last executing test programs: 7m33.031648636s ago: executing program 2 (id=1727): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 7m29.707612533s ago: executing program 2 (id=1742): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8a", 0x1f, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 7m28.689963954s ago: executing program 2 (id=1747): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) r1 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 7m28.595775099s ago: executing program 2 (id=1748): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) 7m27.783989657s ago: executing program 2 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff0a) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x3, r4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x11}, [@NFTA_TABLE_USERDATA={0x55, 0x6, "c517bae344f24bba0b70eb127aefdee07ca2ffd3ffbec3b1bbd5b504b39e767a1a37d80a938399cb9f63aea353c52670b0458be56a176bde4740c6e088fa5095655a60f1474657bc97f6295b6bb4095949"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xf8}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r9, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04132108c800feffc900ff03dd00000400c9000200c800fa08c9000800f21818522f69446804e693cb4be28efff2e393358c137125f032689f88ff899fd8e245fe2302b11dd73ffb9b10f2964fdf213c876db2cd02d91a48cab7dd8445ee50"], 0x24) socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r10, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 7m26.953557432s ago: executing program 2 (id=1756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/222], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/157, 0x9d}}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) capset(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) 7m26.146547353s ago: executing program 32 (id=1756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/222], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/157, 0x9d}}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) capset(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) 6m40.429667077s ago: executing program 1 (id=1925): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r5, &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) bind$netlink(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f0000000140)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a53786"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, &(0x7f0000000500)=0x90) 6m39.304762918s ago: executing program 1 (id=1927): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRES64=r5, @ANYRESHEX=r2, @ANYBLOB="48f1d52f82d3c5caac0789c95150d5340bf659a5b6383b63dbb7bf6cf3ea1198a4c1e548fef13bfa662290c025e37abb250c3e3929f1aad0b5a63de91fdd5e4c3a1141eb28341a357953c0fb840f42e2850567a48e525d3f79b6c1b5b1edc5d406252dcea67d398067", @ANYBLOB="4013fb6b09c2a11496a57bc7ccff6b5d03c698cb932f3034642080c3dbefc64e1cf5482a693e12e0ad90bb1efce24e9ef0b73abbad0790f2bfc8a30a872efc1b1a210122abefe8e1224aad202299dd94cc0b1ec836a47095b51e89c5a554b7d63ded7904bd9712dd873a767197aabbbc9a004879faac81c6f58f245b49c6cc2f5226c465f1056fe033e89203564e9dc3d6538b24e87df8f548737702354b3c0b9e013be8d8d4f646b52cdf5bc6efb8cf8564f02458c052f7f35d975fd1ff51c43e367011ab9cdafd81aa3aaac7a6", @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES8=r6], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x1c) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pipe(&(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)) fanotify_init(0x200, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 6m38.355628355s ago: executing program 1 (id=1932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/157, 0x9d}], 0x1, 0x1, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x17, r2, 0x1, 0x70bd2c, 0xfffffffd, {{}, {@val, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 6m36.911535824s ago: executing program 1 (id=1938): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) sendfile(r1, r1, 0x0, 0x820000009) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000780)={0x7e, 0x0, 0x0, &(0x7f0000000040)=[0x5]}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000240)="66b9800000c00f326635000400000f3067ff8d53f3b30e0fc73266b93e0a000066b8c1e7000066ba000000000f30ba210066ed0f20c06635200000000f22c0f20f30dd5700d4140f9dce", 0x4a}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x4, 0x0, 0x2004cb, 0x6, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x200004, 0x0, 0x2, 0xffffffffffffffff, 0x1], 0x80a0000, 0x150184}) ioctl$KVM_RUN(r4, 0xae80, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) 6m35.739674512s ago: executing program 1 (id=1942): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40402) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902920003ff72e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES16=r0, @ANYRES64=r1], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) ppoll(&(0x7f0000000200)=[{r3, 0x200}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 6m35.172081223s ago: executing program 1 (id=1947): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5603340861a2275363501020301098a5eacb7405c1c1129bcf4021200010000"], 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f00000001c0)=""/194, &(0x7f0000000000)=0xc2) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x73, 0x2, 0x5, 0x41, "d8000c000000000003d3cf0000000000cb44a200"}) 6m34.477587644s ago: executing program 33 (id=1947): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5603340861a2275363501020301098a5eacb7405c1c1129bcf4021200010000"], 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f00000001c0)=""/194, &(0x7f0000000000)=0xc2) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x73, 0x2, 0x5, 0x41, "d8000c000000000003d3cf0000000000cb44a200"}) 1m35.557554684s ago: executing program 0 (id=2980): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff801}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200d3449b8dad84b476c1a7b2285d2bf2b08060a34277bcc789beb8293483ea76b913f7eda9a725b33f422b1f271e2f1fd2e8a00de45172368f9212e70dc84cc7aeb960c429d75aa72055972fd0acc9d04500969f6bb800f997e29acdee02d4bc0a8ecf36e491f5605d66787f76bc345af0fcabb4ffde3bda811f7d88b81aaf6bee8fb99602074c7e9ba281932ef00c937393b23357ac4d97d49a063a23342a160615f3e10eeb859a6216aee5f06667a8684e5f0702ab05b3e66f483e5be572f2a3ee6d199bc6"], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB='+cpu '], 0xb) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m35.286310598s ago: executing program 0 (id=2981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/157, 0x9d}], 0x1, 0x1, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x17, r2, 0x1, 0x70bd2c, 0xfffffffd, {{}, {@val, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000340)=@random='\r', 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m32.200639994s ago: executing program 0 (id=2986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d", 0xd, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x5, 0x0, 0x8, 0x8, 0x7, 0x98d, 0x22bb, 0x9]}}, 0x5c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x50}}, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x900, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1m29.901965811s ago: executing program 0 (id=2994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x200) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x18) syz_io_uring_setup(0x2335, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000040)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00fdffffff03000000020020000000", @ANYRES32=0x0, @ANYBLOB="0000000014001e"], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) 1m27.732631426s ago: executing program 0 (id=3010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000004) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ff3fb9c548c540cf0389ce756de3", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800", @ANYRES8=r1], 0x68}}, 0x20000880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0xfffffffd, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1m10.466483145s ago: executing program 6 (id=3042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r7, r8, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x8, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000004, 0x7, 0x81, 0x8, 0x9, 0x2008, 0x4000, 0x28001, r7, r8, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x100000000000006, 0x4000000000000ffe, 0x0, 0x4, 0x41e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffffff, 0xfcd1]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) 1m6.292167758s ago: executing program 4 (id=3047): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x101, 0x9, 0x0, 0x5, 0xfa14, 0xfffffffb}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r5, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x16010080) gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e640000000038000280040008800800070006000000080012007f0b000008001a"], 0x70}}, 0x0) 1m4.085703137s ago: executing program 6 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m1.245053821s ago: executing program 6 (id=3049): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) set_mempolicy(0x2, 0x0, 0xf5) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0xf4, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc8, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x47, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x2, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8bf, 0x20000000, 0xebb, 0xfffffff8, 0x2, {0x3, 0x2, 0x3, 0x1da, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 59.337826345s ago: executing program 6 (id=3052): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x4010) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r3 = io_uring_setup(0x6b3c, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) io_uring_enter(r0, 0x47bc, 0x0, 0x80020, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 56.944705313s ago: executing program 4 (id=3054): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x4010) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r3 = io_uring_setup(0x6b3c, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x90, 0x13, 0x800, 0x70bd2a, 0x25dfdbfd, {0x18, 0x2, 0x4, 0x0, {0x4e20, 0x4e22, [0x0, 0x8, 0x1, 0x7ff], [0x0, 0x7, 0x8, 0x3784fc4f], 0x0, [0x1, 0x1000]}, 0x0, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x42, 0x1, "056104261d06972310eda3299e23cf7cb36e3b1e81dc6f24c4ff4e0794f84a85d6acc4f33b348b4d08756a82a538d3c65b8a20cef366d22ce0a7456f68c2"}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 56.682756395s ago: executing program 6 (id=3055): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0x1f0, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e24, 0x0, 0x4e24, 0x0, 0x8, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffc, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0xffffffff, 0x6e6bad, 0x1, 0x0, 0x3}, [@algo_comp={0x13b, 0x3, {{'deflate\x00'}, 0x798, "de829829d7386e2bede2dc4d4e3a2ad39a3edca2680689c4fe5a698c9cd4e2b95873bdd057c2ddc8e82a30ce28e8e44630a09d41ad503621d42c707f16eb7b0f5dc663340cd6324ec9cdf81ad23cdbfa7a24f8b63c65cf9cf1d47ee0b0d37f02f7f0709228582be265b54824a727b1725ba7353dc15d2c1d12a51eab91ddf6c9061c710384e96dde19f4dba04c5cf8aced66044eff837a310d93ece3519e557ca9211a0ce8707356f1b3a475eca22680e9a5e4a483fd050a14ef7ed6c9fac3d361eea061a05a7cc7868c76dfcb69ce4af7b2bcb3a38ddb60e0d871390b822ca9323ee9808ce6aaa8b15569e16172bb724fc671"}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0x8, 0x6, 0x4, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000002c0), &(0x7f0000000300)=ANY=[@ANYBLOB="00fb2705ef9597e394e24057229e6b3089c6ff4c691f18874411ae0cd8c765debe6c927e228065"], 0x27, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000200", @ANYRES32, @ANYBLOB="0c005a802000038004000100"], 0x28}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/222], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r8, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TCXONC(r8, 0x540a, 0x1) 48.82383047s ago: executing program 6 (id=3060): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) getrusage(0x0, &(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000003440)={@local, @random="4163d65a9e81", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xf9e, 0x0, @gue={{0x2, 0x1, 0x1, 0x3, 0x0, @val=0x80}, "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"}}}}}}, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x20, 0x0, 0x0) 48.103747897s ago: executing program 4 (id=3061): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x50, 0x0, 0x7, 0x8, 0x8, 0x20000, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, r4, 0x0, 0x7ffffffd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, 0x0, 0x0, 0xfffffffd) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280), 0x0) socket(0x22, 0x2, 0x1) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30001a12ff4c082da615f0d2dbd0ec3adbb2f34c4e7617e002f8b7a3bc6b036616d5d733c259a6da2826dfca5102406a3fac24bec7ca5a2cef43e172a1415970423bf0c85d2067946efe7480e96acf8710", @ANYRES16=0x0, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r11, @ANYBLOB="0a00340002020202020200000800420001000000"], 0x30}}, 0x0) 47.95426142s ago: executing program 0 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/157, 0x9d}], 0x1, 0x1, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x17, r2, 0x1, 0x70bd2c, 0xfffffffd, {{}, {@val, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 42.263147689s ago: executing program 4 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000500)={0x3ff, 0x5, 0xa63}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8, r5, 0x0, 0x0, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x10000000, 0x0}) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r9, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) 41.068594655s ago: executing program 5 (id=3066): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x2, 0x1947, 0xf}) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtclass={0x5c, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff3}, {0x3, 0x2}, {0x5, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x51, 0xff, 0xfffffff8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x1, 0xfff}}]}}, @tclass_kind_options=@c_sfb={0xfffffffffffffe74}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) 31.752526666s ago: executing program 34 (id=3060): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) getrusage(0x0, &(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000003440)={@local, @random="4163d65a9e81", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xf9e, 0x0, @gue={{0x2, 0x1, 0x1, 0x3, 0x0, @val=0x80}, "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"}}}}}}, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x20, 0x0, 0x0) 31.252551137s ago: executing program 35 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/157, 0x9d}], 0x1, 0x1, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x17, r2, 0x1, 0x70bd2c, 0xfffffffd, {{}, {@val, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 31.025082577s ago: executing program 5 (id=3070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25027c0000040045802800018008001c800400098008002600", @ANYRES32=r3, @ANYBLOB="14009c0020010000008000000000000000000001"], 0x40}}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x2, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e06030014003500626f56643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000680)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x414d, 0x3, 0x6], 0x0, 0x8340}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x2140000, &(0x7f0000000140)="be1485f6ebc46f4a0d32a3834532cadf4a22cc574e33f057e9f649d383ecc9495c842cde99902befc39181c740adbcea6ad8c477e43cc80ee619c5e8df0da66f4e0a29a0121f0a711b76677518c97894ad812224c821f8bb6ddffd878c3badb47b46d6f8fa2598baafcef5575ac942258607725f3e8ac94de39feca433e733b3ceaf297aef3b45b277bf36e86be291a61034e1b4be6fdc3dfe3a1b76b7ad82816fcd798fdd3dd5ce3c49f151772d58461918c4de7d01e42986683ec9856a46fbaa6a90334670892021f897a5769b9f2e601730b2e5464048", 0xd8, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000b80)) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r9 = fsopen(&(0x7f0000000340)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x20000000ec071, r0, 0x0) 31.004211007s ago: executing program 4 (id=3071): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)="5263ae65ff57fcdad2d4c589756d75d5", 0x10}], 0x1}}], 0x1, 0x4008810) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) close_range(r0, 0xffffffffffffffff, 0x0) 29.87762912s ago: executing program 4 (id=3072): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a267da31dea1f1f2200000000000000000a0000040900010073797a310000000408080540000000020900080073797a313a07000008000a40fffffffc0800034000000014540000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000400018004000b800c000440f70000000000000f0c000540000000000049df07140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r6, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r8 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc01cf509, &(0x7f0000000200)={r3, 0x680bff9d, 0xffffffff, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x16, 0x0, r1, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file1\x00', r11, 0x0, 0x0, {0x0, r12}}) io_uring_enter(r8, 0x7277, 0x0, 0x28, 0x0, 0x0) 16.527284573s ago: executing program 5 (id=3074): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) getrusage(0x0, &(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000003440)={@local, @random="4163d65a9e81", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xf9e, 0x0, @gue={{0x2, 0x1, 0x1, 0x3, 0x0, @val=0x80}, "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"}}}}}}, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x20, 