xd, 0x1, 0xfffffffa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001940)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001980)=[{0x4, 0x5, 0x7, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r5, r3, 0xb, 0x10, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.294224558s ago: executing program 6 (id=2742): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40100) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 1.180323355s ago: executing program 6 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c000280080001400000000208000240000000100500"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.167361848s ago: executing program 5 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030300000000003f48002a0000000e0001006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (fail_nth: 9) 1.100641762s ago: executing program 0 (id=2745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x2f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x893) 998.899426ms ago: executing program 5 (id=2746): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc39c, 0x100, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) 741.587208ms ago: executing program 3 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = getpgrp(0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r12 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x6, 0x0, 0x4, r12, 0x0, 0x0, 'syz1\x00', 0x0}) kcmp(r10, r12, 0x4, r1, r7) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x9f, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = socket(0x0, 0x6, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x22, 0x4, 0x6004}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x4, 0x2, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 714.533425ms ago: executing program 6 (id=2748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 481.875296ms ago: executing program 5 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040850) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000380), 0x10b442, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0005f80fce9cb6d501800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a0800064000000001080004400000000014000000110001000000000000"], 0x94}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1c) 0s ago: executing program 6 (id=2750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2000000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r6, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x1e, 0x0, &(0x7f0000002000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r10, 0xc0205649, &(0x7f0000000140)={0x2, {0x3, 0x10001, 0x3, 0xfff}}) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): red promiscuous mode [ 867.985837][T16115] macsec0: left promiscuous mode [ 868.040333][T16115] vlan4: entered allmulticast mode [ 868.045688][T16115] erspan0: entered allmulticast mode [ 868.092013][ T5940] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 868.279813][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.290307][ T5940] usb 6-1: config 0 has no interfaces? [ 868.304269][ T5940] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 868.333584][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 868.369889][ T5940] usb 6-1: SerialNumber: syz [ 868.435778][ T5940] usb 6-1: config 0 descriptor?? [ 869.447216][T16124] tipc: Started in network mode [ 869.468312][T16124] tipc: Node identity 366b2b7cf30c, cluster identity 4711 [ 869.494941][T16124] tipc: Enabled bearer , priority 0 [ 869.522730][T16124] syzkaller0: entered promiscuous mode [ 869.554088][T16124] syzkaller0: entered allmulticast mode [ 869.587214][T16123] tipc: Resetting bearer [ 869.626513][T16123] tipc: Disabling bearer [ 869.868560][ C1] net_ratelimit: 10 callbacks suppressed [ 869.868581][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 869.881468][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.185382][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.191770][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.219804][ T5917] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 870.241530][T16130] batadv_slave_1: entered promiscuous mode [ 870.258931][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.265992][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.313546][T16130] batadv_slave_1: left promiscuous mode [ 870.326742][T16130] FAULT_INJECTION: forcing a failure. [ 870.326742][T16130] name failslab, interval 1, probability 0, space 0, times 0 [ 870.385061][T16130] CPU: 0 UID: 0 PID: 16130 Comm: syz.0.2474 Not tainted syzkaller #0 PREEMPT(full) [ 870.385086][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 870.385098][T16130] Call Trace: [ 870.385108][T16130] [ 870.385117][T16130] dump_stack_lvl+0x189/0x250 [ 870.385146][T16130] ? __pfx____ratelimit+0x10/0x10 [ 870.385165][T16130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.385189][T16130] ? __pfx__printk+0x10/0x10 [ 870.385216][T16130] should_fail_ex+0x414/0x560 [ 870.385246][T16130] should_failslab+0xa8/0x100 [ 870.385272][T16130] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 870.385293][T16130] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 870.385318][T16130] ? __alloc_skb+0x112/0x2d0 [ 870.385342][T16130] __alloc_skb+0x112/0x2d0 [ 870.385366][T16130] rtmsg_ifinfo_build_skb+0x84/0x260 [ 870.385418][T16130] rtmsg_ifinfo+0x8c/0x1a0 [ 870.385450][T16130] __dev_notify_flags+0xf4/0x2e0 [ 870.385474][T16130] ? __pfx___dev_notify_flags+0x10/0x10 [ 870.385496][T16130] ? __pfx_netdev_info+0x10/0x10 [ 870.385512][T16130] ? __mutex_lock+0x335/0x1350 [ 870.385538][T16130] ? do_raw_spin_lock+0x121/0x290 [ 870.385572][T16130] __dev_set_promiscuity+0x29f/0x740 [ 870.385602][T16130] netif_set_promiscuity+0x50/0xe0 [ 870.385627][T16130] dev_set_promiscuity+0x126/0x260 [ 870.385646][T16130] ? check_load_mem+0x5d0/0x1190 [ 870.385670][T16130] packet_release+0x569/0xd00 [ 870.385701][T16130] ? __pfx_packet_release+0x10/0x10 [ 870.385721][T16130] ? down_write+0x162/0x1f0 [ 870.385748][T16130] ? __pfx_locks_remove_posix+0x10/0x10 [ 870.385776][T16130] sock_close+0xc0/0x240 [ 870.385801][T16130] ? __pfx_sock_close+0x10/0x10 [ 870.385825][T16130] __fput+0x44c/0xa70 [ 870.385856][T16130] fput_close_sync+0x119/0x200 [ 870.385875][T16130] ? dnotify_flush+0x1db/0x5e0 [ 870.385893][T16130] ? __pfx_fput_close_sync+0x10/0x10 [ 870.385912][T16130] ? do_raw_spin_unlock+0x122/0x240 [ 870.385944][T16130] __ia32_sys_close+0x7f/0x110 [ 870.385965][T16130] __do_fast_syscall_32+0xb6/0x2b0 [ 870.385986][T16130] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.386010][T16130] do_fast_syscall_32+0x34/0x80 [ 870.386030][T16130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.386051][T16130] RIP: 0023:0xf70ae539 [ 870.386067][T16130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 870.386084][T16130] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 870.386104][T16130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 870.386116][T16130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.386126][T16130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.386135][T16130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 870.386145][T16130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.386172][T16130] [ 870.702744][ T5917] usb 7-1: config 0 has no interfaces? [ 870.723469][ T5903] usb 6-1: USB disconnect, device number 5 [ 870.745352][ T5917] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 870.754682][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.763470][ T5917] usb 7-1: Product: syz [ 870.767625][ T5917] usb 7-1: Manufacturer: syz [ 870.772304][ T5917] usb 7-1: SerialNumber: syz [ 870.778991][ T5917] usb 7-1: config 0 descriptor?? [ 870.898189][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.905294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.220766][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'. [ 871.263929][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.298160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.305278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.309672][T16137] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2478'. [ 871.318445][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.395324][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 871.419273][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2473'. [ 871.433081][T16141] FAULT_INJECTION: forcing a failure. [ 871.433081][T16141] name failslab, interval 1, probability 0, space 0, times 0 [ 871.509658][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.5.2479 Not tainted syzkaller #0 PREEMPT(full) [ 871.509684][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 871.509694][T16141] Call Trace: [ 871.509701][T16141] [ 871.509709][T16141] dump_stack_lvl+0x189/0x250 [ 871.509737][T16141] ? __pfx____ratelimit+0x10/0x10 [ 871.509755][T16141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.509774][T16141] ? __pfx__printk+0x10/0x10 [ 871.509793][T16141] ? __pfx___might_resched+0x10/0x10 [ 871.509808][T16141] ? fs_reclaim_acquire+0x7d/0x100 [ 871.509832][T16141] should_fail_ex+0x414/0x560 [ 871.509855][T16141] should_failslab+0xa8/0x100 [ 871.509875][T16141] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 871.509893][T16141] ? __alloc_skb+0x112/0x2d0 [ 871.509912][T16141] __alloc_skb+0x112/0x2d0 [ 871.509931][T16141] netlink_ack+0x146/0xa50 [ 871.509959][T16141] netlink_rcv_skb+0x28c/0x470 [ 871.509975][T16141] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 871.509998][T16141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.510022][T16141] ? bpf_lsm_capable+0x9/0x20 [ 871.510038][T16141] ? security_capable+0x7e/0x2e0 [ 871.510063][T16141] nfnetlink_rcv+0x26a/0x2520 [ 871.510086][T16141] ? __dev_queue_xmit+0x1d79/0x3b50 [ 871.510113][T16141] ? __dev_queue_xmit+0x27b/0x3b50 [ 871.510141][T16141] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 871.510161][T16141] ? __pfx___dev_queue_xmit+0x10/0x10 [ 871.510190][T16141] ? ref_tracker_free+0x63a/0x7d0 [ 871.510210][T16141] ? __asan_memcpy+0x40/0x70 [ 871.510225][T16141] ? __pfx_ref_tracker_free+0x10/0x10 [ 871.510243][T16141] ? __skb_clone+0x63/0x7a0 [ 871.510264][T16141] ? __skb_clone+0x483/0x7a0 [ 871.510287][T16141] ? skb_clone+0x246/0x3a0 [ 871.510306][T16141] ? __netlink_deliver_tap+0x807/0x850 [ 871.510321][T16141] ? netlink_deliver_tap+0x2e/0x1b0 [ 871.510350][T16141] ? netlink_deliver_tap+0x2e/0x1b0 [ 871.510371][T16141] netlink_unicast+0x82f/0x9e0 [ 871.510391][T16141] ? __pfx_netlink_unicast+0x10/0x10 [ 871.510406][T16141] ? netlink_sendmsg+0x642/0xb30 [ 871.510420][T16141] ? skb_put+0x11b/0x210 [ 871.510438][T16141] netlink_sendmsg+0x805/0xb30 [ 871.510461][T16141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.510478][T16141] ? __import_iovec+0x5d4/0x7f0 [ 871.510493][T16141] ? aa_sock_msg_perm+0xf1/0x1d0 [ 871.510514][T16141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.510528][T16141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.510543][T16141] __sock_sendmsg+0x219/0x270 [ 871.510567][T16141] ____sys_sendmsg+0x505/0x830 [ 871.510589][T16141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.510619][T16141] ___sys_sendmsg+0x21f/0x2a0 [ 871.510639][T16141] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.510688][T16141] ? __fget_files+0x2a/0x420 [ 871.510708][T16141] ? __fget_files+0x3a0/0x420 [ 871.510734][T16141] __sys_sendmsg+0x164/0x220 [ 871.510753][T16141] ? __pfx___sys_sendmsg+0x10/0x10 [ 871.510782][T16141] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.510800][T16141] __do_fast_syscall_32+0xb6/0x2b0 [ 871.510817][T16141] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.510834][T16141] do_fast_syscall_32+0x34/0x80 [ 871.510850][T16141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 871.510867][T16141] RIP: 0023:0xf7f43539 [ 871.510880][T16141] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 871.510893][T16141] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 871.510909][T16141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000e00 [ 871.510919][T16141] RDX: 0000000004008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.510929][T16141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.510937][T16141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 871.510945][T16141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.510967][T16141] [ 871.938459][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.945664][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 872.513289][T16153] veth1_macvtap: left promiscuous mode [ 872.519091][T16153] macsec0: entered promiscuous mode [ 872.536508][T16153] veth1_macvtap: entered promiscuous mode [ 872.543533][T16153] macsec0: left promiscuous mode [ 872.584377][T16153] 8021q: VLANs not supported on ip6tnl0 [ 872.632019][T16155] tipc: Enabled bearer , priority 0 [ 872.643228][T16155] syzkaller0: entered promiscuous mode [ 872.649807][T16155] syzkaller0: entered allmulticast mode [ 872.663810][T16154] tipc: Resetting bearer [ 872.734305][T16154] tipc: Disabling bearer [ 873.043616][ T1210] usb 7-1: USB disconnect, device number 5 [ 873.338981][ T5888] buffer_io_error: 10 callbacks suppressed [ 873.339001][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.445816][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.454858][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.473354][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.516550][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.641509][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.661286][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 875.058216][ C1] net_ratelimit: 10 callbacks suppressed [ 875.058235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 875.071072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 875.458186][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 875.465272][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.098172][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.105340][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.460658][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 876.498805][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.506202][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.661873][T16188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'. [ 876.712587][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 876.721642][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 876.724033][T16188] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2492'. [ 876.730390][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 876.747602][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 876.755840][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 876.778528][ T1210] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 876.880408][T16192] tipc: Enabled bearer , priority 0 [ 876.889171][T16192] syzkaller0: entered promiscuous mode [ 876.894673][T16192] syzkaller0: entered allmulticast mode [ 876.904792][T16191] tipc: Resetting bearer [ 876.939195][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.959440][T16191] tipc: Disabling bearer [ 876.966391][ T1210] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 876.991997][ T1210] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 877.006456][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.014975][ T1210] usb 7-1: Product: syz [ 877.025028][ T1210] usb 7-1: Manufacturer: syz [ 877.032222][ T1210] usb 7-1: SerialNumber: syz [ 877.046951][ T1210] usb 7-1: config 0 descriptor?? [ 877.060782][ T1210] adutux 7-1:0.0: interrupt endpoints not found [ 877.136182][ T5903] IPVS: starting estimator thread 0... [ 877.148159][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 877.155249][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 877.248239][T16195] IPVS: using max 49 ests per chain, 117600 per kthread [ 877.282735][ T5903] usb 7-1: USB disconnect, device number 6 [ 877.446938][T16200] FAULT_INJECTION: forcing a failure. [ 877.446938][T16200] name failslab, interval 1, probability 0, space 0, times 0 [ 877.497777][T16200] CPU: 0 UID: 0 PID: 16200 Comm: syz.0.2499 Not tainted syzkaller #0 PREEMPT(full) [ 877.497802][T16200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 877.497812][T16200] Call Trace: [ 877.497820][T16200] [ 877.497828][T16200] dump_stack_lvl+0x189/0x250 [ 