last executing test programs: 14.878122148s ago: executing program 3 (id=1236): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r0, @ANYBLOB="010026bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="04006e800a0006000802110000000000440050800800030005ac0f000500020003000000080007"], 0xb0}}, 0x800) (fail_nth: 6) 14.352056963s ago: executing program 3 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x140b, 0x210, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8024}, 0x24004000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xdf, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010101, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc7539esp(ecb(camellia),sha384-ce)\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010101, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc7539esp(ecb(camellia),sha384-ce)\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f00000005c0)={{}, {0x98e6}, 0x4, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="f768e4d5ed46044893f7258d85", 0xd, 0x0, &(0x7f0000000440)={0x2, 0xb5, {0x1, 0xc, 0x4, "18bdea60", 0xa4, "c7e1f6e11832858d6e4cab97dc78e0aaecfce7deaddbbb9053f992c93e7025c052f5094df1ce92b730416685592acc860bf047bdb5af906f586aab9c1068050688934d39d1799c6454e17c4d984061a66a04bf6f8d7d4155e8da40db14899bdb2d058f0c5b6fdd12ebaacb22802629bc9fe28dc1fb6bc671a34beab21f4a276dff610bad7bb7b9b979ce52d3dd149808f720f94cf70b5f0e950d743b54ea49bfb27092d2"}, 0xa6, "b36ed6693fbeb52d86a63e5258edccde874d39f0575d2b7c0eba9ff9e3f3a2b5536f1d43b46a8c79706d77beb36f484504ebbe0854b05b052523b6219aee222099972053cbab3645d37019d7d30fa967412a4a5fac9f42da9e5c0bdad622363de5d1eb51ef9a954855dd1737e379e7a64a880858174bc8f81881e06e992a56c9139dd0a98fde64d366a5f376b8d16637e448009cefe46d7b00040a247a720d81a416b1b94786"}, 0x167}) (async) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f00000005c0)={{}, {0x98e6}, 0x4, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="f768e4d5ed46044893f7258d85", 0xd, 0x0, &(0x7f0000000440)={0x2, 0xb5, {0x1, 0xc, 0x4, "18bdea60", 0xa4, "c7e1f6e11832858d6e4cab97dc78e0aaecfce7deaddbbb9053f992c93e7025c052f5094df1ce92b730416685592acc860bf047bdb5af906f586aab9c1068050688934d39d1799c6454e17c4d984061a66a04bf6f8d7d4155e8da40db14899bdb2d058f0c5b6fdd12ebaacb22802629bc9fe28dc1fb6bc671a34beab21f4a276dff610bad7bb7b9b979ce52d3dd149808f720f94cf70b5f0e950d743b54ea49bfb27092d2"}, 0xa6, "b36ed6693fbeb52d86a63e5258edccde874d39f0575d2b7c0eba9ff9e3f3a2b5536f1d43b46a8c79706d77beb36f484504ebbe0854b05b052523b6219aee222099972053cbab3645d37019d7d30fa967412a4a5fac9f42da9e5c0bdad622363de5d1eb51ef9a954855dd1737e379e7a64a880858174bc8f81881e06e992a56c9139dd0a98fde64d366a5f376b8d16637e448009cefe46d7b00040a247a720d81a416b1b94786"}, 0x167}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8720000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000bd080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x71f43, 0xc2f}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049088}, 0x4) 13.969075773s ago: executing program 4 (id=1244): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="0400000003000000", @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRESDEC=r0], 0x20) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r1) write$char_usb(r2, &(0x7f0000000380)="b7", 0x1) r3 = add_key(&(0x7f0000000480)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000300)="f8e656a5ebe71fd0dedf5572fbc2f738df05d72d2cd3191adcde90a94566e2f8cd6ee128139619fe89d6bf5daae7df831c6d82d4", 0x34, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, r3) pipe2$watch_queue(0x0, 0x80) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/154, 0x9a) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1a, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x7a, &(0x7f00000005c0)=""/122, 0x41100, 0x18, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001000)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040)=[{0x4, 0x3, 0xb, 0x9}, {0x4, 0x3, 0xd, 0xc}, {0x4, 0x2, 0x5, 0x5}], 0x10, 0x3}, 0x94) r5 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) ioctl$RTC_WKALM_SET(r5, 0x4028700f, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x0, 0x2, 0xff, 0x8, 0x9, 0x3}, {0xd, 0x9a50, 0x0, 0x9, 0x1ff, 0x3, 0x3}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fallocate(r6, 0x0, 0x9, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x9, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1d, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68a174f0000000000000000000000000000000000000000000100", [0x100000009, 0x400]}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000001780)={0x5, 0x10, 0xfa00, {0x0, r9, 0x2}}, 0x18) syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) 11.438517463s ago: executing program 4 (id=1250): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x67}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x351a, 0x100, 0x0, 0x0, 0x0) 11.054499425s ago: executing program 3 (id=1252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@mcast2, {0x0, 0x195, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x8000, 0x1f, 0xfffffffffffffffe}, {0x1, 0x3fc}, 0x70bd29, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 11.051804751s ago: executing program 3 (id=1253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="99", 0x1}], 0x1, 0x0, 0x0, 0x8890}, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r2, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x800c5011, &(0x7f00000001c0)) 9.716935465s ago: executing program 3 (id=1260): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000540)=0xfb1, 0x4) (async) sendto$inet6(r2, 0x0, 0x14, 0x4c800, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @mcast2, 0x3}, 0x1c) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000100000018f200000000861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r4) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4040000) 9.081138272s ago: executing program 2 (id=1262): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x105000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94", 0xf3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x104) move_pages(0x0, 0x0, &(0x7f0000000740), &(0x7f0000001180), 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\x9aE\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f00000010c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01,\xa69\t\xb3I\x18V\x9c\x81%\xaf\x96\xf4PY+\x01DJy\xff\x1e6g\x7fS5\x81\xcd\xd5\xc2\xc6\r#Q\a\x9d\xa1\x049\x7fY\xd6\xb6\x95\x88=\xf8\xd7\x16W\x93_\x7fD\xb2\xa5\xb2\xa2\xd4\xddx\x05?<\x05\xbd\xfe(|\b\x80 \xb2EP\xb6\x15\xc9\x1c\x97T\xa9\xc4\xaa~`\xb3f\xb4\xf1\xcd\x16Z\xb8\x9f\x01\x9e\x7f\xbb\x8e\x8e\x80\x8f\x95\xcb\xa1\xb2\xda\x1a+\xfa\xdb&\xa7\xbfG\xfb\b', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000001200)='\xa8 \x1e\x04^\xc2\xec\x19<#U\xe0\x99\f\x94\x8b\xe7\x00*\xb0O\xfc\xac\xf5\a4n\x97K0\xb8 \x90a\xa4\xc7t\x9e\x90\x1fM%\x96\xaf\x94\xd4\xca\xda\x82\xe8\x1aY\xa8\xaa\xbf\x83\xa0\x9e\x90x\x85}\x10\xbf\xd7\xab\xc5\b6-v\x1d\x1f\v\x8d\xda\x8eLH\xc2\xc1(\xb6e\xd3\xb7>\x00\"\xb6\xb9\b\x8b\xd6\xa7\xc2\x15\xa4\xe3\xbd\x8a\xf6\x14\x8d.\xa8zME\x01=;E\xf8\x8e\xe0\xe2\xe7kK~]\xb3QL-\xc2\xdc\xfdQ\xb7Q\'\xb1/^\xfe\xaf\x0e9<\xc6\xa1\xadv\xf2\x7f\xf3\x92\xa9i\x05\xa9\xb5\x8dF\\&]\xe6\xe7\xd3\xd0\xd4\xf8\x1e\x96\x87\xca\xdd\x81\xda\xf0D\xc1\xe1*\xbc\\\x10\xd8Ps\xe2\x1f\x13\xe5\x80\xb0\xac(\xb3\xfb1\x1e\x9f\x85\xac.\xd1*\xb8X%\xfd\x181=t\xcb\x88\x90%\xed\x1f\xa6\xc3x\x81\xdb&\xce\xb3\xc7\xc8R\xc9\x03\x91\x8f\x06\xfadM\n\xde\x04\xb4\xeep\xb0v\xc1e@-\x1d']}, &(0x7f0000000b80)={[&(0x7f0000000a00)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 8.284223394s ago: executing program 4 (id=1266): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x105000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x104) move_pages(0x0, 0x0, &(0x7f0000000740), &(0x7f0000001180), 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\x9aE\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f00000010c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01,\xa69\t\xb3I\x18V\x9c\x81%\xaf\x96\xf4PY+\x01DJy\xff\x1e6g\x7fS5\x81\xcd\xd5\xc2\xc6\r#Q\a\x9d\xa1\x049\x7fY\xd6\xb6\x95\x88=\xf8\xd7\x16W\x93_\x7fD\xb2\xa5\xb2\xa2\xd4\xddx\x05?<\x05\xbd\xfe(|\b\x80 \xb2EP\xb6\x15\xc9\x1c\x97T\xa9\xc4\xaa~`\xb3f\xb4\xf1\xcd\x16Z\xb8\x9f\x01\x9e\x7f\xbb\x8e\x8e\x80\x8f\x95\xcb\xa1\xb2\xda\x1a+\xfa\xdb&\xa7\xbfG\xfb\b', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000001200)='\xa8 \x1e\x04^\xc2\xec\x19<#U\xe0\x99\f\x94\x8b\xe7\x00*\xb0O\xfc\xac\xf5\a4n\x97K0\xb8 \x90a\xa4\xc7t\x9e\x90\x1fM%\x96\xaf\x94\xd4\xca\xda\x82\xe8\x1aY\xa8\xaa\xbf\x83\xa0\x9e\x90x\x85}\x10\xbf\xd7\xab\xc5\b6-v\x1d\x1f\v\x8d\xda\x8eLH\xc2\xc1(\xb6e\xd3\xb7>\x00\"\xb6\xb9\b\x8b\xd6\xa7\xc2\x15\xa4\xe3\xbd\x8a\xf6\x14\x8d.\xa8zME\x01=;E\xf8\x8e\xe0\xe2\xe7kK~]\xb3QL-\xc2\xdc\xfdQ\xb7Q\'\xb1/^\xfe\xaf\x0e9<\xc6\xa1\xadv\xf2\x7f\xf3\x92\xa9i\x05\xa9\xb5\x8dF\\&]\xe6\xe7\xd3\xd0\xd4\xf8\x1e\x96\x87\xca\xdd\x81\xda\xf0D\xc1\xe1*\xbc\\\x10\xd8Ps\xe2\x1f\x13\xe5\x80\xb0\xac(\xb3\xfb1\x1e\x9f\x85\xac.\xd1*\xb8X%\xfd\x181=t\xcb\x88\x90%\xed\x1f\xa6\xc3x\x81\xdb&\xce\xb3\xc7\xc8R\xc9\x03\x91\x8f\x06\xfadM\n\xde\x04\xb4\xeep\xb0v\xc1e@-\x1d']}, &(0x7f0000000b80)={[&(0x7f0000000a00)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 8.165921175s ago: executing program 0 (id=1267): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 7.84604738s ago: executing program 2 (id=1268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 7.792577524s ago: executing program 0 (id=1269): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x60bf) write$char_usb(r0, 0x0, 0x0) 7.71143684s ago: executing program 2 (id=1270): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x8000, 0x100, 0x8}, 0x18) r1 = openat(r0, &(0x7f0000000280)='./bus\x00', 0x1411c2, 0x20) ftruncate(r1, 0x8800000) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104010400000100000000000300000a0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x90) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000001040102000000000000006bb521510a0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20008040) close_range(r4, 0xffffffffffffffff, 0x100000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket(0x40000000015, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0xffffffffffffffff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendfile(r2, r1, 0x0, 0x578410ed) 7.493746879s ago: executing program 2 (id=1271): r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000280)={&(0x7f0000000200)="4f5673cdbd9f366c9cf5d54a7c01b10ab1652a9873ec9e443af8a04302628463d0b400df7b92e17817cd85bcc99ccefac5e9f40cdbeeb91e4a7366428e5a93b1a6c28a763130753b", 0x48}) move_pages(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], 0x0, &(0x7f0000000240), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0xca, 0x17, 0xa}, {0x10, 0x7, 0x4, 0x3}]}) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000000c0)=""/20, 0x14}], 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/57, 0x39}], 0x15, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 7.402418783s ago: executing program 3 (id=1272): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000540)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@multicast2}, {@remote}, {@empty}, {@empty}, {@multicast2}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r9 = fcntl$dupfd(r7, 0x406, r7) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=ANY=[@ANYBLOB="140000000500010000000000000000000700000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x2c000000}, 0x40008884) write$binfmt_elf64(r9, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r9], 0xfffffdcf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0xfffffffffffffcab, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0, 0x2103, 0x0, {0x3}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000200)=""/143, 0x8f}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) read$FUSE(r10, &(0x7f0000001fc0)={0x2020}, 0x2020) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x20, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffffff) mprotect(&(0x7f0000c70000/0x4000)=nil, 0x4000, 0x3000009) ioctl$TIOCSCTTY(r8, 0x540e, 0x9) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.760384034s ago: executing program 4 (id=1273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[&(0x7f00000c1000/0x4000)=nil, &(0x7f00003fe000/0x2000)=nil], &(0x7f0000000140)=[0xffffffff], 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.649645738s ago: executing program 1 (id=1274): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x3, 0x6, @random="f2c7e86bf831"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="aaaaaa79"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x77, 0x7, 0x80000001, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x7800, 0x8, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xcf3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c020000", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25150000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="8400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000140002006d6163767461703000000000000000001400020073797a5f74756e000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000008000300010000000800030000000000300001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030002000000040001804800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030002000000080003000300000014000200776c616e31000000000000000000000008000300020000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200627269646765300000000000000000005c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f746f5f689aeb78720000000008000100be6f29ce808d565f7e20ce66f1523d4d8bfebcd8dd65144abacb929851be0e9fa4ddf90edaadc904399d5bc73f79", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000014000200776731000000000000000000000000004800018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000540001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000300000014000200776731000000000000000000000000000800030003000000"], 0x24c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 6.116789611s ago: executing program 2 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000540)={"8e87c3143e7c481958f7027d7956a043", 0x0, 0x0, {0x6, 0x5}, {0x9, 0x7}, 0x800, [0x5, 0x0, 0x1, 0x0, 0x200, 0x8, 0x7fffffffffffffff, 0x9, 0x9, 0xfabb, 0x192, 0x6, 0x6, 0x0, 0xb, 0x4c]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001340)={0x0, "dbbdae1d78c30f1fbd6b0af9367d219d"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000002340)={{r0}, r3, 0xa, @unused=[0x7, 0x0, 0x3, 0x6], @devid=r4}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x6, 0x0, 0x5, 0x2, 0xc57, 0x6}, 0x1c) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="120100030125f040110f1110e16901020301090d120001d20380000904b30800b61d508ea8704fbe9c8285e0aceba9de0697"], &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0xf2, 0x4, 0x2, 0xff, 0x5}, 0x12e, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f2e01031c100a0444000000000f0200003f0000c00000000000ff0000000000021003fc7c59267d25343c2cf3b2c90ea2e5bec6de95207bc3dd45202d57d669ee248ee79ce1b9cc465dcb058a56850f893a344e9b02c7b383e39acf6c3190c8549c0c8039bb925aea1ae978a6288e0082d86f01bdd8f6a310a59b034520dc88dafe682c85d53e44a483cb761ba30100d35c698ef2ffd586a22438fd3a1e64fd15fcf441b2e7bf3a0db3e057ecb502182ad89cdcca24d26574671df7572535d04d3116649095467a39e40fd95f8c4af990ac6fde248ad6a2c2184da22b4a5d3f1093a90bd16f074ee18f91e68621e8dc151fa2a4e7d8877cb622c9bae9bdaeb01a314b6bd61a50b8f5e04e09981825652d9d5e59638ba0f8b2d7739614472c3f301e4d41a3eda94da70b10010c608c0103000004"], 0x4, [{0xd3, &(0x7f0000000780)=ANY=[@ANYBLOB="d3037a6a8bea38f7c7be21c9b2b14782bbf7d39ba7dfe8a33301205a0afc9eded00bb21a49371479dce4f9a7e1077cb2afff12b00eaab982c2483243045156de8afebf482cba2b3030e2576457baeb3ea6e32c072814807174a488e73296d40a04ba66341deb87054e5ffbc49634fcaac137cf2a180393c856ce3b11db6e8d1a4840b0cb54e75e9e0e40ea1fe73cd920f58055e0ac61ffac76479fad2ee7466ae70f1e79d15ae9930b71f7388347ef2777f4303168ad5525118db8ab5a949c8b5c0a6d827b08f00df2a2319a1df2a202a0e339e0a898f17d460dac9c05e8cd51b4776f599b79cb7110dfdfbec0933a9ff9dd9d08246e"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x441}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x149521) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045518, &(0x7f0000002a40)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffc, 0x40, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x20, 0x5, 0xfffb, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f0000000140)={0x100, {{0x2, 0x4e24, @local}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0xa09, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3}, {0x9, 0x8}, {0x5, 0xa}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 6.077839089s ago: executing program 1 (id=1276): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x158, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x2, 0x6, 0xc000, 0xde, 