0x0, 0x0) 14.797897358s ago: executing program 36 (id=3072): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a267da31dea1f1f2200000000000000000a0000040900010073797a310000000408080540000000020900080073797a313a07000008000a40fffffffc0800034000000014540000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000400018004000b800c000440f70000000000000f0c000540000000000049df07140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r6, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r8 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc01cf509, &(0x7f0000000200)={r3, 0x680bff9d, 0xffffffff, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x16, 0x0, r1, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file1\x00', r11, 0x0, 0x0, {0x0, r12}}) io_uring_enter(r8, 0x7277, 0x0, 0x28, 0x0, 0x0) 13.572311195s ago: executing program 3 (id=3077): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/131, 0x83}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/254, 0xfe}], 0x5, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffc, @empty}, 0x23) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000000000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a3100000000050001"], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 11.397550818s ago: executing program 3 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x2f) recvfrom$inet(r2, &(0x7f0000000040)=""/21, 0x15, 0xc9100120, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x6df79d1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @local, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00e300", 0xc, 0x11, 0x0, @private0, @mcast2, {[], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x0, @void}}}}}}}}, 0x0) 11.114483222s ago: executing program 5 (id=3079): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000500)={0x3ff, 0x5, 0xa63}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8, r4, 0x0, 0x0, 0x5}]) sendfile(r2, r3, 0x0, 0x20000023896) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x10000000, 0x0}) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) 9.814281814s ago: executing program 3 (id=3080): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r5 = epoll_create(0x47f) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="010027bd7000000000000c0000000400038085e9535c38cd261205c18c2a6b3efea7b9ec785281a4aa23e5d9322e72e6c32a81a0a63422c5d1fa899e7646dd92d37e80b768facc5bcc25b77364c21b5ad613b9dedd2eeab72f7482aa4623f546b9a76d9417aaeaedb4dacf4b57b615f1727baedd90e85553f50b10098032591f66b8df81513b3e994db26cb8a8b55e37dcf05c520fc010fdc2a94ae7ac9dabd9084924e351d462c7fbcb448b4ed27a820b0da7"], 0x18}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x7, 0x0, r8, 0x0}]) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x1070bd25, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20050081}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0xc, 0x0, 0x8, 0xa}, 0xa, [0x7, 0x3, 0x4, 0x8, 0x1, 0x6, 0x8000, 0x9, 0x0, 0x8000000, 0x8, 0x8, 0x4, 0x6, 0x1ff, 0x2, 0xff, 0x2f51, 0xfffffffb, 0x100, 0x3, 0x8100, 0x12d, 0x2, 0x1b, 0x1, 0x3, 0x7, 0x401, 0x3, 0x100, 0x7, 0x8, 0x5, 0x6, 0xa, 0x7, 0x8, 0xfffffff9, 0x9, 0x4, 0x0, 0x0, 0x9, 0x5, 0x0, 0x1ff, 0x4bcf, 0xff, 0x3, 0x3, 0x7, 0x8, 0x1000, 0x5453, 0xf, 0x7, 0x4, 0x7fff, 0xfffffffc, 0x4, 0x1, 0x8001, 0x4], [0x3c, 0x2, 0x3, 0xfffffff7, 0xffff, 0x101, 0x2bb, 0x3f, 0x4, 0x0, 0x2, 0x101, 0xfffffff7, 0x5df, 0x100080, 0x7fffffff, 0xfffffff9, 0x7, 0xffff, 0x2, 0x3, 0x827, 0xae, 0x400, 0x8, 0x33b, 0x7, 0xfffffff1, 0x476, 0x7fffffff, 0xc255, 0x9, 0x5, 0x8, 0x2, 0x4df, 0x809, 0x10000, 0x5, 0xa17, 0x3, 0x10, 0x998, 0x4ac, 0x16db, 0xff, 0x7, 0x7, 0x5, 0x7d, 0x8, 0x7, 0x0, 0x5, 0x2, 0x3, 0x4, 0x8f71, 0x7, 0x5, 0x4, 0x4, 0x9, 0x9], [0x9, 0x4, 0x1, 0x7, 0xffffffff, 0x401, 0x4, 0x401, 0xffff, 0x9, 0x8, 0x8, 0x4, 0xfffffff9, 0x2, 0xfffff263, 0x10001, 0x3872, 0x0, 0xca, 0xffff, 0x9c, 0x4, 0xb, 0x8, 0x10001, 0xd166, 0x1, 0x3, 0x7, 0x1, 0x6e, 0x80000000, 0x7, 0xe4, 0xfff, 0x2, 0x8000, 0x8000000, 0x8, 0x931, 0x8, 0x30, 0xffffffff, 0x9, 0x0, 0x81, 0x954, 0x8, 0x80000000, 0x3, 0x4, 0xfffffffe, 0x7, 0x1, 0x0, 0x3, 0x5, 0x9, 0x5, 0x1, 0x2, 0x1, 0x2], [0x8001, 0x5, 0x6, 0x401, 0x9, 0x9, 0x23, 0x3, 0x9fe8bce6, 0x4, 0x9, 0x40, 0x8, 0x1, 0x4, 0xc1, 0x5a, 0x8, 0xffffffff, 0x881, 0x6, 0x4, 0x1, 0x0, 0x6, 0xf14, 0x8, 0x8, 0x2, 0x7, 0x1, 0x2, 0x97c, 0x7, 0x1, 0x10001, 0x6, 0x4, 0x2, 0x401, 0xffff, 0x9, 0xb, 0xfffff0f7, 0x4, 0x0, 0x5, 0xffff, 0x6c, 0x0, 0xfffffc00, 0x8001, 0x2, 0x9d, 0x6, 0x8, 0x2, 0x7f, 0x3, 0x2, 0x2, 0xa92, 0x10000006, 0x3]}, 0x45c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) 8.139420323s ago: executing program 3 (id=3081): pipe2$9p(&(0x7f0000000040), 0x80) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x800, 0x919) msgget(0x2, 0x200) msgget(0x2, 0x632) r3 = dup2(r2, r2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8000020, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file/file0/../\x00', 0x10000, 0x131) syz_open_procfs(r7, &(0x7f00000001c0)='net/packet\x00') sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001200576d10000010fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001f00ca0e00000a000100bbbbbbbbbbbb4300"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.116646646s ago: executing program 5 (id=3082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x7560, &(0x7f0000000200)={0x0, 0x7e5e, 0x1, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a0000004e65c1f65d51e19329111fb51bbacbf2b909000000000000007a5109818491f3d8067b8475d8b9d11dc9e3c40404678f56ce2b0d36d1929d4439455bbc78ab20643c09f2a79963cfcf196cc259ae17e15ba33d463db242dcc28c34c9aa1c9a57fc893598257486c38bc31b59badce5c0b7860ce6e606e3f445e512bfbc32d9f9a2fbefed32f69afb3fdcf701ca43a2603532f3aa127c47d2240f3a40f6464917d9ed4b94db95779d2e67b631b3fe2b73fb7223e6b2b302dd5eb0bc", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0500070007000000"], 0x44}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0xfffffffffffffdda) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r9) r10 = getpgrp(0x0) fcntl$setown(r8, 0x8, r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000140)=0x7f) 2.561170048s ago: executing program 3 (id=3083): socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0xffffffff, 0x2}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005009277001409ee2813010000000055cb0000000700000a982083a97762d242ceec4e170ccc656857cd7fb64d1193ad1ca765ec5ba07499d3a70c7ac23b800000004fbbf96d8dc05123bda2b62e020aa4a62c93d9aab9bc1fffae9ac9446b499dd389495468"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) dup(r2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000047434a8d2e3411149e75de400b64f8f54d0981f49bb546a2cdbdce1aefffffffffffffff0f18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.936362457s ago: executing program 5 (id=3084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="cbcad215ed370ab2b079783a703926e4", 0x10}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x800) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r4 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="04132c152b00af000800c9006c090000"], 0x28}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x901c, 0x10, 0x4, 0x401, 0x100, 0xffff, 0x0, 0x52, 0x43, 0x7e9, 0x403, 0x9aa5, "cb630d01040000057401a1920300000000000000c80755a52a28baf06d400e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) socket$inet(0x2, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) 0s ago: executing program 3 (id=3085): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000003c0)=""/4096, 0x1000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="0faf63d7181401000002000000000000080003000300000008"], 0xffffffffffffff52}}, 0x4008045) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1f, 0x0, 0x7, {[@ra={0x94, 0x4, 0x300}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0xf3, 0x5]}]}}}], 0x20}}], 0x1, 0x4800) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="66643d763da9bf33829a199002b497712962aa8bdc9d1e0322691fd5cd3007ef3a17ae23850ea3cfc09de5e89c7068ff4d61a8113a43dd46fa5a85a188493f63d6c0af44f4a8285e43ff12f52111215cf3263efd5454ef190974ea9bfa46a4f81e65", @ANYRESHEX, @ANYBLOB, @ANYRES32=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c2f6465762f63656323002c6d61736b3d4d41595f382c6673757569643d61115d39393732302d616436612d666553392d373037642d37343400306631332c"], 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13") kernel console output (not intermixed with test programs): f7f45539 code=0x0 [ 612.169906][ T5893] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 612.355094][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 612.374686][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.399741][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.443746][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.453593][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.556268][ T5893] usb 6-1: Product: syz [ 612.640102][ T5893] usb 6-1: Manufacturer: syz [ 612.657713][ T5893] usb 6-1: SerialNumber: syz [ 612.663902][T14309] vivid-000: ================= START STATUS ================= [ 612.673352][T14309] vivid-000: Test Pattern: 75% Colorbar [ 612.683525][T14309] vivid-000: Fill Percentage of Frame: 100 [ 612.691372][T14309] vivid-000: Horizontal Movement: No Movement [ 612.700409][T14309] vivid-000: Vertical Movement: No Movement [ 612.709385][T14309] vivid-000: OSD Text Mode: All [ 612.722888][T14309] vivid-000: Show Border: false [ 612.737171][T14309] vivid-000: Show Square: false [ 612.742409][T14309] vivid-000: Sensor Flipped Horizontally: false [ 612.750366][T14309] vivid-000: Sensor Flipped Vertically: false [ 612.761824][T14309] vivid-000: Insert SAV Code in Image: false [ 612.970554][T14309] vivid-000: Insert EAV Code in Image: false [ 612.991250][T14309] vivid-000: Insert Video Guard Band: false [ 613.022491][T14309] vivid-000: Reduced Framerate: false [ 613.031524][T14309] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 613.049507][T14309] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 613.065015][T14309] vivid-000: Enable Capture Cropping: true grabbed [ 613.079375][T14309] vivid-000: Enable Capture Composing: true grabbed [ 613.095048][T14309] vivid-000: Enable Capture Scaler: true grabbed [ 613.107379][T14309] vivid-000: Timestamp Source: End of Frame [ 613.118961][T14309] vivid-000: Colorspace: Rec. 709 [ 613.125625][T14309] vivid-000: Transfer Function: Default [ 613.138287][T14309] vivid-000: Y'CbCr Encoding: Default [ 613.148712][T14309] vivid-000: HSV Encoding: Hue 0-179 [ 613.159007][T14309] vivid-000: Quantization: Default [ 613.170238][T14309] vivid-000: Apply Alpha To Red Only: false [ 613.180296][T14309] vivid-000: Standard Aspect Ratio: 4x3 [ 613.191406][T14309] vivid-000: DV Timings Signal Mode: Current DV Timings [ 613.206057][T14309] vivid-000: DV Timings: 640x480p59 inactive [ 613.221310][T14309] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 613.235844][T14309] vivid-000: Maximum EDID Blocks: 2 [ 613.258374][ T5893] usb 6-1: 0:2 : does not exist [ 613.263441][T14309] vivid-000: Limited RGB Range (16-235): true [ 613.272464][T14309] vivid-000: Rx RGB Quantization Range: Automatic [ 613.288451][ T5893] usb 6-1: unit 8 not found! [ 613.293234][T14309] vivid-000: Power Present: 0x00000001 [ 613.318033][T14309] tpg source WxH: 1280x720 (R'G'B) [ 613.324720][T14309] tpg field: 1 [ 613.337214][T14309] tpg crop: (0,0)/1280x720 [ 613.343937][T14309] tpg compose: (0,0)/1280x720 [ 613.350715][T14309] tpg colorspace: 3 [ 613.356338][T14309] tpg transfer function: 0/1 [ 613.363038][T14309] tpg quantization: 0/1 [ 613.369686][T14309] tpg RGB range: 0/1 [ 613.376358][T14309] vivid-000: ================== END STATUS ================== [ 613.400943][ T5893] usb 6-1: USB disconnect, device number 25 [ 613.476753][T10201] udevd[10201]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.816823][ T30] audit: type=1326 audit(1761310634.151:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 613.842003][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2633'. [ 613.884120][ T30] audit: type=1326 audit(1761310634.151:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 613.911082][ T30] audit: type=1326 audit(1761310634.151:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 613.933855][ T30] audit: type=1326 audit(1761310634.151:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 613.974215][ T30] audit: type=1326 audit(1761310634.181:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 614.061412][ T30] audit: type=1326 audit(1761310634.211:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 614.085665][ T30] audit: type=1326 audit(1761310634.211:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 614.119900][ T5953] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 614.282384][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 614.294490][ T5953] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 614.304910][ T5953] usb 6-1: config 0 has no interface number 0 [ 614.316262][ T5953] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 614.329487][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.339718][ T5953] usb 6-1: Product: syz [ 614.344399][ T5953] usb 6-1: Manufacturer: syz [ 614.355784][ T5953] usb 6-1: SerialNumber: syz [ 614.377216][ T5953] usb 6-1: config 0 descriptor?? [ 614.395339][ T5953] smsc95xx v2.0.0 [ 614.489950][ T5879] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 614.654371][ T5879] usb 7-1: not running at top speed; connect to a high speed hub [ 614.663707][ T5879] usb 7-1: config 6 has an invalid interface number: 96 but max is 0 [ 614.672108][ T5879] usb 7-1: config 6 has no interface number 0 [ 614.678340][ T5879] usb 7-1: config 6 interface 96 altsetting 39 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 614.689390][ T5879] usb 7-1: config 6 interface 96 altsetting 39 has an invalid descriptor for endpoint zero, skipping [ 614.700466][ T5879] usb 7-1: config 6 interface 96 altsetting 39 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 614.712945][ T5879] usb 7-1: config 6 interface 96 has no altsetting 0 [ 614.722931][ T5879] usb 7-1: Dual-Role OTG device on HNP port [ 614.729334][ T5879] usb 7-1: New USB device found, idVendor=7392, idProduct=d811, bcdDevice=e8.eb [ 614.738476][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.746748][ T5879] usb 7-1: Product: syz [ 614.751110][ T5879] usb 7-1: Manufacturer: à°Œ [ 614.755741][ T5879] usb 7-1: SerialNumber: syz [ 614.765765][T14331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 614.773433][T14331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 614.792194][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 614.803508][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 615.015698][ T5879] usb 7-1: USB disconnect, device number 19 [ 615.245031][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 615.257591][ T5953] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 615.271382][ T5953] usb 6-1: USB disconnect, device number 26 [ 618.156379][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2645'. [ 618.296525][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'. [ 618.337756][T14371] input: syz0 as /devices/virtual/input/input40 [ 618.412260][T14368] hsr_slave_1 (unregistering): left promiscuous mode [ 618.539145][T14379] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 618.553592][T14379] tipc: Started in network mode [ 618.558739][T14379] tipc: Node identity ac14140f, cluster identity 4711 [ 618.566357][T14379] tipc: New replicast peer: 255.255.255.255 [ 618.586043][T14379] tipc: Enabled bearer , priority 10 [ 619.381470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.480292][ T984] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 619.643006][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 619.661457][ T984] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 619.716408][ T44] tipc: Node number set to 2886997007 [ 619.759692][ T984] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 619.781560][ T984] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 619.803127][ T984] usb 6-1: can't read configurations, error -22 [ 619.948191][ T984] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 620.114176][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 620.126868][ T984] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 620.148376][ T984] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 620.171190][ T984] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 620.223353][ T984] usb 6-1: can't read configurations, error -22 [ 620.252986][ T984] usb usb6-port1: attempt power cycle [ 620.599883][ T984] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 620.620666][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 620.626710][ T984] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 620.635825][ T984] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 620.644603][ T984] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 620.653699][ T984] usb 6-1: can't read configurations, error -22 [ 620.732093][T14400] FAULT_INJECTION: forcing a failure. [ 620.732093][T14400] name failslab, interval 1, probability 0, space 0, times 0 [ 620.751622][T14400] CPU: 0 UID: 0 PID: 14400 Comm: syz.4.2658 Not tainted syzkaller #0 PREEMPT(full) [ 620.751653][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.751667][T14400] Call Trace: [ 620.751675][T14400] [ 620.751684][T14400] dump_stack_lvl+0x189/0x250 [ 620.751721][T14400] ? __pfx____ratelimit+0x10/0x10 [ 620.751748][T14400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.751778][T14400] ? __pfx__printk+0x10/0x10 [ 620.751807][T14400] ? __pfx___might_resched+0x10/0x10 [ 