last executing test programs: 24m28.584237483s ago: executing program 32 (id=730): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x1, 0x2003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000010400)="a2", 0x1}], 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 12m36.769411285s ago: executing program 2 (id=3511): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0xff00) 12m36.564977241s ago: executing program 2 (id=3512): openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r5, 0x792, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x567, 0x1000a387, 0x20, 0x0, 0x0) 12m35.102022998s ago: executing program 2 (id=3513): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 12m33.524601744s ago: executing program 2 (id=3515): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x2, 0x1, 0xcfcd4592ae3d59a8, {0x3b, 0x3, 0x3, 0x91}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) dup(r1) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) pipe(&(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r7, 0x2dec, 0x4800, 0x2, 0x0, 0x0) 12m25.804661956s ago: executing program 2 (id=3538): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440170102030109026420020100680009040100de020d0000052406f90105240000000d240f0100000000000000000006241a001c0008240821e407840009058103000200ee000904010000020d00"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x22, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b424432fc2142a9969ce36ebb5dac", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 12m25.101795551s ago: executing program 2 (id=3540): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x2000000, 0x0, 0x100001}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000000000800040001000000", 0x24) r3 = socket(0x22, 0x6, 0x0) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2800000000000000000000000700000001441425"], 0x28}}], 0x2, 0x24004044) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003880)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x5) 12m10.68884479s ago: executing program 33 (id=3540): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x2000000, 0x0, 0x100001}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000000000800040001000000", 0x24) r3 = socket(0x22, 0x6, 0x0) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2800000000000000000000000700000001441425"], 0x28}}], 0x2, 0x24004044) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003880)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x5) 8m45.435195622s ago: executing program 6 (id=4240): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x1a, 0xfb, 0x74, 0x8, 0xccd, 0x38, 0xe0a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2f, 0x8, 0xd0, 0x81, "", [{{0x9, 0x4, 0x2f, 0xc4, 0x0, 0xff, 0x1}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 8m44.782213662s ago: executing program 3 (id=4242): keyctl$clear(0x3, 0xfffffffffffffffc) r0 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='c\x04fs.spnego\x00', 0x0) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) keyctl$assume_authority(0x10, r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002f2000/0x2000)=nil, 0x800000}) 8m44.409480811s ago: executing program 3 (id=4243): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2ff, 0x1000000, 0x0, 0x9, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0) 8m41.938161141s ago: executing program 6 (id=4246): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@host}) 8m40.910174539s ago: executing program 3 (id=4247): openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r5, 0x792, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x567, 0x1000a387, 0x20, 0x0, 0x0) 8m40.564138689s ago: executing program 6 (id=4249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000440)={0x5, "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"}) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x524d9dac}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44084}, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, 0x0) 8m39.836393029s ago: executing program 3 (id=4251): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r6 = socket(0x25, 0x5, 0x4) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xae65, 0x0, 0x20003, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}]}, 0x20}, 0x1, 0x0, 0x0, 0x4042805}, 0x4000000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0xa8, 0x0) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r13 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r12, &(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r13) close_range(r0, 0xffffffffffffffff, 0x0) 8m38.492589908s ago: executing program 6 (id=4255): add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f0000000800)="1013060fa2c1cda407001100b4652a7698cc5d90c4", 0x15, 0xfffffffffffffffe) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a600006c0000000000000000000000ffff0a010100fe8000000000000000000000000000aabd9c1807c66c1ee2ff27"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m38.34579872s ago: executing program 3 (id=4256): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x56, {0x56, 0xc, "3586c733db824f9f38e5706a14f3254a8190b0938b0ce500a866a86072851aee8077ded8b079709c819a06b20811c67db11d0aa607acc741774d3a68f513e549a1d401f6fbde59d9b0f8d72a176262d155d60769"}}, &(0x7f0000000080)={0x0, 0x3, 0x22, @string={0x22, 0x3, "d21b19862d6b3d137fe793cd41e3598d534fe85262be71bd808eb6a06e37b63e"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x4, 0x0, '\b\x00', "d87efb43"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x1, 0xb6, 0x6, 0xab5c, 0x80}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x31, 0xb6, "aa936b0c1dd190f8855ebae0d0353e1a5424055226601b0da8ceccd652fec68725c4e487d32867430224d76ecffc313ec45dafc541852fe084b5179273d027833de2461146c0cae3bfde0f258bbc16744b65c75b6dfe5e56fa779fdedee81ff180ed7ff3b4d905625a97d550ae1b4fc6f31c061e14ce96ba739b5259fff62595d8d14faf6fb15758bf969b05e51df1ec03efafcde782bbb669ffb78ac25339258a5a4739bfa9090debc4587941d0ea81c2c74b4f5da3"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x87}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x800, 0xeb58159227da9cea}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, 'D^'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 8m38.110488724s ago: executing program 6 (id=4257): write$smackfs_change_rule(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="777861746264202efb72c29af2981aa8f0abf001fee37dbf566a19f8708c2dd643aba35596e6ba9004b2d8d90366aca4772ecab8781d3177814fdb7c19c950aedb6083f4bf8bf957f3a7da63c68d28fd26ba5860ce7cd5447edb5fc741a5859e5e0c856e15cd8bcbae668eeca728351113f91e7932"], 0xc0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x12, 0xf5, {0xf5, 0x9, "ff5885360a365b5d1b8d7fd6dcc424e470a64676fec2681856fcce52242413a9be4a8291a9700ecec2075140903e5ca7f9dba209cbf194785f0090a36f3e1370c61253fd6fbce90764fd2a63d0aa9f7526b1d374d61cc3071011bbb260ea98d61d9ac3e9f89fac4bd6a4df94fe98d91ef0b78eb983b363d3ee62a8ebf8da570ad81c7c33f1bd6c3b239eea8bd4c176cd589309ceffe46f8b0ff9e829943f6321d6863f6d137b00019008e291aab0c2d2cf4976feeeb14a4746c1a4c8047d316c23485ed52bc5ece2b9688c5cf7975645cc70a0dfa30abb591ef9137f5f1b05dd7da520518267044476f9d8144a5b71942365a1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000140)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x10, 0x5, 0x41b}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0xc, 0x9, "6010abf2", "816aacb5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xf6, 0x3, 0x5, 0x5000, 0x1ff}}}, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x40, 0x1, 0xbb, "264c6d961cfb41eefec41e406df7b0eca961733b708adfff05b964ee0a9adf6c837454718eb9f60d8b04a702ad41f286d45262633ab41dc7c4a2a429078266d44f98d3d740cbc2210620847784096df4f23efdd0028a3b09d4f695da6168b675e6ff6e59aab2e33d3edff4f6ecec0f8c870ed6dba52c35ab305ff4e50a94b06130e5472c0b198ba80aeea4e72fb488ff4ef1e72a8883939e69f8b6653b0e4beb2d209802c3aebd0a3884a93c097286edae4e9224145ad0142e73e0"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x800, 0x10, [0xf0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x257a}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "7ec9"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "7fd7"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xf714}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m37.777628272s ago: executing program 3 (id=4259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0xff}) (fail_nth: 1) 8m29.800722249s ago: executing program 6 (id=4261): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x60442) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x12, 0x65d, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {0xe, 0xc}, {0xf, 0xe}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) close(r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xa0}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x1}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r4, @in={{0x2, 0x4e23, @loopback}}, 0x51950e79, 0x4, 0xff, 0x9, 0x0, 0x1}, &(0x7f0000000600)=0x9c) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x4004040) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000740)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', r0}, 0x18) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) r5 = dup3(0xffffffffffffffff, r0, 0x80000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x7c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_USERDATA={0x41, 0x7, 0x1, 0x0, "7f59ed9ca64e45aa92de0aec3575670aff20572d6c0f10ed8e0405a5f46672dda1a2fbb6166cc8799161e9909f3c80deb5bedbd229ff686d70d7d7c5b0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20005804}, 0xc000) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001380)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @empty}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001400)="86ea968e685413ae2dd6cd0ed1d719e8fa594b5224c58f61d82d42727f0c8fc3ee892c8abaaef068c8c18aae2bf66dd68d0ceb1ef9ab02cea54ce65bb1181961ec4392712d0e30719838ce1493e4369b9b912aff02db3be2e55e3bbb48b06fc07a76cd2eb973d6fb1d247992ede6c2c72f63d580ea4d33ed5e755c77d5efee2e9a660b5e85c9581934893f225a26c67b", 0x90}, {&(0x7f00000014c0)="ab20c352f6712104d3e229de738a752c618cf0fa4e1a1f2d2cb767084b25e40bee1f91ea6bcb2e1b776b2f42abfc70a16ed76ee276a64494341bf367408e11759e9e2a78cd11b25e4a37ba1797055e23cfa41051a14f22379c91830fc552941ebb8b555041d52510add526d238b2a3e2a9226211b71a887eb0ed10d41c33c36ff93584c52c8a2751495e9b857835079318b44a6c7d2c939d9d6e14c2d91fdb4104aa07eefaa42e331fc1d92725ad42accf8ef52ca511fcec7e43fa287d59b59ea0bea2b30e805e4e2bc6c0799b0163d4c9f5a2bd9c3c392493166fffd327ee08405b138b5283a5929d09d01a78d15ea5", 0xf0}, {&(0x7f00000015c0)="9af18d00261e9dd818b2671ef77341b1b7fe093e30ede38db65884c5305fd7f2ba232d27c4c0dc30c6b29ebd7989cac0958e66c37c74b1ffb9b662cafc2e21a383eff16b3d594eaebdab682c0dc24af5a95dd723c4fe0ab8d9427b1b12c50c11de4f9c1ec480a123e32593ad6096e86eed6f7639a6dde8462930972d49cce1248a8aac2f3958", 0x86}], 0x3, &(0x7f00000016c0)=[{0xb0, 0x105, 0x1, "a75e92f0d91f0b5a70be86d208ef9405fafbfa5c859b0958670c409d150c38cb47161d9dbcb7c83f8bd372b4826c4acc98e25018dddf685c7b68f2fccc6bdc8baf68ef4306f4d151e0e44d6c1f02dfa874f54db6f88f840495c97faba39fa633ee5d5479c2ee4b7c53140d54bd9476a6a885bd7c9f4bf754403d735bd736b63905f5f990258271235036d853c4d2192952e9aec5323b13d4a08268"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)="286beb32fda0bbb3b3e0566a5a73c6e819384ae77b5491e1654ee213493cdc5711748a938ba20edee717461e24d133f69d6cc632885f075070a1f2a7a97f966e9a", 0x41}], 0x1, &(0x7f0000001840)=[{0x60, 0x10a, 0x9, "15a21c685ecc9055b8c8a7a488f35f42a8d4aeefc299f01569b889c0817e792ab9d3308e0498d96c221dd109c2072b0b581eca0196edaba88a44dc2f981bfe1ddb34d82812070915b0e3208aa93e83"}, {0xf0, 0x103, 0x4f0932a5, "40f8be72d7e9788bbafddb073597cbbb8858dd7c89656a43fc013029671c19b8627f53c99e5823cadd452082472d1696bb9c53ea328d0b95779d653c2af29fd25f3493ba94994ec83680a3af850419844bb52ab6be78bad4f8af11d9a6fbfa7c711f193031ac464688f33f59457e603a75ec9847bfd83f6d16461ee18b6c80ec62ef447609e8cb4443a1181d170529acdb29b7bbcdcb9d25438235773562ced77031352b1448d8ad1d7223cc0b18185dfea7f41911d13e0ce1bb81c1f622f552459ec76eb696f8e46cf7c7392db794785ac0f545cb993d9fe2e7758b"}, {0xc8, 0x10a, 0x0, "b36f835c22e13121c475c24c954b2401b94c9c92b644e93cd03def76b6bf5218b2b5ae1644cca974ba2377e8575062b10884e52abc62da3e8660c08253d7d80f01739c640e70c77c295283a99570665b10ec0969189337ca996063537ea4030f6c73f1f3055839f65d7b5e0e9c83fd9b8e1f191664f01ba407f92dc0aa776cb7083fd98e7991844a9ba0b05f7c6da9f49a91c2dc074dad0312d7e11d7156c35f2337c15784913d63a2372667e43d072f6a3d6794d7"}, {0x98, 0x114, 0x8, "0007b1f9e3059d5b42d319c9b15aa11646467969d026042276738c23e7c02d63f94c939dc320cfa40a6b312f9db03bf949229bf34adedf7f4cdb65ac505e610cfe229ca73258177d8f47f1c315c77ec7a73c962c8cebc6488f66b508116238688d5f85ddf24a7eeb8ec4c49d321f8a6e41db4ba5c47ffd556af6389da2a12a81f0"}, {0xa0, 0x115, 