0x0, 0x0, 0x8001, 0x80000002}}, {0x1, 0x1, 0x9, 0x32540194, '\xdc&6>\xd2\xb7n%W'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x5, 0x6, 0x5, 0x3, 0x2, 0x9, 0x7, 0xc000, 0x0, r5, r6, 0x1, 0x3}}, {0x0, 0x1000007, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x214141, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x640b}}, './file0\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r12], 0x68}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 5.581013986s ago: executing program 0 (id=1277): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x22, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) (async) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 5.409715567s ago: executing program 1 (id=1279): unshare(0x22020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0xffffffff, 'cbc-cast5-avx\x00'}, 0x58) 5.346015126s ago: executing program 0 (id=1280): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.294568942s ago: executing program 4 (id=1281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') setns(r2, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000180a010200000000000000000200000308000380040003800900020073797a30000000000900010073797a30000000001400000011000100000300000a00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000feffffffffffffff000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000200003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200282c00fe8000000000000000000000000000bbfe"], 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) unshare(0x22020600) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf251100000008002b0000701b0008000300", @ANYRES32=r10, @ANYBLOB="05002f000000000008002c2003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 5.279385927s ago: executing program 0 (id=1282): socket$alg(0x26, 0x5, 0x0) socket(0x2b, 0x80801, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_init() fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x581) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c000500"], 0x15) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0xee5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=0x64010102, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@remote}, {@dev}]}}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x2, 0xa}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[], 0x26e) 4.905078567s ago: executing program 1 (id=1283): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) stat(0x0, 0x0) (async) stat(0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0x6000, 0xb, &(0x7f00000000c0)=""/11}, {0xeeee0000, 0x44, &(0x7f0000000400)=""/68}, {0x5000, 0x0, 0xfffffffffffffffc}]}) eventfd2(0x1, 0x1) (async) r1 = eventfd2(0x1, 0x1) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/31, 0x1f}], 0x2, &(0x7f0000000a00)=""/231, 0xe7}, 0x6}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/37, 0x25}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/48, 0x30}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/139, 0x8b}, {&(0x7f0000000c80)=""/79, 0x4f}, {&(0x7f0000000d00)=""/142, 0x8e}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001540)=""/33, 0x21}], 0x1, &(0x7f0000000ec0)=""/204, 0xcc}, 0x200}, {{&(0x7f0000000fc0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/110, 0x6e}], 0x1, &(0x7f0000001100)=""/192, 0xc0}, 0x8}, {{&(0x7f00000011c0)=@pptp, 0x80, &(0x7f0000001480)=[{&(0x7f0000001240)=""/153, 0x99}, {&(0x7f0000001300)=""/125, 0x7d}, {&(0x7f0000001380)=""/35, 0x23}, {&(0x7f00000013c0)=""/155, 0x9b}], 0x4, &(0x7f00000014c0)=""/99, 0x63}, 0x80}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r2, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$inet_udp(0x2, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) dup(0xffffffffffffffff) 4.102227671s ago: executing program 4 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xfffffff7, 0x20001000, 0x400, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) getsockname$l2tp6(r5, 0x0, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010700ffffffc400000052"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.025567373s ago: executing program 1 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xfffffff7, 0x20001000, 0x400, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) getsockname$l2tp6(r5, 0x0, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010700ffffffc400000052"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.942304475s ago: executing program 0 (id=1286): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000010340)) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 0s ago: executing program 1 (id=1287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000008b33ef8ef05e4e23b6a96421cd491f446a61b92524d0761bcbe46bdece9b9a1329981163e90158d6fbfe31af7beeb6d3057547005eabc5128ca0684d9cb97960b1ec5c25c07f1533a49c2f20aed5e2359bc6da87cbd3038df"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="d355e8ec3d816bc72baead1137f96f421e10613a27ed590f3b21cd3d3b67ef32ebda0c0990c2487692139eba66b03bb02f8a93f6dc477db0eac859445b1f09d1e721a229ddca465a9e0a3db9522cc3cebd6dc8a4b2b1cf223c15476c233890071537a7c55c1438"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3679][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 392.866952][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 392.884205][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.892958][ T10] usb 2-1: Product: syz [ 392.898005][ T10] usb 2-1: Manufacturer: syz [ 392.902821][ T10] usb 2-1: SerialNumber: syz [ 392.929994][T10305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.164242][T10321] trusted_key: encrypted_key: insufficient parameters specified [ 393.270164][T10324] FAULT_INJECTION: forcing a failure. [ 393.270164][T10324] name failslab, interval 1, probability 0, space 0, times 0 [ 393.341274][T10324] CPU: 0 UID: 0 PID: 10324 Comm: syz.0.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.341310][T10324] Tainted: [L]=SOFTLOCKUP [ 393.341319][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.341332][T10324] Call Trace: [ 393.341341][T10324] [ 393.341350][T10324] dump_stack_lvl+0xe8/0x150 [ 393.341390][T10324] should_fail_ex+0x412/0x560 [ 393.341420][T10324] should_failslab+0xa8/0x100 [ 393.341449][T10324] __kmalloc_cache_noprof+0x88/0x660 [ 393.341473][T10324] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 393.341507][T10324] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 393.341544][T10324] sctp_association_new+0x15d3/0x25e0 [ 393.341593][T10324] sctp_connect_new_asoc+0x2e4/0x6b0 [ 393.341631][T10324] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 393.341679][T10324] ? __local_bh_enable_ip+0xd0/0x130 [ 393.341706][T10324] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 393.341732][T10324] ? security_sctp_bind_connect+0x7e/0x2c0 [ 393.341770][T10324] sctp_sendmsg+0x1528/0x2c10 [ 393.341816][T10324] ? __pfx_sctp_sendmsg+0x10/0x10 [ 393.341851][T10324] ? aa_sk_perm+0x6d5/0x900 [ 393.341883][T10324] ? __pfx_aa_sk_perm+0x10/0x10 [ 393.341911][T10324] ? sock_rps_record_flow+0x19/0x400 [ 393.341946][T10324] ? inet_sendmsg+0x2f4/0x370 [ 393.341981][T10324] __sys_sendto+0x627/0x7a0 [ 393.342014][T10324] ? __pfx___sys_sendto+0x10/0x10 [ 393.342040][T10324] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 393.342075][T10324] ? __fget_files+0x3a0/0x420 [ 393.342116][T10324] ? ksys_write+0x242/0x270 [ 393.342141][T10324] ? __pfx_ksys_write+0x10/0x10 [ 393.342168][T10324] __x64_sys_sendto+0xde/0x100 [ 393.342202][T10324] do_syscall_64+0x14d/0xf80 [ 393.342251][T10324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.342275][T10324] ? clear_bhb_loop+0x40/0x90 [ 393.342302][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.342324][T10324] RIP: 0033:0x7f1d52d9c799 [ 393.342344][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.342363][T10324] RSP: 002b:00007f1d53c74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.342386][T10324] RAX: ffffffffffffffda RBX: 00007f1d53016090 RCX: 00007f1d52d9c799 [ 393.342403][T10324] RDX: 0000000000000002 RSI: 0000200000000ac0 RDI: 0000000000000009 [ 393.342416][T10324] RBP: 00007f1d53c74090 R08: 000020000005ffe4 R09: 000000000000001c [ 393.342430][T10324] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 393.342444][T10324] R13: 00007f1d53016128 R14: 00007f1d53016090 R15: 00007f1d5313fa48 [ 393.342478][T10324] [ 393.818532][T10327] trusted_key: encrypted_key: insufficient parameters specified [ 394.106428][ T5832] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 394.198675][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 394.198724][ T29] audit: type=1326 audit(1772175627.503:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff759f9c799 code=0x0 [ 394.273065][ T5832] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 394.304941][T10334] IPVS: rr: FWM 3 0x00000003 - no destination available [ 394.323899][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.354103][ T5832] usb 3-1: Product: syz [ 394.376732][ T5832] usb 3-1: Manufacturer: syz [ 394.381497][ T5832] usb 3-1: SerialNumber: syz [ 394.417516][ T5832] usb 3-1: config 0 descriptor?? [ 394.433142][ T5832] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 394.448987][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 394.461004][ T5832] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 394.473526][ T5832] usb 3-1: media controller created [ 394.540942][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input46 [ 394.574906][ T5176] bcm5974 2-1:1.0: could not read from device [ 394.624949][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.638534][ T5176] bcm5974 2-1:1.0: could not read from device [ 394.652658][ T10] usb 2-1: USB disconnect, device number 52 [ 394.678271][ T5176] bcm5974 2-1:1.0: could not read from device [ 394.818509][ T5832] DVB: Unable to find symbol mt352_attach() [ 394.881169][ T5832] DVB: Unable to find symbol nxt6000_attach() [ 394.888214][ T5832] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 394.904459][ T5832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 394.922077][ T5832] dvb-usb: schedule remote query interval to 1000 msecs. [ 394.931476][ T5832] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 394.942843][ T5832] dvb-usb: bulk message failed: -22 (7/0) [ 394.950712][ T5832] dvb-usb: bulk message failed: -22 (7/0) [ 394.964912][ T5832] usb 3-1: USB disconnect, device number 54 [ 395.154455][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.173184][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.382962][ T5832] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 396.439417][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 396.686812][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 396.759162][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'. [ 398.076382][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 398.091065][T10396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.098385][T10396] IPv6: NLM_F_CREATE should be set when creating new route [ 398.105771][T10396] IPv6: NLM_F_CREATE should be set when creating new route [ 398.113067][T10396] IPv6: NLM_F_CREATE should be set when creating new route [ 398.154168][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 398.178645][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 398.420256][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 398.432317][ T24] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 398.459083][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 398.506280][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 398.513625][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 398.522183][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.530071][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 398.541719][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.556477][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.567589][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.581064][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.587567][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.610290][ T24] usb 5-1: Product: syz [ 398.614537][ T24] usb 5-1: Manufacturer: syz [ 398.620126][ T24] usb 5-1: SerialNumber: syz [ 398.637930][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.802868][T10383] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.941070][ T10] usb 1-1: usb_control_msg returned -32 [ 398.947534][ T10] usbtmc 1-1:16.0: can't read capabilities [ 399.300918][T10406] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 399.310757][ T5915] usb 1-1: USB disconnect, device number 54 [ 399.481803][T10405] xt_l2tp: v2 doesn't support IP mode [ 399.686020][ T5902] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 399.986031][T10414] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 400.010185][ T5902] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 400.022313][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.034405][ T5902] usb 2-1: Product: syz [ 400.038754][ T5902] usb 2-1: Manufacturer: syz [ 400.044018][ T5902] usb 2-1: SerialNumber: syz [ 400.055697][ T5902] usb 2-1: config 0 descriptor?? [ 400.206492][ T5902] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 400.235022][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.399508][ T5902] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 400.478924][ T5902] usb 2-1: media controller created [ 400.535475][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.718821][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input49 [ 400.829968][ T5176] bcm5974 5-1:1.0: could not read from device [ 400.895530][ T24] usb 5-1: USB disconnect, device number 65 [ 400.908249][ T5902] DVB: Unable to find symbol mt352_attach() [ 400.918357][ T5176] bcm5974 5-1:1.0: could not read from device [ 401.135516][ T5902] DVB: Unable to find symbol nxt6000_attach() [ 401.172743][ T5902] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 401.227498][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 401.248483][ T5902] dvb-usb: schedule remote query interval to 1000 msecs. [ 401.256853][ T5902] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 401.261563][T10429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.268562][ T5902] dvb-usb: bulk message failed: -22 (7/0) [ 401.313943][ T5902] dvb-usb: bulk message failed: -22 (7/0) [ 401.366785][ T5902] usb 2-1: USB disconnect, device number 53 [ 401.478050][ T5902] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 401.516774][T10439] FAULT_INJECTION: forcing a failure. [ 401.516774][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 401.531840][T10439] CPU: 1 UID: 0 PID: 10439 Comm: syz.1.1127 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.531874][T10439] Tainted: [L]=SOFTLOCKUP [ 401.531883][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.531895][T10439] Call Trace: [ 401.531904][T10439] [ 401.531914][T10439] dump_stack_lvl+0xe8/0x150 [ 401.531948][T10439] should_fail_ex+0x412/0x560 [ 401.531980][T10439] should_failslab+0xa8/0x100 [ 401.532008][T10439] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 401.532042][T10439] ? __alloc_skb+0x1d0/0x7d0 [ 401.532068][T10439] ? __local_bh_enable_ip+0xd0/0x130 [ 401.532099][T10439] __alloc_skb+0x1d0/0x7d0 [ 401.532125][T10439] ? netlink_ack_tlv_len+0x6c/0x210 [ 401.532153][T10439] netlink_ack+0x146/0xa50 [ 401.532176][T10439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.532205][T10439] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 401.532227][T10439] ? __pfx_nl80211_post_doit+0x10/0x10 [ 401.532249][T10439] ? __lock_acquire+0x6b5/0x2cf0 [ 401.532286][T10439] netlink_rcv_skb+0x2b6/0x4b0 [ 401.532313][T10439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.532345][T10439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.532388][T10439] ? down_read+0x272/0x2e0 [ 401.532408][T10439] ? genl_rcv+0xd/0x40 [ 401.532440][T10439] genl_rcv+0x28/0x40 [ 401.532468][T10439] netlink_unicast+0x80f/0x9b0 [ 401.532498][T10439] ? __pfx_netlink_unicast+0x10/0x10 [ 401.532522][T10439] ? netlink_sendmsg+0x650/0xb40 [ 401.532545][T10439] ? skb_put+0x11b/0x210 [ 401.532576][T10439] netlink_sendmsg+0x813/0xb40 [ 401.532611][T10439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.532641][T10439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 401.532668][T10439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.532701][T10439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.532726][T10439] ____sys_sendmsg+0xa68/0xad0 [ 401.532764][T10439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.532801][T10439] ? import_iovec+0x73/0xa0 [ 401.532835][T10439] ___sys_sendmsg+0x2a5/0x360 [ 401.532871][T10439] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.532935][T10439] ? __fget_files+0x2a/0x420 [ 401.532964][T10439] ? __fget_files+0x3a0/0x420 [ 401.533004][T10439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 