620.751829][T14400] ? fs_reclaim_acquire+0x7d/0x100 [ 620.751868][T14400] should_fail_ex+0x414/0x560 [ 620.751906][T14400] should_failslab+0xa8/0x100 [ 620.751930][T14400] __kmalloc_noprof+0xcb/0x7f0 [ 620.751960][T14400] ? tomoyo_encode+0x28b/0x550 [ 620.751999][T14400] tomoyo_encode+0x28b/0x550 [ 620.752038][T14400] tomoyo_realpath_from_path+0x58d/0x5d0 [ 620.752082][T14400] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 620.752110][T14400] tomoyo_path_number_perm+0x1e8/0x5a0 [ 620.752141][T14400] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.752188][T14400] ? __lock_acquire+0xab9/0xd20 [ 620.752232][T14400] ? __fget_files+0x2a/0x420 [ 620.752265][T14400] ? __fget_files+0x3a0/0x420 [ 620.752296][T14400] ? __fget_files+0x2a/0x420 [ 620.752320][T14400] security_file_ioctl_compat+0xcb/0x2d0 [ 620.752349][T14400] __ia32_compat_sys_ioctl+0x128/0x840 [ 620.752380][T14400] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 620.752408][T14400] ? __fget_files+0x3a0/0x420 [ 620.752435][T14400] ? fput+0xa0/0xd0 [ 620.752459][T14400] ? ksys_write+0x22a/0x250 [ 620.752486][T14400] ? exc_page_fault+0x82/0x100 [ 620.752513][T14400] ? __pfx_ksys_write+0x10/0x10 [ 620.752546][T14400] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 620.752576][T14400] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.752606][T14400] __do_fast_syscall_32+0xb6/0x2b0 [ 620.752635][T14400] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.752666][T14400] do_fast_syscall_32+0x34/0x80 [ 620.752694][T14400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.752719][T14400] RIP: 0023:0xf709d539 [ 620.752738][T14400] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.752757][T14400] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 620.752779][T14400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 620.752793][T14400] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.752805][T14400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.752817][T14400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.752830][T14400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.752862][T14400] [ 620.752897][T14400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 620.809947][ T984] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 620.815131][T14400] loop8: detected capacity change from 0 to 7 [ 620.850655][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 620.867241][T14400] Dev loop8: unable to read RDB block 7 [ 620.869430][ T984] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 620.873416][T14400] loop8: unable to read partition table [ 620.873682][T14400] loop8: partition table beyond EOD, [ 620.880164][ T984] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 620.884543][T14400] truncated [ 620.893894][ T984] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 620.895691][T14400] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.909171][ T984] usb 6-1: can't read configurations, error -22 [ 621.137723][ T984] usb usb6-port1: unable to enumerate USB device [ 621.189516][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2660'. [ 621.215816][T14406] vlan0: entered allmulticast mode [ 621.376214][T14411] loop8: detected capacity change from 0 to 7 [ 621.390197][T10201] Dev loop8: unable to read RDB block 7 [ 621.396036][T10201] loop8: unable to read partition table [ 621.402564][T10201] loop8: partition table beyond EOD, truncated [ 621.414047][T14411] Dev loop8: unable to read RDB block 7 [ 621.450169][T14411] loop8: unable to read partition table [ 621.456211][T14411] loop8: partition table beyond EOD, truncated [ 621.470848][T14411] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 621.881056][T14424] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 622.861661][T14438] fuse: Unknown parameter 'group_œd¤‹¹‹±Qa’ÿÿºâiJz00000000000000000000' [ 624.250806][ T5953] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 624.508065][ T5879] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 624.603718][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.610617][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.834735][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 624.882288][ T5879] usb 6-1: config 0 has no interfaces? [ 624.885912][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.930131][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.988958][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.003200][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.015215][ T5953] usb 4-1: Product: syz [ 625.019827][ T5953] usb 4-1: Manufacturer: syz [ 625.026041][ T5953] usb 4-1: SerialNumber: syz [ 625.053834][ T5879] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 625.112191][T14472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2674'. [ 625.129894][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.158413][ T5879] usb 6-1: Product: syz [ 625.172972][ T5879] usb 6-1: Manufacturer: syz [ 625.177628][ T5879] usb 6-1: SerialNumber: syz [ 625.282116][ T5879] usb 6-1: config 0 descriptor?? [ 625.307977][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.323199][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.355332][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2671'. [ 625.468202][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2675'. [ 625.510648][ T5953] usb 4-1: 0:2 : does not exist [ 625.515648][ T5953] usb 4-1: unit 9 not found! [ 625.609535][T14478] vlan0: entered allmulticast mode [ 625.706115][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.715618][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.796385][ T5953] usb 4-1: USB disconnect, device number 28 [ 625.834650][T10201] udevd[10201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.046833][T14451] veth0_vlan: left promiscuous mode [ 626.054221][T14451] veth0_vlan: entered promiscuous mode [ 626.101249][T14483] input: syz0 as /devices/virtual/input/input41 [ 626.642983][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2673'. [ 626.758336][T14496] CIFS: VFS: Malformed UNC in devname [ 626.904445][T14479] binder: 14464:14479 ioctl c0306201 0 returned -14 [ 627.469418][ T984] usb 6-1: USB disconnect, device number 31 [ 627.704877][T14507] netlink: 'syz.3.2683': attribute type 4 has an invalid length. [ 627.875956][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'. [ 627.941281][T14517] netlink: 'syz.6.2687': attribute type 10 has an invalid length. [ 627.975278][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2687'. [ 628.089261][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 628.187588][T14522] vlan0: entered allmulticast mode [ 628.224158][T14517] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 628.462003][T14517] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 628.542138][T14517] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 628.851773][T14532] FAULT_INJECTION: forcing a failure. [ 628.851773][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 628.870073][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.4.2692 Not tainted syzkaller #0 PREEMPT(full) [ 628.870101][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 628.870113][T14532] Call Trace: [ 628.870121][T14532] [ 628.870129][T14532] dump_stack_lvl+0x189/0x250 [ 628.870163][T14532] ? __pfx____ratelimit+0x10/0x10 [ 628.870189][T14532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.870214][T14532] ? __pfx__printk+0x10/0x10 [ 628.870243][T14532] ? __pfx___might_resched+0x10/0x10 [ 628.870265][T14532] ? fs_reclaim_acquire+0x7d/0x100 [ 628.870306][T14532] should_fail_ex+0x414/0x560 [ 628.870344][T14532] ? __pfx_proc_alloc_inode+0x10/0x10 [ 628.870375][T14532] should_failslab+0xa8/0x100 [ 628.870399][T14532] ? __pfx_proc_alloc_inode+0x10/0x10 [ 628.870428][T14532] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 628.870460][T14532] ? proc_alloc_inode+0x2a/0xc0 [ 628.870492][T14532] ? __pfx_proc_alloc_inode+0x10/0x10 [ 628.870517][T14532] proc_alloc_inode+0x2a/0xc0 [ 628.870545][T14532] alloc_inode+0x6a/0x1b0 [ 628.870577][T14532] new_inode+0x22/0x170 [ 628.870602][T14532] proc_get_inode+0x22/0x6a0 [ 628.870633][T14532] proc_lookup_de+0x251/0x340 [ 628.870668][T14532] __lookup_slow+0x297/0x3d0 [ 628.870697][T14532] ? __pfx___lookup_slow+0x10/0x10 [ 628.870737][T14532] ? down_read+0x1ad/0x2e0 [ 628.870771][T14532] lookup_slow+0x53/0x70 [ 628.870797][T14532] link_path_walk+0x935/0xea0 [ 628.870845][T14532] path_openat+0x28c/0x3830 [ 628.870910][T14532] ? __pfx_path_openat+0x10/0x10 [ 628.870959][T14532] do_filp_open+0x1fa/0x410 [ 628.870983][T14532] ? __lock_acquire+0xab9/0xd20 [ 628.871005][T14532] ? __pfx_do_filp_open+0x10/0x10 [ 628.871076][T14532] ? _raw_spin_unlock+0x28/0x50 [ 628.871099][T14532] ? alloc_fd+0x64c/0x6c0 [ 628.871145][T14532] do_sys_openat2+0x121/0x1c0 [ 628.871172][T14532] ? __pfx_do_sys_openat2+0x10/0x10 [ 628.871199][T14532] ? ksys_write+0x22a/0x250 [ 628.871230][T14532] ? __pfx_ksys_write+0x10/0x10 [ 628.871262][T14532] __ia32_compat_sys_openat+0x131/0x160 [ 628.871308][T14532] __do_fast_syscall_32+0xb6/0x2b0 [ 628.871339][T14532] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.871370][T14532] do_fast_syscall_32+0x34/0x80 [ 628.871417][T14532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.871443][T14532] RIP: 0023:0xf709d539 [ 628.871461][T14532] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 628.871481][T14532] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 628.871505][T14532] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 628.871520][T14532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.871533][T14532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.871545][T14532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 628.871558][T14532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.871592][T14532] [ 629.714064][T14543] delete_channel: no stack [ 630.750704][T14561] FAULT_INJECTION: forcing a failure. [ 630.750704][T14561] name failslab, interval 1, probability 0, space 0, times 0 [ 630.790465][T14561] CPU: 1 UID: 0 PID: 14561 Comm: syz.6.2698 Not tainted syzkaller #0 PREEMPT(full) [ 630.790494][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 630.790507][T14561] Call Trace: [ 630.790514][T14561] [ 630.790522][T14561] dump_stack_lvl+0x189/0x250 [ 630.790554][T14561] ? __pfx____ratelimit+0x10/0x10 [ 630.790580][T14561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.790609][T14561] ? __pfx__printk+0x10/0x10 [ 630.790647][T14561] ? __pfx___might_resched+0x10/0x10 [ 630.790669][T14561] ? fs_reclaim_acquire+0x7d/0x100 [ 630.790705][T14561] should_fail_ex+0x414/0x560 [ 630.790742][T14561] should_failslab+0xa8/0x100 [ 630.790765][T14561] __kvmalloc_node_noprof+0x158/0x910 [ 630.790799][T14561] ? proc_sys_call_handler+0x3cf/0x700 [ 630.790837][T14561] proc_sys_call_handler+0x3cf/0x700 [ 630.790874][T14561] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 630.790909][T14561] ? aio_write+0x4c4/0x7a0 [ 630.790937][T14561] aio_write+0x535/0x7a0 [ 630.790967][T14561] ? __pfx_aio_write+0x10/0x10 [ 630.791005][T14561] ? __might_fault+0xb0/0x130 [ 630.791055][T14561] io_submit_one+0x78b/0x1310 [ 630.791095][T14561] ? __pfx_io_submit_one+0x10/0x10 [ 630.791121][T14561] ? __might_fault+0xb0/0x130 [ 630.791161][T14561] ? __might_fault+0xb0/0x130 [ 630.791193][T14561] __ia32_compat_sys_io_submit+0x1c7/0x330 [ 630.791220][T14561] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 630.791241][T14561] ? ksys_write+0x22a/0x250 [ 630.791280][T14561] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 630.791311][T14561] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.791340][T14561] __do_fast_syscall_32+0xb6/0x2b0 [ 630.791371][T14561] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.791400][T14561] do_fast_syscall_32+0x34/0x80 [ 630.791428][T14561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.791454][T14561] RIP: 0023:0xf7f15539 [ 630.791470][T14561] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 630.791493][T14561] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 630.791515][T14561] RAX: ffffffffffffffda RBX: 00000000f7f0e000 RCX: 0000000000000001 [ 630.791530][T14561] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.791542][T14561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.791554][T14561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.791567][T14561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.791598][T14561] [ 631.550102][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 631.995485][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2710'. [ 634.663651][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2721'. [ 634.710215][ T5879] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 634.741702][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.869894][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 634.879127][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.908091][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.911993][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 634.927191][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.927246][ T5879] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.927273][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.967355][ T5879] usb 7-1: config 0 descriptor?? [ 635.209871][ T5953] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 635.402742][ T5953] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 635.412326][ T5953] usb 4-1: config 0 has no interface number 0 [ 635.425489][ T5953] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 635.444243][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.560064][ T5953] usb 4-1: Product: syz [ 635.567399][ T5953] usb 4-1: Manufacturer: syz [ 635.586794][ T5953] usb 4-1: SerialNumber: syz [ 635.596191][ T5879] usbhid 7-1:0.0: can't add hid device: -71 [ 635.602436][ T5879] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 635.617833][ T5879] usb 7-1: USB disconnect, device number 20 [ 635.633885][ T5953] usb 4-1: config 0 descriptor?? [ 636.907729][ T5953] usb 4-1: Firmware version (0.0) predates our first public release. [ 636.916017][ T5953] usb 4-1: Please update to version 0.2 or newer [ 637.942342][ T984] usb 4-1: USB disconnect, device number 29 [ 638.314914][T14673] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2730'. [ 638.347655][T14674] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2730'. [ 638.632083][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2733'. [ 638.824480][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'. [ 639.536897][T14696] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2738'. [ 641.698498][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2746'. [ 641.790039][T14723] vlan0: entered allmulticast mode [ 641.804366][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2747'. [ 642.143497][ T5879] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 642.331726][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 642.342871][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 642.353167][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 642.368048][ T5879] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 642.378541][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.387029][ T5879] usb 6-1: Product: syz [ 642.391759][ T5879] usb 6-1: Manufacturer: syz [ 642.396392][ T5879] usb 6-1: SerialNumber: syz [ 642.404812][ T5879] usb 6-1: config 0 descriptor?? [ 642.422985][T14737] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2751'. [ 642.656176][ T5879] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 642.913245][ T5879] usb 6-1: USB disconnect, device number 32 [ 644.110212][ T5879] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 644.179975][ T5953] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 644.364231][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 644.445187][ T5879] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 644.457904][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.467570][ T5879] usb 4-1: Product: syz [ 644.472128][ T5879] usb 4-1: Manufacturer: syz [ 644.488529][ T5879] usb 4-1: SerialNumber: syz [ 644.520074][ T5879] usb 4-1: config 0 descriptor?? [ 644.531731][ T5879] hub 4-1:0.0: bad descriptor, ignoring hub [ 644.537676][ T5879] hub 4-1:0.0: probe with driver hub failed with error -5 [ 644.573947][ T5953] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 644.601548][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.614509][ T5953] usb 6-1: Product: syz [ 644.619872][ T5953] usb 6-1: Manufacturer: syz [ 644.644107][ T5953] usb 6-1: SerialNumber: syz [ 644.699891][ T5953] usb 6-1: config 0 descriptor?? [ 645.258266][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.303251][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.375502][ T5953] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 645.382959][ T5953] airspy 6-1:0.0: Could not detect board [ 645.388952][ T5953] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 645.471124][ T5953] usb 6-1: USB disconnect, device number 33 [ 645.839113][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 645.922428][T14773] vlan0: entered allmulticast mode [ 646.045517][T14775] netlink: 'syz.5.2758': attribute type 21 has an invalid length. [ 646.114330][T14771] netlink: 'syz.5.2758': attribute type 10 has an invalid length. [ 646.596745][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.607422][T14771] bond0: (slave team0): Enslaving as an active interface with an up link [ 646.618184][T14775] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2758'. [ 646.744467][T14780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2761'. [ 646.787144][ T5953] usb 4-1: USB disconnect, device number 30 [ 647.189333][T14794] FAULT_INJECTION: forcing a failure. [ 647.189333][T14794] name failslab, interval 1, probability 0, space 0, times 0 [ 647.306883][T14794] CPU: 1 UID: 0 PID: 14794 Comm: syz.5.2765 Not tainted syzkaller #0 PREEMPT(full) [ 647.306915][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.306928][T14794] Call Trace: [ 647.306937][T14794] [ 647.306946][T14794] dump_stack_lvl+0x189/0x250 [ 647.306981][T14794] ? __pfx____ratelimit+0x10/0x10 [ 647.307007][T14794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.307036][T14794] ? __pfx__printk+0x10/0x10 [ 647.307055][T14794] ? __sock_sendmsg+0x21c/0x270 [ 647.307082][T14794] ? __do_fast_syscall_32+0xb6/0x2b0 [ 647.307111][T14794] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.307146][T14794] should_fail_ex+0x414/0x560 [ 647.307184][T14794] should_failslab+0xa8/0x100 [ 647.307217][T14794] kmem_cache_alloc_noprof+0x74/0x6e0 [ 647.307248][T14794] ? skb_clone+0x212/0x3a0 [ 647.307276][T14794] skb_clone+0x212/0x3a0 [ 647.307302][T14794] __netlink_deliver_tap+0x404/0x850 [ 647.307342][T14794] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.307370][T14794] netlink_deliver_tap+0x19c/0x1b0 [ 647.307398][T14794] netlink_sendskb+0x68/0x140 [ 647.307428][T14794] netlink_unicast+0x397/0x9e0 [ 647.307451][T14794] ? __asan_memcpy+0x40/0x70 [ 647.307481][T14794] ? __pfx_netlink_unicast+0x10/0x10 [ 647.307513][T14794] netlink_rcv_skb+0x28c/0x470 [ 647.307541][T14794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.307568][T14794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.307605][T14794] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.307638][T14794] netlink_unicast+0x82f/0x9e0 [ 647.307670][T14794] ? __pfx_netlink_unicast+0x10/0x10 [ 647.307696][T14794] ? netlink_sendmsg+0x642/0xb30 [ 647.307710][T14794] ? skb_put+0x11b/0x210 [ 647.307728][T14794] netlink_sendmsg+0x805/0xb30 [ 647.307752][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.307783][T14794] ? __import_iovec+0x5d4/0x7f0 [ 647.307804][T14794] ? aa_sock_msg_perm+0xf1/0x1d0 [ 647.307831][T14794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.307848][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.307877][T14794] __sock_sendmsg+0x21c/0x270 [ 647.307902][T14794] ____sys_sendmsg+0x505/0x830 [ 647.307928][T14794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.307964][T14794] ___sys_sendmsg+0x21f/0x2a0 [ 647.307984][T14794] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.308032][T14794] ? __fget_files+0x2a/0x420 [ 647.308048][T14794] ? __fget_files+0x3a0/0x420 [ 647.308073][T14794] __sys_sendmsg+0x164/0x220 [ 647.308092][T14794] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.308118][T14794] ? __pfx_ksys_write+0x10/0x10 [ 647.308145][T14794] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 647.308172][T14794] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.308198][T14794] __do_fast_syscall_32+0xb6/0x2b0 [ 647.308227][T14794] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.308253][T14794] do_fast_syscall_32+0x34/0x80 [ 647.308277][T14794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.308298][T14794] RIP: 0023:0xf700d539 [ 647.308313][T14794] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 647.308329][T14794] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 647.308347][T14794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 647.308360][T14794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.308371][T14794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.308382][T14794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 647.308392][T14794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.308419][T14794] [ 647.657002][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.931773][T14804] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 647.939298][T14804] FAULT_INJECTION: forcing a failure. [ 647.939298][T14804] name failslab, interval 1, probability 0, space 0, times 0 [ 647.952221][T14804] CPU: 1 UID: 0 PID: 14804 Comm: syz.5.2769 Not tainted syzkaller #0 PREEMPT(full) [ 647.952250][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.952262][T14804] Call Trace: [ 647.952272][T14804] [ 647.952281][T14804] dump_stack_lvl+0x189/0x250 [ 647.952315][T14804] ? __pfx____ratelimit+0x10/0x10 [ 647.952342][T14804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.952373][T14804] ? __pfx__printk+0x10/0x10 [ 647.952400][T14804] ? __pfx___might_resched+0x10/0x10 [ 647.952426][T14804] ? fs_reclaim_acquire+0x7d/0x100 [ 647.952457][T14804] should_fail_ex+0x414/0x560 [ 647.952484][T14804] should_failslab+0xa8/0x100 [ 647.952502][T14804] kmem_cache_alloc_node_noprof+0x77/0x710 [ 647.952524][T14804] ? __alloc_skb+0x112/0x2d0 [ 647.952552][T14804] __alloc_skb+0x112/0x2d0 [ 647.952578][T14804] inet_ifmcaddr_notify+0x7e/0x150 [ 647.952600][T14804] __ip_mc_dec_group+0x40b/0x690 [ 647.952620][T14804] inetdev_event+0x2a7/0x15b0 [ 647.952646][T14804] ? __pfx_inetdev_event+0x10/0x10 [ 647.952674][T14804] notifier_call_chain+0x1b6/0x3e0 [ 647.952699][T14804] __dev_notify_flags+0x18d/0x2e0 [ 647.952717][T14804] ? __pfx___dev_notify_flags+0x10/0x10 [ 647.952730][T14804] ? __dev_change_flags+0x4cc/0x6d0 [ 647.952750][T14804] ? __pfx___dev_change_flags+0x10/0x10 [ 647.952774][T14804] netif_change_flags+0xe8/0x1a0 [ 647.952794][T14804] do_setlink+0xc55/0x41c0 [ 647.952811][T14804] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.952842][T14804] ? __pfx_do_setlink+0x10/0x10 [ 647.952857][T14804] ? stack_trace_save+0x9c/0xe0 [ 647.952877][T14804] ? __pfx_stack_trace_save+0x10/0x10 [ 647.952905][T14804] ? __lock_acquire+0xab9/0xd20 [ 647.952927][T14804] ? __mutex_trylock_common+0x153/0x260 [ 647.952948][T14804] ? __pfx___mutex_trylock_common+0x10/0x10 [ 647.952972][T14804] ? rcu_is_watching+0x15/0xb0 [ 647.952990][T14804] ? trace_contention_end+0x39/0x120 [ 647.953010][T14804] ? __mutex_lock+0x335/0x1350 [ 647.953040][T14804] ? rtnl_newlink+0x8e9/0x1c80 [ 647.953066][T14804] ? __pfx___mutex_lock+0x10/0x10 [ 647.953092][T14804] ? full_name_hash+0x92/0xe0 [ 647.953112][T14804] ? netdev_name_node_lookup+0xdf/0x120 [ 647.953145][T14804] rtnl_newlink+0x1619/0x1c80 [ 647.953166][T14804] ? netlink_deliver_tap+0x19c/0x1b0 [ 647.953200][T14804] ? __pfx_rtnl_newlink+0x10/0x10 [ 647.953242][T14804] ? kasan_quarantine_put+0xdd/0x220 [ 647.953263][T14804] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.953288][T14804] ? nlmon_xmit+0xb0/0x100 [ 647.953305][T14804] ? kmem_cache_free+0x19b/0x690 [ 647.953334][T14804] ? __local_bh_enable_ip+0x12d/0x1c0 [ 647.953352][T14804] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.953373][T14804] ? __local_bh_enable_ip+0x12d/0x1c0 [ 647.953389][T14804] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 647.953409][T14804] ? __dev_queue_xmit+0x27b/0x3b50 [ 647.953426][T14804] ? __dev_queue_xmit+0x27b/0x3b50 [ 647.953442][T14804] ? __dev_queue_xmit+0x27b/0x3b50 [ 647.953461][T14804] ? __dev_queue_xmit+0x1d79/0x3b50 [ 647.953476][T14804] ? kasan_save_track+0x3e/0x80 [ 647.953498][T14804] ? __kasan_slab_alloc+0x6c/0x80 [ 647.953524][T14804] ? __lock_acquire+0xab9/0xd20 [ 647.953558][T14804] ? __pfx_rtnl_newlink+0x10/0x10 [ 647.953580][T14804] rtnetlink_rcv_msg+0x7cf/0xb70 [ 647.953606][T14804] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 647.953627][T14804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.953649][T14804] ? ref_tracker_free+0x63a/0x7d0 [ 647.953663][T14804] ? __asan_memcpy+0x40/0x70 [ 647.953683][T14804] ? __pfx_ref_tracker_free+0x10/0x10 [ 647.953706][T14804] netlink_rcv_skb+0x208/0x470 [ 647.953730][T14804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.953754][T14804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.953786][T14804] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.953816][T14804] netlink_unicast+0x82f/0x9e0 [ 647.953844][T14804] ? __pfx_netlink_unicast+0x10/0x10 [ 647.953866][T14804] ? netlink_sendmsg+0x642/0xb30 [ 647.953879][T14804] ? skb_put+0x11b/0x210 [ 647.953896][T14804] netlink_sendmsg+0x805/0xb30 [ 647.953917][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.953943][T14804] ? __import_iovec+0x5d4/0x7f0 [ 647.953960][T14804] ? aa_sock_msg_perm+0xf1/0x1d0 [ 647.953985][T14804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.954000][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.954024][T14804] __sock_sendmsg+0x21c/0x270 [ 647.954047][T14804] ____sys_sendmsg+0x505/0x830 [ 647.954067][T14804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.954096][T14804] ___sys_sendmsg+0x21f/0x2a0 [ 647.954114][T14804] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.954163][T14804] ? __fget_files+0x2a/0x420 [ 647.954177][T14804] ? __fget_files+0x3a0/0x420 [ 647.954199][T14804] __sys_sendmsg+0x164/0x220 [ 647.954217][T14804] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.954240][T14804] ? __pfx_ksys_write+0x10/0x10 [ 647.954265][T14804] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 647.954287][T14804] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.954309][T14804] __do_fast_syscall_32+0xb6/0x2b0 [ 647.954332][T14804] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.954354][T14804] do_fast_syscall_32+0x34/0x80 [ 647.954376][T14804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.954395][T14804] RIP: 0023:0xf700d539 [ 647.954410][T14804] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 647.954423][T14804] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 647.954440][T14804] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 647.954451][T14804] RDX: 0000000004044800 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.954461][T14804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.954470][T14804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 647.954479][T14804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.954502][T14804] [ 648.521163][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.153331][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2774'. [ 649.646690][T14824] vlan2: entered allmulticast mode [ 649.872784][T14828] hub 1-0:1.0: USB hub found [ 649.877919][T14828] hub 1-0:1.0: 1 port detected [ 651.375521][T14854] syzkaller1: entered promiscuous mode [ 651.398907][T14854] syzkaller1: entered allmulticast mode [ 652.106805][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2788'. [ 652.151211][T14869] syz_tun: left allmulticast mode [ 652.157345][T14869] syz_tun: left promiscuous mode [ 652.165205][T14869] bridge0: port 3(syz_tun) entered disabled state [ 652.666240][T14880] FAULT_INJECTION: forcing a failure. [ 652.666240][T14880] name failslab, interval 1, probability 0, space 0, times 0 [ 652.744914][T14880] CPU: 0 UID: 0 PID: 14880 Comm: syz.5.2789 Not tainted syzkaller #0 PREEMPT(full) [ 652.744946][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.744961][T14880] Call Trace: [ 652.744970][T14880] [ 652.744981][T14880] dump_stack_lvl+0x189/0x250 [ 652.745017][T14880] ? __pfx____ratelimit+0x10/0x10 [ 652.745046][T14880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.745078][T14880] ? __pfx__printk+0x10/0x10 [ 652.745108][T14880] ? __pfx___might_resched+0x10/0x10 [ 652.745131][T14880] ? fs_reclaim_acquire+0x7d/0x100 [ 652.745172][T14880] should_fail_ex+0x414/0x560 [ 652.745213][T14880] should_failslab+0xa8/0x100 [ 652.745238][T14880] __kmalloc_noprof+0xcb/0x7f0 [ 652.745269][T14880] ? tomoyo_encode+0x28b/0x550 [ 652.745309][T14880] tomoyo_encode+0x28b/0x550 [ 652.745350][T14880] tomoyo_realpath_from_path+0x58d/0x5d0 [ 652.745397][T14880] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 652.745426][T14880] tomoyo_path_number_perm+0x1e8/0x5a0 [ 652.745458][T14880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 652.745491][T14880] ? register_lock_class+0x51/0x320 [ 652.745551][T14880] ? __pfx_from_kgid+0x10/0x10 [ 652.745574][T14880] ? down_write_killable+0x178/0x230 [ 652.745613][T14880] ? __pfx_down_write_killable+0x10/0x10 [ 652.745653][T14880] security_path_chown+0x13d/0x360 [ 652.745678][T14880] chown_common+0x3bd/0x5c0 [ 652.745728][T14880] ? __pfx_chown_common+0x10/0x10 [ 652.745765][T14880] ? mnt_get_write_access+0x213/0x280 [ 652.745798][T14880] ? mnt_want_write_file+0x172/0x200 [ 652.745829][T14880] ksys_fchown+0xea/0x160 [ 652.745856][T14880] __ia32_sys_fchown16+0xc0/0xd0 [ 652.745901][T14880] __do_fast_syscall_32+0xb6/0x2b0 [ 652.745934][T14880] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.745968][T14880] do_fast_syscall_32+0x34/0x80 [ 652.746000][T14880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.746026][T14880] RIP: 0023:0xf700d539 [ 652.746046][T14880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 652.746066][T14880] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 000000000000005f [ 652.746089][T14880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 652.746105][T14880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.746118][T14880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.746131][T14880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.746145][T14880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.746180][T14880] [ 652.746245][T14880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 653.016557][T14869] : (slave team0): Releasing backup interface [ 653.051890][T14869] bridge_slave_0: left allmulticast mode [ 653.072694][T14869] bridge_slave_0: left promiscuous mode [ 653.078601][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.133702][T14869] bridge_slave_1: left allmulticast mode [ 653.139624][T14869] bridge_slave_1: left promiscuous mode [ 653.161339][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.271811][T14869] : (slave bond_slave_0): Releasing backup interface [ 653.349993][T14869] : (slave bond_slave_1): Releasing backup interface [ 653.403009][T14869] team0: Port device team_slave_0 removed [ 653.439162][T14869] team0: Port device team_slave_1 removed [ 653.469464][T14869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.522503][T14869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.545250][T14869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.585125][T14872] sit0: entered promiscuous mode [ 653.622345][T14872] team0: Port device sit0 added [ 653.646148][T14876] vlan0: entered allmulticast mode [ 653.943699][T14909] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2795'. [ 656.008051][T14922] fuse: Bad value for 'fd' [ 656.100390][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2800'. [ 657.087809][ T30] audit: type=1326 audit(1761310677.421:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.141849][T14940] program syz.4.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.160454][T14940] program syz.4.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.172755][ T30] audit: type=1326 audit(1761310677.421:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.198772][T14940] program syz.4.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.229374][ T30] audit: type=1326 audit(1761310677.421:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.306843][ T30] audit: type=1326 audit(1761310677.421:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.356069][ T30] audit: type=1326 audit(1761310677.421:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.412071][ T30] audit: type=1326 audit(1761310677.421:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.435977][ T30] audit: type=1326 audit(1761310677.421:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.550058][ T30] audit: type=1326 audit(1761310677.501:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.674536][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 657.698531][ T30] audit: type=1326 audit(1761310677.501:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 657.781457][ T30] audit: type=1326 audit(1761310677.501:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.4.2802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 659.121897][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 659.138906][T14981] syzkaller0: entered promiscuous mode [ 659.149306][T14981] syzkaller0: entered allmulticast mode [ 659.534250][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 659.743999][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2819'. [ 659.800546][ T5879] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 659.952354][ T5879] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 660.120214][ T5879] usb 4-1: config 0 has no interface number 0 [ 660.136389][ T5879] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 660.162444][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.195374][ T5879] usb 4-1: config 0 descriptor?? [ 660.204982][ T5879] ttusbir 4-1:0.83: cannot find expected altsetting [ 660.843373][T15013] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 661.071886][T15011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2817'. [ 662.642000][ T44] usb 4-1: USB disconnect, device number 31 [ 662.781008][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2833'. [ 663.773355][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 664.322371][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.337659][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 664.349030][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.357410][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.365325][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 664.972177][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.861986][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.915804][T15066] chnl_net:caif_netlink_parms(): no params data found [ 665.974015][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'. [ 666.042951][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.590022][ T5840] Bluetooth: hci5: command tx timeout [ 667.106953][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.198820][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 667.198840][ T30] audit: type=1326 audit(1761310687.531:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.240037][ T30] audit: type=1326 audit(1761310687.531:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.262879][ T30] audit: type=1326 audit(1761310687.571:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.285061][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.291316][ T30] audit: type=1326 audit(1761310687.571:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.316203][ T30] audit: type=1326 audit(1761310687.571:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.373635][ T30] audit: type=1326 audit(1761310687.571:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.396394][ T30] audit: type=1326 audit(1761310687.611:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.418485][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.429939][ T30] audit: type=1326 audit(1761310687.611:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.452034][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.465623][ T30] audit: type=1326 audit(1761310687.611:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.529945][ T30] audit: type=1326 audit(1761310687.611:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.552107][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.629148][T15066] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.640513][T15066] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.647918][T15066] bridge_slave_0: entered allmulticast mode [ 667.656539][T15066] bridge_slave_0: entered promiscuous mode [ 667.675394][T15066] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.684876][T15066] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.694175][T15066] bridge_slave_1: entered allmulticast mode [ 667.703093][T15066] bridge_slave_1: entered promiscuous mode [ 667.813728][T15066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.871576][T15066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.481358][T15110] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 668.544901][T15066] team0: Port device team_slave_0 added [ 668.661497][ T5842] Bluetooth: hci5: command tx timeout [ 668.736339][T15066] team0: Port device team_slave_1 added [ 670.272526][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 670.282997][ T13] gretap1 (unregistering): left promiscuous mode [ 670.289698][ T13] gretap1 (unregistering): left allmulticast mode [ 670.313728][ T13] bond5 (unregistering): (slave gretap2): Releasing active interface [ 670.332026][ T13] gretap2 (unregistering): left promiscuous mode [ 670.341233][ T13] gretap2 (unregistering): left allmulticast mode [ 670.739991][ T5840] Bluetooth: hci5: command tx timeout [ 670.858713][ T13] bond0 (unregistering): left promiscuous mode [ 670.865536][ T13] bond0 (unregistering): Released all slaves [ 670.995803][ T13] bond1 (unregistering): Released all slaves [ 671.010147][ T13] bond2 (unregistering): Released all slaves [ 671.025411][ T13] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 671.033471][ T13] vcan1: left allmulticast mode [ 671.041598][ T13] bond3 (unregistering): Released all slaves [ 671.057216][ T13] bond4 (unregistering): Released all slaves [ 671.188353][ T13] bond5 (unregistering): Released all slaves [ 671.258484][T15066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.279885][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.336447][T15066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.391589][T15066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.448230][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.493265][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2852'. [ 671.519830][T15066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.588139][ T13] : left promiscuous mode [ 671.738547][ T13] tipc: Disabling bearer [ 671.750103][ T13] tipc: Disabling bearer [ 671.762605][ T13] tipc: Left network mode [ 671.788860][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2855'. [ 671.792307][T15066] hsr_slave_0: entered promiscuous mode [ 671.816425][T15066] hsr_slave_1: entered promiscuous mode [ 671.823165][T15066] debugfs: 'hsr0' already exists in 'hsr' [ 671.829068][T15066] Cannot create hsr debugfs directory [ 671.833541][ T44] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 672.012900][ T44] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 672.021993][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.060216][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 672.091819][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 672.125596][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.156360][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.176441][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.191180][ T44] usb 6-1: config 0 descriptor?? [ 672.197134][T15145] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 672.274077][T15167] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2858'. [ 672.290815][ T13] dummy0: left promiscuous mode [ 672.312025][ T13] hsr_slave_0: left promiscuous mode [ 672.324170][ T13] hsr_slave_1: left promiscuous mode [ 672.390742][ T13] veth1_macvtap: left promiscuous mode [ 672.403376][ T13] veth0_macvtap: left promiscuous mode [ 672.619464][ T44] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 672.666366][ T44] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 672.821884][ T5840] Bluetooth: hci5: command tx timeout [ 672.926120][ T5912] usb 6-1: USB disconnect, device number 34 [ 673.997720][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 673.997739][ T30] audit: type=1326 audit(1761310694.331:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.998580][ T30] audit: type=1326 audit(1761310694.331:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.998634][ T30] audit: type=1326 audit(1761310694.331:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.998683][ T30] audit: type=1326 audit(1761310694.331:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.998833][ T30] audit: type=1326 audit(1761310694.331:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.999101][ T30] audit: type=1326 audit(1761310694.331:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 673.999308][T15196] netlink: 'syz.5.2864': attribute type 13 has an invalid length. [ 673.999328][T15196] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2864'. [ 674.903775][T15196] syz_tun: refused to change device tx_queue_len [ 675.839206][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 675.889487][T15219] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2870'. [ 676.394485][T15066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 676.525773][T15066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 676.626779][T15066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 676.663980][T15066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.327325][T15066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.700622][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.741192][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.748341][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.942848][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.950124][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.429663][T15066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.668572][T15066] veth0_vlan: entered promiscuous mode [ 678.717911][T15066] veth1_vlan: entered promiscuous mode [ 678.905386][T15066] veth0_macvtap: entered promiscuous mode [ 678.957470][T15066] veth1_macvtap: entered promiscuous mode [ 679.020822][T15066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.091934][T15066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.299274][T10877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.318910][T10877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.330368][T10877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.744068][T10877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.578484][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.613688][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.831034][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.839468][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.582302][ T30] audit: type=1326 audit(1761310705.901:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15364 comm="syz.5.2892" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 685.724252][ T30] audit: type=1326 audit(1761310705.911:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15364 comm="syz.5.2892" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 685.946374][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.952992][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.405548][T15391] hub 9-0:1.0: USB hub found [ 686.411753][T15391] hub 9-0:1.0: 1 port detected [ 686.535915][T15397] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2894'. [ 686.820033][ T5879] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 687.158979][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.180391][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 687.206522][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 687.251022][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 687.548452][ T5879] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 687.568973][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.684942][ T5879] usb 4-1: config 0 descriptor?? [ 688.103081][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2896'. [ 688.112261][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 688.126039][T15398] trusted_key: encrypted_key: insufficient parameters specified [ 688.135252][T15398] netlink: 40743 bytes leftover after parsing attributes in process `syz.3.2896'. [ 688.158698][ T5879] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 688.732170][T15424] vivid-003: ================= START STATUS ================= [ 688.740692][T15424] vivid-003: RDS Tx I/O Mode: Controls [ 688.751438][T15424] vivid-003: RDS Program ID: 32904 [ 688.756692][T15424] vivid-003: RDS Program Type: 3 [ 688.763878][T15424] vivid-003: RDS PS Name: VIVID-TX [ 688.769713][T15424] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 688.810514][T15424] vivid-003: RDS Stereo: true [ 688.815270][T15424] vivid-003: RDS Artificial Head: false [ 688.849045][T15424] vivid-003: RDS Compressed: false [ 688.854375][T15424] vivid-003: RDS Dynamic PTY: false [ 688.859641][T15424] vivid-003: RDS Traffic Announcement: false [ 688.865884][T15424] vivid-003: RDS Traffic Program: true [ 688.871480][T15424] vivid-003: RDS Music: true [ 688.876158][T15424] vivid-003: ================== END STATUS ================== [ 689.805489][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'. [ 690.596302][ T5886] usb 4-1: USB disconnect, device number 32 [ 691.871399][ T5879] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 692.051340][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 692.109413][ T5879] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.122683][ T5879] usb 4-1: config 0 has no interface number 0 [ 692.147705][ T5879] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 692.163319][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.179868][ T5879] usb 4-1: Product: syz [ 692.190169][ T5879] usb 4-1: Manufacturer: syz [ 692.200148][ T5879] usb 4-1: SerialNumber: syz [ 692.212759][ T5879] usb 4-1: config 0 descriptor?? [ 692.231253][ T5879] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 692.265030][ T5879] usb 4-1: selecting invalid altsetting 1 [ 692.310288][ T5879] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 692.349125][ T5879] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.380766][ T5879] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 692.418907][ T5879] usb 4-1: media controller created [ 692.464231][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.940129][ T5879] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 693.961008][ T5879] zl10353_read_register: readreg error (reg=127, ret==-110) [ 694.425166][T15464] netlink: 'syz.5.2910': attribute type 2 has an invalid length. [ 694.790176][ T5879] usb 4-1: USB disconnect, device number 33 [ 696.307876][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2910'. [ 696.337222][T15483] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2910'. [ 696.865916][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 697.475482][ T5912] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 697.488509][ T5912] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 697.549899][ T5912] usb 4-1: config 1 has no interface number 1 [ 697.573578][ T5912] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 697.617887][ T5912] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.676000][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.711441][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.752855][ T5912] usb 4-1: Product: syz [ 697.759793][ T5912] usb 4-1: Manufacturer: syz [ 697.772327][ T5912] usb 4-1: SerialNumber: syz [ 697.900976][T15492] FAULT_INJECTION: forcing a failure. [ 697.900976][T15492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 697.959959][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.5.2916 Not tainted syzkaller #0 PREEMPT(full) [ 697.959990][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.960005][T15492] Call Trace: [ 697.960014][T15492] [ 697.960028][T15492] dump_stack_lvl+0x189/0x250 [ 697.960065][T15492] ? __pfx____ratelimit+0x10/0x10 [ 697.960092][T15492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.960122][T15492] ? __pfx__printk+0x10/0x10 [ 697.960146][T15492] ? fs_reclaim_acquire+0x7d/0x100 [ 697.960188][T15492] should_fail_ex+0x414/0x560 [ 697.960227][T15492] prepare_alloc_pages+0x213/0x610 [ 697.960257][T15492] __alloc_frozen_pages_noprof+0x123/0x370 [ 697.960284][T15492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 697.960313][T15492] ? __lock_acquire+0xab9/0xd20 [ 697.960337][T15492] ? policy_nodemask+0x27c/0x720 [ 697.960364][T15492] alloc_pages_mpol+0x232/0x4a0 [ 697.960392][T15492] alloc_pages_noprof+0xa9/0x190 [ 697.960415][T15492] pte_alloc_one+0x23/0x310 [ 697.960439][T15492] ? __pte_alloc+0x1d/0x1a0 [ 697.960461][T15492] __pte_alloc+0x25/0x1a0 [ 697.960487][T15492] __handle_mm_fault+0x4985/0x5400 [ 697.960533][T15492] ? __pfx___handle_mm_fault+0x10/0x10 [ 697.960584][T15492] ? __pfx___might_resched+0x10/0x10 [ 697.960614][T15492] handle_mm_fault+0x40a/0x8e0 [ 697.960655][T15492] __get_user_pages+0x165c/0x2a00 [ 697.960720][T15492] get_user_pages_remote+0x2f1/0xac0 [ 697.960757][T15492] ? __pfx_get_user_pages_remote+0x10/0x10 [ 697.960784][T15492] ? down_read+0x1ad/0x2e0 [ 697.960818][T15492] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 697.960855][T15492] get_arg_page+0x104/0x330 [ 697.960890][T15492] ? up_write+0x1c4/0x420 [ 697.960917][T15492] ? __pfx_get_arg_page+0x10/0x10 [ 697.960955][T15492] copy_string_kernel+0x191/0x2a0 [ 697.960989][T15492] do_execveat_common+0x3c5/0x6a0 [ 697.961033][T15492] __ia32_compat_sys_execve+0x99/0xb0 [ 697.961067][T15492] __do_fast_syscall_32+0xb6/0x2b0 [ 697.961098][T15492] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.961131][T15492] do_fast_syscall_32+0x34/0x80 [ 697.961161][T15492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 697.961188][T15492] RIP: 0023:0xf700d539 [ 697.961207][T15492] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 697.961225][T15492] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 697.961248][T15492] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 697.961263][T15492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.961276][T15492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.961288][T15492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 697.961301][T15492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.961334][T15492] [ 698.250315][T15495] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2913'. [ 698.259507][T15495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 698.284877][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 698.640231][ T5912] usb 4-1: 2:1 : unsupported format bits 0x40 [ 698.719890][ T5912] usb 4-1: USB disconnect, device number 34 [ 699.513127][T15507] sit1: entered allmulticast mode [ 699.895051][T15512] tipc: Enabled bearer , priority 0 [ 699.921624][T15512] syzkaller0: entered promiscuous mode [ 699.991808][T15512] syzkaller0: entered allmulticast mode [ 700.046886][T15512] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2921'. [ 700.124813][T15515] syzkaller0: mtu greater than device maximum [ 700.134653][T15510] tipc: Resetting bearer [ 700.173173][T15510] tipc: Disabling bearer [ 700.362506][ T5953] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 700.525680][ T5953] usb 1-1: not running at top speed; connect to a high speed hub [ 700.535261][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.571390][ T5953] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 700.582160][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.590545][ T5953] usb 1-1: Product: syz [ 700.594905][ T5953] usb 1-1: Manufacturer: syz [ 700.599564][ T5953] usb 1-1: SerialNumber: syz [ 701.352643][ T5953] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x04B8 pid 0x0202 [ 701.390202][ T5953] usb 1-1: USB disconnect, device number 8 [ 701.468610][ T5953] usblp0: removed [ 