0x3, "8cccdb72a1daa5ee1f44ee524df6154551a185ca498e6e17f61e19fcb3c174d8e3e28e429e3f4e5d9369f7ecfa23d39d741c80746c7626491df51e9987e7608f520a3c34ddd7fa04410ab7e0ae9e02fe1f03291bc6cdbe78d6e25f4f7ac39acd733508a3e3cef49ad52794ae83dc35026bb92179d755f7a1bd0a435cf48a6023f800e4d1df3bd400600bbcab9955"}, {0xc0, 0x111, 0x7fffffff, "296c8283b1e879bc2e8005a36763d9bba4ab3c24f6cd207314b923c58d663c0b68f6e4a9f8b68f630c2c2da923651fdcaa8d794b66b823f940dbc7a05459095058f6df60ec655cfc2a7309a69941415fb441a0e0e10a6264a1d621672647436dfdadb4eae251f993e76dc4be909787d3dd3577a610a7ba4a8594275449294a41252074116cd792e7eda9cb02db0aa9ad63033884ff634f9aa1e15b50f4fc74d835a060b5474b85cb6d"}, {0x30, 0x104, 0xd04, "12a6e21543df4a96684f7b7f5cd7f186a8b5749076d6bac7e1ef76961a1424fd"}], 0x440}}], 0x2, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x4c17, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 8m22.651855518s ago: executing program 34 (id=4259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0xff}) (fail_nth: 1) 8m15.379836143s ago: executing program 35 (id=4261): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x60442) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x12, 0x65d, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {0xe, 0xc}, {0xf, 0xe}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) close(r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xa0}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x1}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r4, @in={{0x2, 0x4e23, @loopback}}, 0x51950e79, 0x4, 0xff, 0x9, 0x0, 0x1}, &(0x7f0000000600)=0x9c) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x4004040) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000740)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', r0}, 0x18) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) r5 = dup3(0xffffffffffffffff, r0, 0x80000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x7c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_USERDATA={0x41, 0x7, 0x1, 0x0, "7f59ed9ca64e45aa92de0aec3575670aff20572d6c0f10ed8e0405a5f46672dda1a2fbb6166cc8799161e9909f3c80deb5bedbd229ff686d70d7d7c5b0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20005804}, 0xc000) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001380)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @empty}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001400)="86ea968e685413ae2dd6cd0ed1d719e8fa594b5224c58f61d82d42727f0c8fc3ee892c8abaaef068c8c18aae2bf66dd68d0ceb1ef9ab02cea54ce65bb1181961ec4392712d0e30719838ce1493e4369b9b912aff02db3be2e55e3bbb48b06fc07a76cd2eb973d6fb1d247992ede6c2c72f63d580ea4d33ed5e755c77d5efee2e9a660b5e85c9581934893f225a26c67b", 0x90}, {&(0x7f00000014c0)="ab20c352f6712104d3e229de738a752c618cf0fa4e1a1f2d2cb767084b25e40bee1f91ea6bcb2e1b776b2f42abfc70a16ed76ee276a64494341bf367408e11759e9e2a78cd11b25e4a37ba1797055e23cfa41051a14f22379c91830fc552941ebb8b555041d52510add526d238b2a3e2a9226211b71a887eb0ed10d41c33c36ff93584c52c8a2751495e9b857835079318b44a6c7d2c939d9d6e14c2d91fdb4104aa07eefaa42e331fc1d92725ad42accf8ef52ca511fcec7e43fa287d59b59ea0bea2b30e805e4e2bc6c0799b0163d4c9f5a2bd9c3c392493166fffd327ee08405b138b5283a5929d09d01a78d15ea5", 0xf0}, {&(0x7f00000015c0)="9af18d00261e9dd818b2671ef77341b1b7fe093e30ede38db65884c5305fd7f2ba232d27c4c0dc30c6b29ebd7989cac0958e66c37c74b1ffb9b662cafc2e21a383eff16b3d594eaebdab682c0dc24af5a95dd723c4fe0ab8d9427b1b12c50c11de4f9c1ec480a123e32593ad6096e86eed6f7639a6dde8462930972d49cce1248a8aac2f3958", 0x86}], 0x3, &(0x7f00000016c0)=[{0xb0, 0x105, 0x1, "a75e92f0d91f0b5a70be86d208ef9405fafbfa5c859b0958670c409d150c38cb47161d9dbcb7c83f8bd372b4826c4acc98e25018dddf685c7b68f2fccc6bdc8baf68ef4306f4d151e0e44d6c1f02dfa874f54db6f88f840495c97faba39fa633ee5d5479c2ee4b7c53140d54bd9476a6a885bd7c9f4bf754403d735bd736b63905f5f990258271235036d853c4d2192952e9aec5323b13d4a08268"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)="286beb32fda0bbb3b3e0566a5a73c6e819384ae77b5491e1654ee213493cdc5711748a938ba20edee717461e24d133f69d6cc632885f075070a1f2a7a97f966e9a", 0x41}], 0x1, &(0x7f0000001840)=[{0x60, 0x10a, 0x9, "15a21c685ecc9055b8c8a7a488f35f42a8d4aeefc299f01569b889c0817e792ab9d3308e0498d96c221dd109c2072b0b581eca0196edaba88a44dc2f981bfe1ddb34d82812070915b0e3208aa93e83"}, {0xf0, 0x103, 0x4f0932a5, "40f8be72d7e9788bbafddb073597cbbb8858dd7c89656a43fc013029671c19b8627f53c99e5823cadd452082472d1696bb9c53ea328d0b95779d653c2af29fd25f3493ba94994ec83680a3af850419844bb52ab6be78bad4f8af11d9a6fbfa7c711f193031ac464688f33f59457e603a75ec9847bfd83f6d16461ee18b6c80ec62ef447609e8cb4443a1181d170529acdb29b7bbcdcb9d25438235773562ced77031352b1448d8ad1d7223cc0b18185dfea7f41911d13e0ce1bb81c1f622f552459ec76eb696f8e46cf7c7392db794785ac0f545cb993d9fe2e7758b"}, {0xc8, 0x10a, 0x0, "b36f835c22e13121c475c24c954b2401b94c9c92b644e93cd03def76b6bf5218b2b5ae1644cca974ba2377e8575062b10884e52abc62da3e8660c08253d7d80f01739c640e70c77c295283a99570665b10ec0969189337ca996063537ea4030f6c73f1f3055839f65d7b5e0e9c83fd9b8e1f191664f01ba407f92dc0aa776cb7083fd98e7991844a9ba0b05f7c6da9f49a91c2dc074dad0312d7e11d7156c35f2337c15784913d63a2372667e43d072f6a3d6794d7"}, {0x98, 0x114, 0x8, "0007b1f9e3059d5b42d319c9b15aa11646467969d026042276738c23e7c02d63f94c939dc320cfa40a6b312f9db03bf949229bf34adedf7f4cdb65ac505e610cfe229ca73258177d8f47f1c315c77ec7a73c962c8cebc6488f66b508116238688d5f85ddf24a7eeb8ec4c49d321f8a6e41db4ba5c47ffd556af6389da2a12a81f0"}, {0xa0, 0x115, 0x3, "8cccdb72a1daa5ee1f44ee524df6154551a185ca498e6e17f61e19fcb3c174d8e3e28e429e3f4e5d9369f7ecfa23d39d741c80746c7626491df51e9987e7608f520a3c34ddd7fa04410ab7e0ae9e02fe1f03291bc6cdbe78d6e25f4f7ac39acd733508a3e3cef49ad52794ae83dc35026bb92179d755f7a1bd0a435cf48a6023f800e4d1df3bd400600bbcab9955"}, {0xc0, 0x111, 0x7fffffff, "296c8283b1e879bc2e8005a36763d9bba4ab3c24f6cd207314b923c58d663c0b68f6e4a9f8b68f630c2c2da923651fdcaa8d794b66b823f940dbc7a05459095058f6df60ec655cfc2a7309a69941415fb441a0e0e10a6264a1d621672647436dfdadb4eae251f993e76dc4be909787d3dd3577a610a7ba4a8594275449294a41252074116cd792e7eda9cb02db0aa9ad63033884ff634f9aa1e15b50f4fc74d835a060b5474b85cb6d"}, {0x30, 0x104, 0xd04, "12a6e21543df4a96684f7b7f5cd7f186a8b5749076d6bac7e1ef76961a1424fd"}], 0x440}}], 0x2, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x4c17, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 4m59.663451482s ago: executing program 1 (id=4642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)=ANY=[@ANYBLOB="200000000d0a010300000000001600000a0005000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xef, 0x6, "b4edec569e988c4e5649d90c0feba23fca6c9bc4d170656dc7587103a98fbb81c334ad54296b415da4673355df6320abf450cac41d531e56dd7cc95afbe3be96ac4b38ff54b45544c2758941c149f74d8bb39ef79844883c4cf81db35b1087421029b8bfea4c5a22eb18e68b97cc4f846ab09f2cd060e1b0b4100c1909fd7f13a08e3855213a2b2b4d8df1751dedb467cad380ab6a4ad4d545e5b3c1b1a2092d78e3badc40cc93c309a862718bf4c6b97adc437fa22068f6f0aac8cddfb1c62e2da232297dfbe07ca1d5a79fe6f0695445b9afa58064d3fabf0c4ef5135d6871083bae679399671236d931"}]}, @NFT_MSG_DELCHAIN={0x164, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x38, 0xc, "f9470bab6eec39a021d0d9c2a2b34e090f87fe4619d4d8382b0a8d278899cf317a1174f60928f259668d162801f5b9943c61c790"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xe8, 0xc, "5fabef2997c8f04e2bff3cb9803f65071274e48471b9e1167e3e22fefde846b62e4699f7ff5804c65d5767c0a96e913420bbffb0644bcf9914405201ae5f9b9b886aff0a1a76b845a157c2a87639dca9c588080d9dff22c685971851fbb4571822ba45854acdafba94115ee587591ae712c42524770e113b651d4d803a9ca5d4c4496f9fd23a2336565c9c5563ba8b9b9d04e76380567535a7b5f2fc9dccd94ebc2a6899f9c217e8c4fa391624de2f91231b124c5e353c176709993f60fbda09b94ba22d83ad12bdaa681c8eea153392844a8997840e5e44913229df44dc4f1419b47e61"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x49}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x310}, 0x1, 0x0, 0x0, 0x8051}, 0x2000c00d) syz_open_dev$I2C(0x0, 0x1, 0x2003) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 4m59.661775053s ago: executing program 1 (id=4646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 4m53.741367111s ago: executing program 1 (id=4651): syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="48000000100001042abd7024587f000000000000000000361e06b57746e499dcd4b12fbccf7e0cfc4aceb13f6170a72347d896b6e87646faa29f7e71b4441cc5a7f238d30dcdd41cf2f529fde77a19831e0ac09090aef10853280eec3fb0a71a668252162e89f33103d617f154a62c752d5ea6a9a5164aab650e9ef4844a7532442457033971bac5e6e5268fbc2e7cd6243692e5", @ANYRES32=0x0, @ANYBLOB="99c0020000440000280012800b00010065727370616e00001800028004001200060010004e26000006000f0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000980)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000000b80)={0x0, 0x1, {0x30, 0x4, &(0x7f0000000ac0)=[{0x2, 0x0, 0x2, 0x2, 0x5, {0x10, 0x6, &(0x7f0000000400)=[{}, {0x1, 0x0, 0xfff}, {}, {0x0, 0x0, 0x3}, {0x80000000, 0x0, 0x1}, {0x1, 0x0, 0x5}]}}, {0x4, 0x0, 0x6, 0x3, 0x1e9, {0x10, 0x3, &(0x7f0000000800)=[{0xff, 0x0, 0x9}, {0xff, 0x0, 0xe}, {0xff, 0x0, 0x1}]}}, {0x10000000, 0x0, 0x80000000, 0x2, 0x5, {0x10, 0x3, &(0x7f00000008c0)=[{0x80000000, 0x0, 0x6f}, {0x1, 0x0, 0x1}, {0x80000000, 0x0, 0x9}]}}, {0x10000000, r6, 0x3, 0xff, 0x6, {0x10, 0x6, &(0x7f0000000a40)=[{0x80000000, 0x0, 0x8}, {0x0, r7, 0x7}, {0x1, r8, 0x4}, {0x80000001, r9, 0x2}, {0xff, 0x0, 0x1}, {0xff, r10, 0x5}]}}]}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x8400, 0x41600}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@flushpolicy={0x1c4, 0x1d, 0x10, 0x70bd27, 0x25dfdbff, "", [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x2, 0x0, 0x0, 0xffffff7f, 0x7f5, 0xc}]}, @lifetime_val={0x24, 0x9, {0x6, 0x8, 0x7fffffffffffffff}}, @algo_aead={0x14a, 0x12, {{'rfc4309(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x7f0, 0x0, "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"}}]}, 0x1c4}}, 0x4f32bd48919e3af4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket(0xf, 0x800, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xdc9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c840}, 0x40800) r15 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r15, 0x80045017, 0x1000000000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x80) 4m52.711113973s ago: executing program 1 (id=4655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 4m52.43492749s ago: executing program 1 (id=4660): openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r5, 0x792, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x567, 0x1000a387, 0x20, 0x0, 0x0) 4m48.106563622s ago: executing program 1 (id=4663): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x12, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x6, "aabe23536fe7db2679d9d229183243a0a72123d464dce426e840fb1639bb9d83382f565c2fb347b1ce155609d65a824e5e9ec1d8b50b67860cef9c3b41e322", 0x3e}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000380)="04ba4d9d67a0f94ee948dcd3f12e19c728fc8217941d5767230afb4fd4090bc9fc4c012afaba73c86e6cde809d278cd2090a17ec342643eae162ea01ed82b850b437edc0183bc5094bb51a68b6c3d36eaa58842f8800457f3a67d53066bd4bc930b912aa1035d25b89a47c73da1f1ff655cdb6bd7822a63f404cf46c3a25c01635a3b17d425bab86479857ea58ed0c81c8dc60c0b02d6476627400e46e99b7e1af33f63a1624cdd1bd76d70a753f176faa5d8017be0d3d05d2135cf2e0e4c169baeb9e8ae9447b2bffd544c06518e0ce109924f04a602e204f9faf30b365dfada07a7358808ead9b7b0b66a4b50c7f0bc1f643a3bdab13", 0xf7}, {&(0x7f0000000500)="9f34af40acf2a2fc558bd1b243f82919f0dcc5999a21327231f40c2ab5f65e717492d32de179e3cdb0952c32eb8342e93b45af66ee0093bab0c8ae9d736d466ef7212cfff70f3b6a2ab4f756b7912e2a3161f8bfd0bbc43ef9698e2435e0a29d5f16ebcfbe62f5a0b25c462a5eb10ddc14eaa797", 0x74}, {&(0x7f0000000680)="d8c9d6e6df976e7738afb91835a133c66b003ab3b89c0eb5f324317ee583414f0feae83bbec40c3dee3de33fac6ab86c1a23ffb4c6deea005109e613f694df58cd958610bdf424ee8314f40f3ac21a36cfade181a72381fc3b34f402e167187f3a6acb7dc545d1a31b8cceb8a7178add5487d4c713b2ac87e08259a251f9f21fa7a02c1445a5ce15258bce5dcb2d", 0x8e}, {&(0x7f0000000740)="4fa2cd62b7639879583d28d514ee0892ddd5296a0fa370f85f546afe2405af10c218c3ca536c002a0b16e1aa499611425b589e40ba997c02959bbbbfc44e70a1160105367f89d4d670cf46024996b24b5333a99ab7d47611db600a87731e287f7150440496e75e78b7467a9d9182bb092be9f4b36097ae9003c49159a806db55b94de1a508ab3ede583460f7a27d719ff512b4363638793ccf032400c810c25756f3a6121b1511f14aabfffa461952d6816fa45fc0c5986b78a6bce3197dc86bf6ee142f3017e7ed8c260000000000000000", 0xd2}, {&(0x7f0000000840)="63cdf0a86f1ac3f89cbb31b7ac27294b8d6afa06e4bbc428df663e1538022c89152188c5f1f25932a82515e1b751e2176344ec30010e753bd891c1e90eb00b678977f56b3822e93fcfd9a71dc619a5960f79b5b8c56c4acd349ed4000c79f2eaa30bb05abf7bc058e911859a6a2afc9c2801f2c811651e4b7b90bfa55347cf303ec210d5c642b12922852a6242818afb72b0a32718cd44bbe947a705e78bc07dd1909d11447d267e79b50f0ee4796620d46bf74edb50e2b3f4515e58b16105c7ee74d377e54cd8b5431569934f8a1788d1a8a200edd284f2fa7672a65d285ae16bad216e42c365", 