401.533039][T10439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.533080][T10439] ? __pfx_ksys_write+0x10/0x10 [ 401.533112][T10439] do_syscall_64+0x14d/0xf80 [ 401.533143][T10439] ? trace_irq_disable+0x3b/0x150 [ 401.533172][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.533193][T10439] ? clear_bhb_loop+0x40/0x90 [ 401.533218][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.533239][T10439] RIP: 0033:0x7fba9ef9c799 [ 401.533259][T10439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.533277][T10439] RSP: 002b:00007fba9d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.533300][T10439] RAX: ffffffffffffffda RBX: 00007fba9f215fa0 RCX: 00007fba9ef9c799 [ 401.533316][T10439] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 401.533329][T10439] RBP: 00007fba9d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.533343][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.533356][T10439] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 401.533389][T10439] [ 402.640075][ T5825] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 402.819989][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.838588][ T5825] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 402.848379][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.857963][ T5825] usb 5-1: Product: syz [ 402.863258][ T5825] usb 5-1: Manufacturer: syz [ 402.872560][ T5825] usb 5-1: SerialNumber: syz [ 402.889639][ T5825] usb 5-1: config 0 descriptor?? [ 403.123830][ T5825] usb 5-1: probing VID:PID(2201:012C) [ 403.135489][ T5825] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 403.144071][ T5825] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 403.183251][ T5825] usb 5-1: USB disconnect, device number 66 [ 404.176048][ T5825] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 404.288885][T10470] netlink: 'syz.4.1136': attribute type 4 has an invalid length. [ 404.378951][ T5915] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 404.483639][ T5825] usb 3-1: not running at top speed; connect to a high speed hub [ 404.493183][ T5825] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 404.506124][ T5825] usb 3-1: config 1 interface 0 has no altsetting 0 [ 404.533702][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 404.542987][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.556489][ T5825] usb 3-1: Product: syz [ 404.563342][ T5825] usb 3-1: Manufacturer: syz [ 404.574069][ T5825] usb 3-1: SerialNumber: syz [ 404.587212][T10463] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.631726][ T5915] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 404.643485][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.663384][ T5915] usb 1-1: Product: syz [ 404.675139][ T5915] usb 1-1: Manufacturer: syz [ 404.693870][ T5915] usb 1-1: SerialNumber: syz [ 404.719713][ T5915] usb 1-1: config 0 descriptor?? [ 404.738472][ T5915] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 404.754708][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.768134][ T5915] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 404.780656][ T5915] usb 1-1: media controller created [ 404.790444][T10473] FAULT_INJECTION: forcing a failure. [ 404.790444][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 404.830115][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.1.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.830149][T10473] Tainted: [L]=SOFTLOCKUP [ 404.830161][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.830171][T10473] Call Trace: [ 404.830178][T10473] [ 404.830185][T10473] dump_stack_lvl+0xe8/0x150 [ 404.830243][T10473] should_fail_ex+0x412/0x560 [ 404.830274][T10473] should_failslab+0xa8/0x100 [ 404.830300][T10473] __kmalloc_noprof+0xe8/0x760 [ 404.830322][T10473] ? rcu_is_watching+0x15/0xb0 [ 404.830347][T10473] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 404.830403][T10473] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 404.830443][T10473] genl_family_rcv_msg_doit+0xd9/0x330 [ 404.830475][T10473] ? __asan_memcpy+0x40/0x70 [ 404.830501][T10473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.830553][T10473] ? apparmor_capable+0x126/0x170 [ 404.830586][T10473] ? bpf_lsm_capable+0x9/0x20 [ 404.830612][T10473] ? security_capable+0x7e/0x2c0 [ 404.830640][T10473] genl_rcv_msg+0x61c/0x7a0 [ 404.830667][T10473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.830713][T10473] ? __pfx_wg_set_device_doit+0x10/0x10 [ 404.830743][T10473] ? __lock_acquire+0x6b5/0x2cf0 [ 404.830784][T10473] netlink_rcv_skb+0x232/0x4b0 [ 404.830803][T10473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.830827][T10473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.830885][T10473] ? down_read+0x272/0x2e0 [ 404.830906][T10473] ? genl_rcv+0xd/0x40 [ 404.830940][T10473] genl_rcv+0x28/0x40 [ 404.830961][T10473] netlink_unicast+0x80f/0x9b0 [ 404.830984][T10473] ? __pfx_netlink_unicast+0x10/0x10 [ 404.831023][T10473] ? netlink_sendmsg+0x650/0xb40 [ 404.831048][T10473] ? skb_put+0x11b/0x210 [ 404.831079][T10473] netlink_sendmsg+0x813/0xb40 [ 404.831113][T10473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.831134][T10473] ? aa_sock_msg_perm+0xf1/0x1b0 [ 404.831171][T10473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.831198][T10473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.831221][T10473] ____sys_sendmsg+0xa68/0xad0 [ 404.831262][T10473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.831292][T10473] ? import_iovec+0x73/0xa0 [ 404.831336][T10473] ___sys_sendmsg+0x2a5/0x360 [ 404.831383][T10473] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.831442][T10473] ? __fget_files+0x2a/0x420 [ 404.831463][T10473] ? __fget_files+0x3a0/0x420 [ 404.831520][T10473] __x64_sys_sendmsg+0x1bd/0x2a0 [ 404.831554][T10473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.831594][T10473] ? __pfx_ksys_write+0x10/0x10 [ 404.831618][T10473] do_syscall_64+0x14d/0xf80 [ 404.831665][T10473] ? trace_irq_disable+0x3b/0x150 [ 404.831695][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.831716][T10473] ? clear_bhb_loop+0x40/0x90 [ 404.831743][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.831759][T10473] RIP: 0033:0x7fba9ef9c799 [ 404.831773][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.831804][T10473] RSP: 002b:00007fba9d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.831829][T10473] RAX: ffffffffffffffda RBX: 00007fba9f215fa0 RCX: 00007fba9ef9c799 [ 404.831844][T10473] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 404.831857][T10473] RBP: 00007fba9d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.831869][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.831881][T10473] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 404.831911][T10473] [ 404.832840][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.611279][ T5915] DVB: Unable to find symbol mt352_attach() [ 405.779914][ T5915] DVB: Unable to find symbol nxt6000_attach() [ 405.812256][ T5915] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 405.850915][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 405.874234][ T5915] dvb-usb: schedule remote query interval to 1000 msecs. [ 405.891358][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 405.913476][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 405.942805][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 406.006562][ T5915] usb 1-1: USB disconnect, device number 55 [ 406.013100][T10481] TCP: TCP_TX_DELAY enabled [ 406.477097][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 406.707981][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 406.717712][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 406.839548][T10495] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 407.343870][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input52 [ 407.377411][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 407.388894][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 407.402787][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 407.425735][ T5176] bcm5974 3-1:1.0: could not read from device [ 407.444224][ T5176] bcm5974 3-1:1.0: could not read from device [ 407.458535][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 407.467653][T10502] binder: 10498:10502 ioctl b702 0 returned -22 [ 407.490163][ T5176] bcm5974 3-1:1.0: could not read from device [ 407.522002][ T5825] usb 3-1: USB disconnect, device number 55 [ 407.901020][T10506] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1147'. [ 408.037732][T10511] FAULT_INJECTION: forcing a failure. [ 408.037732][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.107003][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.1.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.107039][T10511] Tainted: [L]=SOFTLOCKUP [ 408.107047][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.107061][T10511] Call Trace: [ 408.107070][T10511] [ 408.107079][T10511] dump_stack_lvl+0xe8/0x150 [ 408.107125][T10511] should_fail_ex+0x412/0x560 [ 408.107157][T10511] _copy_to_user+0x31/0xb0 [ 408.107190][T10511] simple_read_from_buffer+0xe1/0x170 [ 408.107224][T10511] proc_fail_nth_read+0x1bb/0x230 [ 408.107256][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.107289][T10511] ? rw_verify_area+0x2a6/0x4d0 [ 408.107309][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.107340][T10511] vfs_read+0x20c/0xa70 [ 408.107359][T10511] ? fdget_pos+0x246/0x320 [ 408.107395][T10511] ? __pfx___mutex_lock+0x10/0x10 [ 408.107417][T10511] ? __pfx_vfs_read+0x10/0x10 [ 408.107439][T10511] ? __fget_files+0x2a/0x420 [ 408.107473][T10511] ? __fget_files+0x3a0/0x420 [ 408.107502][T10511] ? __fget_files+0x2a/0x420 [ 408.107540][T10511] ksys_read+0x150/0x270 [ 408.107563][T10511] ? __pfx_ksys_read+0x10/0x10 [ 408.107597][T10511] do_syscall_64+0x14d/0xf80 [ 408.107628][T10511] ? trace_irq_disable+0x3b/0x150 [ 408.107659][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.107681][T10511] ? clear_bhb_loop+0x40/0x90 [ 408.107708][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.107729][T10511] RIP: 0033:0x7fba9ef5cfce [ 408.107749][T10511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.107768][T10511] RSP: 002b:00007fba9d1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.107791][T10511] RAX: ffffffffffffffda RBX: 00007fba9d1f66c0 RCX: 00007fba9ef5cfce [ 408.107808][T10511] RDX: 000000000000000f RSI: 00007fba9d1f60a0 RDI: 0000000000000005 [ 408.107821][T10511] RBP: 00007fba9d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.107834][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.107847][T10511] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 408.107881][T10511] [ 408.756003][ T29] audit: type=1326 audit(1772175642.043:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.0.1144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d52d9c799 code=0x0 [ 409.226685][ T5915] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 409.267516][T10533] FAULT_INJECTION: forcing a failure. [ 409.267516][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 409.280880][T10533] CPU: 1 UID: 0 PID: 10533 Comm: syz.0.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.280907][T10533] Tainted: [L]=SOFTLOCKUP [ 409.280913][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.280923][T10533] Call Trace: [ 409.280929][T10533] [ 409.280936][T10533] dump_stack_lvl+0xe8/0x150 [ 409.280963][T10533] should_fail_ex+0x412/0x560 [ 409.280985][T10533] should_failslab+0xa8/0x100 [ 409.281005][T10533] __kmalloc_cache_noprof+0x88/0x660 [ 409.281022][T10533] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 409.281041][T10533] ? __genradix_ptr+0x1e1/0x220 [ 409.281067][T10533] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 409.281093][T10533] sctp_association_new+0x15d3/0x25e0 [ 409.281128][T10533] sctp_connect_new_asoc+0x2e4/0x6b0 [ 409.281162][T10533] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 409.281190][T10533] ? __local_bh_enable_ip+0xd0/0x130 [ 409.281209][T10533] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 409.281227][T10533] ? security_sctp_bind_connect+0x7e/0x2c0 [ 409.281254][T10533] sctp_sendmsg+0x1528/0x2c10 [ 409.281287][T10533] ? __pfx_sctp_sendmsg+0x10/0x10 [ 409.281312][T10533] ? aa_sk_perm+0x6d5/0x900 [ 409.281334][T10533] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.281353][T10533] ? sock_rps_record_flow+0x19/0x400 [ 409.281378][T10533] ? inet_sendmsg+0x2f4/0x370 [ 409.281404][T10533] __sys_sendto+0x627/0x7a0 [ 409.281426][T10533] ? __pfx___sys_sendto+0x10/0x10 [ 409.281444][T10533] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 409.281468][T10533] ? __fget_files+0x3a0/0x420 [ 409.281497][T10533] ? ksys_write+0x242/0x270 [ 409.281514][T10533] ? __pfx_ksys_write+0x10/0x10 [ 409.281533][T10533] __x64_sys_sendto+0xde/0x100 [ 409.281556][T10533] do_syscall_64+0x14d/0xf80 [ 409.281579][T10533] ? trace_irq_disable+0x3b/0x150 [ 409.281602][T10533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.281618][T10533] ? clear_bhb_loop+0x40/0x90 [ 409.281637][T10533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.281652][T10533] RIP: 0033:0x7f1d52d9c799 [ 409.281667][T10533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.281680][T10533] RSP: 002b:00007f1d53c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.281697][T10533] RAX: ffffffffffffffda RBX: 00007f1d53015fa0 RCX: 00007f1d52d9c799 [ 409.281708][T10533] RDX: 0000000000000002 RSI: 0000200000000ac0 RDI: 0000000000000009 [ 409.281718][T10533] RBP: 00007f1d53c95090 R08: 000020000005ffe4 R09: 000000000000001c [ 409.281728][T10533] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 409.281737][T10533] R13: 00007f1d53016038 R14: 00007f1d53015fa0 R15: 00007f1d5313fa48 [ 409.281774][T10533] [ 409.693835][ T5915] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 409.706007][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.714712][ T5915] usb 2-1: Product: syz [ 409.719581][ T5915] usb 2-1: Manufacturer: syz [ 409.724356][ T5915] usb 2-1: SerialNumber: syz [ 409.731979][ T5915] usb 2-1: config 0 descriptor?? [ 409.745049][ T5915] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 409.757785][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.767827][ T5915] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 409.777371][ T5915] usb 2-1: media controller created [ 409.792843][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.858124][ T5915] DVB: Unable to find symbol mt352_attach() [ 410.020611][ T5915] DVB: Unable to find symbol nxt6000_attach() [ 410.055758][ T5915] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 410.079840][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 410.110454][ T5915] dvb-usb: schedule remote query interval to 1000 msecs. [ 410.118254][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 410.136548][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 410.152649][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 410.176906][ T5915] usb 2-1: USB disconnect, device number 54 [ 410.224812][T10546] program syz.4.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.292494][T10548] FAULT_INJECTION: forcing a failure. [ 410.292494][T10548] name failslab, interval 1, probability 0, space 0, times 0 [ 410.297658][ T24] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 410.307514][T10548] CPU: 0 UID: 0 PID: 10548 Comm: syz.3.