877.497854][T16200] ? __pfx____ratelimit+0x10/0x10 [ 877.497874][T16200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.497896][T16200] ? __pfx__printk+0x10/0x10 [ 877.497913][T16200] ? skb_set_owner_w+0x25b/0x3a0 [ 877.497943][T16200] ? sock_alloc_send_pskb+0x86b/0x980 [ 877.497962][T16200] ? __lock_acquire+0xab9/0xd20 [ 877.497981][T16200] should_fail_ex+0x414/0x560 [ 877.498011][T16200] should_failslab+0xa8/0x100 [ 877.498036][T16200] __kmalloc_noprof+0xcb/0x4f0 [ 877.498058][T16200] ? ___neigh_create+0x6d5/0x2260 [ 877.498080][T16200] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 877.498107][T16200] ___neigh_create+0x6d5/0x2260 [ 877.498158][T16200] ip_neigh_gw4+0x289/0x3b0 [ 877.498203][T16200] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 877.498226][T16200] ? __lock_acquire+0xab9/0xd20 [ 877.498253][T16200] ip_finish_output2+0x57a/0x1160 [ 877.498285][T16200] ? ip_finish_output2+0x452/0x1160 [ 877.498309][T16200] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 877.498332][T16200] ? __pfx_ip_finish_output2+0x10/0x10 [ 877.498356][T16200] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 877.498377][T16200] ? ip_skb_dst_mtu+0x866/0xab0 [ 877.498401][T16200] ? ip_finish_output+0x33a/0x3f0 [ 877.498426][T16200] ip_output+0x2a1/0x3c0 [ 877.498450][T16200] ? ip_output+0x60/0x3c0 [ 877.498474][T16200] ip_send_skb+0x74/0x100 [ 877.498500][T16200] udp_send_skb+0xaf1/0x14c0 [ 877.498542][T16200] udp_sendmsg+0x195a/0x2170 [ 877.498581][T16200] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 877.498607][T16200] ? __pfx_udp_sendmsg+0x10/0x10 [ 877.498629][T16200] ? __up_read+0x280/0x680 [ 877.498665][T16200] ? do_user_addr_fault+0xbbc/0x1380 [ 877.498692][T16200] ? do_user_addr_fault+0xc85/0x1380 [ 877.498723][T16200] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.498750][T16200] ? sock_rps_record_flow+0x19/0x410 [ 877.498778][T16200] ? inet_sendmsg+0x29c/0x370 [ 877.498801][T16200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 877.498823][T16200] __sock_sendmsg+0x19c/0x270 [ 877.498852][T16200] ____sys_sendmsg+0x52d/0x830 [ 877.498880][T16200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.498920][T16200] ___sys_sendmsg+0x21f/0x2a0 [ 877.498946][T16200] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.499007][T16200] ? __fget_files+0x2a/0x420 [ 877.499029][T16200] ? __fget_files+0x3a0/0x420 [ 877.499064][T16200] __sys_sendmmsg+0x28e/0x430 [ 877.499092][T16200] ? __pfx___sys_sendmmsg+0x10/0x10 [ 877.499125][T16200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 877.499165][T16200] ? ksys_write+0x22a/0x250 [ 877.499198][T16200] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 877.499224][T16200] __do_fast_syscall_32+0xb6/0x2b0 [ 877.499245][T16200] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.499269][T16200] do_fast_syscall_32+0x34/0x80 [ 877.499289][T16200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.499309][T16200] RIP: 0023:0xf70ae539 [ 877.499326][T16200] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 877.499343][T16200] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 877.499363][T16200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 877.499376][T16200] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 877.499387][T16200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.499398][T16200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 877.499409][T16200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.499438][T16200] [ 878.028785][ T24] IPVS: starting estimator thread 0... [ 878.368178][T16204] IPVS: using max 29 ests per chain, 69600 per kthread [ 878.430010][ T5888] buffer_io_error: 10 callbacks suppressed [ 878.430027][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.499721][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.520081][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.560813][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.589163][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 878.627733][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.643806][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.705047][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.725652][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.737658][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.754155][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.763117][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.775183][T16215] netlink: 'syz.3.2498': attribute type 27 has an invalid length. [ 878.830152][ T24] usb 6-1: config 0 has no interfaces? [ 878.838582][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 878.847624][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.896527][ T24] usb 6-1: Product: syz [ 878.906797][T16210] netlink: 'syz.6.2500': attribute type 10 has an invalid length. [ 878.948805][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.956510][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.049238][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.056411][T16210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.063393][ T24] usb 6-1: Manufacturer: syz [ 879.064053][T16210] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.075454][T16210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.111615][ T24] usb 6-1: SerialNumber: syz [ 879.189358][T16217] netlink: 'syz.6.2500': attribute type 10 has an invalid length. [ 879.202076][T16210] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 879.533154][ T24] usb 6-1: config 0 descriptor?? [ 879.726367][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 879.737282][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 879.747383][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 879.796445][T16217] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 879.808731][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 879.820265][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 879.986664][T16201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2497'. [ 880.149721][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 880.172894][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 880.185678][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 880.194854][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 880.205176][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 880.258147][ C1] net_ratelimit: 15 callbacks suppressed [ 880.258168][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.271141][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.658845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.665877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.818363][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.825881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.105382][T16221] chnl_net:caif_netlink_parms(): no params data found [ 881.228097][ T1210] usb 6-1: USB disconnect, device number 6 [ 881.308133][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.315283][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.414388][T16237] tipc: Enabled bearer , priority 0 [ 881.586897][T16235] syzkaller0: entered promiscuous mode [ 881.592726][T16235] syzkaller0: entered allmulticast mode [ 881.698408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.705561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.824400][T16234] tipc: Resetting bearer [ 881.858231][ T5842] Bluetooth: hci7: command tx timeout [ 881.882454][T16234] tipc: Disabling bearer [ 882.089198][T16221] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.097170][T16221] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.104892][T16221] bridge_slave_0: entered allmulticast mode [ 882.113283][T16221] bridge_slave_0: entered promiscuous mode [ 882.123072][T16221] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.131014][T16221] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.143688][T16221] bridge_slave_1: entered allmulticast mode [ 882.153066][T16221] bridge_slave_1: entered promiscuous mode [ 882.524802][T16221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.559310][T16221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.578215][T15831] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 882.708953][T16221] team0: Port device team_slave_0 added [ 882.775627][T16221] team0: Port device team_slave_1 added [ 882.790116][T15831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.836984][T15831] usb 6-1: config 0 has no interfaces? [ 882.868262][T15831] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 882.888027][T15831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 882.912354][T15831] usb 6-1: SerialNumber: syz [ 882.936397][T15831] usb 6-1: config 0 descriptor?? [ 882.940449][T16256] FAULT_INJECTION: forcing a failure. [ 882.940449][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.981542][T16256] CPU: 1 UID: 0 PID: 16256 Comm: syz.3.2510 Not tainted syzkaller #0 PREEMPT(full) [ 882.981567][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 882.981579][T16256] Call Trace: [ 882.981587][T16256] [ 882.981596][T16256] dump_stack_lvl+0x189/0x250 [ 882.981624][T16256] ? __pfx____ratelimit+0x10/0x10 [ 882.981644][T16256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.981665][T16256] ? __pfx__printk+0x10/0x10 [ 882.981695][T16256] should_fail_ex+0x414/0x560 [ 882.981725][T16256] _copy_to_user+0x31/0xb0 [ 882.981749][T16256] simple_read_from_buffer+0xe1/0x170 [ 882.981777][T16256] proc_fail_nth_read+0x1b3/0x220 [ 882.981800][T16256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 882.981823][T16256] ? rw_verify_area+0x2a6/0x4d0 [ 882.981843][T16256] ? __lock_acquire+0xab9/0xd20 [ 882.981859][T16256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 882.981887][T16256] vfs_read+0x1fd/0xa30 [ 882.981907][T16256] ? fdget_pos+0x247/0x320 [ 882.981934][T16256] ? __pfx___mutex_lock+0x10/0x10 [ 882.981955][T16256] ? __pfx_vfs_read+0x10/0x10 [ 882.981977][T16256] ? __fget_files+0x2a/0x420 [ 882.982005][T16256] ? __fget_files+0x3a0/0x420 [ 882.982026][T16256] ? __fget_files+0x2a/0x420 [ 882.982058][T16256] ksys_read+0x145/0x250 [ 882.982082][T16256] ? __pfx_ksys_read+0x10/0x10 [ 882.982107][T16256] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.982128][T16256] __do_fast_syscall_32+0xb6/0x2b0 [ 882.982149][T16256] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.982172][T16256] do_fast_syscall_32+0x34/0x80 [ 882.982192][T16256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 882.982212][T16256] RIP: 0023:0xf7f64539 [ 882.982229][T16256] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 882.982244][T16256] RSP: 002b:00000000f5456590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 882.982264][T16256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5456620 [ 882.982277][T16256] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 882.982289][T16256] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 882.982299][T16256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 882.982310][T16256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 882.982339][T16256] [ 883.315212][T16221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.364598][T16221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.418076][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 883.426196][T16221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.442202][T16221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.449618][T16221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.476149][T16221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.589965][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.730961][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 883.807253][T16221] hsr_slave_0: entered promiscuous mode [ 883.822084][ T43] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 883.855693][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.855703][T16221] hsr_slave_1: entered promiscuous mode [ 883.871152][T16221] debugfs: 'hsr0' already exists in 'hsr' [ 883.877231][T16221] Cannot create hsr debugfs directory [ 883.886258][ T43] usb 7-1: Product: syz [ 883.897407][ T43] usb 7-1: Manufacturer: syz [ 883.910693][ T43] usb 7-1: SerialNumber: syz [ 883.934426][ T43] usb 7-1: config 0 descriptor?? [ 883.938398][ T5842] Bluetooth: hci7: command tx timeout [ 883.972708][ T43] adutux 7-1:0.0: interrupt endpoints not found [ 884.167573][ T43] usb 7-1: USB disconnect, device number 7 [ 884.640040][T16221] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 884.723257][T16221] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 884.774994][T16221] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 884.779328][ T5888] buffer_io_error: 15 callbacks suppressed [ 884.779346][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.924760][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.934699][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.953849][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.973046][T16277] FAULT_INJECTION: forcing a failure. [ 884.973046][T16277] name failslab, interval 1, probability 0, space 0, times 0 [ 884.975072][T16221] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 884.993692][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.008199][T16277] CPU: 1 UID: 0 PID: 16277 Comm: syz.6.2515 Not tainted syzkaller #0 PREEMPT(full) [ 885.008226][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 885.008237][T16277] Call Trace: [ 885.008245][T16277] [ 885.008253][T16277] dump_stack_lvl+0x189/0x250 [ 885.008280][T16277] ? __pfx____ratelimit+0x10/0x10 [ 885.008297][T16277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.008316][T16277] ? __pfx__printk+0x10/0x10 [ 885.008332][T16277] ? __lock_acquire+0xab9/0xd20 [ 885.008357][T16277] should_fail_ex+0x414/0x560 [ 885.008382][T16277] should_failslab+0xa8/0x100 [ 885.008405][T16277] kmem_cache_alloc_noprof+0x73/0x3c0 [ 885.008426][T16277] ? skb_clone+0x212/0x3a0 [ 885.008452][T16277] skb_clone+0x212/0x3a0 [ 885.008475][T16277] __netlink_deliver_tap+0x404/0x850 [ 885.008505][T16277] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.008524][T16277] netlink_deliver_tap+0x19c/0x1b0 [ 885.008544][T16277] netlink_unicast+0x7fa/0x9e0 [ 885.008571][T16277] ? __pfx_netlink_unicast+0x10/0x10 [ 885.008591][T16277] ? netlink_sendmsg+0x642/0xb30 [ 885.008609][T16277] ? skb_put+0x11b/0x210 [ 885.008632][T16277] netlink_sendmsg+0x805/0xb30 [ 885.008661][T16277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.008695][T16277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 885.008720][T16277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.008737][T16277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.008757][T16277] __sock_sendmsg+0x219/0x270 [ 885.008785][T16277] sock_write_iter+0x279/0x360 [ 885.008813][T16277] ? __pfx_sock_write_iter+0x10/0x10 [ 885.008861][T16277] do_iter_readv_writev+0x623/0x8c0 [ 885.008888][T16277] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 885.008907][T16277] ? common_file_perm+0x1b5/0x230 [ 885.009017][T16277] ? bpf_lsm_file_permission+0x9/0x20 [ 885.009039][T16277] ? security_file_permission+0x75/0x290 [ 885.009063][T16277] ? rw_verify_area+0x255/0x4d0 [ 885.009089][T16277] vfs_writev+0x31a/0x960 [ 885.009116][T16277] ? __lock_acquire+0xab9/0xd20 [ 885.009141][T16277] ? __pfx_vfs_writev+0x10/0x10 [ 885.009175][T16277] ? __fget_files+0x2a/0x420 [ 885.009203][T16277] ? __fget_files+0x3a0/0x420 [ 885.009222][T16277] ? __fget_files+0x2a/0x420 [ 885.009251][T16277] do_writev+0x14d/0x2d0 [ 885.009275][T16277] ? __pfx_do_writev+0x10/0x10 [ 885.009301][T16277] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.009323][T16277] __do_fast_syscall_32+0xb6/0x2b0 [ 885.009343][T16277] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.009363][T16277] do_fast_syscall_32+0x34/0x80 [ 885.009381][T16277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 885.009402][T16277] RIP: 0023:0xf7fc3539 [ 885.009418][T16277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 885.009433][T16277] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 885.009452][T16277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 885.009464][T16277] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 885.009475][T16277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.009485][T16277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 885.009497][T16277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.009528][T16277] [ 