0xe7}, {&(0x7f0000000940)="c34d90d55eab53f666c029063fc04f9d62425e86545290b678240f23b563f783e82740de9f369c57f22226559e0547aca51af36aec35887ba8de4590267d95fa8a3dc9ffe1168a672a6ed8e887398a76bb9cf275450606e659e1403bd09072a73fa36bb5d38c63c5abe96e1a8901be0a43729b8b5f77392a0583706c84d5aa8926a9c81f2c9e72838e0afc1075b27791b2b1afb0d0cbb14e8dc025dc92528c4ddf6173b6fe33c9b71b4dfe9c569f32b563ff8cad91", 0xb5}, {&(0x7f0000000a00)="0ff79117f1496bfa09c0c9b2df2c7efb9cb3f3eec7bd8fbc9eab5ee5255cacf8c750ed1c0a7c30f6e7fa14f12553388f8bd47c1bcc61891a8638d952d3ae3b1cfbd5aa878a59680c52d3b0e59b780aea1e71b347594cd4896c0ac72e67e0675c224fb4dc67d66edfa026", 0x6a}, {&(0x7f0000000180)="5a2de66fc505b52c60a2d5db1c8737801da73b4c04d65d8bd67e837ca83ef433fcf7e0d29b8458ab3b8e8645353c", 0x2e}], 0x8}, 0x0, 0x60044, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4m33.060080545s ago: executing program 36 (id=4663): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x12, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x6, "aabe23536fe7db2679d9d229183243a0a72123d464dce426e840fb1639bb9d83382f565c2fb347b1ce155609d65a824e5e9ec1d8b50b67860cef9c3b41e322", 0x3e}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000380)="04ba4d9d67a0f94ee948dcd3f12e19c728fc8217941d5767230afb4fd4090bc9fc4c012afaba73c86e6cde809d278cd2090a17ec342643eae162ea01ed82b850b437edc0183bc5094bb51a68b6c3d36eaa58842f8800457f3a67d53066bd4bc930b912aa1035d25b89a47c73da1f1ff655cdb6bd7822a63f404cf46c3a25c01635a3b17d425bab86479857ea58ed0c81c8dc60c0b02d6476627400e46e99b7e1af33f63a1624cdd1bd76d70a753f176faa5d8017be0d3d05d2135cf2e0e4c169baeb9e8ae9447b2bffd544c06518e0ce109924f04a602e204f9faf30b365dfada07a7358808ead9b7b0b66a4b50c7f0bc1f643a3bdab13", 0xf7}, {&(0x7f0000000500)="9f34af40acf2a2fc558bd1b243f82919f0dcc5999a21327231f40c2ab5f65e717492d32de179e3cdb0952c32eb8342e93b45af66ee0093bab0c8ae9d736d466ef7212cfff70f3b6a2ab4f756b7912e2a3161f8bfd0bbc43ef9698e2435e0a29d5f16ebcfbe62f5a0b25c462a5eb10ddc14eaa797", 0x74}, {&(0x7f0000000680)="d8c9d6e6df976e7738afb91835a133c66b003ab3b89c0eb5f324317ee583414f0feae83bbec40c3dee3de33fac6ab86c1a23ffb4c6deea005109e613f694df58cd958610bdf424ee8314f40f3ac21a36cfade181a72381fc3b34f402e167187f3a6acb7dc545d1a31b8cceb8a7178add5487d4c713b2ac87e08259a251f9f21fa7a02c1445a5ce15258bce5dcb2d", 0x8e}, {&(0x7f0000000740)="4fa2cd62b7639879583d28d514ee0892ddd5296a0fa370f85f546afe2405af10c218c3ca536c002a0b16e1aa499611425b589e40ba997c02959bbbbfc44e70a1160105367f89d4d670cf46024996b24b5333a99ab7d47611db600a87731e287f7150440496e75e78b7467a9d9182bb092be9f4b36097ae9003c49159a806db55b94de1a508ab3ede583460f7a27d719ff512b4363638793ccf032400c810c25756f3a6121b1511f14aabfffa461952d6816fa45fc0c5986b78a6bce3197dc86bf6ee142f3017e7ed8c260000000000000000", 0xd2}, {&(0x7f0000000840)="63cdf0a86f1ac3f89cbb31b7ac27294b8d6afa06e4bbc428df663e1538022c89152188c5f1f25932a82515e1b751e2176344ec30010e753bd891c1e90eb00b678977f56b3822e93fcfd9a71dc619a5960f79b5b8c56c4acd349ed4000c79f2eaa30bb05abf7bc058e911859a6a2afc9c2801f2c811651e4b7b90bfa55347cf303ec210d5c642b12922852a6242818afb72b0a32718cd44bbe947a705e78bc07dd1909d11447d267e79b50f0ee4796620d46bf74edb50e2b3f4515e58b16105c7ee74d377e54cd8b5431569934f8a1788d1a8a200edd284f2fa7672a65d285ae16bad216e42c365", 0xe7}, {&(0x7f0000000940)="c34d90d55eab53f666c029063fc04f9d62425e86545290b678240f23b563f783e82740de9f369c57f22226559e0547aca51af36aec35887ba8de4590267d95fa8a3dc9ffe1168a672a6ed8e887398a76bb9cf275450606e659e1403bd09072a73fa36bb5d38c63c5abe96e1a8901be0a43729b8b5f77392a0583706c84d5aa8926a9c81f2c9e72838e0afc1075b27791b2b1afb0d0cbb14e8dc025dc92528c4ddf6173b6fe33c9b71b4dfe9c569f32b563ff8cad91", 0xb5}, {&(0x7f0000000a00)="0ff79117f1496bfa09c0c9b2df2c7efb9cb3f3eec7bd8fbc9eab5ee5255cacf8c750ed1c0a7c30f6e7fa14f12553388f8bd47c1bcc61891a8638d952d3ae3b1cfbd5aa878a59680c52d3b0e59b780aea1e71b347594cd4896c0ac72e67e0675c224fb4dc67d66edfa026", 0x6a}, {&(0x7f0000000180)="5a2de66fc505b52c60a2d5db1c8737801da73b4c04d65d8bd67e837ca83ef433fcf7e0d29b8458ab3b8e8645353c", 0x2e}], 0x8}, 0x0, 0x60044, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2m27.83712475s ago: executing program 9 (id=5009): io_setup(0x3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m27.252954989s ago: executing program 9 (id=5012): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000001010102000000000000000002000009200001800600034000040000140001"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2m26.80628436s ago: executing program 9 (id=5014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2m26.542706498s ago: executing program 9 (id=5018): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004801}, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) memfd_create(0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m25.312226203s ago: executing program 9 (id=5021): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt(r0, 0x1, 0xa, &(0x7f0000000140)=""/113, &(0x7f0000000040)=0x71) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f0000000300)=@v2={0x3, 0x0, 0x11, 0x77, 0xfc, "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"}, 0x105, 0x1) 2m24.809089048s ago: executing program 9 (id=5026): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth0_virt_wifi\x00', 0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) poll(&(0x7f0000000100)=[{r0, 0x10}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) msgctl$IPC_SET(0x0, 0x1, 0x0) recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110380000006dce93152cfea83200009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 2m10.205709956s ago: executing program 37 (id=5026): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth0_virt_wifi\x00', 0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) poll(&(0x7f0000000100)=[{r0, 0x10}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) msgctl$IPC_SET(0x0, 0x1, 0x0) recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110380000006dce93152cfea83200009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 9.582644156s ago: executing program 4 (id=5307): socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x25, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) (fail_nth: 2) 9.393234817s ago: executing program 7 (id=5309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x404000, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000740)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243001600ffffff9e00c8388827", 0x29, 0x24000040, 0x0, 0x0) 7.82000088s ago: executing program 7 (id=5310): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000140), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2200000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000780)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="0209fc000700000028bd7000fed3df2505001a"], 0x38}}, 0x40408c0) socket(0x10, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) close(0x3) syz_open_dev$ptys(0xc, 0x3, 0x0) 7.809716549s ago: executing program 5 (id=5311): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x3b24, &(0x7f0000000440)={0x0, 0x465d, 0x2, 0x3, 0x2c6}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0xc0, 0x1b2e7, {0x0, r6}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x100, r1, 0x0, {0x2800, 0x4}, 0x8}, 0x1) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/131, 0x83}], 0x5, &(0x7f0000000840)=""/112, 0x70}, 0x2) r7 = syz_io_uring_setup(0x41fe, &(0x7f00000003c0)={0x0, 0xfad3, 0x8, 0x1, 0x1d8}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) fcntl$addseals(r0, 0x409, 0x8) 7.230301238s ago: executing program 4 (id=5312): io_setup(0x3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.949930346s ago: executing program 7 (id=5315): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x40001c6, 0x12040, 0x0) 5.750243387s ago: executing program 5 (id=5316): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f804090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x6, 0x44, "559b2c273318968945fe309a97d87d907d17842506fd235aa6abcd185cddcb5005504b05e9a79d637e96ca9e555097a77761ad9ce405601a4ad136814d978bd0146a37f9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.208925779s ago: executing program 4 (id=5318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x21, "a0b9bc8efb0c672a1571ec61e3f20bfdf89fb4afe21d1116d0001ca52f15e55c19"}, &(0x7f0000000040)=0x29) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x20}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0x7}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x1c0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000140)='macvlan1\x00', 0x100000000, 0x1, 0x3}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x66, "7fa685450cb879e877790cf66c22aca62bf6de90ff00a15d5c7b170e2d09a16f4bcf191af300e1a62296c7f13a8a5f4bb7c8fcceb06152bacb8640a8fffcd232692dba548b2b1814e596f02289f3cbcf9456d8613db5b8bc272ac993731cdfaf17c86ed4a304"}, &(0x7f0000000280)=0x6e) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000003c0)={{[0x3, 0xe9, 0x6, 0x7]}, 0x0, 0x6, 0x400, 0x0, &(0x7f00000002c0)=[{{@align=0x10000, {0xffff, 0x2, 0xffffff37, 0x7fffffffffffffff}}, 0x7, 0x0, 'macvlan1\x00'}, {{@_ha_fsid={[0x1ff, 0x79cc]}, {0xc, 0x8, 0x7f, 0x6}}, 0x7, 0x0, 'macvlan1\x00'}, {{@align=0x8, {0x9, 0x6, 0x9, 0xffffffffffffffff}}, 0x79, 0x0, 'macvlan1\x00'}, {{@align, {0x81, 0x334, 0x3, 0x1d}}, 0x2, 0x0, '\x00'}, {{@align, {0x4, 0x1, 0x1, 0x1}}, 0x4, 0x0, '-\x00'}, {{@align=0x8, {0x7f85, 0x3, 0xfffffffa, 0x1000}}, 0x6, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x1000]}, {0xf, 0x3, 0x81, 0xfffffffffffffffd}}, 0x4, 0x0, '\x00'}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x7, r2, 0x2}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000580)={'nat\x00', 0x0, 0x3, 0xff, [0x101, 0x0, 0x0, 0xfffffffffffffff9, 0x5, 0x7], 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000480)=""/255}, &(0x7f0000000600)=0x78) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000640)={r1, 0xcd0}, &(0x7f0000000680)=0x8) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r3, 0x6f50, 0x3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000006c0)={r1, 0x9, 0x1, [0x1]}, 0xa) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000840)={r4, 0x97, "a2a9692b8e9548eac94d38064530cbea81ce35cf9d6d8cef5aba82720be7fdf504e107b2537d0d4dda39913a2cad1bc8dbaaa6fdabc9668758cecbeea488bc4915844025f8ce66d7457d1439e460e9b6c2658c5430658d15333cf14a7ac836c9205e58a48a589a0840ba2ec6f8582137bf6a9397b21a4513e11c37a8c740e7c71f52579fb868ae902878c2de6d18e6d8fa6ed4639f9eaa"}, &(0x7f0000000900)=0x9f) 4.150587165s ago: executing program 8 (id=5319): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f5", 0x2c}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd", 0x2f}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887d", 0x6f3}], 0x3, &(0x7f0000002400)=[{0x10, 0x1, 0x8}], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f4ffffff0086dd60a24b9f000c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22000c907803000000949ab58cc956c41a221295fcbb5ee21bd509f5cf543b65cd8aa288e02492e7b7373c37f8e68e1c49d68474e82b7f7331659d81325eb16b3e8466bb594d9b3389be7eefeccd53c92358eb47871cc87f28c91465f3a7a9eb8798ec4b204e3dc063db7ab232e3a074287be2978de357d29485cb0af5"], 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.04715602s ago: executing program 7 (id=5320): clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_delete(0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) io_submit(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}}, 0x40000) r5 = syz_clone(0x80, &(0x7f0000001240)="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", 0x1000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000340)="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") ptrace$peek(0x2, r5, &(0x7f0000000180)) 3.707458096s ago: executing program 4 (id=5321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04120809aaaaaaaaaa10d8"], 0xb) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x48000) r3 = add_key$keyring(&(0x7f00000041c0), &(0x7f0000004200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000004240)='asymmetric\x00', &(0x7f0000004280)='\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = getpid() sched_rr_get_interval(r4, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r5 = socket(0x16, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, 0x0, 0x40) socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040), 0x14) write$rfkill(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x7, 0x1, 0x1}, 0x8) 3.674270388s ago: executing program 0 (id=5322): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x7f, 0x8, {{0xa, 0x4, 0x1, 0x27, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0xaf, [@multicast1, @multicast2, @loopback, @remote]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000400)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x80, 0x7fff, 0x80, {{0x7, 0x4, 0x0, 0x20, 0x1c, 0x65, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@mpls_getnetconf={0x44, 