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.307607][T10548] Tainted: [L]=SOFTLOCKUP [ 410.307628][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.307651][T10548] Call Trace: [ 410.307660][T10548] [ 410.307676][T10548] dump_stack_lvl+0xe8/0x150 [ 410.307758][T10548] should_fail_ex+0x412/0x560 [ 410.307848][T10548] should_failslab+0xa8/0x100 [ 410.307924][T10548] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 410.308025][T10548] ? __alloc_skb+0x1d0/0x7d0 [ 410.308117][T10548] ? __local_bh_enable_ip+0xd0/0x130 [ 410.308209][T10548] __alloc_skb+0x1d0/0x7d0 [ 410.308294][T10548] netlink_dump+0x1ef/0xe80 [ 410.308410][T10548] ? __pfx_netlink_dump+0x10/0x10 [ 410.308527][T10548] ? genl_start+0x499/0x6c0 [ 410.308629][T10548] __netlink_dump_start+0x5cb/0x7e0 [ 410.308708][T10548] genl_family_rcv_msg_dumpit+0x213/0x310 [ 410.308797][T10548] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 410.308911][T10548] ? __pfx_genl_start+0x10/0x10 [ 410.308986][T10548] ? __pfx_genl_dumpit+0x10/0x10 [ 410.309059][T10548] ? __pfx_genl_done+0x10/0x10 [ 410.309155][T10548] ? bpf_lsm_capable+0x9/0x20 [ 410.309228][T10548] ? security_capable+0x7e/0x2c0 [ 410.309303][T10548] genl_rcv_msg+0x5e8/0x7a0 [ 410.309405][T10548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.309502][T10548] ? __pfx_batadv_hardif_neigh_dump+0x10/0x10 [ 410.309600][T10548] ? __lock_acquire+0x6b5/0x2cf0 [ 410.309703][T10548] netlink_rcv_skb+0x232/0x4b0 [ 410.309769][T10548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.309853][T10548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.309974][T10548] ? down_read+0x272/0x2e0 [ 410.310028][T10548] ? genl_rcv+0xd/0x40 [ 410.310104][T10548] genl_rcv+0x28/0x40 [ 410.310179][T10548] netlink_unicast+0x80f/0x9b0 [ 410.310261][T10548] ? __pfx_netlink_unicast+0x10/0x10 [ 410.310331][T10548] ? netlink_sendmsg+0x650/0xb40 [ 410.310393][T10548] ? skb_put+0x11b/0x210 [ 410.310445][T10548] netlink_sendmsg+0x813/0xb40 [ 410.310525][T10548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.310605][T10548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.310672][T10548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.310734][T10548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.310804][T10548] ____sys_sendmsg+0xa68/0xad0 [ 410.310953][T10548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.311057][T10548] ? import_iovec+0x73/0xa0 [ 410.311145][T10548] ___sys_sendmsg+0x2a5/0x360 [ 410.311241][T10548] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.311421][T10548] ? __fget_files+0x2a/0x420 [ 410.311496][T10548] ? __fget_files+0x3a0/0x420 [ 410.311601][T10548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.311695][T10548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.311807][T10548] ? __pfx_ksys_write+0x10/0x10 [ 410.311907][T10548] do_syscall_64+0x14d/0xf80 [ 410.311983][T10548] ? trace_irq_disable+0x3b/0x150 [ 410.312066][T10548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.312120][T10548] ? clear_bhb_loop+0x40/0x90 [ 410.312202][T10548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.312262][T10548] RIP: 0033:0x7f828c79c799 [ 410.312322][T10548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.312365][T10548] RSP: 002b:00007f828d744028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.312426][T10548] RAX: ffffffffffffffda RBX: 00007f828ca15fa0 RCX: 00007f828c79c799 [ 410.312462][T10548] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 410.312503][T10548] RBP: 00007f828d744090 R08: 0000000000000000 R09: 0000000000000000 [ 410.312536][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.312568][T10548] R13: 00007f828ca16038 R14: 00007f828ca15fa0 R15: 00007f828cb3fa48 [ 410.312659][T10548] [ 410.735203][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 410.872769][T10555] FAULT_INJECTION: forcing a failure. [ 410.872769][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 410.896835][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.4.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.896879][T10555] Tainted: [L]=SOFTLOCKUP [ 410.896887][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.896900][T10555] Call Trace: [ 410.896909][T10555] [ 410.896922][T10555] dump_stack_lvl+0xe8/0x150 [ 410.896949][T10555] should_fail_ex+0x412/0x560 [ 410.896971][T10555] should_failslab+0xa8/0x100 [ 410.896990][T10555] __kmalloc_noprof+0xe8/0x760 [ 410.897007][T10555] ? vmci_handle_arr_create+0x71/0x140 [ 410.897026][T10555] ? __kmalloc_noprof+0x1b8/0x760 [ 410.897044][T10555] vmci_handle_arr_create+0x71/0x140 [ 410.897066][T10555] vmci_ctx_create+0x296/0x650 [ 410.897088][T10555] vmci_host_unlocked_ioctl+0x1c30/0x2850 [ 410.897116][T10555] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 410.897153][T10555] ? kasan_quarantine_put+0xbb/0x1f0 [ 410.897175][T10555] ? tomoyo_path_number_perm+0x219/0x630 [ 410.897192][T10555] ? tomoyo_path_number_perm+0x219/0x630 [ 410.897210][T10555] ? do_vfs_ioctl+0x1166/0x1530 [ 410.897229][T10555] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.897248][T10555] ? vfs_write+0x9bc/0xb90 [ 410.897287][T10555] ? ksys_write+0x1fc/0x270 [ 410.897307][T10555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.897325][T10555] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 410.897347][T10555] __se_sys_ioctl+0xfc/0x170 [ 410.897365][T10555] do_syscall_64+0x14d/0xf80 [ 410.897388][T10555] ? trace_irq_disable+0x3b/0x150 [ 410.897410][T10555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.897426][T10555] ? clear_bhb_loop+0x40/0x90 [ 410.897444][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.897460][T10555] RIP: 0033:0x7ff759f9c799 [ 410.897475][T10555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.897489][T10555] RSP: 002b:00007ff75aebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.897505][T10555] RAX: ffffffffffffffda RBX: 00007ff75a215fa0 RCX: 00007ff759f9c799 [ 410.897517][T10555] RDX: 0000200000000100 RSI: 00000000000007a0 RDI: 0000000000000003 [ 410.897527][T10555] RBP: 00007ff75aebe090 R08: 0000000000000000 R09: 0000000000000000 [ 410.897537][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.897546][T10555] R13: 00007ff75a216038 R14: 00007ff75a215fa0 R15: 00007ff75a33fa48 [ 410.897569][T10555] [ 411.189026][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 411.199851][ T24] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 411.227859][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 411.238878][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 411.248752][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.299072][ T24] usb 1-1: Product: syz [ 411.303312][ T24] usb 1-1: Manufacturer: syz [ 411.323238][ T24] usb 1-1: SerialNumber: syz [ 411.338011][T10538] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 411.696291][ T5825] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 411.857340][T10572] FAULT_INJECTION: forcing a failure. [ 411.857340][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 411.886335][T10572] CPU: 0 UID: 0 PID: 10572 Comm: syz.1.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.886373][T10572] Tainted: [L]=SOFTLOCKUP [ 411.886382][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.886395][T10572] Call Trace: [ 411.886404][T10572] [ 411.886414][T10572] dump_stack_lvl+0xe8/0x150 [ 411.886454][T10572] should_fail_ex+0x412/0x560 [ 411.886484][T10572] should_failslab+0xa8/0x100 [ 411.886511][T10572] __kmalloc_cache_noprof+0x88/0x660 [ 411.886534][T10572] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 411.886564][T10572] ? __genradix_ptr+0x1e1/0x220 [ 411.886590][T10572] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 411.886650][T10572] sctp_association_new+0x15d3/0x25e0 [ 411.886709][T10572] sctp_connect_new_asoc+0x2e4/0x6b0 [ 411.886741][T10572] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 411.886790][T10572] ? __local_bh_enable_ip+0xd0/0x130 [ 411.886817][T10572] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 411.886841][T10572] ? security_sctp_bind_connect+0x7e/0x2c0 [ 411.886880][T10572] sctp_sendmsg+0x1528/0x2c10 [ 411.886912][T10572] ? __pfx_sctp_sendmsg+0x10/0x10 [ 411.886964][T10572] ? aa_sk_perm+0x6d5/0x900 [ 411.886995][T10572] ? __pfx_aa_sk_perm+0x10/0x10 [ 411.887021][T10572] ? sock_rps_record_flow+0x19/0x400 [ 411.887054][T10572] ? inet_sendmsg+0x2f4/0x370 [ 411.887080][T10572] __sys_sendto+0x627/0x7a0 [ 411.887126][T10572] ? __pfx___sys_sendto+0x10/0x10 [ 411.887151][T10572] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 411.887189][T10572] ? __fget_files+0x3a0/0x420 [ 411.887218][T10572] ? ksys_write+0x242/0x270 [ 411.887236][T10572] ? __pfx_ksys_write+0x10/0x10 [ 411.887276][T10572] __x64_sys_sendto+0xde/0x100 [ 411.887308][T10572] do_syscall_64+0x14d/0xf80 [ 411.887344][T10572] ? trace_irq_disable+0x3b/0x150 [ 411.887366][T10572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.887382][T10572] ? clear_bhb_loop+0x40/0x90 [ 411.887419][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.887442][T10572] RIP: 0033:0x7fba9ef9c799 [ 411.887462][T10572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.887485][T10572] RSP: 002b:00007fba9d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.887510][T10572] RAX: ffffffffffffffda RBX: 00007fba9f215fa0 RCX: 00007fba9ef9c799 [ 411.887522][T10572] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 411.887531][T10572] RBP: 00007fba9d1f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 411.887542][T10572] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 411.887566][T10572] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 411.887601][T10572] [ 411.891797][ T5825] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 412.311381][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.334013][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 412.343208][ T5825] usb 3-1: Product: syz [ 412.351847][ T5825] usb 3-1: Manufacturer: syz [ 412.365057][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 412.374872][ T5825] usb 3-1: SerialNumber: syz [ 412.460010][T10577] FAULT_INJECTION: forcing a failure. [ 412.460010][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 412.612181][ T29] audit: type=1326 audit(1772175645.903:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 412.622894][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.3.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.622994][T10577] Tainted: [L]=SOFTLOCKUP [ 412.623016][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.623049][T10577] Call Trace: [ 412.623070][T10577] [ 412.623093][T10577] dump_stack_lvl+0xe8/0x150 [ 412.623189][T10577] should_fail_ex+0x412/0x560 [ 412.623271][T10577] should_failslab+0xa8/0x100 [ 412.623344][T10577] __kvmalloc_node_noprof+0x178/0x8a0 [ 412.623408][T10577] ? alloc_netdev_mqs+0xa6/0x11b0 [ 412.623512][T10577] alloc_netdev_mqs+0xa6/0x11b0 [ 412.623580][T10577] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 412.623685][T10577] rtnl_create_link+0x31f/0xd70 [ 412.623759][T10577] rtnl_newlink_create+0x277/0xb70 [ 412.623843][T10577] ? __pfx___nla_validate_parse+0x10/0x10 [ 412.623943][T10577] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 412.624034][T10577] ? __pfx___mutex_lock+0x10/0x10 [ 412.624111][T10577] ? ns_capable+0x89/0xe0 [ 412.624193][T10577] rtnl_newlink+0x1666/0x1be0 [ 412.624299][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.624362][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.624508][T10577] ? kasan_quarantine_put+0xbb/0x1f0 [ 412.624561][T10577] ? lockdep_hardirqs_on+0x7a/0x110 [ 412.624666][T10577] ? kmem_cache_free+0x187/0x630 [ 412.624719][T10577] ? nlmon_xmit+0xb0/0x100 [ 412.624839][T10577] ? __lock_acquire+0x6b5/0x2cf0 [ 412.624938][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 412.625015][T10577] ? lockdep_hardirqs_on+0x7a/0x110 [ 412.625077][T10577] ? __dev_queue_xmit+0x277/0x3890 [ 412.625128][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 412.625192][T10577] ? __dev_queue_xmit+0x277/0x3890 [ 412.625316][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.625385][T10577] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 412.625461][T10577] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 412.625526][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.625589][T10577] ? ref_tracker_free+0x693/0x840 [ 412.625662][T10577] ? __copy_skb_header+0xa3/0x4a0 [ 412.625747][T10577] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.625810][T10577] ? __skb_clone+0x63/0x7a0 [ 412.625901][T10577] netlink_rcv_skb+0x232/0x4b0 [ 412.625974][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.626048][T10577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.626143][T10577] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.626235][T10577] netlink_unicast+0x80f/0x9b0 [ 412.626346][T10577] ? __pfx_netlink_unicast+0x10/0x10 [ 412.626416][T10577] ? netlink_sendmsg+0x650/0xb40 [ 412.626479][T10577] ? skb_put+0x11b/0x210 [ 412.626562][T10577] netlink_sendmsg+0x813/0xb40 [ 412.626650][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.626732][T10577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.626805][T10577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.626861][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.626912][T10577] ____sys_sendmsg+0xa68/0xad0 [ 412.627017][T10577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.627128][T10577] ? import_iovec+0x73/0xa0 [ 412.627213][T10577] ___sys_sendmsg+0x2a5/0x360 [ 412.627307][T10577] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.627485][T10577] ? __fget_files+0x2a/0x420 [ 412.627558][T10577] ? __fget_files+0x3a0/0x420 [ 412.627687][T10577] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.627793][T10577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.627900][T10577] ? __pfx_ksys_write+0x10/0x10 [ 412.627987][T10577] do_syscall_64+0x14d/0xf80 [ 412.628070][T10577] ? trace_irq_disable+0x3b/0x150 [ 412.628150][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.628204][T10577] ? clear_bhb_loop+0x40/0x90 [ 412.628274][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.628328][T10577] RIP: 0033:0x7f828c79c799 [ 412.628389][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.628432][T10577] RSP: 002b:00007f828d744028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.628495][T10577] RAX: ffffffffffffffda RBX: 00007f828ca15fa0 RCX: 00007f828c79c799 [ 412.628537][T10577] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 412.628569][T10577] RBP: 00007f828d744090 R08: 0000000000000000 R09: 0000000000000000 [ 412.628608][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.628649][T10577] R13: 00007f828ca16038 R14: 00007f828ca15fa0 R15: 00007f828cb3fa48 [ 412.628732][T10577] [ 413.347777][ T5825] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 413.365984][ T5825] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 413.422819][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input54 [ 413.450524][ T5825] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 413.468008][ T5176] bcm5974 1-1:1.0: could not read from device [ 413.473514][ T29] audit: type=1326 audit(1772175645.903:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 413.554037][ T5832] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 413.573724][ T5825] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 413.575724][ T5825] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 413.654344][ T5176] bcm5974 1-1:1.0: could not read from device [ 413.664197][ T29] audit: type=1326 audit(1772175645.903:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba9ef5cfce code=0x7ffc0000 [ 413.740078][ T29] audit: type=1326 audit(1772175645.903:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba9ef5cfce code=0x7ffc0000 [ 413.793520][ T29] audit: type=1326 audit(1772175645.903:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 413.820976][ T5825] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 413.847154][ T24] usb 1-1: USB disconnect, device number 56 [ 413.872634][ T5832] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 413.883059][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.896971][ T5832] usb 5-1: Product: syz [ 413.901197][ T5832] usb 5-1: Manufacturer: syz [ 413.906940][ T5832] usb 5-1: SerialNumber: syz [ 413.916973][ T5825] usb 3-1: USB disconnect, device number 56 [ 413.959439][ T5832] usb 5-1: config 0 descriptor?? [ 413.985586][ T29] audit: type=1326 audit(1772175645.903:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.029365][ T5832] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 414.081550][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.100510][ T29] audit: type=1326 audit(1772175645.903:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.144062][ T5832] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 414.188277][ T29] audit: type=1326 audit(1772175645.903:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.217557][ T5832] usb 5-1: media controller created [ 414.255756][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.261185][ T29] audit: type=1326 audit(1772175645.903:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.324826][ T29] audit: type=1326 audit(1772175645.903:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.385987][ T29] audit: type=1326 audit(1772175645.903:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.475976][ T29] audit: type=1326 audit(1772175645.903:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.499528][ T29] audit: type=1326 audit(1772175645.903:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.536568][ T29] audit: type=1326 audit(1772175645.903:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba9ef9c799 code=0x7ffc0000 [ 414.651061][ T5832] DVB: Unable to find symbol mt352_attach() [ 414.713507][T10607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.817664][T10610] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 415.085628][ T5832] DVB: Unable to find symbol nxt6000_attach() [ 415.135675][ T5832] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 415.181915][ T5832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 415.252475][ T5832] dvb-usb: schedule remote query interval to 1000 msecs. [ 415.268064][ T5832] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 415.295569][ T5832] dvb-usb: bulk message failed: -22 (7/0) [ 415.323561][ T5832] dvb-usb: bulk message failed: -22 (7/0) [ 415.407425][ T5832] usb 5-1: USB disconnect, device number 67 [ 415.915775][ T5832] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 416.447016][ T5825] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 416.476579][ T5832] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 416.626010][ T5825] usb 3-1: not running at top speed; connect to a high speed hub [ 416.639353][ T5825] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 416.650583][ T5825] usb 3-1: config 1 interface 0 has no altsetting 0 [ 416.662518][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 416.672696][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.681023][ T5825] usb 3-1: Product: syz [ 416.729835][ T5825] usb 3-1: Manufacturer: syz [ 416.756556][ T5832] usb 5-1: device descriptor read/64, error -71 [ 417.056132][ T5825] usb 3-1: SerialNumber: syz [ 417.069464][T10626] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.446563][ T5832] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 417.597694][ T5832] usb 5-1: device descriptor read/64, error -71 [ 417.666591][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 417.717546][ T5832] usb usb5-port1: attempt power cycle [ 417.826744][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 417.839867][ T24] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 417.854080][ T24] usb 4-1: config 0 has no interface number 0 [ 417.871673][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=1f.59 [ 417.896095][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.905425][ T24] usb 4-1: Product: syz [ 417.919261][ T24] usb 4-1: Manufacturer: syz [ 417.924781][ T24] usb 4-1: SerialNumber: syz [ 417.952551][ T24] usb 4-1: config 0 descriptor?? [ 418.057085][ T5832] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 418.090294][ T5832] usb 5-1: device descriptor read/8, error -71 [ 418.324753][T10639] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 418.398240][ T5832] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 418.438441][ T5832] usb 5-1: device descriptor read/8, error -71 [ 418.662907][ T5832] usb usb5-port1: unable to enumerate USB device [ 418.953425][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input56 [ 419.034653][ T5176] bcm5974 3-1:1.0: could not read from device [ 419.092337][ T5825] usb 3-1: USB disconnect, device number 57 [ 419.556530][ T5825] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 419.737671][ T5825] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 419.749595][ T5825] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 419.761103][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 419.770609][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 419.778680][T10666] FAULT_INJECTION: forcing a failure. [ 419.778680][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 419.783092][ T5825] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.803946][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.813751][ T5825] usb 5-1: Product: syz [ 419.819107][ T5825] usb 5-1: Manufacturer: syz [ 419.823949][ T5825] usb 5-1: SerialNumber: syz [ 419.827560][T10666] CPU: 1 UID: 0 PID: 10666 Comm: syz.1.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.827645][T10666] Tainted: [L]=SOFTLOCKUP [ 419.827667][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.827708][T10666] Call Trace: [ 419.827731][T10666] [ 419.827760][T10666] dump_stack_lvl+0xe8/0x150 [ 419.827841][T10666] should_fail_ex+0x412/0x560 [ 419.827929][T10666] should_failslab+0xa8/0x100 [ 419.828006][T10666] __kmalloc_node_noprof+0xf0/0x7c0 [ 419.828061][T10666] ? qdisc_alloc+0x6d4/0x9e0 [ 419.828125][T10666] ? qdisc_create+0x12c/0xf20 [ 419.828188][T10666] ? qdisc_alloc+0x92/0x9e0 [ 419.828258][T10666] ? netlink_rcv_skb+0x232/0x4b0 [ 419.828323][T10666] ? netlink_unicast+0x80f/0x9b0 [ 419.828389][T10666] qdisc_alloc+0x92/0x9e0 [ 419.828456][T10666] ? is_dynamic_key+0xd6/0x1c0 [ 419.828520][T10666] ? is_dynamic_key+0xd6/0x1c0 [ 419.828585][T10666] qdisc_create_dflt+0x8e/0x510 [ 419.828613][T10666] cbs_init+0xba/0x3e0 [ 419.828635][T10666] ? lockdep_rtnl_is_held+0x26/0x40 [ 419.828669][T10666] ? __pfx_cbs_init+0x10/0x10 [ 419.828691][T10666] qdisc_create+0x7c4/0xf20 [ 419.828725][T10666] tc_modify_qdisc+0x16f0/0x2290 [ 419.828746][T10666] ? rcu_is_watching+0x15/0xb0 [ 419.828788][T10666] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 419.828810][T10666] ? __dev_queue_xmit+0x277/0x3890 [ 419.828935][T10666] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 419.829003][T10666] rtnetlink_rcv_msg+0x77e/0xbe0 [ 419.829088][T10666] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 419.829171][T10666] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.829235][T10666] ? ref_tracker_free+0x693/0x840 [ 419.829299][T10666] ? __copy_skb_header+0xa3/0x4a0 [ 419.829385][T10666] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.829454][T10666] ? __skb_clone+0x63/0x7a0 [ 419.829552][T10666] netlink_rcv_skb+0x232/0x4b0 [ 419.829627][T10666] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.829701][T10666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.829804][T10666] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.829894][T10666] netlink_unicast+0x80f/0x9b0 [ 419.829979][T10666] ? __pfx_netlink_unicast+0x10/0x10 [ 419.830049][T10666] ? netlink_sendmsg+0x650/0xb40 [ 419.830113][T10666] ? skb_put+0x11b/0x210 [ 419.830201][T10666] netlink_sendmsg+0x813/0xb40 [ 419.830310][T10666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.830413][T10666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.830480][T10666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.830545][T10666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.830617][T10666] ____sys_sendmsg+0xa68/0xad0 [ 419.830716][T10666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.830815][T10666] ? import_iovec+0x73/0xa0 [ 419.830905][T10666] ___sys_sendmsg+0x2a5/0x360 [ 419.831001][T10666] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.831176][T10666] ? __fget_files+0x2a/0x420 [ 419.831250][T10666] ? __fget_files+0x3a0/0x420 [ 419.831355][T10666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 419.831442][T10666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.831549][T10666] ? __pfx_ksys_write+0x10/0x10 [ 419.831636][T10666] do_syscall_64+0x14d/0xf80 [ 419.831748][T10666] ? trace_irq_disable+0x3b/0x150 [ 419.831844][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.831894][T10666] ? clear_bhb_loop+0x40/0x90 [ 419.831961][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.832017][T10666] RIP: 0033:0x7fba9ef9c799 [ 419.832073][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.832125][T10666] RSP: 002b:00007fba9d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.832189][T10666] RAX: ffffffffffffffda RBX: 00007fba9f215fa0 RCX: 00007fba9ef9c799 [ 419.832232][T10666] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 419.832272][T10666] RBP: 00007fba9d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.832305][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.832339][T10666] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 419.832430][T10666] [ 420.065380][ T24] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 420.190117][T10668] netlink: 'syz.2.1199': attribute type 3 has an invalid length. [ 420.223952][ T5825] usb 5-1: config 0 descriptor?? [ 420.239148][ T5825] usb 5-1: selecting invalid altsetting 0 [ 420.265747][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.274824][ T24] usb 1-1: Product: syz [ 420.286653][ T24] usb 1-1: Manufacturer: syz [ 420.291335][ T24] usb 1-1: SerialNumber: syz [ 420.311539][ T24] usb 1-1: config 0 descriptor?? [ 420.333782][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 420.364177][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.398407][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 420.419111][ T24] usb 1-1: media controller created [ 420.444555][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 420.444574][ T29] audit: type=1326 audit(1772175653.743:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.477263][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.539547][ T29] audit: type=1326 audit(1772175653.743:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.656309][ T29] audit: type=1326 audit(1772175653.793:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.694713][ T29] audit: type=1326 audit(1772175653.793:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.719814][ T29] audit: type=1326 audit(1772175653.793:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.742615][ T29] audit: type=1326 audit(1772175653.793:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 420.807242][ T29] audit: type=1326 audit(1772175653.793:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 421.012444][ T29] audit: type=1326 audit(1772175653.793:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 421.103687][ T29] audit: type=1326 audit(1772175653.793:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 421.223789][ T29] audit: type=1326 audit(1772175653.793:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10671 comm="syz.2.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc79c799 code=0x7ffc0000 [ 421.471425][ T24] DVB: Unable to find symbol mt352_attach() [ 421.750273][ T24] DVB: Unable to find symbol nxt6000_attach() [ 421.776422][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 421.811265][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 421.888201][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 421.906493][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 421.938483][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 421.954630][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 421.985207][ T24] usb 1-1: USB disconnect, device number 57 [ 422.182661][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 422.214491][T10702] ip6tnl1: entered allmulticast mode [ 422.304369][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 422.488324][ T5915] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 422.526085][ T5902] usb 4-1: USB disconnect, device number 42 [ 422.646597][ T24] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 422.692642][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 422.716859][T10708] bridge0: entered promiscuous mode [ 422.722290][T10708] macsec1: entered promiscuous mode [ 422.728533][T10708] macsec1: entered allmulticast mode [ 422.734086][T10708] bridge0: entered allmulticast mode [ 422.741908][T10708] bridge0: port 1(macsec1) entered blocking state [ 422.749209][T10708] bridge0: port 1(macsec1) entered disabled state [ 422.830428][ T5915] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 422.858457][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 422.867802][ T24] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 422.879123][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 422.890328][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 422.905057][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.925381][ T24] usb 1-1: Product: syz [ 422.935517][ T24] usb 1-1: Manufacturer: syz [ 422.942260][ T24] usb 1-1: SerialNumber: syz [ 422.958344][T10700] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 422.972662][T10708] bridge0: left allmulticast mode [ 422.984716][T10708] bridge0: left promiscuous mode [ 423.010290][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 423.016787][ T5915] usb usb2-port1: attempt power cycle [ 423.156425][ T5825] usb 5-1: USB disconnect, device number 72 [ 423.367803][ T5915] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 423.416093][ T5902] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 423.424266][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 423.432348][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 423.576024][ T5902] usb 4-1: device descriptor read/64, error -32 [ 423.577561][ T5915] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 423.618012][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 423.637106][ T5915] usb usb2-port1: unable to enumerate USB device [ 423.826044][ T5902] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 423.835005][T10712] fuse: Unknown parameter 'rootmïÜŒ­Node' [ 424.026294][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 424.036424][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.047466][ T5902] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 424.059443][ T5902] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.072104][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.081556][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.089702][ T5902] usb 4-1: Product: syz [ 424.094045][ T5902] usb 4-1: Manufacturer: syz [ 424.098971][ T5902] usb 4-1: SerialNumber: syz [ 424.325372][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 424.420935][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input58 [ 424.456917][ T5176] bcm5974 1-1:1.0: could not read from device [ 424.471390][ T5176] bcm5974 1-1:1.0: could not read from device [ 424.481208][ T5902] usb-storage 4-1:1.2: USB Mass Storage device detected [ 424.498879][ T5176] bcm5974 1-1:1.0: could not read from device [ 424.519121][ T24] usb 1-1: USB disconnect, device number 58 [ 424.543888][ T5176] bcm5974 1-1:1.0: could not read from device [ 424.616357][ T5902] usb 4-1: USB disconnect, device number 44 [ 424.730771][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.914733][T10726] netlink: 'syz.2.1210': attribute type 3 has an invalid length. [ 425.267854][T10731] netlink: 'syz.4.1211': attribute type 4 has an invalid length. [ 425.516536][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 425.692398][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 425.702969][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.752284][ T24] usb 3-1: Product: syz [ 425.766675][ T24] usb 3-1: Manufacturer: syz [ 425.778774][ T24] usb 3-1: SerialNumber: syz [ 425.806709][ T24] usb 3-1: config 0 descriptor?? [ 425.840113][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 425.968660][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.004461][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 426.004483][ T29] audit: type=1326 audit(1772175659.303:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.040544][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 426.051772][ T24] usb 3-1: media controller created [ 426.082702][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.095200][ T29] audit: type=1326 audit(1772175659.303:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.133646][ T29] audit: type=1326 audit(1772175659.343:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.414581][ T29] audit: type=1326 audit(1772175659.343:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.476420][ T24] DVB: Unable to find symbol mt352_attach() [ 426.646653][ T29] audit: type=1326 audit(1772175659.343:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.713621][ T29] audit: type=1326 audit(1772175659.343:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.744563][ T24] DVB: Unable to find symbol nxt6000_attach() [ 426.765389][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 426.786409][ T29] audit: type=1326 audit(1772175659.343:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.825088][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 426.950508][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 426.966125][ T29] audit: type=1326 audit(1772175659.343:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 426.993894][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 427.008549][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 427.014361][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 427.020659][ T29] audit: type=1326 audit(1772175659.343:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 427.066669][ T24] usb 3-1: USB disconnect, device number 59 [ 427.090897][ T29] audit: type=1326 audit(1772175659.343:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff759f9c799 code=0x7ffc0000 [ 427.272721][T10753] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1216'. [ 427.827879][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 428.391726][T10762] bridge1: entered promiscuous mode [ 428.397598][T10762] bridge1: entered allmulticast mode [ 428.409639][T10762] team0: Port device bridge1 added [ 428.646000][ T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 428.795342][T10776] netlink: 'syz.0.1221': attribute type 29 has an invalid length. [ 428.810153][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 428.823925][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 428.835337][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 428.844597][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 428.857935][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.867505][ T9] usb 2-1: Product: syz [ 428.878856][ T9] usb 2-1: Manufacturer: syz [ 428.885009][ T9] usb 2-1: SerialNumber: syz [ 428.918672][T10769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 429.173893][T10782] netlink: 'syz.0.1222': attribute type 3 has an invalid length. [ 429.346035][ T5825] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 429.749544][T10794] netlink: 'syz.0.1223': attribute type 4 has an invalid length. [ 430.867015][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 431.038358][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 431.073582][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.137030][ T24] usb 3-1: Product: syz [ 431.151252][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input60 [ 431.163200][ T24] usb 3-1: Manufacturer: syz [ 431.192800][ T5176] bcm5974 2-1:1.0: could not read from device [ 431.218573][ T24] usb 3-1: SerialNumber: syz [ 431.239449][ T5176] bcm5974 2-1:1.0: could not read from device [ 431.249452][ T24] usb 3-1: config 0 descriptor?? [ 431.289448][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 431.316765][ T9] usb 2-1: USB disconnect, device number 59 [ 431.323163][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 431.350197][ T5176] bcm5974 2-1:1.0: could not read from device [ 431.375738][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 431.389088][ T24] usb 3-1: media controller created [ 431.421298][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.695579][ T24] DVB: Unable to find symbol mt352_attach() [ 431.805098][ T24] DVB: Unable to find symbol nxt6000_attach() [ 431.819544][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 431.860278][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 431.904141][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 431.923900][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 431.945094][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 431.968880][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 431.990806][T10825] netlink: 'syz.1.1233': attribute type 3 has an invalid length. [ 431.990877][ T24] usb 3-1: USB disconnect, device number 60 [ 432.188176][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 432.238009][T10827] FAULT_INJECTION: forcing a failure. [ 432.238009][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 432.273269][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.1.