885.377798][ T43] usb 6-1: USB disconnect, device number 7 [ 885.458190][ C1] net_ratelimit: 20 callbacks suppressed [ 885.458210][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.470993][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.486889][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.531966][T16281] veth1_macvtap: left promiscuous mode [ 885.537889][T16281] macsec0: entered promiscuous mode [ 885.551490][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.690793][T16221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.718231][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.729944][T16280] veth1_macvtap: entered promiscuous mode [ 885.748788][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.757363][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.786325][T16280] macsec0: left promiscuous mode [ 885.858222][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.865462][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.988508][T16281] 8021q: VLANs not supported on ip6tnl0 [ 886.018232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.025372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.044864][ T5842] Bluetooth: hci7: command tx timeout [ 886.127911][T16221] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.457233][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.464683][T10369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.498166][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.505244][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.541640][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.548793][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.898561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.905597][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 887.101770][T16221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.174043][T16306] tipc: Enabled bearer , priority 0 [ 887.296505][T16306] syzkaller0: MTU too low for tipc bearer [ 887.342601][T16306] tipc: Disabling bearer [ 887.500971][T16221] veth0_vlan: entered promiscuous mode [ 887.605304][T16221] veth1_vlan: entered promiscuous mode [ 887.611973][T16314] FAULT_INJECTION: forcing a failure. [ 887.611973][T16314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.637396][T16314] CPU: 1 UID: 0 PID: 16314 Comm: syz.0.2519 Not tainted syzkaller #0 PREEMPT(full) [ 887.637423][T16314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.637433][T16314] Call Trace: [ 887.637442][T16314] [ 887.637450][T16314] dump_stack_lvl+0x189/0x250 [ 887.637477][T16314] ? __pfx____ratelimit+0x10/0x10 [ 887.637496][T16314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.637515][T16314] ? __pfx__printk+0x10/0x10 [ 887.637531][T16314] ? __might_fault+0xb0/0x130 [ 887.637562][T16314] should_fail_ex+0x414/0x560 [ 887.637591][T16314] _copy_from_user+0x2d/0xb0 [ 887.637620][T16314] get_compat_msghdr+0xad/0x4a0 [ 887.637646][T16314] ? __pfx_get_compat_msghdr+0x10/0x10 [ 887.637679][T16314] ___sys_sendmsg+0x193/0x2a0 [ 887.637703][T16314] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.637759][T16314] ? __fget_files+0x2a/0x420 [ 887.637781][T16314] ? __fget_files+0x3a0/0x420 [ 887.637814][T16314] __sys_sendmsg+0x164/0x220 [ 887.637837][T16314] ? __pfx___sys_sendmsg+0x10/0x10 [ 887.637871][T16314] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.637895][T16314] __do_fast_syscall_32+0xb6/0x2b0 [ 887.637915][T16314] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.637940][T16314] do_fast_syscall_32+0x34/0x80 [ 887.637956][T16314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.637976][T16314] RIP: 0023:0xf70ae539 [ 887.637990][T16314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 887.638006][T16314] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 887.638025][T16314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 887.638038][T16314] RDX: 000000000404c057 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.638050][T16314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.638061][T16314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 887.638072][T16314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.638099][T16314] [ 888.127145][ T5842] Bluetooth: hci7: command tx timeout [ 888.147776][T16221] veth0_macvtap: entered promiscuous mode [ 888.165116][T16221] veth1_macvtap: entered promiscuous mode [ 888.359821][T16317] cgroup: fork rejected by pids controller in /syz6 [ 888.372334][T16221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.400251][ T1210] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 888.407213][T16221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.466357][ T4568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.510147][ T4568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.548190][ T4568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.578275][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 888.606827][ T1210] usb 6-1: config 11 has an invalid interface number: 202 but max is 0 [ 888.607706][ T4568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.625016][ T1210] usb 6-1: config 11 has no interface number 0 [ 888.682521][ T1210] usb 6-1: config 11 interface 202 has no altsetting 0 [ 888.727302][ T1210] usb 6-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=4d.10 [ 888.750999][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.771612][ T1210] usb 6-1: Product: syz [ 888.780677][ T1210] usb 6-1: Manufacturer: syz [ 888.788488][ T1210] usb 6-1: SerialNumber: syz [ 889.026420][ T1210] mxuport 6-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 889.045312][ T1210] mxuport 6-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 889.070805][ T1210] mxuport 6-1:11.202: probe with driver mxuport failed with error -71 [ 889.598402][ T1210] usb 6-1: USB disconnect, device number 8 [ 889.718548][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.736030][T16330] tipc: Enabling of bearer rejected, already enabled [ 889.768363][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.013213][T10369] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.172231][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.218080][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.264384][T10369] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.449670][T10369] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.658623][ C1] net_ratelimit: 20 callbacks suppressed [ 890.658643][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 890.671464][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.015850][T10369] bond0: (slave netdevsim0): Releasing backup interface [ 891.022549][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2531'. [ 891.046474][T10369] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.068569][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.075860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.159944][T15831] hid (null): invalid report_size 28520 [ 891.202734][T15831] hid-generic 00A0:0006:0003.0007: invalid report_size 28520 [ 891.218714][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.225421][T15831] hid-generic 00A0:0006:0003.0007: item 0 2 1 7 parsing failed [ 891.225796][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.283745][T16347] veth1_macvtap: left promiscuous mode [ 891.305960][T16347] macsec0: entered promiscuous mode [ 891.320440][T15831] hid-generic 00A0:0006:0003.0007: probe with driver hid-generic failed with error -22 [ 891.347680][T16353] veth1_macvtap: entered promiscuous mode [ 891.348256][T16353] macsec0: left promiscuous mode [ 891.386407][T16356] 8021q: VLANs not supported on ip6tnl0 [ 891.458677][ T1210] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 891.628113][ T1210] usb 8-1: config 0 has no interfaces? [ 891.708187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.715301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.725607][ T1210] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 891.775372][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.882571][ T1210] usb 8-1: config 0 descriptor?? [ 892.028381][T10369] bridge_slave_1: left allmulticast mode [ 892.073933][T10369] bridge_slave_1: left promiscuous mode [ 892.098240][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 892.105372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 892.124398][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.235145][T10369] bridge_slave_0: left allmulticast mode [ 892.286981][T10369] bridge_slave_0: left promiscuous mode [ 892.297461][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 892.308340][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 892.319255][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 892.334668][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 892.347820][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 892.355604][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.858185][ T5850] Bluetooth: hci5: command tx timeout [ 895.031701][ T5918] usb 8-1: USB disconnect, device number 2 [ 895.799861][T16376] FAULT_INJECTION: forcing a failure. [ 895.799861][T16376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.858200][ C1] net_ratelimit: 20 callbacks suppressed [ 895.858221][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 895.871142][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 895.890845][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.5.2535 Not tainted syzkaller #0 PREEMPT(full) [ 895.890871][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 895.890883][T16376] Call Trace: [ 895.890891][T16376] [ 895.890900][T16376] dump_stack_lvl+0x189/0x250 [ 895.890929][T16376] ? __pfx____ratelimit+0x10/0x10 [ 895.890949][T16376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.890971][T16376] ? __pfx__printk+0x10/0x10 [ 895.890989][T16376] ? __might_fault+0xb0/0x130 [ 895.891021][T16376] should_fail_ex+0x414/0x560 [ 895.891051][T16376] _copy_from_user+0x2d/0xb0 [ 895.891074][T16376] get_compat_msghdr+0xad/0x4a0 [ 895.891102][T16376] ? __pfx_get_compat_msghdr+0x10/0x10 [ 895.891136][T16376] ___sys_sendmsg+0x193/0x2a0 [ 895.891161][T16376] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.891218][T16376] ? __fget_files+0x2a/0x420 [ 895.891240][T16376] ? __fget_files+0x3a0/0x420 [ 895.891273][T16376] __sys_sendmsg+0x164/0x220 [ 895.891297][T16376] ? __pfx___sys_sendmsg+0x10/0x10 [ 895.891335][T16376] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.891361][T16376] __do_fast_syscall_32+0xb6/0x2b0 [ 895.891382][T16376] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.891405][T16376] do_fast_syscall_32+0x34/0x80 [ 895.891425][T16376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.891446][T16376] RIP: 0023:0xf7f43539 [ 895.891462][T16376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 895.891478][T16376] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 895.891498][T16376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 895.891510][T16376] RDX: 000000000404c057 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.891522][T16376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.891533][T16376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.891544][T16376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.891571][T16376] [ 896.173658][T10369] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 896.271339][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.278555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.418172][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.425533][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.898160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.905281][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.907289][ T5850] Bluetooth: hci5: command tx timeout [ 897.130238][T10369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.194174][T10369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.230093][T10369] bond0 (unregistering): Released all slaves [ 897.298841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 897.305962][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 897.353160][T16364] kthread_run failed with err -4 [ 897.768376][T10369] tipc: Left network mode [ 898.390844][T16393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.438423][T16393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.980535][ T5850] Bluetooth: hci5: command tx timeout [ 899.021442][T10369] hsr_slave_0: left promiscuous mode [ 899.092426][T10369] hsr_slave_1: left promiscuous mode [ 899.139802][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.147754][T10369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.224857][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.276251][T10369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.454376][T16420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.467876][T16420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.513194][T10369] veth1_macvtap: left promiscuous mode [ 899.536640][T10369] veth0_macvtap: left promiscuous mode [ 899.569179][T10369] veth1_vlan: left promiscuous mode [ 899.588686][T10369] veth0_vlan: left promiscuous mode [ 900.429741][T16435] program syz.5.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.068153][ C1] net_ratelimit: 21 callbacks suppressed [ 901.068174][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.080959][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.088581][ T5850] Bluetooth: hci5: command tx timeout [ 901.465506][T10369] team0 (unregistering): Port device team_slave_1 removed [ 901.469352][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.479943][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.526877][T10369] team0 (unregistering): Port device team_slave_0 removed [ 901.628568][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.635779][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.108219][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.115438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.345348][T16421] veth1_macvtap: left promiscuous mode [ 902.352245][T16421] macsec0: entered promiscuous mode [ 902.362223][T16422] veth1_macvtap: entered promiscuous mode [ 902.378424][T16422] macsec0: left promiscuous mode [ 902.385849][T16424] 8021q: VLANs not supported on ip6tnl0 [ 902.498393][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.505495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.992258][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'. [ 903.090048][T16451] fuse: Bad value for 'fd' [ 903.544041][T16362] chnl_net:caif_netlink_parms(): no params data found [ 905.567750][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2556'. [ 905.637920][T16362] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.648112][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'. [ 905.676020][T16362] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.733138][T16362] bridge_slave_0: entered allmulticast mode [ 905.760719][T16362] bridge_slave_0: entered promiscuous mode [ 905.874295][T16362] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.887837][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.895829][T16362] bridge_slave_1: entered allmulticast mode [ 905.906380][T16362] bridge_slave_1: entered promiscuous mode [ 906.258188][ C1] net_ratelimit: 20 callbacks suppressed [ 906.258209][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.270973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.561504][T16362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.658409][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.665546][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.818217][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.825235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.915825][T16362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.229188][T16362] team0: Port device team_slave_0 added [ 907.250350][T16362] team0: Port device team_slave_1 added [ 907.298315][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.305500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.484609][T16510] fuse: Bad value for 'fd' [ 907.708832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.715924][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.783039][T16517] tipc: Enabling of bearer rejected, failed to enable media [ 