0x52, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xde6d}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) gettid() (async) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f00000002c0)={[0x8001a0efffffff]}, 0x8) (async) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f00000002c0)={[0x8001a0efffffff]}, 0x8) dup2(r4, r5) (async) r6 = dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) (async) tkill(r3, 0x13) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xe, &(0x7f0000000380)=@raw=[@alu={0x0, 0x1, 0x9, 0x9, 0x9, 0x2, 0x18}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @generic={0x1, 0x7, 0x8, 0x8, 0x5}, @ldst={0x0, 0x2, 0x2, 0x1a, 0x4, 0x18, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xc0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000640)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xc, 0x2, 0xf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r6, r6, r6, r2, r6, r6, r6, r7, 0xffffffffffffffff, r6], &(0x7f0000000840)=[{0x1, 0x2, 0x3, 0x3}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x31e6}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)={0x23c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xdc, 0x3, "d3062fe7d3f0f261a1b3c163243c23d16663299f1673fc609dbcee7cda196331c081095d8c27dc4136cf0380dba9439b56012feb2d49d868da390daa948c4424003c19bdb11bb9196de28f7a444bc87ae4fee95ee2af3f7ece281f393818258c3d4eb02a7f28e284943bbe75a525ef138da6be06e5a3721934d882341bb1d93d875808e1da32221d4b57da544f29a5be77a5d7838ff97bd3566d323e8475e210fcd3869f34193beda64ee00c7dbd84fb2810dbaafd4e450f3deb875ac26923a7d46cc3f0f075671e13d888f156f7585ea6f5fe59ae0feb59"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x97/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}]}, {0x4}, {0x4}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',-/]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#&(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x23c}}, 0x40) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r9, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x1, 0x10b000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000425bd7000fef0da0b03006a48130e0302", @ANYRES32=0x0, @ANYBLOB="0c00990007000000600000000a000600ffffffffffff00000a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x2404c020}, 0xa6fe3390cf81b92) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 3.226314109s ago: executing program 0 (id=5323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d3000"/35], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 1.945901109s ago: executing program 8 (id=5324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = timerfd_create(0x1, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpgid(0x0) fcntl$setown(r3, 0x8, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r5}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010001, 0x0, 0xbffffffffffffffd}]}) 1.724031711s ago: executing program 7 (id=5325): socket(0x2b, 0x1, 0x0) socket(0x2b, 0x80801, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000061c0)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000440)={0x10201, 0x5, 0x1, 0x2000, &(0x7f0000770000/0x2000)=nil, 0x1}) 1.699491483s ago: executing program 0 (id=5326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x4844) 1.56001041s ago: executing program 5 (id=5327): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002a00070127bd700000000000017c00000c00028005007c80280000000c00078005003d0000000000e86b8576b4418304997c9b13f258818e325afa29934ad4cc66597c7ec7695e89460fa271dacbcdf6464ea624d839d4858e5affad51afa512d4a37b36206687cc7b3cc2bbc66831feb85aa494dfdc8d03edbcbabf6a2565f425e8979b6ab8c8d3015be3dc00c1f6056f451ae1cdbdddced6eb0365419fa950c81275260c9ac45e7c4566574ca3e5b48280b509013221e058251ee2a0df10e6f2661121c5df1ba0c6a4"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.362330566s ago: executing program 0 (id=5328): io_setup(0x3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.329797327s ago: executing program 4 (id=5329): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x24060400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xdff9, 0xf, 0x2, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4b, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x1, 0x7, 0x3c5b, 0xfffffffe, 0x24, 0xd, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x0, 0x17, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x0, 0x4, 0x2, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x4000008, 0x7, 0x1, 0x40], [0x5, 0x9, 0x8000012f, 0x2008006, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffffb, 0x3, 0x1, 0x0, 0x5, 0x2, 0xe, 0x10, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xc, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0xf8, 0xa, 0x6, 0x47, 0x7ffc, 0x1, 0xfe000000, 0xfffd, 0x7, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x737, 0x42, 0x7], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x800, 0x303f, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7f, 0x1, 0xa, 0x4, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x3d, 0x2, 0x5f, 0x5, 0x3, 0x0, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0x8001, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x2, 0x5, 0x5, 0x8, 0x30b1d692, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.187348535s ago: executing program 8 (id=5330): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, 0x0, 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x40001c6, 0x12040, 0x0) 1.172842552s ago: executing program 5 (id=5331): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x21, "a0b9bc8efb0c672a1571ec61e3f20bfdf89fb4afe21d1116d0001ca52f15e55c19"}, &(0x7f0000000040)=0x29) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x20}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0x7}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x1c0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000140)='macvlan1\x00', 0x100000000, 0x1, 0x3}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x66, "7fa685450cb879e877790cf66c22aca62bf6de90ff00a15d5c7b170e2d09a16f4bcf191af300e1a62296c7f13a8a5f4bb7c8fcceb06152bacb8640a8fffcd232692dba548b2b1814e596f02289f3cbcf9456d8613db5b8bc272ac993731cdfaf17c86ed4a304"}, &(0x7f0000000280)=0x6e) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000003c0)={{[0x3, 0xe9, 0x6, 0x7]}, 0x0, 0x6, 0x400, 0x0, &(0x7f00000002c0)=[{{@align=0x10000, {0xffff, 0x2, 0xffffff37, 0x7fffffffffffffff}}, 0x7, 0x0, 'macvlan1\x00'}, {{@_ha_fsid={[0x1ff, 0x79cc]}, {0xc, 0x8, 0x7f, 0x6}}, 0x7, 0x0, 'macvlan1\x00'}, {{@align=0x8, {0x9, 0x6, 0x9, 0xffffffffffffffff}}, 0x79, 0x0, 'macvlan1\x00'}, {{@align, {0x81, 0x334, 0x3, 0x1d}}, 0x2, 0x0, '\x00'}, {{@align, {0x4, 0x1, 0x1, 0x1}}, 0x4, 0x0, '-\x00'}, {{@align=0x8, {0x7f85, 0x3, 0xfffffffa, 0x1000}}, 0x6, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x1000]}, {0xf, 0x3, 0x81, 0xfffffffffffffffd}}, 0x4, 0x0, '\x00'}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x7, r2, 0x2}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000580)={'nat\x00', 0x0, 0x3, 0xff, [0x101, 0x0, 0x0, 0xfffffffffffffff9, 0x5, 0x7], 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000480)=""/255}, &(0x7f0000000600)=0x78) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000640)={r1, 0xcd0}, &(0x7f0000000680)=0x8) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r3, 0x6f50, 0x3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000006c0)={r1, 0x9, 0x1, [0x1]}, 0xa) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000840)={r4, 0x97, "a2a9692b8e9548eac94d38064530cbea81ce35cf9d6d8cef5aba82720be7fdf504e107b2537d0d4dda39913a2cad1bc8dbaaa6fdabc9668758cecbeea488bc4915844025f8ce66d7457d1439e460e9b6c2658c5430658d15333cf14a7ac836c9205e58a48a589a0840ba2ec6f8582137bf6a9397b21a4513e11c37a8c740e7c71f52579fb868ae902878c2de6d18e6d8fa6ed4639f9eaa"}, &(0x7f0000000900)=0x9f) 886.430209ms ago: executing program 0 (id=5332): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x28, 0x35, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 814.288577ms ago: executing program 5 (id=5333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0xa, 0x5, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f00000000c0)=0xffffff5f) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f00000006c0)="c821", &(0x7f0000000040)=""/18}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) 739.194601ms ago: executing program 7 (id=5334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = syz_usb_connect(0x5, 0x1b, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x63, 0x60, 0xdd, 0x20, 0xbda, 0x8153, 0x6f0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x78, 0x5, 0x10, 0x60}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=r1]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, 0x35, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0x9a, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r6, &(0x7f00000005c0)={0x24, &(0x7f0000000480)={0x40, 0x4, 0xaa, {0xaa, 0xc, "700d4dac4fa7671028bb2ed2c27271c107f46876a16328dc962adc0c3784a63f7be607d60f2c8aaafbef9fb755a28a6ed4470ff49abcac95ceb53d52f05a78727b14ccd75b916d56eb9b6e5be1fca7b12c9f96d019e0a6bcac1f2b11d89530510e251fcd838f2406489ea74eb72085bc4ccaf4b7afd7c61fc4aa209cc4d3dc7c77f2f70fedb25eaa198627d0518c85b284519a91d70d585cbbbf66bdd97b804da3f5326fccd6603c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x260a}}, &(0x7f0000000540)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "06f7fc49"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x3, 0x1, {0x22, 0xc78}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0x15, 0x5c, "730051906a09e05876542f839929d4845ce49f3ce1b19b83604f997babb03dbb01335eb1cf2a43e886493eac1f3f23b1aa4b15605772f509477f502c57af14ecf4f5498aeb1973a12ce04f5f7c65cf1a34f99a427495bae0e9cd2862"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x1, 0x13, "f69c3b8288e0f699d9bb0c60dad35588537bf9"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x6}}) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 738.367601ms ago: executing program 8 (id=5335): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x5, 0x8006}, 0x4) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (fail_nth: 2) 243.286517ms ago: executing program 8 (id=5336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d3000"/35], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 166.683703ms ago: executing program 5 (id=5337): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f0102030109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x4, 0x2a, {0x2a, 0x10, "f52491ce8d3110f5abf7d8eb110a1f856db91e544cfebc7c8a165879470f6ddc3158e0d251d2ea36"}}, &(0x7f0000000080)={0x0, 0x3, 0x63, @string={0x63, 0x3, "692aa948b037ed8c3c34d534a87d3fcbb52a5cab382d6474d74e317b89c396b5044e678d6ab366db5c9b73c3dc7cc11a2986ab68df0d6a4bd6a59bd861367efc542cef5208069bbaffe0c6c8cb35dbdc75686a53bc45525113e72fc8d2431581d6"}}, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x40, 0x1, {0x22, 0x5e8}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0xb, 0xfa, "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"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xb8, "124b61466bd7e171cd948560c1d23abfd8e91e5b2a7f285907e7c639964581b035b290f9566b4a37c53d5e545eb03194fd37916f461dc2c9eaf7cd1a006b9c266507b594bfd9f51549dddf320b859d43cce363ab41bfd6b988cd270d59c7e6a7ef26a6e01ffbaaa44f72f220536a04c5d9c26efab6cacad7fd4680211f9df4ad18dbf2936123ffeef4b55a00baba5d377ddaab04bd190626981a8f3f9f09b21bab303f24372686165f35e93ee83715b1a46c5187014e6876"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="002206"], 0x0, 0x0, 0x0, 0x0, 0x0}) 139.487219ms ago: executing program 0 (id=5338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004b00004000001605030a0100ff000000018907ceac1414aa83030103004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000390780000"], 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x10000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff58, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3], 0x28}}, 0x4044004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) r6 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13, 0x1000f7, 0x40000}, 0x20) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="8f53eee2ed33438f5adc4ed56f26a261f43256ba8a98613f7c8094a962f845995c5a9bc168b76e65190f9b39b7304c2ae058271def14c1c3165eeaebf7870e6af5b2e33167f55b7e9a0f811657d9352b4c038e656813564f5ad9762e85f1f742574398f75309797f4ff3e901add97f4114a955233c198d569a8cbcd7e5d27b241f247f35f33db46ca2d86a", 0x8b}], 0x1) openat$nvram(0xffffff9c, 0x0, 0x101000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x42) 78.339687ms ago: executing program 4 (id=5339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0xd000, 0xa, 0x0, 0xa, 0xfc, 0xfc, 0x0, 0x0, 0xfe, 0x0, 0x1}, {0x0, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0xeeef0000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x2, 0x0, 0x1a}, {0x11001006, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0xd5, 