702.033347][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.088892][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.161289][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.191790][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.210693][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.867324][T12307] syz_tun (unregistering): left allmulticast mode [ 702.873948][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 703.090252][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.104239][ T5912] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 703.132100][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.162552][ T5912] usb 1-1: Product: syz [ 703.209883][ T5912] usb 1-1: Manufacturer: syz [ 703.227566][ T5912] usb 1-1: SerialNumber: syz [ 703.261580][ T5912] usb 1-1: config 0 descriptor?? [ 703.328323][T10877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.602080][T10877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.802055][T10877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.981146][T10877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.030031][T15547] chnl_net:caif_netlink_parms(): no params data found [ 704.304280][ T5842] Bluetooth: hci0: command tx timeout [ 704.399982][ T5879] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 704.586609][ T5879] usb 4-1: config 0 has no interfaces? [ 704.601737][ T5879] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 704.639113][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.677682][ T5879] usb 4-1: Product: syz [ 704.683167][ T5879] usb 4-1: Manufacturer: syz [ 704.687909][ T5879] usb 4-1: SerialNumber: syz [ 705.043057][ T5879] usb 4-1: config 0 descriptor?? [ 705.168036][T15547] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.198896][ T5912] usb 1-1: probing VID:PID(2201:012C) [ 705.203687][T15547] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.222284][T15547] bridge_slave_0: entered allmulticast mode [ 705.230254][T15547] bridge_slave_0: entered promiscuous mode [ 705.469150][ T5912] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 705.513099][ T5912] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 705.555902][ T5912] usb 1-1: USB disconnect, device number 9 [ 705.562310][T15547] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.586624][T15547] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.630278][T15547] bridge_slave_1: entered allmulticast mode [ 705.666823][ T5879] usb 4-1: USB disconnect, device number 35 [ 705.689653][T15547] bridge_slave_1: entered promiscuous mode [ 706.351625][ T5842] Bluetooth: hci0: command tx timeout [ 708.098127][T10877] bond1 (unregistering): (slave geneve2): Releasing active interface [ 708.419999][ T5842] Bluetooth: hci0: command tx timeout [ 709.317494][T10877] bond0 (unregistering): left promiscuous mode [ 709.323915][T10877] bond_slave_0: left promiscuous mode [ 709.329475][T10877] bond_slave_1: left promiscuous mode [ 709.336616][T10877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.345882][T10877] bond_slave_0: left allmulticast mode [ 709.355383][T10877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.364797][T10877] bond_slave_1: left allmulticast mode [ 709.372194][T10877] bond0 (unregistering): Released all slaves [ 709.496788][T10877] bond1 (unregistering): Released all slaves [ 709.515149][T15547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.532430][T15614] tipc: Enabled bearer , priority 0 [ 709.549555][T15616] syzkaller0: entered promiscuous mode [ 709.579815][T15616] syzkaller0: entered allmulticast mode [ 709.612574][T15622] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2944'. [ 709.660392][T15624] tipc: Resetting bearer [ 709.702123][T15547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.764178][T15606] tipc: Resetting bearer [ 709.795398][T15606] tipc: Disabling bearer [ 709.806902][T10877] tipc: Disabling bearer [ 709.820030][T10877] tipc: Disabling bearer [ 709.826559][T10877] tipc: Left network mode [ 710.007854][T15547] team0: Port device team_slave_0 added [ 710.098276][T15547] team0: Port device team_slave_1 added [ 710.150989][T15547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.178438][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.239987][T15547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.301849][T15547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.319232][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.345274][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.462788][T15547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.507722][ T5842] Bluetooth: hci0: command tx timeout [ 710.519989][ T5912] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 710.721784][T10877] hsr_slave_0: left promiscuous mode [ 710.759976][T10877] hsr_slave_1: left promiscuous mode [ 710.820558][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 710.840723][T10877] veth1_macvtap: left promiscuous mode [ 710.844439][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 710.864683][T10877] veth0_macvtap: left promiscuous mode [ 710.914730][ T5912] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 710.923282][ T5912] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 710.933541][ T5912] usb 1-1: config 5 has no interface number 0 [ 710.946672][ T5912] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 710.958862][ T5912] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.983646][ T5912] usb 1-1: config 5 interface 246 has no altsetting 0 [ 710.993274][ T5912] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 711.002856][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.011302][ T5912] usb 1-1: Product: syz [ 711.017815][ T5912] usb 1-1: Manufacturer: syz [ 711.024687][ T5912] usb 1-1: SerialNumber: syz [ 711.031156][ T44] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 711.209076][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 711.232319][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.243597][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.276011][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.355734][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 711.365420][ T44] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 711.382883][ T44] usb 4-1: Product: syz [ 711.406927][ T44] usb 4-1: Manufacturer: syz [ 711.433635][ T44] usb 4-1: SerialNumber: syz [ 711.481530][ T44] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input46 [ 712.144968][T10877] team0 (unregistering): Port device team_slave_1 removed [ 712.260718][T10877] team0 (unregistering): Port device team_slave_0 removed [ 713.790074][ T5953] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 713.823593][T15547] hsr_slave_0: entered promiscuous mode [ 713.832421][T15547] hsr_slave_1: entered promiscuous mode [ 713.845675][T15547] debugfs: 'hsr0' already exists in 'hsr' [ 713.871649][T15547] Cannot create hsr debugfs directory [ 713.890513][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 713.922264][ T5879] usb 4-1: USB disconnect, device number 36 [ 713.959868][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 713.974895][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.000194][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.023040][ T5953] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 714.037926][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.038830][ T5879] appletouch 4-1:1.0: input: appletouch disconnected [ 714.053733][ T5953] usb 6-1: config 0 descriptor?? [ 714.099351][ T60] usb 1-1: Failed to submit usb control message: -71 [ 714.118253][ T5912] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 714.128956][ T60] usb 1-1: unable to send the bmi data to the device: -71 [ 714.144903][ T60] usb 1-1: unable to get target info from device [ 714.172467][ T5912] usb 1-1: USB disconnect, device number 10 [ 714.179112][ T60] usb 1-1: could not get target info (-71) [ 714.204639][ T60] usb 1-1: could not probe fw (-71) [ 714.348247][T15700] input: syz1 as /devices/virtual/input/input47 [ 714.518830][ T5953] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 714.554702][ T5953] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 714.593306][ T5953] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 714.630760][ T5953] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 714.637625][ T5953] asus 0003:0B05:17E0.0023: unknown main item tag 0x0 [ 714.741500][ T5953] asus 0003:0B05:17E0.0023: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input0 [ 714.816487][ T5953] asus 0003:0B05:17E0.0023: Asus input not registered [ 714.842795][ T5953] asus 0003:0B05:17E0.0023: probe with driver asus failed with error -12 [ 714.866512][ T5953] usb 6-1: USB disconnect, device number 35 [ 714.986921][T15708] fido_id[15708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 715.621131][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 715.789276][ T5879] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 715.798784][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.823849][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.855526][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.881029][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.955183][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.967131][T15547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 715.974614][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.996557][T15547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.005039][ T5879] usb 1-1: config 0 descriptor?? [ 716.020752][T15725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 716.078880][T15547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.101998][T15547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.361346][T15547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.449415][ T5879] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 716.483937][T15547] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.535733][ T5879] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 716.536422][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.555770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.609491][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2967'. [ 716.672440][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.679811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.709030][T15751] batadv_slave_1: entered promiscuous mode [ 716.737226][T15751] tipc: Enabled bearer , priority 0 [ 716.768357][T15750] batadv_slave_1: left promiscuous mode [ 717.077124][T15547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.093954][ T5879] usb 1-1: USB disconnect, device number 11 [ 717.850355][ T5953] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 717.852525][ T44] tipc: Node number set to 823077619 [ 718.137234][T15547] veth0_vlan: entered promiscuous mode [ 718.172225][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.189860][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.195389][T15547] veth1_vlan: entered promiscuous mode [ 718.240151][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.270179][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.315470][ T5953] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.371192][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.536935][T15547] veth0_macvtap: entered promiscuous mode [ 718.537738][ T5953] usb 4-1: config 0 descriptor?? [ 718.671346][T15547] veth1_macvtap: entered promiscuous mode [ 718.678419][T15781] FAULT_INJECTION: forcing a failure. [ 718.678419][T15781] name failslab, interval 1, probability 0, space 0, times 0 [ 718.724026][T15547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.745149][T15547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.759918][T15781] CPU: 0 UID: 0 PID: 15781 Comm: syz.0.2973 Not tainted syzkaller #0 PREEMPT(full) [ 718.759951][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 718.759963][T15781] Call Trace: [ 718.759970][T15781] [ 718.759977][T15781] dump_stack_lvl+0x189/0x250 [ 718.760006][T15781] ? __pfx____ratelimit+0x10/0x10 [ 718.760025][T15781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.760047][T15781] ? __pfx__printk+0x10/0x10 [ 718.760064][T15781] ? __pfx___might_resched+0x10/0x10 [ 718.760081][T15781] ? fs_reclaim_acquire+0x7d/0x100 [ 718.760108][T15781] should_fail_ex+0x414/0x560 [ 718.760133][T15781] ? __pfx_sock_alloc_inode+0x10/0x10 [ 718.760152][T15781] should_failslab+0xa8/0x100 [ 718.760169][T15781] ? __pfx_sock_alloc_inode+0x10/0x10 [ 718.760186][T15781] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 718.760207][T15781] ? sock_alloc_inode+0x28/0xc0 [ 718.760229][T15781] ? __pfx_sock_alloc_inode+0x10/0x10 [ 718.760247][T15781] sock_alloc_inode+0x28/0xc0 [ 718.760265][T15781] alloc_inode+0x6a/0x1b0 [ 718.760289][T15781] __sock_create+0x12d/0x9f0 [ 718.760317][T15781] udp_sock_create6+0xcb/0x690 [ 718.760342][T15781] ? __pfx_udp_sock_create6+0x10/0x10 [ 718.760369][T15781] ? rxrpc_lookup_local+0xc1a/0x1410 [ 718.760397][T15781] rxrpc_lookup_local+0xc92/0x1410 [ 718.760427][T15781] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 718.760456][T15781] ? __local_bh_enable_ip+0x12d/0x1c0 [ 718.760475][T15781] ? __local_bh_enable_ip+0x12d/0x1c0 [ 718.760494][T15781] ? rxrpc_bind+0x164/0x460 [ 718.760517][T15781] rxrpc_bind+0x198/0x460 [ 718.760540][T15781] __sys_bind+0x2c6/0x3e0 [ 718.760563][T15781] ? __pfx___sys_bind+0x10/0x10 [ 718.760592][T15781] ? __pfx_ksys_write+0x10/0x10 [ 718.760620][T15781] __ia32_sys_bind+0x7a/0x90 [ 718.760642][T15781] __do_fast_syscall_32+0xb6/0x2b0 [ 718.760663][T15781] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.760686][T15781] do_fast_syscall_32+0x34/0x80 [ 718.760706][T15781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.760724][T15781] RIP: 0023:0xf7f45539 [ 718.760738][T15781] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 718.760750][T15781] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 718.760766][T15781] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 718.760778][T15781] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.760786][T15781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.760795][T15781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 718.760805][T15781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.760828][T15781] [ 718.760868][T15781] socket: no more sockets [ 719.077339][ T5953] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 719.095214][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.104121][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.120547][ T5953] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 719.154716][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.173384][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.340712][T15766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2970'. [ 719.364886][ T5912] usb 4-1: USB disconnect, device number 37 [ 719.383076][T10877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.439850][T10877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.482925][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.497054][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.127564][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.165016][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.249894][ T5879] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 720.410525][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 720.423698][ T5879] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 720.446244][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.487051][ T5879] usb 4-1: config 0 descriptor?? [ 720.820674][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 720.953030][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 720.992098][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 721.069717][ T5879] usb 4-1: media controller created [ 721.170203][ T30] audit: type=1326 audit(1761310741.421:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.231781][ T30] audit: type=1326 audit(1761310741.421:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.329691][ T30] audit: type=1326 audit(1761310741.421:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.332878][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.665584][ T30] audit: type=1326 audit(1761310741.421:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.715628][ T30] audit: type=1326 audit(1761310741.421:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.748619][ T30] audit: type=1326 audit(1761310741.421:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 721.907097][ T30] audit: type=1326 audit(1761310741.431:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 722.045808][ T30] audit: type=1326 audit(1761310741.431:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 722.234981][ T30] audit: type=1326 audit(1761310741.431:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 722.357719][ T30] audit: type=1326 audit(1761310741.431:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 722.628477][T15853] FAULT_INJECTION: forcing a failure. [ 722.628477][T15853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.880302][T15853] CPU: 1 UID: 0 PID: 15853 Comm: syz.6.2984 Not tainted syzkaller #0 PREEMPT(full) [ 722.880324][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 722.880337][T15853] Call Trace: [ 722.880343][T15853] [ 722.880350][T15853] dump_stack_lvl+0x189/0x250 [ 722.880375][T15853] ? __pfx____ratelimit+0x10/0x10 [ 722.880395][T15853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.880416][T15853] ? __pfx__printk+0x10/0x10 [ 722.880432][T15853] ? __might_fault+0xb0/0x130 [ 722.880461][T15853] should_fail_ex+0x414/0x560 [ 722.880490][T15853] _copy_from_user+0x2d/0xb0 [ 722.880538][T15853] kstrtouint_from_user+0xc4/0x170 [ 722.880556][T15853] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 