908.010257][T16362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.043965][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.157639][T16362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.191208][T16362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.399338][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.783636][T16362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.868680][T16522] tipc: Enabling of bearer rejected, already enabled [ 909.372659][T16362] hsr_slave_0: entered promiscuous mode [ 909.419198][T16362] hsr_slave_1: entered promiscuous mode [ 909.425689][T16362] debugfs: 'hsr0' already exists in 'hsr' [ 909.457468][T16362] Cannot create hsr debugfs directory [ 910.245903][T16548] veth1_macvtap: left promiscuous mode [ 910.252693][T16548] macsec0: entered promiscuous mode [ 910.308573][T16547] netlink: 'syz.0.2571': attribute type 3 has an invalid length. [ 910.401104][T16547] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2571'. [ 910.426169][T16547] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2571'. [ 910.505757][T16545] veth1_macvtap: entered promiscuous mode [ 910.517133][T16545] macsec0: left promiscuous mode [ 911.468124][ C1] net_ratelimit: 21 callbacks suppressed [ 911.468148][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 911.481040][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 911.701530][T16574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2575'. [ 911.858647][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 911.865790][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.018675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.026085][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.508175][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.515256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.898171][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.905259][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 913.184419][T16600] binder: 16598:16600 ioctl c0306201 80000280 returned -14 [ 913.256950][T16362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 913.359815][T16362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 913.401882][T16362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 913.454539][T16362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 916.121310][T16362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.634804][T16362] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.658138][ C1] net_ratelimit: 20 callbacks suppressed [ 916.658163][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 916.670998][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 916.839017][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.846264][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.947211][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2586'. [ 917.058176][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.065286][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.081042][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 917.218215][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.225440][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.412620][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.419783][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.667739][T16362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 917.708133][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.715453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.745872][T16362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 917.964429][T16362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.967014][T16647] FAULT_INJECTION: forcing a failure. [ 917.967014][T16647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.048511][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.0.2587 Not tainted syzkaller #0 PREEMPT(full) [ 918.048539][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 918.048550][T16647] Call Trace: [ 918.048558][T16647] [ 918.048567][T16647] dump_stack_lvl+0x189/0x250 [ 918.048595][T16647] ? __pfx____ratelimit+0x10/0x10 [ 918.048616][T16647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.048638][T16647] ? __pfx__printk+0x10/0x10 [ 918.048655][T16647] ? __might_fault+0xb0/0x130 [ 918.048688][T16647] should_fail_ex+0x414/0x560 [ 918.048718][T16647] _copy_from_user+0x2d/0xb0 [ 918.048741][T16647] __ia32_compat_sys_socketcall+0x14f/0x9c0 [ 918.048765][T16647] ? __fget_files+0x3a0/0x420 [ 918.048792][T16647] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 918.048815][T16647] ? fput+0xa0/0xd0 [ 918.048832][T16647] ? ksys_write+0x22a/0x250 [ 918.048861][T16647] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.048883][T16647] __do_fast_syscall_32+0xb6/0x2b0 [ 918.048904][T16647] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.048926][T16647] do_fast_syscall_32+0x34/0x80 [ 918.048946][T16647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.048967][T16647] RIP: 0023:0xf70ae539 [ 918.048981][T16647] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 918.048996][T16647] RSP: 002b:00000000f549d4f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 918.049016][T16647] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f549d500 [ 918.049029][T16647] RDX: 00000000f7445ff4 RSI: 0000000000000000 RDI: 00000000f7445ff4 [ 918.049042][T16647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.049053][T16647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 918.049065][T16647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.049090][T16647] [ 918.119118][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 918.258009][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 918.285026][T16362] veth0_vlan: entered promiscuous mode [ 918.320342][T16362] veth1_vlan: entered promiscuous mode [ 918.441534][T16362] veth0_macvtap: entered promiscuous mode [ 918.505642][T16362] veth1_macvtap: entered promiscuous mode [ 918.575251][T16362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.583872][T16665] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2591'. [ 918.910799][T16362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.949713][ T991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.962667][ T991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.601914][ T991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.628915][ T991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.656091][T16672] tipc: Enabling of bearer rejected, already enabled [ 920.356136][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.401020][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.746160][T10369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.783754][T10369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.265833][ T5888] buffer_io_error: 10 callbacks suppressed [ 921.265846][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.423978][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.441080][T16710] veth1_macvtap: left promiscuous mode [ 921.479100][T16710] macsec0: entered promiscuous mode [ 921.495222][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.542051][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.598143][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 921.631843][T16716] veth1_macvtap: entered promiscuous mode [ 921.638451][T16716] macsec0: left promiscuous mode [ 921.658965][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.687793][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2600'. [ 921.801036][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.831707][ T43] usb 7-1: config 0 has no interfaces? [ 921.850099][T16719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2599'. [ 921.859340][ C1] net_ratelimit: 20 callbacks suppressed [ 921.859362][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 921.859546][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.029929][ T43] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 922.151537][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 922.198635][ T43] usb 7-1: SerialNumber: syz [ 922.232801][ T43] usb 7-1: config 0 descriptor?? [ 922.258517][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.265702][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.418545][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.425906][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.807625][T16733] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2601'. [ 922.898147][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.905228][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.950732][T16726] netlink: 'syz.3.2602': attribute type 2 has an invalid length. [ 923.026712][T16726] netlink: 'syz.3.2602': attribute type 8 has an invalid length. [ 923.143186][T16726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2602'. [ 923.309817][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 923.316878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 923.724643][T16746] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 923.880337][T16750] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 924.114391][ T5917] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 924.292438][ T5917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 924.305487][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.306957][T16733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.336814][ T5917] usb 6-1: Product: syz [ 924.360541][ T5917] usb 6-1: Manufacturer: syz [ 924.410440][ T43] usb 7-1: USB disconnect, device number 8 [ 924.638094][ T5917] usb 6-1: SerialNumber: syz [ 924.669139][ T5917] usb 6-1: config 0 descriptor?? [ 924.683940][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 924.764078][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 924.788739][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 924.813165][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 924.839767][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 924.960581][ T5917] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 925.216108][T15522] syz.2.2312: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 925.325458][T16772] netlink: 'syz.3.2609': attribute type 4 has an invalid length. [ 925.343842][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.2.2312 Not tainted syzkaller #0 PREEMPT(full) [ 925.343868][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 925.343880][T15522] Call Trace: [ 925.343889][T15522] [ 925.343898][T15522] dump_stack_lvl+0x189/0x250 [ 925.343923][T15522] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 925.343950][T15522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.343969][T15522] ? __pfx__printk+0x10/0x10 [ 925.343985][T15522] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 925.344010][T15522] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 925.344043][T15522] warn_alloc+0x214/0x310 [ 925.344075][T15522] ? __pfx_warn_alloc+0x10/0x10 [ 925.344108][T15522] ? __get_vm_area_node+0x28f/0x300 [ 925.344130][T15522] ? relay_open_buf+0x210/0xe50 [ 925.344157][T15522] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 925.344213][T15522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.344240][T15522] ? rcu_is_watching+0x15/0xb0 [ 925.344260][T15522] ? relay_open_buf+0x210/0xe50 [ 925.344280][T15522] ? relay_open_buf+0x210/0xe50 [ 925.344301][T15522] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 925.344323][T15522] ? relay_open_buf+0x210/0xe50 [ 925.344344][T15522] ? trace_kmalloc+0x1f/0xd0 [ 925.344362][T15522] ? relay_open_buf+0x17f/0xe50 [ 925.344388][T15522] relay_open_buf+0x210/0xe50 [ 925.344426][T15522] relay_open+0x427/0x920 [ 925.344456][T15522] do_blk_trace_setup+0x561/0x980 [ 925.344485][T15522] blk_trace_ioctl+0x35b/0x430 [ 925.344506][T15522] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 925.344569][T15522] compat_blkdev_ioctl+0x442/0x780 [ 925.344589][T15522] ? __fget_files+0x2a/0x420 [ 925.344618][T15522] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 925.344636][T15522] ? __fget_files+0x2a/0x420 [ 925.344663][T15522] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 925.344688][T15522] __ia32_compat_sys_ioctl+0x543/0x840 [ 925.344715][T15522] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 925.344744][T15522] ? __se_sys_futex_time32+0x360/0x3e0 [ 925.344790][T15522] ? lockdep_hardirqs_on+0x9c/0x150 [ 925.344818][T15522] __do_fast_syscall_32+0xb6/0x2b0 [ 925.344840][T15522] ? lockdep_hardirqs_on+0x9c/0x150 [ 925.344864][T15522] do_fast_syscall_32+0x34/0x80 [ 925.344886][T15522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.344908][T15522] RIP: 0023:0xf7fe6539 [ 925.344925][T15522] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 925.344943][T15522] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 925.344964][T15522] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0401273 [ 925.344978][T15522] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.344990][T15522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.345001][T15522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 925.345013][T15522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.345042][T15522] [ 925.345080][T15522] Mem-Info: [ 925.692321][T15522] active_anon:2769 inactive_anon:6 isolated_anon:0 [ 925.692321][T15522] active_file:6998 inactive_file:738 isolated_file:0 [ 925.692321][T15522] unevictable:785 dirty:220 writeback:0 [ 925.692321][T15522] slab_reclaimable:7431 slab_unreclaimable:117549 [ 925.692321][T15522] mapped:47733 shmem:780 pagetables:3787 [ 925.692321][T15522] sec_pagetables:0 bounce:0 [ 925.692321][T15522] kernel_misc_reclaimable:0 [ 925.692321][T15522] free:106751 free_pcp:34178 free_cma:0 [ 926.908170][ T5917] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 927.058142][ C1] net_ratelimit: 16 callbacks suppressed [ 927.058166][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.070899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.222077][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 927.264078][T15522] Node 0 active_anon:8kB inactive_anon:8kB active_file:108kB inactive_file:176kB unevictable:1564kB isolated(anon):0kB isolated(file):0kB mapped:133512kB dirty:20kB writeback:0kB shmem:1564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11728kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 927.316816][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 927.320727][T16780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2611'. [ 927.376745][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 927.415362][T15522] Node 1 active_anon:21764kB inactive_anon:16kB active_file:27884kB inactive_file:2776kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:72980kB dirty:864kB writeback:0kB shmem:12888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1904kB pagetables:10732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.420960][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 927.548174][T15522] Node 0 DMA free:10236kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:20kB free_cma:0kB [ 927.580267][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 927.602897][T15522] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 927.609941][T15522] Node 0 DMA32 free:38980kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:6144KB free_highatomic:440KB active_anon:8kB inactive_anon:8kB active_file:108kB inactive_file:176kB unevictable:1564kB writepending:20kB present:3129332kB managed:2565784kB mlocked:0kB bounce:0kB free_pcp:40296kB local_pcp:20632kB free_cma:0kB [ 927.647138][T15522] lowmem_reserve[]: 0 0 0 0 0 [ 927.648189][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.659292][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.678194][T15522] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 927.778375][T15522] lowmem_reserve[]: 0 0 0 0 0 [ 928.098154][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.105267][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.132757][T15522] Node 1 Normal free:383468kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22324kB inactive_anon:16kB active_file:27884kB inactive_file:2776kB unevictable:1576kB writepending:864kB present:4194300kB managed:4111100kB mlocked:40kB bounce:0kB free_pcp:79036kB local_pcp:45320kB free_cma:0kB [ 928.167409][T15522] lowmem_reserve[]: 0 0 0 0 0 [ 928.172196][T15522] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10236kB [ 928.238836][T15522] Node 0 DMA32: 