0x9, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0xf, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x40}, {0x6000, 0x4}, {0x1000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x6001, 0x900, [0x5, 0x0, 0x0, 0x3fffffffffff]}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x100000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 8 (id=5340): prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = pidfd_getfd(r0, r2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000d40)={@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, 0xffffffffffffffff, "f556f4d67fbb3e921b1a628c938a455a751117b9e993cbe8966f693cb9e4b7b1", 0x700, 0x3, 0x2, 0x2}, 0x3c) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x7, @private2}}}, &(0x7f00000000c0)=0x84) shmctl$SHM_LOCK(0x0, 0xb) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x20, 0x1, 0x22, {0x22, 0x8, "a96adb8dac128c03296d5d08f038082309c64d0347973cf6d17b941c3f0d247a"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x40, 0x30, 0x34, "87e9c07ab7380d3b35c6257177008bf05b10554f55515b834dfa1fa3b5de275d276e8dc471c107cb7ab09e2224f02cb603991056"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b80)={0x20, 0x81, 0x1, '\"'}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "858cd2"}, 0x0, &(0x7f0000000c40)={0x20, 0x84, 0x3, "a3012a"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "10af43"}}) kernel console output (not intermixed with test programs): : no tx connection found [ 1642.437948][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438064][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438181][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438298][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438423][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438539][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438655][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438771][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.438888][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439013][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439130][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439247][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439367][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439491][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.439607][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.442679][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.442809][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.442928][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443051][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443168][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443289][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443412][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443530][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443647][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443768][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.443884][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444044][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444162][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444283][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444399][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444522][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444639][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444755][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444871][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.444987][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445103][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445220][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445341][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445464][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445581][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445697][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445819][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.445935][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.446051][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.447932][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448055][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448170][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448284][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448398][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448518][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448631][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448745][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.448887][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449053][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449341][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449487][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449602][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449715][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449829][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.449943][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450057][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450169][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450282][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450394][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450519][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450632][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450747][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450860][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.450974][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451090][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451204][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451317][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451436][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451550][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451664][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451777][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.451924][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452043][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452159][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452275][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452390][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452514][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452678][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452797][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.452917][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453032][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453149][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453266][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453381][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453502][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453618][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453735][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453852][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.453969][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454088][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454205][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454322][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454445][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454562][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454677][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454793][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.454911][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455028][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455144][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455261][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455377][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455500][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455617][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455736][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.455853][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456004][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456121][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456238][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456354][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456478][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456596][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456713][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456829][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.456945][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457061][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457177][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457294][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457417][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457533][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457649][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457766][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457882][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.457998][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.458116][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.458324][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.458449][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.458566][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.458686][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.462989][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463114][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463231][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463350][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463474][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463634][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.463754][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1642.477920][ T1232] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1642.478118][ T1232] ath9k_htc: Failed to initialize the device [ 1642.610573][ T36] usb 6-1: ath9k_htc: USB layer deinitialized [ 1642.638881][T10825] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1642.638897][T10825] imon:imon_probe: failed to initialize context! [ 1642.638907][T10825] imon 8-1:0.0: unable to register, err -19 [ 1643.182400][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888084466000: rx timeout, send abort [ 1643.252601][T10825] usb 8-1: USB disconnect, device number 16 [ 1643.279054][ T5929] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1643.536165][ T5929] usb 10-1: too many configurations: 81, using maximum allowed: 8 [ 1643.658690][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888084466000: abort rx timeout. Force session deactivation [ 1643.781284][ T5929] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1643.781328][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.781351][ T5929] usb 10-1: Product: syz [ 1643.781366][ T5929] usb 10-1: Manufacturer: syz [ 1643.781382][ T5929] usb 10-1: SerialNumber: syz [ 1643.853024][ T5929] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1643.908033][T21983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1643.935591][ T5858] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1644.092314][T21984] 9pnet_fd: Insufficient options for proto=fd [ 1644.112072][T21984] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1644.137902][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.138527][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.272287][ T37] audit: type=1800 audit(2687.081:3586): pid=21989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4994" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1644.405913][T21988] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5000'. [ 1644.848222][T22001] FAULT_INJECTION: forcing a failure. [ 1644.848222][T22001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.848273][T22001] CPU: 1 UID: 0 PID: 22001 Comm: syz.5.5003 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1644.848305][T22001] Tainted: [L]=SOFTLOCKUP [ 1644.848315][T22001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1644.848329][T22001] Call Trace: [ 1644.848339][T22001] [ 1644.848351][T22001] dump_stack_lvl+0xe8/0x150 [ 1644.848390][T22001] should_fail_ex+0x46b/0x600 [ 1644.848425][T22001] _copy_to_user+0x31/0xb0 [ 1644.848461][T22001] simple_read_from_buffer+0xe1/0x170 [ 1644.848495][T22001] proc_fail_nth_read+0x1be/0x230 [ 1644.848528][T22001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1644.848560][T22001] ? rw_verify_area+0x2ac/0x4e0 [ 1644.848593][T22001] ? irqentry_exit+0x59e/0x620 [ 