722.880585][T15853] proc_fail_nth_write+0x88/0x200 [ 722.880606][T15853] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 722.880630][T15853] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 722.880652][T15853] vfs_write+0x27e/0xb30 [ 722.880682][T15853] ? __pfx_vfs_write+0x10/0x10 [ 722.880705][T15853] ? __fget_files+0x2a/0x420 [ 722.880730][T15853] ? __fget_files+0x3a0/0x420 [ 722.880744][T15853] ? __fget_files+0x2a/0x420 [ 722.880765][T15853] ksys_write+0x145/0x250 [ 722.880789][T15853] ? __pfx_ksys_write+0x10/0x10 [ 722.880814][T15853] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 722.880836][T15853] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.880859][T15853] __do_fast_syscall_32+0xb6/0x2b0 [ 722.880881][T15853] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.880904][T15853] do_fast_syscall_32+0x34/0x80 [ 722.880926][T15853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.880945][T15853] RIP: 0023:0xf7f15539 [ 722.880958][T15853] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 722.880972][T15853] RSP: 002b:00000000f5406590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 722.880989][T15853] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5406620 [ 722.881000][T15853] RDX: 0000000000000001 RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 722.881009][T15853] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 722.881019][T15853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 722.881028][T15853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.881051][T15853] [ 723.115963][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.440615][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2985'. [ 723.523721][ T5879] az6027: usb out operation failed. (-71) [ 723.540552][ T5879] az6027: usb out operation failed. (-71) [ 723.546339][ T5879] stb0899_attach: Driver disabled by Kconfig [ 723.549458][T15858] vlan2: entered allmulticast mode [ 723.651397][ T5879] az6027: no front-end attached [ 723.651397][ T5879] [ 723.679952][ T5879] az6027: usb out operation failed. (-71) [ 723.691760][ T5879] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 723.722466][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 723.798881][ T5879] dvb-usb: schedule remote query interval to 400 msecs. [ 723.923791][ T5879] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 723.954169][ T5879] usb 4-1: USB disconnect, device number 38 [ 724.084986][T15872] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2990'. [ 724.242369][ T5879] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 725.100457][T15890] syzkaller0: entered promiscuous mode [ 725.105990][T15890] syzkaller0: entered allmulticast mode [ 727.456890][T15930] fuse: Unknown parameter 'fdd0xffffffffffffffff' [ 727.908924][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 727.939199][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3010'. [ 729.300005][ T5953] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 729.654572][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3006'. [ 729.666731][ T5953] usb 4-1: device descriptor read/64, error -71 [ 729.843235][ T5879] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 729.919822][ T5953] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 730.011052][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 730.023332][ T5879] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 730.039839][ T5879] usb 6-1: config 1 has no interface number 0 [ 730.046016][ T5879] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.070316][ T5953] usb 4-1: device descriptor read/64, error -71 [ 730.089954][ T5879] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.109996][ T5879] usb 6-1: config 1 interface 236 has no altsetting 0 [ 730.129565][ T5879] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 730.187676][ T5953] usb usb4-port1: attempt power cycle [ 730.199928][ T5879] usb 6-1: config 1 has no interface number 0 [ 730.219884][ T5879] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.259875][ T5879] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.280230][ T5879] usb 6-1: config 1 interface 236 has no altsetting 0 [ 730.311348][ T5879] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 730.329843][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.337892][ T5879] usb 6-1: Product: syz [ 730.360955][ T5879] usb 6-1: Manufacturer: syz [ 730.365618][ T5879] usb 6-1: SerialNumber: syz [ 730.543811][ T5879] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 730.560704][ T5953] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 730.615549][ T5953] usb 4-1: device descriptor read/8, error -71 [ 730.688962][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.699260][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.708597][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.731563][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.743785][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 730.879962][ T5953] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 730.921470][ T5953] usb 4-1: device descriptor read/8, error -71 [ 731.017640][T10877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.290603][ T5953] usb usb4-port1: unable to enumerate USB device [ 731.498693][T10877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.652661][T10877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.748640][T10877] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 731.780267][T10877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.287876][T15976] chnl_net:caif_netlink_parms(): no params data found [ 732.697953][ T5919] usb 6-1: USB disconnect, device number 36 [ 732.820211][ T5842] Bluetooth: hci1: command tx timeout [ 732.859923][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 733.024444][ T5893] usb 4-1: config 0 has no interfaces? [ 733.037174][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 733.048860][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.063693][ T5893] usb 4-1: Product: syz [ 733.084045][ T5893] usb 4-1: Manufacturer: syz [ 733.089073][ T5893] usb 4-1: SerialNumber: syz [ 733.123433][ T5893] usb 4-1: config 0 descriptor?? [ 733.394186][T10877] bond1 (unregistering): (slave gretap1): Releasing active interface [ 733.891409][T10877] bond1 (unregistering): (slave bridge1): Releasing active interface [ 734.439002][T10877] bond0 (unregistering): left promiscuous mode [ 734.453664][T10877] bond0 (unregistering): Released all slaves [ 734.481677][T10877] bond1 (unregistering): Released all slaves [ 734.512236][T10877] bond2 (unregistering): Released all slaves [ 734.789302][T10877] tipc: Disabling bearer [ 734.796084][T10877] tipc: Left network mode [ 734.927296][ T5842] Bluetooth: hci1: command tx timeout [ 735.150766][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.161017][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.168619][T15976] bridge_slave_0: entered allmulticast mode [ 735.184166][T15976] bridge_slave_0: entered promiscuous mode [ 735.234647][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.242215][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.249603][T15976] bridge_slave_1: entered allmulticast mode [ 735.268263][T15976] bridge_slave_1: entered promiscuous mode [ 735.334519][T10877] dummy0: left promiscuous mode [ 735.355348][T10877] hsr_slave_0: left promiscuous mode [ 735.371932][T10877] hsr_slave_1: left promiscuous mode [ 735.399499][T10877] veth1_vlan: left promiscuous mode [ 735.405187][T10877] veth0_vlan: left promiscuous mode [ 735.556223][T10877] pim6reg (unregistering): left allmulticast mode [ 736.185340][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 736.185359][ T30] audit: type=1326 audit(1761310756.521:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.221825][ T30] audit: type=1326 audit(1761310756.551:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.244230][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.253367][T16046] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3023'. [ 736.279980][T16046] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3023'. [ 736.289225][ T30] audit: type=1326 audit(1761310756.551:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.312525][ T30] audit: type=1326 audit(1761310756.551:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.356201][ T30] audit: type=1326 audit(1761310756.551:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.399549][ T5953] usb 4-1: USB disconnect, device number 43 [ 736.408747][ T30] audit: type=1326 audit(1761310756.581:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.455258][ T30] audit: type=1326 audit(1761310756.581:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.494751][ T30] audit: type=1326 audit(1761310756.591:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.532034][ T30] audit: type=1326 audit(1761310756.591:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.556297][ T30] audit: type=1326 audit(1761310756.591:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.4.3023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 736.990007][ T5842] Bluetooth: hci1: command tx timeout [ 737.089030][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.103124][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.116539][T16046] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.125631][T16046] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.288012][T15976] team0: Port device team_slave_0 added [ 737.322695][T15976] team0: Port device team_slave_1 added [ 737.428367][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.446442][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.475352][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.508661][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.518197][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.554701][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.609896][ T5893] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 737.790109][ T5893] usb 6-1: config 0 has no interfaces? [ 737.799203][ T5893] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 737.820545][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.835770][T15976] hsr_slave_0: entered promiscuous mode [ 737.840282][ T5893] usb 6-1: Product: syz [ 737.846155][ T5893] usb 6-1: Manufacturer: syz [ 737.856957][T15976] hsr_slave_1: entered promiscuous mode [ 737.860735][ T5893] usb 6-1: SerialNumber: syz [ 737.867348][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 737.881620][ T5893] usb 6-1: config 0 descriptor?? [ 737.886262][T15976] Cannot create hsr debugfs directory [ 738.411547][ T5919] usb 6-1: USB disconnect, device number 37 [ 739.062776][ T5842] Bluetooth: hci1: command tx timeout [ 741.227518][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 741.227539][ T30] audit: type=1326 audit(1761310761.561:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 741.314056][ T30] audit: type=1326 audit(1761310761.561:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 741.669375][ T30] audit: type=1326 audit(1761310761.561:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 741.717729][ T30] audit: type=1326 audit(1761310761.601:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 742.055523][ T30] audit: type=1326 audit(1761310761.601:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 742.166579][ T30] audit: type=1326 audit(1761310761.601:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 742.230026][ T30] audit: type=1326 audit(1761310761.601:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 742.786364][ T30] audit: type=1326 audit(1761310761.601:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 742.889169][ T30] audit: type=1326 audit(1761310761.601:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 743.084372][ T30] audit: type=1326 audit(1761310761.601:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16095 comm="syz.4.3033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 743.263155][T15976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 743.354276][T15976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 743.459132][T15976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 743.512578][T15976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 743.844321][T16132] input: syz0 as /devices/virtual/input/input51 [ 744.650197][T16110] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 745.542754][T15976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.568489][ T5879] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 745.959921][ T5879] usb 6-1: config 0 has no interfaces? [ 745.982188][T15976] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.635039][ T5879] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 746.650924][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.666116][ T5879] usb 6-1: Product: syz [ 746.707583][ T5879] usb 6-1: Manufacturer: syz [ 746.774193][ T5879] usb 6-1: SerialNumber: syz [ 746.872657][ T5879] usb 6-1: config 0 descriptor?? [ 746.891347][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.898670][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.140703][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.147930][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.402978][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.409409][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.796163][ T5912] usb 6-1: USB disconnect, device number 38 [ 747.817023][T16157] netlink: 'syz.3.3043': attribute type 21 has an invalid length. [ 748.179139][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.517070][T15976] veth0_vlan: entered promiscuous mode [ 751.800233][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3048'. [ 752.168774][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'. [ 752.832273][T15976] veth1_vlan: entered promiscuous mode [ 754.207867][T15976] veth0_macvtap: entered promiscuous mode [ 754.613143][T15976] veth1_macvtap: entered promiscuous mode [ 755.123431][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.184618][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.280062][ T1048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.296986][ T1048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.343804][ T1048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.144969][ T1048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.061546][T16218] FAULT_INJECTION: forcing a failure. [ 759.061546][T16218] name failslab, interval 1, probability 0, space 0, times 0 [ 759.468277][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.499906][T16218] CPU: 0 UID: 0 PID: 16218 Comm: syz.5.3053 Not tainted syzkaller #0 PREEMPT(full) [ 759.499939][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.499954][T16218] Call Trace: [ 759.499964][T16218] [ 759.499974][T16218] dump_stack_lvl+0x189/0x250 [ 759.500010][T16218] ? __pfx____ratelimit+0x10/0x10 [ 759.500038][T16218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.500069][T16218] ? __pfx__printk+0x10/0x10 [ 759.500099][T16218] ? __pfx___might_resched+0x10/0x10 [ 759.500129][T16218] should_fail_ex+0x414/0x560 [ 759.500189][T16218] should_failslab+0xa8/0x100 [ 759.500214][T16218] kmem_cache_alloc_node_noprof+0x77/0x710 [ 759.500246][T16218] ? __alloc_skb+0x112/0x2d0 [ 759.500286][T16218] __alloc_skb+0x112/0x2d0 [ 759.500324][T16218] netlink_ack+0x146/0xa50 [ 759.500355][T16218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 759.500386][T16218] ? ref_tracker_free+0x63a/0x7d0 [ 759.500408][T16218] ? __asan_memcpy+0x40/0x70 [ 759.500436][T16218] ? __pfx_ref_tracker_free+0x10/0x10 [ 759.500468][T16218] netlink_rcv_skb+0x28c/0x470 [ 759.500502][T16218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 759.500544][T16218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.500590][T16218] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.500633][T16218] netlink_unicast+0x82f/0x9e0 [ 759.500673][T16218] ? __pfx_netlink_unicast+0x10/0x10 [ 759.500706][T16218] ? netlink_sendmsg+0x642/0xb30 [ 759.500725][T16218] ? skb_put+0x11b/0x210 [ 759.500748][T16218] netlink_sendmsg+0x805/0xb30 [ 759.500779][T16218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.500816][T16218] ? __import_iovec+0x5d4/0x7f0 [ 759.500842][T16218] ? aa_sock_msg_perm+0xf1/0x1d0 [ 759.500875][T16218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.500897][T16218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.500938][T16218] __sock_sendmsg+0x21c/0x270 [ 759.500970][T16218] ____sys_sendmsg+0x505/0x830 [ 759.500999][T16218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.501048][T16218] ___sys_sendmsg+0x21f/0x2a0 [ 759.501074][T16218] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.501136][T16218] ? __fget_files+0x2a/0x420 [ 759.501157][T16218] ? __fget_files+0x3a0/0x420 [ 759.501190][T16218] __sys_sendmsg+0x164/0x220 [ 759.501215][T16218] ? __pfx___sys_sendmsg+0x10/0x10 [ 759.501248][T16218] ? __pfx_ksys_write+0x10/0x10 [ 759.501283][T16218] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 759.501315][T16218] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.501346][T16218] __do_fast_syscall_32+0xb6/0x2b0 [ 759.501378][T16218] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.501411][T16218] do_fast_syscall_32+0x34/0x80 [ 759.501441][T16218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.501475][T16218] RIP: 0023:0xf700d539 [ 759.501495][T16218] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 759.501514][T16218] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 759.501544][T16218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 