51*4kB (MEH) 175*8kB (UMEH) 136*16kB (MEH) 144*32kB (UMEH) 82*64kB (UMEH) 48*128kB (UME) 27*256kB (M) 16*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 38980kB [ 928.313108][ T5917] usb 6-1: USB disconnect, device number 9 [ 928.329123][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.349074][T15522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 928.389181][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.427889][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.436755][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.587862][T15522] Node 1 Normal: 426*4kB (UM) 232*8kB (ME) 146*16kB (ME) 81*32kB (M) 46*64kB (UME) 22*128kB (ME) 14*256kB (ME) 12*512kB (UME) 2*1024kB (M) 3*2048kB (UM) 84*4096kB (M) = 376232kB [ 928.658206][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.665602][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.673985][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.688827][T15522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.739007][T15522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 928.793741][T16795] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 928.879568][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 928.879588][ T30] audit: type=1326 audit(1759382459.339:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 928.920089][T16803] veth1_macvtap: left promiscuous mode [ 928.928243][T16803] macsec0: entered promiscuous mode [ 929.040166][T16803] veth1_macvtap: entered promiscuous mode [ 929.046206][T16803] macsec0: left promiscuous mode [ 929.080063][T15522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.138124][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.145198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.358036][T15522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 929.395139][ T30] audit: type=1326 audit(1759382459.339:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 929.478920][T15522] 15012 total pagecache pages [ 929.483643][T15522] 1002 pages in swap cache [ 929.504012][T15522] Free swap = 100480kB [ 929.508589][T15522] Total swap = 124996kB [ 929.512868][ T30] audit: type=1326 audit(1759382459.339:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 929.539704][T15522] 2097051 pages RAM [ 929.543534][T15522] 0 pages HighMem/MovableOnly [ 929.554375][T15522] 423899 pages reserved [ 929.559471][T15522] 0 pages cma reserved [ 929.753649][T16809] veth1_macvtap: left promiscuous mode [ 929.872252][T16809] macsec0: entered promiscuous mode [ 929.998143][ T30] audit: type=1326 audit(1759382459.349:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.058521][ T30] audit: type=1326 audit(1759382459.349:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.544418][ T30] audit: type=1326 audit(1759382459.349:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.568093][ T30] audit: type=1326 audit(1759382459.349:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.590224][ T30] audit: type=1326 audit(1759382459.349:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.612315][ T30] audit: type=1326 audit(1759382459.349:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.650363][ T30] audit: type=1326 audit(1759382459.349:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 930.982235][T16815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.168383][T16815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.378580][T16811] veth1_macvtap: entered promiscuous mode [ 931.394376][T16811] macsec0: left promiscuous mode [ 931.635887][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.642451][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.258915][ C1] net_ratelimit: 10 callbacks suppressed [ 932.258935][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.271884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.663026][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2625'. [ 932.791891][ T5888] buffer_io_error: 10 callbacks suppressed [ 932.791909][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 932.818615][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.825887][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.892172][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 932.954503][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 932.989198][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.035774][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.298111][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.305257][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.323860][T16855] veth1_macvtap: left promiscuous mode [ 933.329575][T16855] macsec0: entered promiscuous mode [ 933.342582][T16855] veth1_macvtap: entered promiscuous mode [ 933.348860][T16855] macsec0: left promiscuous mode [ 933.858418][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.865725][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 934.237430][T16869] FAULT_INJECTION: forcing a failure. [ 934.237430][T16869] name failslab, interval 1, probability 0, space 0, times 0 [ 934.264833][T16869] CPU: 1 UID: 0 PID: 16869 Comm: syz.0.2633 Not tainted syzkaller #0 PREEMPT(full) [ 934.264861][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 934.264873][T16869] Call Trace: [ 934.264884][T16869] [ 934.264893][T16869] dump_stack_lvl+0x189/0x250 [ 934.264922][T16869] ? __pfx____ratelimit+0x10/0x10 [ 934.264942][T16869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.264965][T16869] ? __pfx__printk+0x10/0x10 [ 934.264989][T16869] ? __pfx___might_resched+0x10/0x10 [ 934.265009][T16869] ? fs_reclaim_acquire+0x7d/0x100 [ 934.265040][T16869] should_fail_ex+0x414/0x560 [ 934.265070][T16869] should_failslab+0xa8/0x100 [ 934.265095][T16869] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 934.265118][T16869] ? __d_alloc+0x36/0x7a0 [ 934.265141][T16869] __d_alloc+0x36/0x7a0 [ 934.265165][T16869] d_alloc_parallel+0xe5/0x15e0 [ 934.265200][T16869] ? __d_lookup+0x66/0x780 [ 934.265223][T16869] ? __pfx_d_alloc_parallel+0x10/0x10 [ 934.265261][T16869] path_openat+0xa3b/0x3830 [ 934.265279][T16869] ? arch_stack_walk+0xfc/0x150 [ 934.265329][T16869] ? __pfx_path_openat+0x10/0x10 [ 934.265344][T16869] ? do_fast_syscall_32+0x34/0x80 [ 934.265378][T16869] do_filp_open+0x1fa/0x410 [ 934.265394][T16869] ? __lock_acquire+0xab9/0xd20 [ 934.265415][T16869] ? __pfx_do_filp_open+0x10/0x10 [ 934.265459][T16869] ? _raw_spin_unlock+0x28/0x50 [ 934.265483][T16869] ? alloc_fd+0x64c/0x6c0 [ 934.265519][T16869] do_sys_openat2+0x121/0x1c0 [ 934.265541][T16869] ? __pfx_do_sys_openat2+0x10/0x10 [ 934.265582][T16869] __se_sys_openat2+0x226/0x2c0 [ 934.265604][T16869] ? __pfx___se_sys_openat2+0x10/0x10 [ 934.265632][T16869] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.265658][T16869] __do_fast_syscall_32+0xb6/0x2b0 [ 934.265679][T16869] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.265703][T16869] do_fast_syscall_32+0x34/0x80 [ 934.265723][T16869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.265745][T16869] RIP: 0023:0xf70ae539 [ 934.265762][T16869] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 934.265777][T16869] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001b5 [ 934.265798][T16869] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 934.265811][T16869] RDX: 0000000080000140 RSI: 0000000000000018 RDI: 0000000000000000 [ 934.265822][T16869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.265834][T16869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 934.265845][T16869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.265874][T16869] [ 934.524549][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.531095][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 934.538250][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 935.395111][T16880] FAULT_INJECTION: forcing a failure. [ 935.395111][T16880] name failslab, interval 1, probability 0, space 0, times 0 [ 935.423203][T16880] CPU: 1 UID: 0 PID: 16880 Comm: syz.5.2638 Not tainted syzkaller #0 PREEMPT(full) [ 935.423231][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 935.423242][T16880] Call Trace: [ 935.423252][T16880] [ 935.423262][T16880] dump_stack_lvl+0x189/0x250 [ 935.423289][T16880] ? __pfx____ratelimit+0x10/0x10 [ 935.423310][T16880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.423331][T16880] ? __pfx__printk+0x10/0x10 [ 935.423354][T16880] ? __pfx___might_resched+0x10/0x10 [ 935.423373][T16880] ? fs_reclaim_acquire+0x7d/0x100 [ 935.423402][T16880] should_fail_ex+0x414/0x560 [ 935.423431][T16880] should_failslab+0xa8/0x100 [ 935.423456][T16880] kmem_cache_alloc_noprof+0x73/0x3c0 [ 935.423484][T16880] ? skb_clone+0x212/0x3a0 [ 935.423512][T16880] skb_clone+0x212/0x3a0 [ 935.423531][T16880] ? nfnetlink_rcv+0x486/0x2520 [ 935.423559][T16880] nfnetlink_rcv+0x4b4/0x2520 [ 935.423586][T16880] ? __dev_queue_xmit+0x1d79/0x3b50 [ 935.423620][T16880] ? __dev_queue_xmit+0x27b/0x3b50 [ 935.423655][T16880] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 935.423697][T16880] ? ref_tracker_free+0x63a/0x7d0 [ 935.423721][T16880] ? __asan_memcpy+0x40/0x70 [ 935.423740][T16880] ? __pfx_ref_tracker_free+0x10/0x10 [ 935.423762][T16880] ? __skb_clone+0x63/0x7a0 [ 935.423787][T16880] ? __skb_clone+0x483/0x7a0 [ 935.423815][T16880] ? skb_clone+0x246/0x3a0 [ 935.423839][T16880] ? __netlink_deliver_tap+0x807/0x850 [ 935.423859][T16880] ? netlink_deliver_tap+0x2e/0x1b0 [ 935.423895][T16880] netlink_unicast+0x82f/0x9e0 [ 935.423922][T16880] ? __pfx_netlink_unicast+0x10/0x10 [ 935.423942][T16880] ? netlink_sendmsg+0x642/0xb30 [ 935.423962][T16880] ? skb_put+0x11b/0x210 [ 935.423985][T16880] netlink_sendmsg+0x805/0xb30 [ 935.424015][T16880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.424037][T16880] ? __import_iovec+0x5d4/0x7f0 [ 935.424055][T16880] ? aa_sock_msg_perm+0xf1/0x1d0 [ 935.424081][T16880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 935.424099][T16880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.424119][T16880] __sock_sendmsg+0x219/0x270 [ 935.424148][T16880] ____sys_sendmsg+0x505/0x830 [ 935.424176][T16880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.424214][T16880] ___sys_sendmsg+0x21f/0x2a0 [ 935.424239][T16880] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.424297][T16880] ? __fget_files+0x2a/0x420 [ 935.424320][T16880] ? __fget_files+0x3a0/0x420 [ 935.424352][T16880] __sys_sendmsg+0x164/0x220 [ 935.424376][T16880] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.424414][T16880] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.424437][T16880] __do_fast_syscall_32+0xb6/0x2b0 [ 935.424458][T16880] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.424487][T16880] do_fast_syscall_32+0x34/0x80 [ 935.424507][T16880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.424527][T16880] RIP: 0023:0xf7f43539 [ 935.424543][T16880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 935.424559][T16880] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 935.424579][T16880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 935.424591][T16880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.424602][T16880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.424613][T16880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 935.424624][T16880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.424652][T16880] [ 935.769485][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.059518][T16888] FAULT_INJECTION: forcing a failure. [ 936.059518][T16888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.198251][T16888] CPU: 1 UID: 0 PID: 16888 Comm: syz.7.2640 Not tainted syzkaller #0 PREEMPT(full) [ 936.198279][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 936.198291][T16888] Call Trace: [ 936.198299][T16888] [ 936.198308][T16888] dump_stack_lvl+0x189/0x250 [ 936.198336][T16888] ? __pfx____ratelimit+0x10/0x10 [ 936.198357][T16888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.198379][T16888] ? __pfx__printk+0x10/0x10 [ 936.198406][T16888] ? __might_fault+0xb0/0x130 [ 936.198439][T16888] should_fail_ex+0x414/0x560 [ 936.198465][T16888] _copy_from_user+0x2d/0xb0 [ 936.198485][T16888] get_compat_msghdr+0xad/0x4a0 [ 936.198511][T16888] ? __pfx_get_compat_msghdr+0x10/0x10 [ 936.198531][T16888] ? rcu_is_watching+0x15/0xb0 [ 936.198548][T16888] ? ___sys_recvmsg+0x1c4/0x510 [ 936.198571][T16888] ___sys_recvmsg+0x17f/0x510 [ 936.198593][T16888] ? __pfx____sys_recvmsg+0x10/0x10 [ 936.198631][T16888] ? __fget_files+0x3a0/0x420 [ 936.198658][T16888] do_recvmmsg+0x36a/0x770 [ 936.198683][T16888] ? __pfx_do_recvmmsg+0x10/0x10 [ 936.198711][T16888] ? __pfx_vfs_write+0x10/0x10 [ 936.198740][T16888] __sys_recvmmsg+0x19d/0x280 [ 936.198760][T16888] ? __pfx___sys_recvmmsg+0x10/0x10 [ 936.198776][T16888] ? ksys_write+0x22a/0x250 [ 936.198800][T16888] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 936.198821][T16888] __do_fast_syscall_32+0xb6/0x2b0 [ 936.198838][T16888] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.198856][T16888] do_fast_syscall_32+0x34/0x80 [ 936.198871][T16888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.198889][T16888] RIP: 0023:0xf701e539 [ 936.198902][T16888] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 936.198914][T16888] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 936.198931][T16888] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080003700 [ 936.198941][T16888] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.198951][T16888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.198959][T16888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 936.198968][T16888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.198990][T16888] [ 936.749506][ T30] audit: type=1326 audit(1759382467.139:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749550][ T30] audit: type=1326 audit(1759382467.139:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749574][ T30] audit: type=1326 audit(1759382467.139:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749596][ T30] audit: type=1326 audit(1759382467.139:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749619][ T30] audit: type=1326 audit(1759382467.139:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749643][ T30] audit: type=1326 audit(1759382467.139:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749665][ T30] audit: type=1326 audit(1759382467.139:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749687][ T30] audit: type=1326 audit(1759382467.139:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749708][ T30] audit: type=1326 audit(1759382467.139:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.749731][ T30] audit: type=1326 audit(1759382467.139:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 936.908943][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.909287][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.933355][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.934110][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.958758][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.578234][ T5918] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 937.741328][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.741359][ T5918] usb 7-1: config 0 has no interfaces? [ 937.743037][ T5918] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 937.743066][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 937.743087][ T5918] usb 7-1: SerialNumber: syz [ 937.745915][ T5918] usb 7-1: config 0 descriptor?? [ 937.810204][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.858181][ C1] net_ratelimit: 10 callbacks suppressed [ 937.858202][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.858378][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.908163][ T5917] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 938.028289][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.028639][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.068057][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 938.089138][ T5917] usb 6-1: config 11 has an invalid interface number: 202 but max is 0 [ 938.111116][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.189112][T16889] tty tty2: ldisc open failed (-12), clearing slot 1 [ 938.655364][ T5917] usb 6-1: config 11 has no interface number 0 [ 938.747878][ T5917] usb 6-1: config 11 interface 202 has no altsetting 0 [ 938.809854][ T5917] usb 6-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=4d.10 [ 938.897469][T16919] veth1_macvtap: left promiscuous mode [ 938.903179][T16919] macsec0: entered promiscuous mode [ 938.909536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.913373][T16919] veth1_macvtap: entered promiscuous mode [ 938.916815][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.929731][T16919] macsec0: left promiscuous mode [ 938.967860][T16917] netlink: 'syz.7.2648': attribute type 1 has an invalid length. [ 938.985105][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.054032][ T5917] usb 6-1: Product: syz [ 939.061894][ T5917] usb 6-1: Manufacturer: syz [ 939.068260][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.075556][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.176809][ T5917] usb 6-1: SerialNumber: syz [ 939.424796][ T5917] mxuport 6-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 939.453949][ T5917] mxuport 6-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 939.526095][ T5917] mxuport 6-1:11.202: probe with driver mxuport failed with error -71 [ 939.646890][ T5917] usb 6-1: USB disconnect, device number 10 [ 939.938414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.945440][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 940.133986][ T43] usb 7-1: USB disconnect, device number 9 [ 940.203080][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2655'. [ 940.438078][ T5917] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 940.482023][ T8346] Buffer I/O error on dev loop6, logical block 0, async page read [ 940.532966][ T8346] Buffer I/O error on dev loop6, logical block 0, async page read [ 940.631323][ T8346] Buffer I/O error on dev loop6, logical block 0, async page read [ 940.654445][ T5917] usb 8-1: config 0 has no interfaces? [ 940.717355][ T5917] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 940.741737][ T8346] Buffer I/O error on dev loop6, logical block 0, async page read [ 940.754481][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.785208][ T5917] usb 8-1: Product: syz [ 940.800764][ T5917] usb 8-1: Manufacturer: syz [ 940.824089][ T8346] Buffer I/O error on dev loop6, logical block 0, async page read [ 940.844357][ T5917] usb 8-1: SerialNumber: syz [ 940.904299][ T5917] usb 8-1: config 0 descriptor?? [ 941.084602][T16947] tipc: Enabled bearer , priority 10 [ 941.209675][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 941.338965][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 941.402168][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 941.420647][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2653'. [ 941.537802][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 941.570689][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 941.897123][T16954] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 941.897123][T16954] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 941.897123][T16954] ~^>Ƥr&Dq.;쀯<2AU' [ 942.101561][T16954] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 942.101561][T16954] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 942.101561][T16954] ~^>Ƥr&Dq.;쀯<2AU' [ 942.198250][ T5917] tipc: Node number set to 3842752351 [ 943.068480][ C1] net_ratelimit: 30 callbacks suppressed [ 943.068495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.081249][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.138583][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.145612][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.218264][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.225376][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.033449][ T5917] usb 8-1: USB disconnect, device number 3 [ 944.098084][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.105506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.174177][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 944.178135][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.190236][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 946.604214][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 946.604236][ T30] audit: type=1326 audit(1759382477.059:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 946.785871][ T30] audit: type=1326 audit(1759382477.059:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 946.937332][ T30] audit: type=1326 audit(1759382477.059:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.081650][ T30] audit: type=1326 audit(1759382477.059:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.429823][ T30] audit: type=1326 audit(1759382477.059:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.588166][ T30] audit: type=1326 audit(1759382477.059:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.636957][ T30] audit: type=1326 audit(1759382477.059:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.721438][ T30] audit: type=1326 audit(1759382477.059:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.748090][ T30] audit: type=1326 audit(1759382477.059:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.771278][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.779646][ T30] audit: type=1326 audit(1759382477.059:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.802899][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.268852][ C1] net_ratelimit: 20 callbacks suppressed [ 948.268876][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.281573][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.338480][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.345532][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.418229][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.425490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.490822][ T5888] buffer_io_error: 5 callbacks suppressed [ 948.490839][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 948.593939][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 948.666424][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 948.708936][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 948.748779][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 948.988165][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 949.298958][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.306105][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.374995][ T24] usb 8-1: config 0 has an invalid interface number: 137 but max is 0 [ 949.378126][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.390421][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.417859][ T24] usb 8-1: config 0 has no interface number 0 [ 949.462242][ T24] usb 8-1: New USB device found, idVendor=0079, idProduct=3e51, bcdDevice=b6.a1 [ 949.514672][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.549096][ T24] usb 8-1: Product: syz [ 949.596712][ T24] usb 8-1: Manufacturer: syz [ 949.658311][ T24] usb 8-1: SerialNumber: syz [ 949.729016][ T24] usb 8-1: config 0 descriptor?? [ 949.994177][ T24] usb 8-1: USB disconnect, device number 4 [ 950.088034][ T5940] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 950.334673][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.387137][ T5940] usb 6-1: config 0 has no interfaces? [ 950.528242][ T5940] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 950.641427][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 950.720231][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.746450][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.783766][ T5940] usb 6-1: SerialNumber: syz [ 950.832161][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.868918][ T5940] usb 6-1: config 0 descriptor?? [ 950.916809][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.979863][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.098130][T15831] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 951.234427][T17065] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2688'. [ 951.411570][T15831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.458935][T15831] usb 8-1: config 0 has no interfaces? [ 951.582786][T15831] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 951.635030][T15831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 951.685359][T15831] usb 8-1: SerialNumber: syz [ 951.701372][T15831] usb 8-1: config 0 descriptor?? [ 952.786932][T17073] FAULT_INJECTION: forcing a failure. [ 952.786932][T17073] name failslab, interval 1, probability 0, space 0, times 0 [ 952.821222][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.3.2690 Not tainted syzkaller #0 PREEMPT(full) [ 952.821250][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 952.821263][T17073] Call Trace: [ 952.821271][T17073] [ 952.821280][T17073] dump_stack_lvl+0x189/0x250 [ 952.821310][T17073] ? __pfx____ratelimit+0x10/0x10 [ 952.821329][T17073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.821351][T17073] ? __pfx__printk+0x10/0x10 [ 952.821375][T17073] ? __pfx___might_resched+0x10/0x10 [ 952.821402][T17073] should_fail_ex+0x414/0x560 [ 952.821430][T17073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 952.821449][T17073] should_failslab+0xa8/0x100 [ 952.821472][T17073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 952.821488][T17073] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 952.821511][T17073] ? alloc_inode+0x6a/0x1b0 [ 952.821531][T17073] ? __pfx_simple_start_creating+0x10/0x10 [ 952.821558][T17073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 952.821575][T17073] alloc_inode+0x6a/0x1b0 [ 952.821599][T17073] new_inode+0x22/0x170 [ 952.821626][T17073] __debugfs_create_file+0x14d/0x4f0 [ 952.821658][T17073] debugfs_create_file_full+0x3f/0x60 [ 952.821687][T17073] ref_tracker_dir_debugfs+0x14e/0x270 [ 952.821713][T17073] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 952.821774][T17073] ? rcu_is_watching+0x15/0xb0 [ 952.821793][T17073] ? alloc_netdev_mqs+0xa3/0x11b0 [ 952.821822][T17073] ? __raw_spin_lock_init+0x45/0x100 [ 952.821850][T17073] alloc_netdev_mqs+0x26f/0x11b0 [ 952.821871][T17073] ? __pfx_gtp_link_setup+0x10/0x10 [ 952.821897][T17073] rtnl_create_link+0x31f/0xd10 [ 952.821927][T17073] rtnl_newlink_create+0x25c/0xb00 [ 952.821953][T17073] ? __lock_acquire+0xab9/0xd20 [ 952.821977][T17073] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 952.822002][T17073] ? __pfx___mutex_lock+0x10/0x10 [ 952.822033][T17073] ? ns_capable+0x8a/0xf0 [ 952.822057][T17073] rtnl_newlink+0x16d6/0x1c70 [ 952.822078][T17073] ? netlink_sendmsg+0x805/0xb30 [ 952.822112][T17073] ? __pfx_rtnl_newlink+0x10/0x10 [ 952.822157][T17073] ? kasan_quarantine_put+0xdd/0x220 [ 952.822177][T17073] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.822203][T17073] ? nlmon_xmit+0xb0/0x100 [ 952.822220][T17073] ? kmem_cache_free+0x18f/0x400 [ 952.822250][T17073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 952.822270][T17073] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.822290][T17073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 952.822309][T17073] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 952.822334][T17073] ? __dev_queue_xmit+0x27b/0x3b50 [ 952.822357][T17073] ? __dev_queue_xmit+0x27b/0x3b50 [ 952.822377][T17073] ? __dev_queue_xmit+0x27b/0x3b50 [ 952.822400][T17073] ? __dev_queue_xmit+0x1d79/0x3b50 [ 952.822429][T17073] ? __lock_acquire+0xab9/0xd20 [ 952.822476][T17073] ? __pfx_rtnl_newlink+0x10/0x10 [ 952.822494][T17073] rtnetlink_rcv_msg+0x7cc/0xb70 [ 952.822517][T17073] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 952.822535][T17073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.822552][T17073] ? ref_tracker_free+0x63a/0x7d0 [ 952.822577][T17073] ? __asan_memcpy+0x40/0x70 [ 952.822595][T17073] ? __pfx_ref_tracker_free+0x10/0x10 [ 952.822617][T17073] ? __skb_clone+0x63/0x7a0 [ 952.822650][T17073] netlink_rcv_skb+0x205/0x470 [ 952.822670][T17073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.822691][T17073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 952.822724][T17073] ? netlink_deliver_tap+0x2e/0x1b0 [ 952.822757][T17073] netlink_unicast+0x82f/0x9e0 [ 952.822785][T17073] ? __pfx_netlink_unicast+0x10/0x10 [ 952.822805][T17073] ? netlink_sendmsg+0x642/0xb30 [ 952.822823][T17073] ? skb_put+0x11b/0x210 [ 952.822847][T17073] netlink_sendmsg+0x805/0xb30 [ 952.822877][T17073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.822899][T17073] ? __import_iovec+0x5d4/0x7f0 [ 952.822918][T17073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 952.822944][T17073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.822961][T17073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.822981][T17073] __sock_sendmsg+0x219/0x270 [ 952.823011][T17073] ____sys_sendmsg+0x505/0x830 [ 952.823038][T17073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.823079][T17073] ___sys_sendmsg+0x21f/0x2a0 [ 952.823107][T17073] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.823169][T17073] ? __fget_files+0x2a/0x420 [ 952.823191][T17073] ? __fget_files+0x3a0/0x420 [ 952.823226][T17073] __sys_sendmsg+0x164/0x220 [ 952.823250][T17073] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.823291][T17073] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.823313][T17073] __do_fast_syscall_32+0xb6/0x2b0 [ 952.823334][T17073] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.823358][T17073] do_fast_syscall_32+0x34/0x80 [ 952.823378][T17073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 952.823399][T17073] RIP: 0023:0xf7f64539 [ 952.823416][T17073] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 952.823432][T17073] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 952.823451][T17073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 952.823464][T17073] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.823476][T17073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.823487][T17073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 952.823498][T17073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.823528][T17073] [ 953.458904][ C1] net_ratelimit: 20 callbacks suppressed [ 953.458927][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.471765][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.479473][T17073] debugfs: out of free dentries, can not create file 'netdev@ffff888030964610' [ 953.527696][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.536974][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.545073][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.545192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.561554][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.570000][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.578718][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.618288][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.625642][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.722612][T17077] netlink: zone id is out of range [ 953.727772][T17077] netlink: zone id is out of range [ 953.732952][T17077] netlink: zone id is out of range [ 953.738119][T17077] netlink: zone id is out of range [ 953.919399][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.997865][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.034150][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.063569][ T5903] usb 6-1: USB disconnect, device number 11 [ 954.184982][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.224310][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.227781][ T5842] Bluetooth: hci5: ISO packet for unknown connection handle 14 [ 954.267249][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 954.548413][ T5903] usb 8-1: USB disconnect, device number 5 [ 955.066630][T17097] tipc: Enabling of bearer rejected, failed to enable media [ 955.308303][ T5903] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 955.508840][ T5903] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.517020][ T5903] usb 6-1: config 0 has no interface number 0 [ 955.563944][ T5903] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 955.588537][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.621131][ T5903] usb 6-1: Product: syz [ 955.625351][ T5903] usb 6-1: Manufacturer: syz [ 955.656866][ T5903] usb 6-1: SerialNumber: syz [ 955.738987][ T5903] usb 6-1: config 0 descriptor?? [ 955.952074][ T5903] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 956.045818][ T5940] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 956.055170][ T5903] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 956.108840][ T5903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 956.146026][ T5903] usb 6-1: media controller created [ 956.210653][ T5940] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 956.239125][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.313353][ T5903] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 956.323454][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.393692][ T5903] usb 6-1: USB disconnect, device number 12 [ 956.602032][ T5940] usb 7-1: config 0 has no interface number 0 [ 956.614922][ T5940] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 956.758118][ T5940] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.854913][T17120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.866561][ T5940] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 956.887023][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.896126][T17120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.945636][ T5940] usb 7-1: Product: syz [ 956.954067][ T5940] usb 7-1: Manufacturer: syz [ 956.976984][ T5940] usb 7-1: SerialNumber: syz [ 957.031322][ T5940] usb 7-1: config 0 descriptor?? [ 957.068121][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 957.278203][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 957.286731][ T5917] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 957.300134][ T5917] usb 6-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 957.344397][ T5917] usb 6-1: config 0 has no interface number 0 [ 957.373641][ T5917] usb 6-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.435136][ T5917] usb 6-1: config 0 interface 169 has no altsetting 0 [ 957.464265][ T5917] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.68 [ 957.483781][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.504044][ T5917] usb 6-1: Product: syz [ 957.518112][ T5917] usb 6-1: Manufacturer: syz [ 957.621387][ T5940] usb 7-1: USB disconnect, device number 10 [ 957.638301][ T5917] usb 6-1: SerialNumber: syz [ 957.685596][ T5917] usb 6-1: config 0 descriptor?? [ 957.707369][ T5917] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 957.733768][T17133] tipc: Enabling of bearer rejected, failed to enable media [ 957.857664][ T5917] snd-usb-audio 6-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 957.915682][ T5940] usb 6-1: USB disconnect, device number 13 [ 958.019954][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.070124][T17137] binder: 17136:17137 ioctl c0306201 800003c0 returned -14 [ 958.229416][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 958.431330][ T43] usb 7-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 958.453385][ T43] usb 7-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 958.517725][ T43] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 958.548642][ T43] usb 7-1: New USB device found, idVendor=0af0, idProduct=3f05, bcdDevice= 0.00 [ 958.558087][ T43] usb 7-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 958.566190][ T43] usb 7-1: Product: syz [ 958.578456][ T43] usb 7-1: Manufacturer: syz [ 958.597980][ T43] usb 7-1: SerialNumber: syz [ 958.668142][ C1] net_ratelimit: 30 callbacks suppressed [ 958.668162][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.680974][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.738137][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.745279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.791060][ T43] usb 7-1: config 0 descriptor?? [ 958.818288][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.825674][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.218284][T15831] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 959.521728][T15831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.552644][T15831] usb 8-1: config 0 has no interfaces? [ 959.590996][T15831] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 959.600922][T15831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.635788][T17171] tipc: Enabling of bearer rejected, already enabled [ 959.709066][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.716226][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.778131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.785470][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.902133][T17175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.929377][T17175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.480057][T15831] usb 8-1: Product: syz [ 960.503183][T15831] usb 8-1: Manufacturer: syz [ 960.569566][T15831] usb 8-1: SerialNumber: syz [ 960.607667][T15831] usb 8-1: config 0 descriptor?? [ 960.848645][T15831] usb 8-1: USB disconnect, device number 6 [ 961.350382][T17180] tipc: Enabling of bearer rejected, failed to enable media [ 961.478664][ T43] usb 7-1: USB disconnect, device number 11 [ 961.578203][T15831] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 961.646693][ T5983] buffer_io_error: 15 callbacks suppressed [ 961.646711][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 961.705916][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 961.740184][T15831] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.758669][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 961.767184][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 961.788178][T15831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 961.832753][T15831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.865089][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 961.890746][T15831] usb 6-1: config 1 interface 0 has no altsetting 1 [ 961.919380][T17193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2729'. [ 961.928452][T15831] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.928483][T15831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.928505][T15831] usb 6-1: Product: syz [ 961.928520][T15831] usb 6-1: Manufacturer: syz [ 961.928535][T15831] usb 6-1: SerialNumber: syz [ 962.017114][T15831] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 962.041501][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2730'. [ 962.053281][T15831] cdc_ncm 6-1:1.0: bind() failure [ 962.094367][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.148584][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.171820][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.201738][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.231179][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.298291][ T5903] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 962.327323][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.381468][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.391851][ T5917] usb 6-1: USB disconnect, device number 14 [ 962.499487][T17205] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2733'. [ 962.562946][ T5903] usb 8-1: Using ep0 maxpacket: 8 [ 962.597002][ T5903] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 962.641045][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.796476][ T5903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 962.824650][ T5903] pvrusb2: ********** [ 962.854841][ T5903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 962.891305][ T5903] pvrusb2: Important functionality might not be entirely working. [ 962.905144][ T5903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 962.962557][T17205] syz.3.2733 (17205): drop_caches: 2 [ 963.104268][ T5903] pvrusb2: ********** [ 963.157460][ T2343] pvrusb2: Invalid write control endpoint [ 963.179396][T17210] tipc: Enabling of bearer rejected, already enabled [ 963.674271][T17220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.738815][T17220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.828110][ T5918] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 963.858852][ C1] net_ratelimit: 21 callbacks suppressed [ 963.858868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 963.871566][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 963.938153][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 963.945332][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.018178][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.025494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.065203][T17222] tipc: Enabling of bearer rejected, failed to enable media [ 964.141880][ T5918] usb 6-1: config 0 has no interfaces? [ 964.152953][ T5918] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 964.163710][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.189486][ T5918] usb 6-1: Product: syz [ 964.207581][ T5918] usb 6-1: Manufacturer: syz [ 964.226787][ T5918] usb 6-1: SerialNumber: syz [ 964.291661][ T5918] usb 6-1: config 0 descriptor?? [ 964.617688][ T2343] pvrusb2: Invalid write control endpoint [ 964.640268][ T5918] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 964.719563][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 964.736610][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 964.753558][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2735'. [ 964.772711][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 964.898162][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.905233][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.926159][ T2343] pvrusb2: Device being rendered inoperable [ 964.958199][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 964.974408][ T5918] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 964.984696][ T5918] usb 7-1: config 0 has no interface number 0 [ 964.988144][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.997875][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 965.046850][ T5918] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.060074][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.072290][ T5918] usb 7-1: Product: syz [ 965.129677][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 965.243129][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 965.243391][ T5918] usb 7-1: Manufacturer: syz [ 965.338934][ T5918] usb 7-1: SerialNumber: syz [ 965.352471][ T5918] usb 7-1: config 0 descriptor?? [ 965.378958][ T5918] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 965.442632][ T2343] pvrusb2: Attached sub-driver cx25840 [ 965.442704][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 965.442712][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 965.491159][ T43] usb 8-1: USB disconnect, device number 7 [ 965.558261][ T5918] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 965.560656][ T5918] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 965.979067][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 965.987458][ T5918] usb 7-1: USB disconnect, device number 12 [ 965.999221][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 966.047391][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 966.122650][ T5918] quatech2 7-1:0.51: device disconnected [ 966.518050][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 966.750510][ T5888] buffer_io_error: 15 callbacks suppressed [ 966.750523][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 966.805008][ T43] usb 6-1: USB disconnect, device number 15 [ 966.872987][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 966.881600][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 966.972267][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 966.976484][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 967.002115][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.031140][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.068039][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 967.143838][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2743'. [ 967.226158][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 967.301861][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.370496][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.380132][ T10] usb 8-1: config 0 descriptor?? [ 967.423082][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.490103][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.516295][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.535254][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 967.570666][ T10] hdpvr 8-1:0.0: Could not find bulk-in endpoint [ 967.594865][T17253] syzkaller0: entered promiscuous mode [ 967.718077][ T10] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 967.728186][T17253] syzkaller0: entered allmulticast mode [ 967.908182][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 968.072359][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 968.101554][ T31] INFO: task syz.1.2313:15527 blocked for more than 143 seconds. [ 968.112984][ T31] Not tainted syzkaller #0 [ 968.132057][ T24] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 968.157545][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.168544][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.208562][ T31] task:syz.1.2313 state:D stack:27208 pid:15527 tgid:15526 ppid:5851 task_flags:0x400040 flags:0x10080002 [ 968.224020][ T24] usb 6-1: Product: syz [ 968.273558][ T24] usb 6-1: Manufacturer: syz [ 968.286517][ T24] usb 6-1: SerialNumber: syz [ 968.291531][ T31] Call Trace: [ 968.297106][ T31] [ 968.304812][ T24] usb 6-1: config 0 descriptor?? [ 968.316732][ T31] __schedule+0x1798/0x4cc0 [ 968.336941][ T31] ? __pfx___schedule+0x10/0x10 [ 968.347172][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 968.359113][ T31] ? schedule+0x91/0x360 [ 968.369447][ T31] schedule+0x165/0x360 [ 968.429256][ T31] schedule_preempt_disabled+0x13/0x30 [ 968.447535][ T31] __mutex_lock+0x7e6/0x1350 [ 968.474930][ T31] ? __mutex_lock+0x5bb/0x1350 [ 968.589245][ T31] ? relay_open+0x3b8/0x920 [ 968.700877][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 968.712940][ T31] ? pcpu_alloc_noprof+0xf85/0x1720 [ 968.734469][ T31] relay_open+0x3b8/0x920 [ 968.749870][ T31] do_blk_trace_setup+0x561/0x980 [ 968.772368][T17261] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2749'. [ 968.786708][ T31] blk_trace_ioctl+0x35b/0x430 [ 968.802870][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 968.822300][ T31] compat_blkdev_ioctl+0x442/0x780 [ 968.839734][ T31] ? __fget_files+0x2a/0x420 [ 968.854679][ T31] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 968.874456][ T31] ? __fget_files+0x2a/0x420 [ 968.886519][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 968.910064][ T31] __ia32_compat_sys_ioctl+0x543/0x840 [ 968.926625][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 968.943431][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 968.961687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.976240][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 968.994616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.007792][ T31] do_fast_syscall_32+0x34/0x80 [ 969.058523][ C1] net_ratelimit: 20 callbacks suppressed [ 969.058550][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.071471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.088084][ T24] gspca_stk1135: reg_w 0x0 err -110 [ 969.097074][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.111105][ T24] gspca_stk1135: Sensor write failed [ 969.116546][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.136892][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 969.143711][ T24] gspca_stk1135: Sensor write failed [ 969.148141][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.151675][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.156079][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.173782][ T31] RIP: 0023:0xf70ce539 [ 969.189312][ T31] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 969.207712][ T24] gspca_stk1135: Sensor read failed [ 969.216767][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0401273 [ 969.225074][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.225436][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.248160][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.316584][ T24] gspca_stk1135: Sensor read failed [ 969.321981][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 969.347839][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.354566][ T31] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 969.374024][ T24] gspca_stk1135: Sensor read failed [ 969.381465][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 969.390689][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.404239][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 969.412433][ T24] gspca_stk1135: Sensor read failed [ 