1644.848627][T22001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1644.848657][T22001] vfs_read+0x212/0xa80 [ 1644.848700][T22001] ? __pfx_vfs_read+0x10/0x10 [ 1644.848734][T22001] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1644.848769][T22001] ? lockdep_hardirqs_on+0x7a/0x110 [ 1644.848799][T22001] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1644.848832][T22001] ? mutex_lock_nested+0x152/0x1d0 [ 1644.848856][T22001] ? fdget_pos+0x252/0x320 [ 1644.848894][T22001] ksys_read+0x156/0x270 [ 1644.848930][T22001] ? __pfx_ksys_read+0x10/0x10 [ 1644.848959][T22001] ? fput+0xa0/0xd0 [ 1644.848997][T22001] do_syscall_64+0x14d/0xf80 [ 1644.849028][T22001] ? trace_irq_disable+0x3b/0x150 [ 1644.849061][T22001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.849086][T22001] ? clear_bhb_loop+0x40/0x90 [ 1644.849115][T22001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.849139][T22001] RIP: 0033:0x7fe91871cfce [ 1644.849161][T22001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1644.849183][T22001] RSP: 002b:00007fe9169adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1644.849208][T22001] RAX: ffffffffffffffda RBX: 00007fe9169ae6c0 RCX: 00007fe91871cfce [ 1644.849227][T22001] RDX: 000000000000000f RSI: 00007fe9169ae0a0 RDI: 0000000000000004 [ 1644.849249][T22001] RBP: 00007fe9169ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.849264][T22001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.849279][T22001] R13: 00007fe9189d6038 R14: 00007fe9189d5fa0 R15: 00007ffdd40b6218 [ 1644.849316][T22001] [ 1644.982943][ T5858] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1645.016033][ T5858] ath9k_htc: Failed to initialize the device [ 1645.214284][T21997] erofs (device loop7): cannot find valid erofs superblock [ 1646.343867][ T5858] usb 10-1: ath9k_htc: USB layer deinitialized [ 1646.569043][ T5874] usb 10-1: USB disconnect, device number 8 [ 1646.939921][ T5929] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1647.176682][T22017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5008'. [ 1647.240118][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 1647.242706][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1647.242744][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1647.245961][ T5929] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1647.245994][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.246016][ T5929] usb 8-1: Product: syz [ 1647.246032][ T5929] usb 8-1: Manufacturer: syz [ 1647.246048][ T5929] usb 8-1: SerialNumber: syz [ 1647.307075][ T5929] usb 8-1: config 0 descriptor?? [ 1647.440165][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5012'. [ 1647.574532][ T5929] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input110 [ 1647.805859][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1648.027041][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5018'. [ 1648.137483][T22036] ubi: mtd0 is already attached to ubi31 [ 1648.306587][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888090dc2400: rx timeout, send abort [ 1648.412937][T22042] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1648.461295][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1648.475227][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5018'. [ 1648.605185][ T56] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1648.617481][ T56] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1648.621546][T21738] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1648.634931][ T5929] rc_core: IR keymap rc-imon-pad not found [ 1648.634946][ T5929] Registered IR keymap rc-empty [ 1648.635003][ T5929] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1648.635019][ T5929] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1648.635127][T21742] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1648.638139][ T5929] imon:send_packet: packet tx failed (-71) [ 1648.651731][ T5929] imon 8-1:0.0: remote input dev register failed [ 1648.652274][ T5929] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1648.752660][T22046] FAULT_INJECTION: forcing a failure. [ 1648.752660][T22046] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.752701][T22046] CPU: 0 UID: 0 PID: 22046 Comm: syz.0.5019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1648.752733][T22046] Tainted: [L]=SOFTLOCKUP [ 1648.752742][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1648.752758][T22046] Call Trace: [ 1648.752767][T22046] [ 1648.752778][T22046] dump_stack_lvl+0xe8/0x150 [ 1648.752817][T22046] should_fail_ex+0x46b/0x600 [ 1648.752849][T22046] should_failslab+0xa8/0x100 [ 1648.752884][T22046] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1648.752921][T22046] ? __alloc_skb+0x1d0/0x7d0 [ 1648.752954][T22046] ? lockdep_hardirqs_on+0x7a/0x110 [ 1648.752993][T22046] __alloc_skb+0x1d0/0x7d0 [ 1648.753028][T22046] netlink_sendmsg+0x5d4/0xb40 [ 1648.753068][T22046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1648.753104][T22046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1648.753141][T22046] ____sys_sendmsg+0x94c/0x9c0 [ 1648.753182][T22046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1648.753226][T22046] ? import_iovec+0x73/0xa0 [ 1648.753260][T22046] ___sys_sendmsg+0x2a5/0x360 [ 1648.753300][T22046] ? __pfx____sys_sendmsg+0x10/0x10 [ 1648.753341][T22046] ? kstrtouint+0x6e/0xe0 [ 1648.753391][T22046] ? __fget_files+0x2a/0x420 [ 1648.753420][T22046] ? __fget_files+0x3a6/0x420 [ 1648.753461][T22046] __sys_sendmmsg+0x282/0x4e0 [ 1648.753498][T22046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1648.753541][T22046] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1648.753581][T22046] ? ksys_write+0x248/0x270 [ 1648.753617][T22046] ? __pfx_ksys_write+0x10/0x10 [ 1648.753658][T22046] __x64_sys_sendmmsg+0xa0/0xc0 [ 1648.753696][T22046] do_syscall_64+0x14d/0xf80 [ 1648.753724][T22046] ? trace_irq_disable+0x3b/0x150 [ 1648.753752][T22046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.753776][T22046] ? clear_bhb_loop+0x40/0x90 [ 1648.753804][T22046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.753828][T22046] RIP: 0033:0x7f15a49fc799 [ 1648.753850][T22046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.753870][T22046] RSP: 002b:00007f15a2c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1648.753903][T22046] RAX: ffffffffffffffda RBX: 00007f15a4c75fa0 RCX: 00007f15a49fc799 [ 1648.753921][T22046] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 1648.753937][T22046] RBP: 00007f15a2c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.753951][T22046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.753964][T22046] R13: 00007f15a4c76038 R14: 00007f15a4c75fa0 R15: 00007fff46a95988 [ 1648.753999][T22046] [ 1648.783350][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888090dc2400: abort rx timeout. Force session deactivation [ 1649.177802][ T5929] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1649.177826][ T5929] imon:imon_probe: failed to initialize context! [ 1649.177841][ T5929] imon 8-1:0.0: unable to register, err -19 [ 1649.279280][ T5929] usb 8-1: USB disconnect, device number 17 [ 1649.404373][T22057] 9p: Unknown uid 00000000004294967295 [ 1649.991501][T22069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.999373][T22069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.071268][T22069] gtp0: left promiscuous mode [ 1650.860758][ T37] audit: type=1326 audit(2694.000:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.889198][ T37] audit: type=1326 audit(2694.042:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.890120][ T37] audit: type=1326 audit(2694.042:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.891081][ T37] audit: type=1326 audit(2694.042:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.892033][ T37] audit: type=1326 audit(2694.042:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.893136][ T37] audit: type=1326 audit(2694.042:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe91871cfce code=0x7ffc0000 [ 1650.895825][ T37] audit: type=1326 audit(2694.042:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe91875da97 code=0x7ffc0000 [ 1650.896710][ T37] audit: type=1326 audit(2694.042:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe91875c799 code=0x7ffc0000 [ 1650.940438][ T37] audit: type=1326 audit(2694.073:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe91875da97 code=0x7ffc0000 [ 1650.981727][ T37] audit: type=1326 audit(2694.084:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.5.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe91871cfce code=0x7ffc0000 [ 1651.869123][ T5929] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1652.044997][ T5929] usb 6-1: device descriptor read/64, error -71 [ 1652.269442][ T5929] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1652.450345][ T5929] usb 6-1: device descriptor read/64, error -71 [ 1652.563616][ T5929] usb usb6-port1: attempt power cycle [ 1652.586288][T22080] trusted_key: encrypted_key: insufficient parameters specified [ 1652.964622][ T5929] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1652.996170][ T5929] usb 6-1: device descriptor read/8, error -71 [ 1653.087150][T22087] 9p: Unknown uid 00000000004294967295 [ 1653.261197][ T5929] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1653.289573][ T5929] usb 6-1: device descriptor read/8, error -71 [ 1653.394958][ T5929] usb usb6-port1: unable to enumerate USB device [ 1653.450431][ T5874] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1653.641036][ T5874] usb 8-1: Using ep0 maxpacket: 16 [ 1653.664894][ T5874] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.664948][ T5874] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1653.767317][ T5874] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1653.767353][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.767369][ T5874] usb 8-1: Product: syz [ 1653.767381][ T5874] usb 8-1: Manufacturer: syz [ 1653.767393][ T5874] usb 8-1: SerialNumber: syz [ 1653.871152][ T5874] usb 8-1: config 0 descriptor?? [ 1653.903758][T22090] GUP no longer grows the stack in syz.8.5035 (22090): 2000001d4000-200000200000 (2000001d2000) [ 1653.903800][T22090] CPU: 0 UID: 0 PID: 22090 Comm: syz.8.5035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1653.903831][T22090] Tainted: [L]=SOFTLOCKUP [ 1653.903839][T22090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1653.903852][T22090] Call Trace: [ 1653.903886][T22090] [ 1653.903898][T22090] dump_stack_lvl+0xe8/0x150 [ 1653.903938][T22090] __get_user_pages+0x22b6/0x2800 [ 1653.904100][T22090] get_user_pages_remote+0x2f6/0xab0 [ 1653.904135][T22090] ? __pfx_mtree_load+0x10/0x10 [ 1653.904209][T22090] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1653.904251][T22090] ? __access_remote_vm+0x44d/0x7f0 [ 1653.904293][T22090] __access_remote_vm+0x226/0x7f0 [ 1653.904338][T22090] ? __pfx___access_remote_vm+0x10/0x10 [ 1653.904375][T22090] ? rep_movs_alternative+0x4a/0x90 [ 1653.904441][T22090] proc_pid_cmdline_read+0x41c/0x7f0 [ 1653.904475][T22090] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1653.904504][T22090] ? rw_verify_area+0x2ac/0x4e0 [ 1653.904547][T22090] vfs_readv+0x597/0x850 [ 1653.904567][T22090] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1653.904603][T22090] ? __pfx_vfs_readv+0x10/0x10 [ 1653.904647][T22090] ? __fget_files+0x2a/0x420 [ 1653.904681][T22090] ? __fget_files+0x3a6/0x420 [ 1653.904707][T22090] ? __fget_files+0x2a/0x420 [ 1653.904743][T22090] __x64_sys_preadv+0x1a2/0x2b0 [ 1653.904761][T22090] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1653.904812][T22090] do_syscall_64+0x14d/0xf80 [ 1653.904842][T22090] ? trace_irq_disable+0x3b/0x150 [ 1653.904870][T22090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.904894][T22090] ? clear_bhb_loop+0x40/0x90 [ 1653.904921][T22090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.904965][T22090] RIP: 0033:0x7f8c19c9c799 [ 1653.904987][T22090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.905009][T22090] RSP: 002b:00007f8c17ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1653.905033][T22090] RAX: ffffffffffffffda RBX: 00007f8c19f16090 RCX: 00007f8c19c9c799 [ 1653.905049][T22090] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 1653.905063][T22090] RBP: 00007f8c19d32c99 R08: 0000000000006a76 R09: 0000000000000000 [ 1653.905082][T22090] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1653.905092][T22090] R13: 00007f8c19f16128 R14: 00007f8c19f16090 R15: 00007ffdbfc3dfa8 [ 1653.905134][T22090] [ 1654.192549][ T5874] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input112 [ 1654.367174][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1654.392957][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1654.393114][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1654.810526][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1654.919274][ T5874] rc_core: IR