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.273306][T10827] Tainted: [L]=SOFTLOCKUP [ 432.273314][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.273328][T10827] Call Trace: [ 432.273338][T10827] [ 432.273348][T10827] dump_stack_lvl+0xe8/0x150 [ 432.273388][T10827] should_fail_ex+0x412/0x560 [ 432.273419][T10827] should_failslab+0xa8/0x100 [ 432.273448][T10827] __kmalloc_cache_noprof+0x88/0x660 [ 432.273472][T10827] ? nfnetlink_rcv+0xfe1/0x27b0 [ 432.273499][T10827] nfnetlink_rcv+0xfe1/0x27b0 [ 432.273557][T10827] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 432.273597][T10827] ? ref_tracker_free+0x693/0x840 [ 432.273652][T10827] ? __netlink_deliver_tap+0x807/0x850 [ 432.273679][T10827] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.273723][T10827] netlink_unicast+0x80f/0x9b0 [ 432.273756][T10827] ? __pfx_netlink_unicast+0x10/0x10 [ 432.273781][T10827] ? netlink_sendmsg+0x650/0xb40 [ 432.273805][T10827] ? skb_put+0x11b/0x210 [ 432.273837][T10827] netlink_sendmsg+0x813/0xb40 [ 432.273871][T10827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.273901][T10827] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.273929][T10827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.273954][T10827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.273979][T10827] ____sys_sendmsg+0xa68/0xad0 [ 432.274027][T10827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.274068][T10827] ? import_iovec+0x73/0xa0 [ 432.274104][T10827] ___sys_sendmsg+0x2a5/0x360 [ 432.274141][T10827] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.274209][T10827] ? __fget_files+0x2a/0x420 [ 432.274239][T10827] ? __fget_files+0x3a0/0x420 [ 432.274278][T10827] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.274311][T10827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.274351][T10827] ? __pfx_ksys_write+0x10/0x10 [ 432.274386][T10827] do_syscall_64+0x14d/0xf80 [ 432.274418][T10827] ? trace_irq_disable+0x3b/0x150 [ 432.274449][T10827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.274470][T10827] ? clear_bhb_loop+0x40/0x90 [ 432.274497][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.274519][T10827] RIP: 0033:0x7fba9ef9c799 [ 432.274541][T10827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.274560][T10827] RSP: 002b:00007fba9d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.274584][T10827] RAX: ffffffffffffffda RBX: 00007fba9f215fa0 RCX: 00007fba9ef9c799 [ 432.274600][T10827] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 432.274614][T10827] RBP: 00007fba9d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.274628][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.274641][T10827] R13: 00007fba9f216038 R14: 00007fba9f215fa0 R15: 00007fba9f33fa48 [ 432.274675][T10827] [ 432.864436][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 432.872852][ T5825] usb 4-1: can't read configurations, error -71 [ 433.045278][T10837] FAULT_INJECTION: forcing a failure. [ 433.045278][T10837] name failslab, interval 1, probability 0, space 0, times 0 [ 433.073582][T10837] CPU: 1 UID: 0 PID: 10837 Comm: syz.3.1236 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.073617][T10837] Tainted: [L]=SOFTLOCKUP [ 433.073626][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.073639][T10837] Call Trace: [ 433.073648][T10837] [ 433.073658][T10837] dump_stack_lvl+0xe8/0x150 [ 433.073693][T10837] should_fail_ex+0x412/0x560 [ 433.073723][T10837] should_failslab+0xa8/0x100 [ 433.073750][T10837] __kmalloc_noprof+0xe8/0x760 [ 433.073772][T10837] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.073811][T10837] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.073852][T10837] genl_family_rcv_msg_doit+0xd9/0x330 [ 433.073891][T10837] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.073933][T10837] ? apparmor_capable+0x126/0x170 [ 433.073965][T10837] ? bpf_lsm_capable+0x9/0x20 [ 433.074014][T10837] ? security_capable+0x7e/0x2c0 [ 433.074045][T10837] genl_rcv_msg+0x61c/0x7a0 [ 433.074083][T10837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.074113][T10837] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 433.074133][T10837] ? __pfx_nl80211_new_key+0x10/0x10 [ 433.074154][T10837] ? __pfx_nl80211_post_doit+0x10/0x10 [ 433.074176][T10837] ? __lock_acquire+0x6b5/0x2cf0 [ 433.074215][T10837] netlink_rcv_skb+0x232/0x4b0 [ 433.074243][T10837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.074275][T10837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.074318][T10837] ? down_read+0x272/0x2e0 [ 433.074339][T10837] ? genl_rcv+0xd/0x40 [ 433.074371][T10837] genl_rcv+0x28/0x40 [ 433.074400][T10837] netlink_unicast+0x80f/0x9b0 [ 433.074432][T10837] ? __pfx_netlink_unicast+0x10/0x10 [ 433.074457][T10837] ? netlink_sendmsg+0x650/0xb40 [ 433.074480][T10837] ? skb_put+0x11b/0x210 [ 433.074512][T10837] netlink_sendmsg+0x813/0xb40 [ 433.074547][T10837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.074576][T10837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.074602][T10837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.074625][T10837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.074649][T10837] ____sys_sendmsg+0xa68/0xad0 [ 433.074690][T10837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.074730][T10837] ? import_iovec+0x73/0xa0 [ 433.074761][T10837] ___sys_sendmsg+0x2a5/0x360 [ 433.074797][T10837] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.074861][T10837] ? __fget_files+0x2a/0x420 [ 433.074891][T10837] ? __fget_files+0x3a0/0x420 [ 433.074930][T10837] __x64_sys_sendmsg+0x1bd/0x2a0 [ 433.074964][T10837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.075011][T10837] ? __pfx_ksys_write+0x10/0x10 [ 433.075043][T10837] do_syscall_64+0x14d/0xf80 [ 433.075074][T10837] ? trace_irq_disable+0x3b/0x150 [ 433.075103][T10837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.075124][T10837] ? clear_bhb_loop+0x40/0x90 [ 433.075150][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.075171][T10837] RIP: 0033:0x7f828c79c799 [ 433.075192][T10837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.075211][T10837] RSP: 002b:00007f828d744028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.075234][T10837] RAX: ffffffffffffffda RBX: 00007f828ca15fa0 RCX: 00007f828c79c799 [ 433.075249][T10837] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000003 [ 433.075263][T10837] RBP: 00007f828d744090 R08: 0000000000000000 R09: 0000000000000000 [ 433.075276][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.075287][T10837] R13: 00007f828ca16038 R14: 00007f828ca15fa0 R15: 00007f828cb3fa48 [ 433.075320][T10837] [ 433.497043][T10843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.728660][ T42] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 433.892342][ T42] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 433.902286][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.917653][ T5825] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 433.935523][ T42] usb 1-1: Product: syz [ 433.940418][ T42] usb 1-1: Manufacturer: syz [ 433.945061][ T42] usb 1-1: SerialNumber: syz [ 433.960821][ T42] usb 1-1: config 0 descriptor?? [ 433.977968][ T42] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 434.080939][ T5825] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.102104][ T5825] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 434.125973][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 434.140063][ T5825] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.168369][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.183038][ T5825] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 434.201610][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.232850][ T5825] usb 4-1: config 0 descriptor?? [ 434.244245][T10843] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.296381][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 434.309279][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 434.326147][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 434.355666][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 434.371933][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 434.395575][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.408510][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 434.423999][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 434.441455][ T9] usb 5-1: Product: syz [ 434.445803][ T9] usb 5-1: Manufacturer: syz [ 434.453436][ T9] usb 5-1: SerialNumber: syz [ 434.482694][ T9] usb 5-1: config 0 descriptor?? [ 434.524949][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 434.559884][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 434.739936][ T5915] usb 5-1: USB disconnect, device number 73 [ 434.740009][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 434.757827][ T5915] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 434.842248][ T5825] hid-u2fzero 0003:10C4:8ACF.0012: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 434.864311][ T5825] hid-u2fzero 0003:10C4:8ACF.0012: U2F Zero LED initialised [ 434.875230][ T5825] hid-u2fzero 0003:10C4:8ACF.0012: U2F Zero RNG initialised [ 434.958204][T10853] ldusb: No device or device unplugged -19 [ 434.971741][T10853] loop5: detected capacity change from 0 to 2640 [ 434.978936][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 434.987364][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 434.995251][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.016120][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.032696][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.050012][T10866] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 435.061407][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.069982][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.078329][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.086730][T10853] ldm_validate_partition_table(): Disk read failed. [ 435.136834][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.503014][T10866] bridge3: entered promiscuous mode [ 435.508922][T10866] bridge3: entered allmulticast mode [ 435.517885][T10866] team0: Port device bridge3 added [ 435.572722][ T42] gspca_stk1135: reg_w 0xf err -71 [ 435.579096][T10853] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.588925][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.595341][ T42] gspca_stk1135: Sensor write failed [ 435.602792][T10853] Dev loop5: unable to read RDB block 0 [ 435.609362][T10853] loop5: unable to read partition table [ 435.615224][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.623302][T10853] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 435.645572][ T42] gspca_stk1135: Sensor write failed [ 435.816575][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.839568][ T42] gspca_stk1135: Sensor read failed [ 435.852431][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.862344][ T42] gspca_stk1135: Sensor read failed [ 435.870661][ T42] gspca_stk1135: Detected sensor type unknown (0x0) [ 435.878264][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.884837][ T42] gspca_stk1135: Sensor read failed [ 435.890837][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.897794][ T42] gspca_stk1135: Sensor read failed [ 435.903077][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.910021][ T42] gspca_stk1135: Sensor write failed [ 435.915461][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 435.922670][ T42] gspca_stk1135: Sensor write failed [ 435.928595][ T42] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 435.940110][ T42] usb 1-1: USB disconnect, device number 59 [ 436.318632][T10876] fuse: Unknown parameter 'fuse' [ 436.553916][T10883] netlink: 'syz.1.1251': attribute type 3 has an invalid length. [ 436.563012][T10883] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1251'. [ 436.617241][ T5915] usb 4-1: USB disconnect, device number 46 [ 436.756015][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 436.936002][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 436.947483][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 436.956943][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.965820][ T9] usb 5-1: Product: syz [ 436.973135][ T9] usb 5-1: Manufacturer: syz [ 436.978093][ T9] usb 5-1: SerialNumber: syz [ 436.986359][ T9] usb 5-1: config 0 descriptor?? [ 436.997342][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 437.005497][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 437.005497][ T9] [ 437.013354][ T9] usb 5-1: selecting invalid altsetting 3 [ 437.019654][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 437.019654][ T9] [ 437.030392][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 437.040256][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.050715][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 437.059773][ T9] usb 5-1: media controller created [ 437.066988][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 437.072941][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 437.084043][ T9] dvb-usb: MAC address reading failed. [ 437.112806][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.283891][ T9] DVB: Unable to find symbol stb0899_attach() [ 437.293046][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 437.465397][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 437.465417][ T29] audit: type=1326 audit(1772175670.763:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.0.1258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d52d9c799 code=0x0 [ 437.540597][ T9] rc_core: IR keymap rc-tt-1500 not found [ 437.568855][ T9] Registered IR keymap rc-empty [ 437.585275][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 437.650128][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input62 [ 437.697823][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 437.713544][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 437.713544][ T9] [ 437.812585][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 437.822055][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 437.829168][ T10] dvb-usb: error -22 while querying for an remote control event. [ 437.955972][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 437.972499][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.096071][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.103362][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.266007][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.271956][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.397952][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.411679][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.546006][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.551855][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.752128][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.757979][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.866361][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 