759.501560][T16218] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.501574][T16218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.501587][T16218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 759.501601][T16218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.501639][T16218] [ 759.887385][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.809759][ C1] sched: DL replenish lagged too much [ 765.960125][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.129826][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.388413][ T5893] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 769.130956][ T5893] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 770.253413][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.616955][ T5893] usb 6-1: Product: syz [ 771.407759][ T5893] usb 6-1: Manufacturer: syz [ 771.650623][ T5893] usb 6-1: SerialNumber: syz [ 771.949890][ T5893] usb 6-1: config 0 descriptor?? [ 772.190078][ T5893] usb 6-1: can't set config #0, error -71 [ 772.320336][ T5893] usb 6-1: USB disconnect, device number 39 [ 773.644404][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3063'. [ 776.280264][ T5912] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 776.310046][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 776.310070][ T30] audit: type=1326 audit(1761310796.541:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16293 comm="syz.3.3065" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x0 [ 785.619953][ T5912] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 786.249876][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 788.781195][T16318] vcan0: tx address claim with dest, not broadcast [ 790.673289][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 792.260130][ T5912] usb 6-1: unable to read config index 0 descriptor/all [ 792.267172][ T5912] usb 6-1: can't read configurations, error -110 [ 793.651868][ T5912] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 794.669831][ T5912] usb 6-1: device descriptor read/64, error -32 [ 795.969943][ T5912] usb usb6-port1: attempt power cycle [ 796.772420][T13802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 796.790063][T13802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 796.800370][T13802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 796.808573][T13802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 796.834457][T13802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.841994][ T5912] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 797.479993][ T5912] usb 6-1: device descriptor read/8, error -32 [ 797.720298][ T5912] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 797.789847][ T5912] usb 6-1: device descriptor read/8, error -32 [ 797.863416][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 797.878107][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.045714][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.079075][ T5912] usb usb6-port1: unable to enumerate USB device [ 798.085614][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.093524][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.893991][T16314] raw-gadget.0 gadget.5: failed to queue disconnect event [ 798.903061][T13802] Bluetooth: hci3: command tx timeout [ 800.193783][T13802] Bluetooth: hci4: command tx timeout [ 801.123236][T13802] Bluetooth: hci3: command tx timeout [ 801.904356][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.259859][T13802] Bluetooth: hci4: command tx timeout [ 803.219834][T13802] Bluetooth: hci3: command tx timeout [ 803.336491][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.362644][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3077'. [ 803.508701][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.532298][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 803.547148][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 803.569639][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 803.579536][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.607775][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3077'. [ 804.221912][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.340215][ T5842] Bluetooth: hci4: command tx timeout [ 804.829449][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.568993][ T5842] Bluetooth: hci3: command tx timeout [ 805.651913][T16379] hub 9-0:1.0: USB hub found [ 805.687775][T16381] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3079'. [ 805.780013][ T5842] Bluetooth: hci1: command tx timeout [ 805.791527][T16379] hub 9-0:1.0: 1 port detected [ 805.987622][T16334] chnl_net:caif_netlink_parms(): no params data found [ 806.420045][ T5842] Bluetooth: hci4: command tx timeout [ 807.737037][T16334] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.745460][T16334] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.888776][ T5842] Bluetooth: hci1: command tx timeout [ 807.913415][T16334] bridge_slave_0: entered allmulticast mode [ 807.921341][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3082'. [ 807.971195][T16334] bridge_slave_0: entered promiscuous mode [ 807.982573][T16334] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.110530][T16334] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.118250][T16334] bridge_slave_1: entered allmulticast mode [ 808.829949][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.871607][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.889940][T16334] bridge_slave_1: entered promiscuous mode [ 808.923484][T16345] chnl_net:caif_netlink_parms(): no params data found [ 809.940024][ T5842] Bluetooth: hci1: command tx timeout [ 810.629375][T16334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.713249][T16334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.043012][ T1155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.021594][ T5842] Bluetooth: hci1: command tx timeout [ 813.082962][ T1155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.173910][T16334] team0: Port device team_slave_0 added [ 813.919119][ T1155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.003129][T16334] team0: Port device team_slave_1 added [ 815.495706][T16345] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.580992][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.588319][T16345] bridge_slave_0: entered allmulticast mode [ 815.651797][T16345] bridge_slave_0: entered promiscuous mode [ 815.859041][ T1155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.250017][T16334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.267221][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.999674][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 933.006680][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16435/1:b..l [ 933.015153][ C1] rcu: (detected by 1, t=10502 jiffies, g=92329, q=304 ncpus=2) [ 933.022909][ C1] task:syz.5.3084 state:R running task stack:24936 pid:16435 tgid:16432 ppid:10801 task_flags:0x400040 flags:0x10080003 [ 933.037402][ C1] Call Trace: [ 933.040694][ C1] [ 933.043629][ C1] __schedule+0x1798/0x4cc0 [ 933.048157][ C1] ? __pfx___schedule+0x10/0x10 [ 933.053011][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 933.058942][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 933.064324][ C1] preempt_schedule_irq+0xb5/0x150 [ 933.069442][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 933.075174][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 933.081016][ C1] irqentry_exit+0x6f/0x90 [ 933.085439][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.091428][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 933.096735][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b cd d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 933.116440][ C1] RSP: 0018:ffffc900037e68d8 EFLAGS: 00000206 [ 933.122605][ C1] RAX: 58b6bf3cb31e9400 RBX: 0000000000000000 RCX: 58b6bf3cb31e9400 [ 933.130601][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f287e RDI: ffffffff8bbf0460 [ 933.138583][ C1] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 933.146557][ C1] R10: ffffc900037e6a98 R11: ffffffff81ac2cb0 R12: 0000000000000002 [ 933.154538][ C1] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 933.162517][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.167636][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 933.173799][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.178942][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.184144][ C1] ? __put_user_nocheck_4+0x3/0x10 [ 933.189268][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.194383][ C1] unwind_next_frame+0xc2/0x2390 [ 933.199323][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.204448][ C1] ? unwind_next_frame+0xa5/0x2390 [ 933.209573][ C1] ? asm_exc_page_fault+0x26/0x30 [ 933.214600][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 933.220762][ C1] arch_stack_walk+0x11c/0x150 [ 933.225545][ C1] ? __put_user_nocheck_4+0x3/0x10 [ 933.230720][ C1] stack_trace_save+0x9c/0xe0 [ 933.235493][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 933.240967][ C1] save_stack+0xf5/0x1f0 [ 933.245221][ C1] ? __pfx_save_stack+0x10/0x10 [ 933.250163][ C1] ? post_alloc_hook+0x240/0x2a0 [ 933.255107][ C1] ? get_page_from_freelist+0x2365/0x2440 [ 933.260821][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 933.266816][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 933.271928][ C1] ? vma_alloc_folio_noprof+0xe4/0x200 [ 933.277469][ C1] ? folio_prealloc+0x30/0x180 [ 933.282268][ C1] ? do_wp_page+0x1231/0x5800 [ 933.286955][ C1] ? __handle_mm_fault+0x1033/0x5400 [ 933.292251][ C1] ? handle_mm_fault+0x40a/0x8e0 [ 933.297202][ C1] ? do_user_addr_fault+0x764/0x1380 [ 933.302489][ C1] ? exc_page_fault+0x82/0x100 [ 933.307264][ C1] ? asm_exc_page_fault+0x26/0x30 [ 933.312305][ C1] ? __put_user_nocheck_4+0x3/0x10 [ 933.317421][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 933.323672][ C1] __set_page_owner+0x8d/0x4c0 [ 933.328448][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 933.333839][ C1] post_alloc_hook+0x240/0x2a0 [ 933.338637][ C1] get_page_from_freelist+0x2365/0x2440 [ 933.344352][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 933.350568][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 933.356476][ C1] ? prepare_alloc_pages+0x345/0x610 [ 933.361770][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 933.367578][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 933.373916][ C1] ? policy_nodemask+0x27c/0x720 [ 933.378869][ C1] alloc_pages_mpol+0x232/0x4a0 [ 933.383739][ C1] vma_alloc_folio_noprof+0xe4/0x200 [ 933.389028][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 933.394935][ C1] folio_prealloc+0x30/0x180 [ 933.399542][ C1] do_wp_page+0x1231/0x5800 [ 933.404069][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 933.408924][ C1] ? do_raw_spin_lock+0x121/0x290 [ 933.413958][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 933.419342][ C1] __handle_mm_fault+0x1033/0x5400 [ 933.424474][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 933.429971][ C1] ? find_vma+0xe7/0x160 [ 933.434234][ C1] ? __pfx_find_vma+0x10/0x10 [ 933.438921][ C1] handle_mm_fault+0x40a/0x8e0 [ 933.443718][ C1] do_user_addr_fault+0x764/0x1380 [ 933.448873][ C1] exc_page_fault+0x82/0x100 [ 933.453511][ C1] asm_exc_page_fault+0x26/0x30 [ 933.458368][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 933.464095][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 68 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 933.483787][ C1] RSP: 0018:ffffc900037e7878 EFLAGS: 00050282 [ 933.489877][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000800f1018 [ 933.497942][ C1] RDX: ffff88802e14dac0 RSI: 0000000080000002 RDI: 00000000ffffffff [ 933.505918][ C1] RBP: ffffc900037e79f0 R08: ffffc900037e7627 R09: 1ffff920006fcec4 [ 933.513894][ C1] R10: dffffc0000000000 R11: fffff520006fcec5 R12: 0000000080000002 [ 933.521954][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000800f1000 [ 933.529951][ C1] ____sys_recvmsg+0x2ab/0x460 [ 933.534732][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 933.540025][ C1] ? get_compat_msghdr+0x37e/0x4a0 [ 933.545159][ C1] ? ___sys_recvmsg+0x1c4/0x510 [ 933.550014][ C1] ? kfree+0x4d/0x6d0 [ 933.554006][ C1] ___sys_recvmsg+0x1b5/0x510 [ 933.558703][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 933.563924][ C1] ? do_recvmmsg+0x2da/0x770 [ 933.568521][ C1] ? ___sys_recvmsg+0xc/0x510 [ 933.573218][ C1] do_recvmmsg+0x36a/0x770 [ 933.577641][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 933.582590][ C1] ? __pfx___might_resched+0x10/0x10 [ 933.587882][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 933.593985][ C1] __sys_recvmmsg+0x19d/0x280 [ 933.598667][ C1] ? __pfx___sys_recvmmsg+0x10/0x10 [ 933.603879][ C1] ? rcu_is_watching+0x15/0xb0 [ 933.608687][ C1] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 933.614867][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 933.619996][ C1] do_fast_syscall_32+0x34/0x80 [ 933.624856][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.631185][ C1] RIP: 0023:0xf700d539 [ 933.635254][ C1] RSP: 002b:00000000f53dc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 933.643673][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 933.651661][ C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 933.659631][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.667634][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 933.675608][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.683597][ C1] [ 933.686617][ C1] rcu: rcu_preempt kthread starved for 10389 jiffies! g92329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 933.697812][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 933.707784][ C1] rcu: RCU grace-period kthread stack dump: [ 933.713673][ C1] task:rcu_preempt state:R running task stack:27336 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 933.727188][ C1] Call Trace: [ 933.730471][ C1] [ 933.733406][ C1] __schedule+0x1798/0x4cc0 [ 933.737938][ C1] ? __pfx___schedule+0x10/0x10 [ 933.742828][ C1] ? schedule+0x91/0x360 [ 933.747080][ C1] schedule+0x165/0x360 [ 933.751263][ C1] schedule_timeout+0x12b/0x270 [ 933.756128][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 933.761501][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 933.767399][ C1] ? __pfx_process_timeout+0x10/0x10 [ 933.772697][ C1] ? prepare_to_swait_event+0x341/0x380 [ 933.778255][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 933.783129][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 933.789294][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 933.794578][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 933.799790][ C1] ? finish_swait+0xcd/0x1f0 [ 933.804401][ C1] rcu_gp_kthread+0x99/0x390 [ 933.808997][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 933.814196][ C1] ? __kthread_parkme+0x7b/0x200 [ 933.819153][ C1] ? __kthread_parkme+0x1a1/0x200 [ 933.824184][ C1] kthread+0x711/0x8a0 [ 933.828274][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 933.833478][ C1] ? __pfx_kthread+0x10/0x10 [ 933.838075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 933.843291][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.848503][ C1] ? __pfx_kthread+0x10/0x10 [ 933.853101][ C1] ret_from_fork+0x4bc/0x870 [ 933.857698][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 933.862817][ C1] ? __switch_to_asm+0x39/0x70 [ 933.867580][ C1] ? __switch_to_asm+0x33/0x70 [ 933.872341][ C1] ? __pfx_kthread+0x10/0x10 [ 933.877037][ C1] ret_from_fork_asm+0x1a/0x30 [ 933.881810][ C1] [ 933.884830][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 933.891177][ C1] Sending NMI from CPU 1 to CPUs 0: [ 933.896399][ C0] NMI backtrace for cpu 0 [ 933.896415][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 933.896435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 933.896447][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 933.896474][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 933.896490][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 933.896506][ C0] RAX: 4705dac636970900 RBX: ffffffff81967b87 RCX: 4705dac636970900 [ 933.896532][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bd6a RDI: ffffffff8bbf0460 [ 933.896546][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 933.896560][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd370 [ 933.896574][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 933.896586][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 933.896601][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.896613][ C0] CR2: 00000000f510dc2d CR3: 00000000576b2000 CR4: 00000000003526f0 [ 933.896629][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 933.896641][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 933.896653][ C0] Call Trace: [ 933.896662][ C0] [ 933.896669][ C0] default_idle+0x13/0x20 [ 933.896694][ C0] default_idle_call+0x73/0xb0 [ 933.896721][ C0] do_idle+0x1e7/0x510 [ 933.896744][ C0] ? __pfx_do_idle+0x10/0x10 [ 933.896771][ C0] cpu_startup_entry+0x44/0x60 [ 933.896803][ C0] rest_init+0x2de/0x300 [ 933.896820][ C0] start_kernel+0x3ae/0x410 [ 933.896846][ C0] x86_64_start_reservations+0x24/0x30 [ 933.896865][ C0] x86_64_start_kernel+0x143/0x1c0 [ 933.896884][ C0] common_startup_64+0x13e/0x147 [ 933.896916][ C0] [ 934.230006][T16334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.274844][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.291830][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.390619][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.402335][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.409808][T13802] Bluetooth: hci3: command 0x0406 tx timeout [ 936.415940][T13802] Bluetooth: hci1: command 0x0406 tx timeout [ 936.444429][T13802] Bluetooth: hci4: command 0x0406 tx timeout