keymap rc-imon-pad not found [ 1654.919296][ T5874] Registered IR keymap rc-empty [ 1654.919367][ T5874] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1654.919385][ T5874] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1654.919717][ T5874] imon:send_packet: packet tx failed (-71) [ 1654.954972][ T5874] imon 8-1:0.0: remote input dev register failed [ 1654.955143][ T5874] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1655.172662][ T5874] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1655.172688][ T5874] imon:imon_probe: failed to initialize context! [ 1655.172703][ T5874] imon 8-1:0.0: unable to register, err -19 [ 1655.208962][ T5874] usb 8-1: USB disconnect, device number 18 [ 1656.880146][T22109] 9pnet_fd: Insufficient options for proto=fd [ 1656.883598][T22109] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1658.839733][ T5858] kernel write not supported for file bpf-prog (pid: 5858 comm: kworker/0:4) [ 1659.015594][T22127] FAULT_INJECTION: forcing a failure. [ 1659.015594][T22127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.015638][T22127] CPU: 0 UID: 0 PID: 22127 Comm: syz.7.5046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.015662][T22127] Tainted: [L]=SOFTLOCKUP [ 1659.015668][T22127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1659.015679][T22127] Call Trace: [ 1659.015686][T22127] [ 1659.015693][T22127] dump_stack_lvl+0xe8/0x150 [ 1659.015727][T22127] should_fail_ex+0x46b/0x600 [ 1659.015749][T22127] _copy_from_user+0x2d/0xb0 [ 1659.015772][T22127] sctp_setsockopt+0x1c4/0x12c0 [ 1659.015794][T22127] ? sock_common_setsockopt+0x36/0xc0 [ 1659.015814][T22127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1659.015835][T22127] do_sock_setsockopt+0x17c/0x1b0 [ 1659.015862][T22127] __x64_sys_setsockopt+0x143/0x1b0 [ 1659.015889][T22127] do_syscall_64+0x14d/0xf80 [ 1659.015911][T22127] ? trace_irq_disable+0x3b/0x150 [ 1659.015932][T22127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.015950][T22127] ? clear_bhb_loop+0x40/0x90 [ 1659.015970][T22127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.015986][T22127] RIP: 0033:0x7f75fc4dc799 [ 1659.016002][T22127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.016016][T22127] RSP: 002b:00007f75fa70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1659.016034][T22127] RAX: ffffffffffffffda RBX: 00007f75fc756090 RCX: 00007f75fc4dc799 [ 1659.016046][T22127] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 1659.016056][T22127] RBP: 00007f75fa70d090 R08: 000000000000009c R09: 0000000000000000 [ 1659.016067][T22127] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1659.016077][T22127] R13: 00007f75fc756128 R14: 00007f75fc756090 R15: 00007ffd569edaa8 [ 1659.016108][T22127] [ 1659.591688][T22130] FAULT_INJECTION: forcing a failure. [ 1659.591688][T22130] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.591729][T22130] CPU: 1 UID: 0 PID: 22130 Comm: syz.8.5047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.591762][T22130] Tainted: [L]=SOFTLOCKUP [ 1659.591772][T22130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1659.591787][T22130] Call Trace: [ 1659.591800][T22130] [ 1659.591809][T22130] dump_stack_lvl+0xe8/0x150 [ 1659.591838][T22130] should_fail_ex+0x46b/0x600 [ 1659.591861][T22130] should_failslab+0xa8/0x100 [ 1659.591880][T22130] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1659.591905][T22130] ? __alloc_skb+0x1d0/0x7d0 [ 1659.591924][T22130] ? lockdep_hardirqs_on+0x7a/0x110 [ 1659.591953][T22130] __alloc_skb+0x1d0/0x7d0 [ 1659.591977][T22130] netlink_sendmsg+0x5d4/0xb40 [ 1659.592005][T22130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1659.592026][T22130] ? unwind_get_return_address+0x4d/0x90 [ 1659.592047][T22130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1659.592075][T22130] ____sys_sendmsg+0x94c/0x9c0 [ 1659.592103][T22130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1659.592134][T22130] ? import_iovec+0x73/0xa0 [ 1659.592159][T22130] ___sys_sendmsg+0x2a5/0x360 [ 1659.592187][T22130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1659.592237][T22130] ? __fget_files+0x2a/0x420 [ 1659.592258][T22130] ? __fget_files+0x3a6/0x420 [ 1659.592285][T22130] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1659.592312][T22130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1659.592344][T22130] ? __pfx_ksys_write+0x10/0x10 [ 1659.592377][T22130] do_syscall_64+0x14d/0xf80 [ 1659.592399][T22130] ? trace_irq_disable+0x3b/0x150 [ 1659.592418][T22130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.592442][T22130] ? clear_bhb_loop+0x40/0x90 [ 1659.592462][T22130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.592479][T22130] RIP: 0033:0x7f8c19c9c799 [ 1659.592494][T22130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.592509][T22130] RSP: 002b:00007f8c17ecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1659.592526][T22130] RAX: ffffffffffffffda RBX: 00007f8c19f16090 RCX: 00007f8c19c9c799 [ 1659.592539][T22130] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 1659.592550][T22130] RBP: 00007f8c17ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.592560][T22130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.592570][T22130] R13: 00007f8c19f16128 R14: 00007f8c19f16090 R15: 00007ffdbfc3dfa8 [ 1659.592595][T22130] [ 1660.813908][ T5874] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1660.819943][T11034] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1661.041859][ T5874] usb 9-1: Using ep0 maxpacket: 16 [ 1661.065277][ T5874] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.065379][ T5874] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1661.660650][ T5874] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1661.660694][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.660721][ T5874] usb 9-1: Product: syz [ 1661.660732][ T5874] usb 9-1: Manufacturer: syz [ 1661.660744][ T5874] usb 9-1: SerialNumber: syz [ 1661.669239][ T5874] usb 9-1: config 0 descriptor?? [ 1662.034263][ T5874] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input114 [ 1662.130843][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1662.637773][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1662.927296][ T5874] rc_core: IR keymap rc-imon-pad not found [ 1662.927336][ T5874] Registered IR keymap rc-empty [ 1662.927428][ T5874] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1662.927448][ T5874] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1662.927753][ T5874] imon:send_packet: packet tx failed (-71) [ 1662.946418][ T5874] imon 9-1:0.0: remote input dev register failed [ 1662.946864][ T5874] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1663.117185][ T5874] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1663.117203][ T5874] imon:imon_probe: failed to initialize context! [ 1663.117213][ T5874] imon 9-1:0.0: unable to register, err -19 [ 1663.193494][ T5874] usb 9-1: USB disconnect, device number 18 [ 1666.072771][T22175] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1666.242778][T21947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1666.248346][T21947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1666.282915][T21947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1666.287094][T21947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1666.295074][T21947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1666.479862][T11238] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1666.641651][T11238] usb 8-1: Using ep0 maxpacket: 16 [ 1666.645314][T11238] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.645352][T11238] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1666.685916][T11238] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1666.685955][T11238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.685977][T11238] usb 8-1: Product: syz [ 1666.685993][T11238] usb 8-1: Manufacturer: syz [ 1666.686008][T11238] usb 8-1: SerialNumber: syz [ 1666.741720][T11238] usb 8-1: config 0 descriptor?? [ 1666.793704][T22186] trusted_key: encrypted_key: insufficient parameters specified [ 1666.997734][T11238] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input116 [ 1667.153784][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1667.824834][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1668.299212][T11034] Bluetooth: hci3: command tx timeout [ 1668.394768][T11238] rc_core: IR keymap rc-imon-pad not found [ 1668.394794][T11238] Registered IR keymap rc-empty [ 1668.394894][T11238] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1668.394914][T11238] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1668.395261][T11238] imon:send_packet: packet tx failed (-71) [ 1668.423309][T11238] imon 8-1:0.0: remote input dev register failed [ 1668.423467][T11238] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1669.716534][T22203] syz.5.5069 (22203): drop_caches: 2 [ 1670.117738][T11238] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1670.117775][T11238] imon:imon_probe: failed to initialize context! [ 1670.117790][T11238] imon 8-1:0.0: unable to register, err -19 [ 1670.190017][T11238] usb 8-1: USB disconnect, device number 19 [ 1670.280603][T11034] Bluetooth: hci3: command tx timeout [ 1670.573235][T22179] chnl_net:caif_netlink_parms(): no params data found [ 1670.615244][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5072'. [ 1672.109766][T11238] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1672.132869][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.133109][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.133384][T22179] bridge_slave_0: entered allmulticast mode [ 1672.162824][T22179] bridge_slave_0: entered promiscuous mode [ 1672.176496][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.176706][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.176987][T22179] bridge_slave_1: entered allmulticast mode [ 1672.181885][T22179] bridge_slave_1: entered promiscuous mode [ 1672.265625][T11034] Bluetooth: hci3: command tx timeout [ 1672.280669][T11238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1672.280705][T11238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.282008][T11238] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1672.282037][T11238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.348502][T11238] usb 8-1: config 0 descriptor?? [ 1672.375048][T11238] hub 8-1:0.0: USB hub found [ 1672.546301][T11238] hub 8-1:0.0: 1 port detected [ 1672.567470][T22179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.573113][T22179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.835961][T22179] team0: Port device team_slave_0 added [ 1672.840831][T22179] team0: Port device team_slave_1 added [ 1673.155207][T22179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.155227][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.155259][T22179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.209268][T22179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.209290][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.209369][T22179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.095184][T11034] Bluetooth: hci3: command tx timeout [ 1675.157741][ T1232] hub 8-1:0.0: hub_ext_port_status failed (err = -32) [ 1675.262398][T22229] syz.0.5079 (22229): drop_caches: 2 [ 1675.510572][ T36] usb 8-1: USB disconnect, device number 20 [ 1675.662483][T22179] hsr_slave_0: entered promiscuous mode [ 1675.683446][T22179] hsr_slave_1: entered promiscuous mode [ 1675.689343][T22179] debugfs: 'hsr0' already exists in 'hsr' [ 1675.689366][T22179] Cannot create hsr debugfs directory [ 1675.767021][ T5858] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1675.919841][ T5858] usb 9-1: Using ep0 maxpacket: 16 [ 1675.951972][ T5858] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1675.952008][ T5858] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1675.977404][ T5858] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1675.977437][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.977460][ T5858] usb 9-1: Product: syz [ 1675.977476][ T5858] usb 9-1: Manufacturer: syz [ 1675.977493][ T5858] usb 9-1: SerialNumber: syz [ 1676.037377][ T5858] usb 9-1: config 0 descriptor?? [ 1676.339923][T22245] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5083'. [ 1676.435119][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1676.460686][ T5858] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input118 [ 1676.785543][ T36] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1676.940991][ T36] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1676.941021][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.941046][ T36] usb 6-1: config 0 has no interface number 0 [ 1676.986450][ T36] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1676.986484][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.986504][ T36] usb 