969.418489][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.424921][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.433844][ T24] gspca_stk1135: Sensor write failed [ 969.439431][ T31] [ 969.442480][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 969.448964][ T31] [ 969.448964][ T31] Showing all locks held in the system: [ 969.456896][ T24] gspca_stk1135: Sensor write failed [ 969.464137][ T31] 5 locks held by kworker/1:0/24: [ 969.469987][ T24] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 969.480223][ T31] 1 lock held by khungtaskd/31: [ 969.485713][ T31] #0: ffffffff8dd3a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 969.526902][ T31] 2 locks held by getty/5604: [ 969.532417][ T31] #0: ffff8880300a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 969.549292][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 969.559861][ T31] 2 locks held by syz.2.2312/15522: [ 969.565118][ T31] 2 locks held by syz.1.2313/15527: [ 969.571634][ T31] #0: ffff888024f4eb48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x33f/0x430 [ 969.593569][ T31] #1: ffffffff8dd8e9a8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 969.605212][ T31] 2 locks held by syz.4.2446/16049: [ 969.615159][ T31] #0: ffff8880253b6b48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 969.627798][ T31] #1: ffffffff8dd8e9a8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 969.639184][ T31] 3 locks held by kworker/u8:7/16336: [ 969.644676][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 969.656898][ T31] #1: ffffc900055dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 969.668146][ T31] #2: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 969.677378][ T31] 2 locks held by syz.0.2745/17250: [ 969.683056][ T31] #0: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 969.692363][ T31] #1: ffffffff8dd403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 969.715784][ T31] 1 lock held by syz.3.2747/17254: [ 969.721460][ T31] #0: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 969.738052][ T31] 2 locks held by syz.3.2747/17259: [ 969.745407][ T31] #0: ffff88807a57e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 969.765546][ T31] #1: ffff88807a57e130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa20 [ 969.783026][ T31] 4 locks held by syz.5.2749/17260: [ 969.790168][ T31] #0: ffff888055eef508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 969.806974][ T31] #1: ffffffff8f132d70 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 969.827305][ T31] #2: ffff8880574348d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 969.847507][ T31] #3: ffffffff8dd403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 969.865137][ T31] 1 lock held by syz.6.2750/17267: [ 969.875353][ T31] #0: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 969.891423][ T31] 1 lock held by syz.6.2750/17268: [ 969.896665][ T31] #0: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 969.912751][ T31] 1 lock held by syz.6.2750/17269: [ 969.919710][ T31] #0: ffffffff8f0cf108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 969.951761][ T5903] usb 6-1: USB disconnect, device number 16 [ 970.007438][ T10] usb 8-1: USB disconnect, device number 8 [ 970.038260][ T31] [ 970.040637][ T31] ============================================= [ 970.040637][ T31] [ 970.060154][ T31] NMI backtrace for cpu 1 [ 970.060175][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 970.060193][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.060203][ T31] Call Trace: [ 970.060211][ T31] [ 970.060218][ T31] dump_stack_lvl+0x189/0x250 [ 970.060259][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.060280][ T31] ? __pfx__printk+0x10/0x10 [ 970.060307][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 970.060333][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 970.060357][ T31] ? __pfx__printk+0x10/0x10 [ 970.060375][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 970.060392][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 970.060418][ T31] watchdog+0xf93/0xfe0 [ 970.060443][ T31] ? watchdog+0x1de/0xfe0 [ 970.060465][ T31] kthread+0x711/0x8a0 [ 970.060489][ T31] ? __pfx_watchdog+0x10/0x10 [ 970.060505][ T31] ? __pfx_kthread+0x10/0x10 [ 970.060528][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 970.060551][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.060567][ T31] ? __pfx_kthread+0x10/0x10 [ 970.060589][ T31] ret_from_fork+0x436/0x7d0 [ 970.060611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 970.060637][ T31] ? __switch_to_asm+0x39/0x70 [ 970.060656][ T31] ? __switch_to_asm+0x33/0x70 [ 970.060676][ T31] ? __pfx_kthread+0x10/0x10 [ 970.060699][ T31] ret_from_fork_asm+0x1a/0x30 [ 970.060733][ T31] [ 970.060741][ T31] Sending NMI from CPU 1 to CPUs 0: [ 970.103226][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.103313][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.188122][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.190580][ C0] NMI backtrace for cpu 0 [ 970.190595][ C0] CPU: 0 UID: 0 PID: 10369 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 970.190614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.190626][ C0] Workqueue: events_unbound toggle_allocation_gate [ 970.190651][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 970.190672][ C0] Code: e8 fe b2 b1 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 5c 16 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 970.190687][ C0] RSP: 0018:ffffc90000006730 EFLAGS: 00000002 [ 970.190701][ C0] RAX: 1ffffffff3312a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 970.190713][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 970.190723][ C0] RBP: ffffffff99895290 R08: ffff8880245c8237 R09: 1ffff110048b9046 [ 970.190735][ C0] R10: dffffc0000000000 R11: ffffffff850cc2a0 R12: dffffc0000000000 [ 970.190748][ C0] R13: 0000000000000000 R14: ffffffff99895000 R15: 0000000000000000 [ 970.190760][ C0] FS: 0000000000000000(0000) GS:ffff888126372000(0000) knlGS:0000000000000000 [ 970.190773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.190785][ C0] CR2: 000000000c3accd4 CR3: 000000000db36000 CR4: 00000000003526f0 [ 970.190800][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 970.190809][ C0] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 970.190820][ C0] Call Trace: [ 970.190828][ C0] [ 970.190838][ C0] wait_for_lsr+0x19e/0x2f0 [ 970.190862][ C0] serial8250_console_write+0x134c/0x1ba0 [ 970.190887][ C0] ? __lock_acquire+0xab9/0xd20 [ 970.190904][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 970.190924][ C0] ? console_flush_all+0x13a/0xc40 [ 970.190944][ C0] ? console_flush_all+0x13a/0xc40 [ 970.190967][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 970.190987][ C0] ? console_flush_all+0x13a/0xc40 [ 970.191005][ C0] ? console_flush_all+0x13a/0xc40 [ 970.191025][ C0] console_flush_all+0x728/0xc40 [ 970.191046][ C0] ? console_flush_all+0x13a/0xc40 [ 970.191070][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 970.191095][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 970.191119][ C0] console_unlock+0xc4/0x270 [ 970.191138][ C0] ? __pfx_console_unlock+0x10/0x10 [ 970.191159][ C0] ? vprintk_emit+0x444/0x7a0 [ 970.191182][ C0] ? vprintk_emit+0x444/0x7a0 [ 970.191201][ C0] vprintk_emit+0x5b7/0x7a0 [ 970.191218][ C0] ? vprintk_emit+0x444/0x7a0 [ 970.191236][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 970.191258][ C0] ? ___ratelimit+0x622/0xab0 [ 970.191279][ C0] _printk+0xcf/0x120 [ 970.191298][ C0] ? __pfx__printk+0x10/0x10 [ 970.191316][ C0] ? ip_vs_proto_name+0x81/0xe0 [ 970.191331][ C0] ? ip_vs_scheduler_err+0x27c/0x3a0 [ 970.191355][ C0] ip_vs_dh_schedule+0x268/0x3a0 [ 970.191375][ C0] ip_vs_schedule+0xa07/0x1c80 [ 970.191397][ C0] ? __ip_vs_conn_in_get+0xa3e/0xaa0 [ 970.191417][ C0] ? ip_vs_conn_out_get+0x9c/0xa70 [ 970.191438][ C0] ? __pfx_ip_vs_schedule+0x10/0x10 [ 970.191453][ C0] ? __ip_vs_conn_in_get+0x99/0xaa0 [ 970.191475][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 970.191501][ C0] ? ip_vs_conn_in_get_proto+0x363/0x4d0 [ 970.191521][ C0] ? ip_vs_service_find+0xd4b/0xf00 [ 970.191544][ C0] udp_conn_schedule+0x332/0x710 [ 970.191567][ C0] ? __pfx_udp_conn_schedule+0x10/0x10 [ 970.191595][ C0] ip_vs_in_hook+0xc09/0x1be0 [ 970.191611][ C0] ? unwind_next_frame+0xa5/0x2390 [ 970.191635][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 970.191651][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 970.191676][ C0] ? nf_hook+0x9d/0x380 [ 970.191696][ C0] ? nf_hook+0x9d/0x380 [ 970.191714][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 970.191731][ C0] nf_hook_slow+0xc2/0x220 [ 970.191752][ C0] nf_hook+0x217/0x380 [ 970.191772][ C0] ? nf_hook+0x9d/0x380 [ 970.191790][ C0] ? __pfx_nf_hook+0x10/0x10 [ 970.191807][ C0] ? tipc_crypto_clone_msg+0x90/0x170 [ 970.191830][ C0] ? __pfx_dst_output+0x10/0x10 [ 970.191847][ C0] ? handle_softirqs+0x283/0x870 [ 970.191864][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 970.191880][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 970.191896][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 970.191913][ C0] ? __sanitizer_cov_trace_pc+0x5d/0x70 [ 970.191936][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 970.191955][ C0] __ip_local_out+0x4db/0x600 [ 970.191973][ C0] ? __pfx_dst_output+0x10/0x10 [ 970.191993][ C0] ip_local_out+0x26/0x70 [ 970.192013][ C0] iptunnel_xmit+0x592/0xa40 [ 970.192037][ C0] udp_tunnel_xmit_skb+0x26e/0x3c0 [ 970.192066][ C0] tipc_udp_xmit+0x7bd/0xaa0 [ 970.192089][ C0] ? tipc_udp_xmit+0xa4/0xaa0 [ 970.192108][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 970.192129][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 970.192155][ C0] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 970.192183][ C0] tipc_crypto_xmit+0x1a1f/0x23a0 [ 970.192211][ C0] ? tipc_net+0x45/0x270 [ 970.192229][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 970.192249][ C0] ? tipc_net+0x45/0x270 [ 970.192271][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 970.192288][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 970.192305][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 970.192329][ C0] tipc_disc_timeout+0x580/0x6d0 [ 970.192349][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 970.192374][ C0] call_timer_fn+0x17e/0x5f0 [ 970.192390][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 970.192406][ C0] ? call_timer_fn+0xbe/0x5f0 [ 970.192422][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 970.192443][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 970.192465][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.192480][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 970.192497][ C0] __run_timer_base+0x61a/0x860 [ 970.192518][ C0] ? ktime_get+0x3e/0x1f0 [ 970.192543][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 970.192563][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 970.192592][ C0] run_timer_softirq+0xb7/0x180 [ 970.192614][ C0] handle_softirqs+0x283/0x870 [ 970.192633][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 970.192653][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 970.192673][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 970.192695][ C0] __irq_exit_rcu+0xca/0x1f0 [ 970.192712][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 970.192734][ C0] irq_exit_rcu+0x9/0x30 [ 970.192750][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 970.192766][ C0] [ 970.192772][ C0] [ 970.192779][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 970.192796][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 970.192818][ C0] Code: 58 16 00 00 83 fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 4e f7 7b 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 970.192832][ C0] RSP: 0018:ffffc9001c987658 EFLAGS: 00000293 [ 970.192846][ C0] RAX: ffffffff81b306bb RBX: 1ffff11017127f61 RCX: ffff88802e493c80 [ 970.192859][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 970.192869][ C0] RBP: ffffc9001c9877e0 R08: ffffffff8f5cd637 R09: 1ffffffff1eb9ac6 [ 970.192882][ C0] R10: dffffc0000000000 R11: fffffbfff1eb9ac7 R12: ffff8880b893fb08 [ 970.192895][ C0] R13: dffffc0000000000 R14: ffff8880b883b1c0 R15: 0000000000000001 [ 970.192911][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 970.192935][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 970.192956][ C0] smp_call_function_many_cond+0xd4b/0x12d0 [ 970.192977][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 970.193002][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 970.193024][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 970.193044][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 970.193065][ C0] ? __pfx___text_poke+0x10/0x10 [ 970.193084][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.193102][ C0] ? trace_contention_end+0x39/0x120 [ 970.193126][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 970.193145][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 970.193165][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 970.193192][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 970.193211][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 970.193228][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 970.193252][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 970.193273][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 970.193289][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 970.193311][ C0] static_key_disable+0x1a/0x20 [ 970.193330][ C0] toggle_allocation_gate+0x1a1/0x240 [ 970.193350][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 970.193370][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 970.193396][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 970.193414][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 970.193431][ C0] process_scheduled_works+0xade/0x17b0 [ 970.193463][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 970.193491][ C0] worker_thread+0x8a0/0xda0 [ 970.193509][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 970.193536][ C0] ? __kthread_parkme+0x7b/0x200 [ 970.193559][ C0] kthread+0x711/0x8a0 [ 970.193580][ C0] ? __pfx_worker_thread+0x10/0x10 [ 970.193598][ C0] ? __pfx_kthread+0x10/0x10 [ 970.193618][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 970.193639][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.193654][ C0] ? __pfx_kthread+0x10/0x10 [ 970.193674][ C0] ret_from_fork+0x436/0x7d0 [ 970.193692][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 970.193713][ C0] ? __switch_to_asm+0x39/0x70 [ 970.193733][ C0] ? __switch_to_asm+0x33/0x70 [ 970.193752][ C0] ? __pfx_kthread+0x10/0x10 [ 970.193771][ C0] ret_from_fork_asm+0x1a/0x30 [ 970.193800][ C0] [ 970.195149][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 970.195170][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 970.195191][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.195202][ T31] Call Trace: [ 970.195211][ T31] [ 970.195220][ T31] dump_stack_lvl+0x99/0x250 [ 970.195245][ T31] ? __asan_memcpy+0x40/0x70 [ 970.195265][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.195287][ T31] ? __pfx__printk+0x10/0x10 [ 970.195316][ T31] vpanic+0x281/0x750 [ 970.195342][ T31] ? __pfx_vpanic+0x10/0x10 [ 970.195362][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 970.195386][ T31] ? preempt_schedule+0xae/0xc0 [ 970.195405][ T31] ? preempt_schedule_common+0x83/0xd0 [ 970.195430][ T31] panic+0xb9/0xc0 [ 970.195451][ T31] ? __pfx_panic+0x10/0x10 [ 970.195474][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 970.195498][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 970.195525][ T31] watchdog+0xfd2/0xfe0 [ 970.195549][ T31] ? watchdog+0x1de/0xfe0 [ 970.195573][ T31] kthread+0x711/0x8a0 [ 970.195599][ T31] ? __pfx_watchdog+0x10/0x10 [ 970.195617][ T31] ? __pfx_kthread+0x10/0x10 [ 970.195641][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 970.195666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.195683][ T31] ? __pfx_kthread+0x10/0x10 [ 970.195707][ T31] ret_from_fork+0x436/0x7d0 [ 970.195730][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 970.195755][ T31] ? __switch_to_asm+0x39/0x70 [ 970.195777][ T31] ? __switch_to_asm+0x33/0x70 [ 970.195799][ T31] ? __pfx_kthread+0x10/0x10 [ 970.195823][ T31] ret_from_fork_asm+0x1a/0x30 [ 970.195861][ T31] [ 970.197436][ T31] Kernel Offset: disabled