438.872584][ T9] dvb-usb: error -22 while querying for an remote control event. [ 438.996823][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 439.002858][ T9] dvb-usb: error -22 while querying for an remote control event. [ 439.127463][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 439.245389][ T9] dvb-usb: error -22 while querying for an remote control event. [ 439.387245][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 439.399997][ T9] dvb-usb: error -22 while querying for an remote control event. [ 439.426519][ T5915] usb 5-1: USB disconnect, device number 74 [ 439.642635][ T5915] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 440.031479][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.039804][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.356623][ T5915] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 440.421485][ T29] audit: type=1326 audit(1772175673.723:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.2.1271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ffc79c799 code=0x0 [ 440.538971][ T5915] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.553448][ T5915] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 440.582562][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.620042][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 440.654798][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 440.697433][ T5915] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.707206][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.717656][ T5915] usb 1-1: Product: syz [ 440.756577][ T5915] usb 1-1: Manufacturer: syz [ 440.925217][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 440.932744][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 440.943657][ T5915] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 440.950412][ T5915] cdc_wdm 1-1:1.0: Unknown control protocol [ 441.133069][ T5915] usb 1-1: USB disconnect, device number 60 [ 441.183774][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 441.193721][T10961] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1272'. [ 441.227303][T10962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.085855][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 442.732031][ T42] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 442.749778][T10997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1281'. [ 442.969265][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.980833][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.990897][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.026893][ T42] usb 3-1: config 0 descriptor?? [ 443.264365][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 443.299358][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 443.324477][ T42] usb 3-1: USB disconnect, device number 61 [ 443.876539][ T42] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 443.937324][T11011] macsec2: entered promiscuous mode [ 443.942667][T11011] bridge0: entered promiscuous mode [ 443.948193][T11011] macsec2: entered allmulticast mode [ 443.953521][T11011] bridge0: entered allmulticast mode [ 443.971252][T11011] bridge0: port 3(macsec2) entered blocking state [ 443.980364][T11011] bridge0: port 3(macsec2) entered disabled state [ 444.108189][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.120114][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.150695][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.200159][T11011] bridge0: left allmulticast mode [ 444.205399][T11011] bridge0: left promiscuous mode [ 444.217456][ T42] usb 3-1: config 0 descriptor?? [ 444.279841][T11012] bridge0: entered promiscuous mode [ 444.285607][T11012] macsec1: entered promiscuous mode [ 444.292204][T11012] macsec1: entered allmulticast mode [ 444.297943][T11012] bridge0: entered allmulticast mode [ 444.323650][T11012] bridge0: port 4(macsec1) entered blocking state [ 444.331189][T11012] bridge0: port 4(macsec1) entered disabled state [ 444.448922][ T42] hub 3-1:0.0: USB hub found [ 444.493397][T11012] bridge0: left allmulticast mode [ 444.499706][T11012] bridge0: left promiscuous mode [ 444.962045][ T42] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 444.977536][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 445.004745][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 445.147189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 445.147241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.160511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 445.172164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.184247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 445.196366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.208261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 445.220259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.232345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 445.244226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.329727][ T42] usb 3-1: USB disconnect, device number 62 [ 450.155966][ C0] net_ratelimit: 23500 callbacks suppressed [ 450.155990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.156173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 450.163063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.174986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 450.187149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.199124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 450.211277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.223000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 450.235163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.246982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 450.735930][ C0] sched: DL replenish lagged too much [ 455.165922][ C1] net_ratelimit: 23758 callbacks suppressed [ 455.165946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 455.166538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.173049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 455.185190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.197141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 455.209262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.221299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 455.233342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.245240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 455.257349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.175981][ C1] net_ratelimit: 24131 callbacks suppressed [ 460.176005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 460.179719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.182912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.195289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.207529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.219532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.231259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 460.243280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.255021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.267871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.185990][ C0] net_ratelimit: 17918 callbacks suppressed [ 465.186012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.186787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.193173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.205220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 465.217324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.229005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.241472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.256021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.265531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.277218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 470.195915][ C0] net_ratelimit: 19352 callbacks suppressed [ 470.195939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.195977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 470.203091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.214869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.227150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.241533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.250955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.262967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 470.274901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.286747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.206014][ C0] net_ratelimit: 19158 callbacks suppressed [ 475.206037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.207848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.213253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.225092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 475.237078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.248853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.261186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.275855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.284966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.297089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 480.216119][ C1] net_ratelimit: 18265 callbacks suppressed [ 480.216142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.216407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.223310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 480.235503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.247170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.259421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.274035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.283231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.295668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 480.307979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.225993][ C0] net_ratelimit: 16622 callbacks suppressed [ 485.226016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.227918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.233219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.244926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 485.257523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.270524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.283115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.297218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.306799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.318773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 490.235938][ C0] net_ratelimit: 18026 callbacks suppressed [ 490.235974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.237635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.243069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.255262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 490.267455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.279203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.291266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.307092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.315388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.327180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 495.246207][ C0] net_ratelimit: 18703 callbacks suppressed [ 495.246230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.249876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.253277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.265197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 495.277419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.289163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.301347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.315790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.325421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.337078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 500.255994][ C0] net_ratelimit: 18415 callbacks suppressed [ 500.256019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.256727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.263358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.275006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 500.287328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.298846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.311311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.325595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.335102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.346898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 501.622916][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.642686][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.266015][ C1] net_ratelimit: 18993 callbacks suppressed [ 505.266039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 505.266172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.273082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.285315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.299629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.309287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.321375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 505.333397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.344993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.357431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.275908][ C0] net_ratelimit: 19182 callbacks suppressed [ 510.275933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.277891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.283099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.295060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 510.307210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.319058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.331255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.346385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.355666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.367217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 515.285870][ C1] net_ratelimit: 19216 callbacks suppressed [ 515.285893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.286352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.294624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 515.305097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.316828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.329039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.343838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.352894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.364999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 515.377280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.295995][ C1] net_ratelimit: 19040 callbacks suppressed [ 520.295995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.296017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.303006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.318489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.327033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.339026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 520.350938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.362749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.374837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.389527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.305946][ C0] net_ratelimit: 19027 callbacks suppressed [ 525.305971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.306930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.313119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.325048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 525.337140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.348850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.361053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.375582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.384874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.396840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 530.316114][ C0] net_ratelimit: 17883 callbacks suppressed [ 530.316137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.316639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.323313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.335326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 530.347512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.358999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.371355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.386401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.395603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.407385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 535.326267][ C0] net_ratelimit: 18879 callbacks suppressed [ 535.326291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.327797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.333379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.345251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 535.357478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.369256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.381777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.396207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.405703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.417463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 540.336208][ C0] net_ratelimit: 18428 callbacks suppressed [ 540.336231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.340163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.343446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.355328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 540.367481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.379025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.391494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.405925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.417015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.427059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 545.345885][ C0] net_ratelimit: 17690 callbacks suppressed [ 545.345907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.346826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 545.352857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.364704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.377125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.392069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.400936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.412996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 545.425016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.436964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.975846][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 549.982889][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10995/1:b..l [ 549.991398][ C0] rcu: (detected by 0, t=10503 jiffies, g=55617, q=1739 ncpus=2) [ 549.999256][ C0] task:syz.3.1272 state:R running task stack:26472 pid:10995 tgid:10957 ppid:5848 task_flags:0x400040 flags:0x00080002 [ 550.014016][ C0] Call Trace: [ 550.017346][ C0] [ 550.020318][ C0] __schedule+0x1585/0x5340 [ 550.025029][ C0] ? stack_trace_save+0xa9/0x100 [ 550.030018][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 550.035440][ C0] ? __pfx___schedule+0x10/0x10 [ 550.040361][ C0] preempt_schedule_irq+0x4d/0xa0 [ 550.045444][ C0] irqentry_exit+0x599/0x620 [ 550.050094][ C0] ? trace_irq_disable+0x3b/0x150 [ 550.055194][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.061219][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 550.066548][ C0] Code: e9 30 ff ff ff e8 65 c5 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 42 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c6 ab 0e 0a cc 48 8d 3d 9e 5b 73 [ 550.086207][ C0] RSP: 0018:ffffc9000497f578 EFLAGS: 00000286 [ 550.092319][ C0] RAX: 2a6a604af7285800 RBX: 0000000000000246 RCX: 0000000000000046 [ 550.100417][ C0] RDX: 000000002f5aa33a RSI: ffffffff8e162dda RDI: ffffffff8c27aa00 [ 550.108425][ C0] RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 550.116490][ C0] R10: ffffc9000497f6d8 R11: ffffffff81b0b120 R12: 0000000000000002 [ 550.124542][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 550.132562][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.138769][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 550.143949][ C0] ? __se_sys_io_uring_enter+0x2cc/0x18c0 [ 550.149809][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 550.155008][ C0] unwind_next_frame+0xc2/0x23c0 [ 550.159997][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 550.165174][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 550.170370][ C0] ? io_submit_sqes+0xfb0/0x2370 [ 550.175355][ C0] ? __se_sys_io_uring_enter+0x2cc/0x18c0 [ 550.181121][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.187315][ C0] arch_stack_walk+0x11b/0x150 [ 550.192141][ C0] ? __se_sys_io_uring_enter+0x2cc/0x18c0 [ 550.197916][ C0] stack_trace_save+0xa9/0x100 [ 550.202738][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 550.208153][ C0] ? stack_depot_save_flags+0x33/0x810 [ 550.213667][ C0] kasan_save_track+0x3e/0x80 [ 550.218383][ C0] ? kasan_save_track+0x3e/0x80 [ 550.223266][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 550.228332][ C0] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 550.234439][ C0] ? __io_alloc_req_refill+0xb4/0x360 [ 550.239865][ C0] ? io_submit_sqes+0xfb0/0x2370 [ 550.244854][ C0] ? __se_sys_io_uring_enter+0x2cc/0x18c0 [ 550.250720][ C0] __kasan_slab_alloc+0x6c/0x80 [ 550.255610][ C0] kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 550.261650][ C0] __io_alloc_req_refill+0xb4/0x360 [ 550.266900][ C0] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 550.272800][ C0] ? io_submit_fail_init+0x3c2/0x5c0 [ 550.278151][ C0] io_submit_sqes+0xfb0/0x2370 [ 550.282995][ C0] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 550.288589][ C0] ? __pfx_do_futex+0x10/0x10 [ 550.293323][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 550.299379][ C0] ? rcu_is_watching+0x15/0xb0 [ 550.304195][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 550.309880][ C0] do_syscall_64+0x14d/0xf80 [ 550.314528][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.320722][ C0] ? clear_bhb_loop+0x40/0x90 [ 550.325440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.331372][ C0] RIP: 0033:0x7f828c79c799 [ 550.335825][ C0] RSP: 002b:00007f828d6ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 550.344286][ C0] RAX: ffffffffffffffda RBX: 00007f828ca16270 RCX: 00007f828c79c799 [ 550.352298][ C0] RDX: 00000000000004c1 RSI: 0000000000003d0e RDI: 0000000000000005 [ 550.356187][ C1] net_ratelimit: 17935 callbacks suppressed [ 550.356230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.360302][ C0] RBP: 00007f828c832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 550.367634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 550.378204][ C0] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 550.378222][ C0] R13: 00007f828ca16308 R14: 00007f828ca16270 R15: 00007f828cb3fa48 [ 550.378256][ C0] [ 550.387320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.398266][ C0] rcu: rcu_preempt kthread starved for 328 jiffies! g55617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 550.398293][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 550.410019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.414264][ C0] rcu: RCU grace-period kthread stack dump: [ 550.414277][ C0] task:rcu_preempt state:R [ 550.418645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 550.429217][ C0] running task stack:27664 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 550.441383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.450308][ C0] Call Trace: [ 550.450319][ C0] [ 550.450333][ C0] __schedule+0x1585/0x5340 [ 550.466201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.468320][ C0] ? __pfx___schedule+0x10/0x10 [ 550.474105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 550.485014][ C0] ? schedule+0x90/0x360 [ 550.485053][ C0] schedule+0x164/0x360 [ 550.497130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.508058][ C0] schedule_timeout+0x158/0x2c0 [ 550.508097][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 550.517280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.518859][ C0] ? __pfx_process_timeout+0x10/0x10 [ 550.595551][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.601417][ C0] ? prepare_to_swait_event+0x340/0x370 [ 550.607016][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 550.611921][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.617166][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 550.621985][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 550.628200][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 550.633553][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.639413][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 550.644063][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 550.649308][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.655170][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 550.660159][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 550.665239][ C0] kthread+0x388/0x470 [ 550.669346][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 550.674599][ C0] ? __pfx_kthread+0x10/0x10 [ 550.679248][ C0] ret_from_fork+0x51e/0xb90 [ 550.683908][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 550.689070][ C0] ? __switch_to+0xc7d/0x1450 [ 550.693808][ C0] ? __pfx_kthread+0x10/0x10 [ 550.698441][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.703274][ C0] [ 550.706332][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 550.712784][ C0] Sending NMI from CPU 0 to CPUs 1: [ 550.718034][ C1] NMI backtrace for cpu 1 [ 550.718054][ C1] CPU: 1 UID: 0 PID: 3406 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 550.718080][ C1] Tainted: [L]=SOFTLOCKUP [ 550.718087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.718100][ C1] Workqueue: bat_events batadv_tt_purge [ 550.718128][ C1] RIP: 0010:match_held_lock+0x3/0xb0 [ 550.718158][ C1] Code: b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 8b [ 550.718174][ C1] RSP: 0018:ffffc90000a077b8 EFLAGS: 00000087 [ 550.718189][ C1] RAX: 0000000000000006 RBX: ffff888032db29a8 RCX: 0000000080000101 [ 550.718202][ C1] RDX: 0000000000000100 RSI: ffffffff8fbcc908 RDI: ffff888032db29a8 [ 550.718215][ C1] RBP: 00000000ffffffff R08: ffffc90000a07b40 R09: ffffc90000a07b50 [ 550.718228][ C1] R10: ffffc90000a079a0 R11: fffff52000140f36 R12: 0000000000000246 [ 550.718241][ C1] R13: ffff888032db1e40 R14: ffffffff8fbcc908 R15: 0000000000000002 [ 550.718254][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 550.718269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.718281][ C1] CR2: 00007fae1c5f7ffc CR3: 00000000758a0000 CR4: 00000000003526f0 [ 550.718297][ C1] Call Trace: [ 550.718304][ C1] [ 550.718313][ C1] lock_is_held_type+0x89/0x150 [ 550.718341][ C1] lockdep_rtnl_is_held+0x1b/0x40 [ 550.718368][ C1] ip6_ignore_linkdown+0x4f/0x140 [ 550.718397][ C1] find_match+0x9c/0xb40 [ 550.718427][ C1] __find_rr_leaf+0x248/0x760 [ 550.718458][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 550.718485][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 550.718508][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 550.718528][ C1] fib6_table_lookup+0x3b4/0xa80 [ 550.718559][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 550.718584][ C1] ip6_pol_route+0x228/0x13d0 [ 550.718610][ C1] ? ip6_pol_route+0x160/0x13d0 [ 550.718631][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 550.718650][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 550.718673][ C1] ? net_generic+0x1e/0x240 [ 550.718693][ C1] fib6_rule_lookup+0x556/0x730 [ 550.718715][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 550.718736][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 550.718758][ C1] ? NF_HOOK+0xa2/0x3f0 [ 550.718781][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 550.718799][ C1] ? NF_HOOK+0x369/0x3f0 [ 550.718818][ C1] ip6_route_input+0x730/0xad0 [ 550.718842][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 550.718866][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 550.718895][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 550.718923][ C1] ip6_rcv_finish+0x141/0x2e0 [ 550.718958][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 550.718982][ C1] ip_sabotage_in+0x1e1/0x270 [ 550.719000][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 550.719020][ C1] nf_hook_slow+0xc5/0x220 [ 550.719044][ C1] NF_HOOK+0x21f/0x3c0 [ 550.719068][ C1] ? skb_orphan+0xaf/0xd0 [ 550.719083][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 550.719108][ C1] ? NF_HOOK+0x9e/0x3c0 [ 550.719132][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 550.719158][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 550.719187][ C1] ? netif_receive_skb+0x102/0xc50 [ 550.719207][ C1] netif_receive_skb+0x278/0xc50 [ 550.719228][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 550.719249][ C1] ? br_netif_receive_skb+0x126/0x190 [ 550.719270][ C1] NF_HOOK+0xa4/0x3a0 [ 550.719289][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 550.719309][ C1] ? NF_HOOK+0xfa/0x3a0 [ 550.719328][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 550.719347][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 550.719371][ C1] ? br_pass_frame_up+0x275/0x420 [ 550.719392][ C1] br_handle_frame_finish+0x14b2/0x1b40 [ 550.719412][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 550.719440][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 550.719464][ C1] ? ip6t_do_table+0x1b3/0x1560 [ 550.719488][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 550.719510][ C1] ? nf_hook_slow+0x176/0x220 [ 550.719533][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 550.719553][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 550.719575][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 550.719595][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 550.719620][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 550.719643][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 550.719665][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 550.719690][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 550.719711][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 550.719731][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 550.719754][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 550.719775][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 550.719797][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 550.719816][ C1] br_handle_frame+0x1277/0x1510 [ 550.719839][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 550.719861][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 550.719886][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 550.719905][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 550.719927][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 550.719955][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 550.719983][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 550.720006][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 550.720027][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 550.720053][ C1] ? NF_HOOK+0x336/0x3c0 [ 550.720083][ C1] ? lock_acquire+0xf0/0x2e0 [ 550.720106][ C1] ? process_backlog+0x3eb/0x1950 [ 550.720127][ C1] ? process_backlog+0x3eb/0x1950 [ 550.720149][ C1] ? process_backlog+0x3eb/0x1950 [ 550.720171][ C1] process_backlog+0x76d/0x1950 [ 550.720200][ C1] __napi_poll+0xae/0x340 [ 550.720219][ C1] ? skb_defer_free_flush+0x233/0x260 [ 550.720241][ C1] net_rx_action+0x627/0xf70 [ 550.720262][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 550.720293][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 550.720323][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 550.720345][ C1] handle_softirqs+0x22a/0x870 [ 550.720368][ C1] ? do_softirq+0x76/0xd0 [ 550.720391][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 550.720412][ C1] do_softirq+0x76/0xd0 [ 550.720433][ C1] [ 550.720439][ C1] [ 550.720446][ C1] __local_bh_enable_ip+0xf8/0x130 [ 550.720468][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 550.720492][ C1] ? process_scheduled_works+0xa25/0x1830 [ 550.720516][ C1] process_scheduled_works+0xb02/0x1830 [ 550.720550][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.720571][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.720596][ C1] rescuer_thread+0x824/0x1120 [ 550.720630][ C1] ? rescuer_thread+0xbb/0x1120 [ 550.720662][ C1] kthread+0x388/0x470 [ 550.720678][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 550.720701][ C1] ? __pfx_kthread+0x10/0x10 [ 550.720718][ C1] ret_from_fork+0x51e/0xb90 [ 550.720741][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 550.720763][ C1] ? __switch_to+0xc7d/0x1450 [ 550.720783][ C1] ? __pfx_kthread+0x10/0x10 [ 550.720800][ C1] ret_from_fork_asm+0x1a/0x30 [ 550.720832][ C1] [ 555.366205][ C0] net_ratelimit: 15205 callbacks suppressed [ 555.366228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.368566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.373468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.385298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0) [ 555.397495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.409070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.421482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.435789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.445312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.457317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:2f:a8:19:a8:bf, vlan:0)