6-1: Product: syz [ 1676.986524][ T36] usb 6-1: Manufacturer: syz [ 1676.986535][ T36] usb 6-1: SerialNumber: syz [ 1677.054366][ T36] usb 6-1: config 0 descriptor?? [ 1677.202676][ T36] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 1677.202752][ T36] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1677.463911][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1677.766810][ T5858] rc_core: IR keymap rc-imon-pad not found [ 1677.766834][ T5858] Registered IR keymap rc-empty [ 1677.766918][ T5858] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1677.766938][ T5858] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1677.767819][ T5858] imon:send_packet: packet tx failed (-71) [ 1677.814850][ T5858] imon 9-1:0.0: remote input dev register failed [ 1677.815028][ T5858] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1678.154106][ T5858] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1678.154131][ T5858] imon:imon_probe: failed to initialize context! [ 1678.154144][ T5858] imon 9-1:0.0: unable to register, err -19 [ 1678.277664][ T5858] usb 9-1: USB disconnect, device number 19 [ 1678.372994][T11238] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1678.530722][T11238] usb 8-1: Using ep0 maxpacket: 8 [ 1678.535665][T11238] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1678.535698][T11238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.622910][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5088'. [ 1678.622937][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5088'. [ 1678.667001][T11238] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1678.667042][T11238] pvrusb2: ********** [ 1678.667052][T11238] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1678.667067][T11238] pvrusb2: Important functionality might not be entirely working. [ 1678.667078][T11238] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1678.667092][T11238] pvrusb2: ********** [ 1678.846830][ T2370] pvrusb2: Invalid write control endpoint [ 1679.109520][T11238] usb 8-1: USB disconnect, device number 21 [ 1679.401602][ T2370] pvrusb2: Invalid write control endpoint [ 1679.401634][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1679.401646][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1679.401655][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1679.401666][ T2370] pvrusb2: Device being rendered inoperable [ 1679.433849][ T5782] usb 6-1: USB disconnect, device number 47 [ 1679.508748][ T2370] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1679.508924][ T2370] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1679.593423][ T2370] pvrusb2: Attached sub-driver cx25840 [ 1679.593474][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1679.593488][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1680.395740][T22271] misc userio: The device must be registered before sending interrupts [ 1680.958629][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5088'. [ 1680.958655][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5088'. [ 1680.962551][T21740] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.965795][T21740] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.965846][T21740] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.965887][T21740] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.072043][T11238] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1681.166365][T22281] netlink: 'syz.5.5093': attribute type 12 has an invalid length. [ 1681.166389][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5093'. [ 1681.246329][T11238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1681.246369][T11238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.246412][T11238] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1681.246439][T11238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.252397][T11238] usb 8-1: config 0 descriptor?? [ 1681.311933][T11238] hub 8-1:0.0: USB hub found [ 1681.501052][T11238] hub 8-1:0.0: 1 port detected [ 1682.110347][T22287] Can't find ip_set type Nsh:ip,port [ 1682.252656][T19849] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1682.557483][T19849] usb 1-1: Using ep0 maxpacket: 32 [ 1682.613763][T19849] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1682.613794][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.613874][T19849] usb 1-1: config 0 has no interface number 0 [ 1682.613924][T19849] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1682.633113][T19849] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1682.633211][T19849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.633235][T19849] usb 1-1: Product: syz [ 1682.633251][T19849] usb 1-1: Manufacturer: syz [ 1682.633267][T19849] usb 1-1: SerialNumber: syz [ 1682.739354][T19849] usb 1-1: config 0 descriptor?? [ 1682.821498][T19849] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1682.824221][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888036272800: rx timeout, send abort [ 1682.963699][T19849] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1682.964298][T19849] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 1683.092661][T11238] hub 8-1:0.0: hub_ext_port_status failed (err = -32) [ 1683.162405][ T36] usb 1-1: USB disconnect, device number 70 [ 1683.299976][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 1683.300002][T22297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1683.305847][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888036272800: abort rx timeout. Force session deactivation [ 1683.987029][T11238] usb 8-1: USB disconnect, device number 22 [ 1684.000524][T10825] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1684.148850][T10825] usb 9-1: Using ep0 maxpacket: 16 [ 1684.227534][T10825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1684.227722][T10825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1684.300608][T10825] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1684.300647][T10825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.300671][T10825] usb 9-1: Product: syz [ 1684.300687][T10825] usb 9-1: Manufacturer: syz [ 1684.300704][T10825] usb 9-1: SerialNumber: syz [ 1684.362408][T10825] usb 9-1: config 0 descriptor?? [ 1684.724366][T10825] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input120 [ 1684.818252][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1686.361591][T10825] rc_core: IR keymap rc-imon-pad not found [ 1686.361621][T10825] Registered IR keymap rc-empty [ 1686.362075][T10825] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1686.362184][T10825] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1686.535437][T22327] FAULT_INJECTION: forcing a failure. [ 1686.535437][T22327] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.535503][T22327] CPU: 1 UID: 0 PID: 22327 Comm: syz.7.5103 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1686.535537][T22327] Tainted: [L]=SOFTLOCKUP [ 1686.535545][T22327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1686.535559][T22327] Call Trace: [ 1686.535568][T22327] [ 1686.535579][T22327] dump_stack_lvl+0xe8/0x150 [ 1686.535621][T22327] should_fail_ex+0x46b/0x600 [ 1686.535644][T22327] should_failslab+0xa8/0x100 [ 1686.535662][T22327] __kmalloc_noprof+0xdf/0x7b0 [ 1686.535685][T22327] ? io_cache_alloc_new+0x40/0x100 [ 1686.535710][T22327] io_cache_alloc_new+0x40/0x100 [ 1686.535731][T22327] io_arm_apoll+0x487/0x950 [ 1686.535757][T22327] ? __pfx_io_arm_apoll+0x10/0x10 [ 1686.535776][T22327] ? io_file_get_normal+0xec/0x310 [ 1686.535807][T22327] io_queue_async+0x175/0x2d0 [ 1686.535826][T22327] io_submit_sqes+0x11d9/0x2370 [ 1686.535873][T22327] __se_sys_io_uring_enter+0x2d2/0x18c0 [ 1686.535897][T22327] ? lockdep_hardirqs_on+0x7a/0x110 [ 1686.535924][T22327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1686.535947][T22327] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1686.535972][T22327] ? fput+0xa0/0xd0 [ 1686.535992][T22327] ? ksys_write+0x248/0x270 [ 1686.536018][T22327] ? __pfx_ksys_write+0x10/0x10 [ 1686.536046][T22327] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1686.536073][T22327] do_syscall_64+0x14d/0xf80 [ 1686.536094][T22327] ? trace_irq_disable+0x3b/0x150 [ 1686.536114][T22327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.536131][T22327] ? clear_bhb_loop+0x40/0x90 [ 1686.536151][T22327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.536167][T22327] RIP: 0033:0x7f75fc4dc799 [ 1686.536183][T22327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.536198][T22327] RSP: 002b:00007f75fa70d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1686.536215][T22327] RAX: ffffffffffffffda RBX: 00007f75fc756090 RCX: 00007f75fc4dc799 [ 1686.536228][T22327] RDX: 0000000000000000 RSI: 00000000000047f5 RDI: 0000000000000005 [ 1686.536238][T22327] RBP: 00007f75fa70d090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.536249][T22327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.536260][T22327] R13: 00007f75fc756128 R14: 00007f75fc756090 R15: 00007ffd569edaa8 [ 1686.536286][T22327] [ 1687.086679][T22331] FAULT_INJECTION: forcing a failure. [ 1687.086679][T22331] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.086888][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.0.5104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1687.086922][T22331] Tainted: [L]=SOFTLOCKUP [ 1687.086930][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1687.086943][T22331] Call Trace: [ 1687.086952][T22331] [ 1687.086962][T22331] dump_stack_lvl+0xe8/0x150 [ 1687.087002][T22331] should_fail_ex+0x46b/0x600 [ 1687.087033][T22331] should_failslab+0xa8/0x100 [ 1687.087058][T22331] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1687.087092][T22331] ? __lock_acquire+0x6b5/0x2cf0 [ 1687.087121][T22331] ? __get_vm_area_node+0x171/0x350 [ 1687.087157][T22331] __get_vm_area_node+0x171/0x350 [ 1687.087197][T22331] __vmalloc_node_range_noprof+0x372/0x1730 [ 1687.087231][T22331] ? copy_process+0x508/0x3d00 [ 1687.087260][T22331] ? rt_spin_unlock+0x160/0x200 [ 1687.087287][T22331] ? percpu_ref_get_many+0x19/0x140 [ 1687.087413][T22331] ? __memcg_slab_post_alloc_hook+0x3e4/0xa20 [ 1687.087476][T22331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1687.087513][T22331] ? rcu_is_watching+0x15/0xb0 [ 1687.087540][T22331] ? memcpy_and_pad+0x48/0x80 [ 1687.087581][T22331] __vmalloc_node_noprof+0xc2/0x100 [ 1687.087617][T22331] ? copy_process+0x508/0x3d00 [ 1687.087646][T22331] ? copy_process+0x508/0x3d00 [ 1687.087680][T22331] dup_task_struct+0x228/0x9a0 [ 1687.087717][T22331] ? rt_spin_unlock+0x160/0x200 [ 1687.087746][T22331] copy_process+0x508/0x3d00 [ 1687.087779][T22331] ? kstrtoull+0x12f/0x1d0 [ 1687.087815][T22331] ? get_pid_task+0x20/0x1f0 [ 1687.087847][T22331] ? __pfx_copy_process+0x10/0x10 [ 1687.087894][T22331] kernel_clone+0x249/0x840 [ 1687.087934][T22331] ? __pfx_kernel_clone+0x10/0x10 [ 1687.087965][T22331] ? do_raw_spin_lock+0x12b/0x2f0 [ 1687.088017][T22331] __x64_sys_clone+0x1b6/0x230 [ 1687.088054][T22331] ? __pfx___x64_sys_clone+0x10/0x10 [ 1687.088105][T22331] ? __pfx_ksys_write+0x10/0x10 [ 1687.088159][T22331] do_syscall_64+0x14d/0xf80 [ 1687.088192][T22331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.088217][T22331] ? clear_bhb_loop+0x40/0x90 [ 1687.088246][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.088270][T22331] RIP: 0033:0x7f15a49fc799 [ 1687.088293][T22331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.088314][T22331] RSP: 002b:00007f15a2c34fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1687.088340][T22331] RAX: ffffffffffffffda RBX: 00007f15a4c76090 RCX: 00007f15a49fc799 [ 1687.088359][T22331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 1687.088373][T22331] RBP: 00007f15a2c35090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.088388][T22331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1687.088402][T22331] R13: 00007f15a4c76128 R14: 00007f15a4c76090 R15: 00007fff46a95988 [ 1687.088438][T22331] [ 1687.088558][T22331] syz.0.5104: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1687.098483][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.0.5104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1687.098518][T22331] Tainted: [L]=SOFTLOCKUP [ 1687.098527][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1687.098542][T22331] Call Trace: [ 1687.098552][T22331] [ 1687.098563][T22331] dump_stack_lvl+0xe8/0x150 [ 1687.098603][T22331] warn_alloc+0x263/0x3e0 [ 1687.098637][T22331] ? __pfx_warn_alloc+0x10/0x10 [ 1687.098658][T22331] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1687.098696][T22331] ? __get_vm_area_node+0x171/0x350 [ 1687.098734][T22331] ? __get_vm_area_node+0x2e1/0x350 [ 1687.098774][T22331] __vmalloc_node_range_noprof+0x397/0x1730 [ 1687.098810][T22331] ? rt_spin_unlock+0x160/0x200 [ 1687.098840][T22331] ? percpu_ref_get_many+0x19/0x140 [ 1687.098883][T22331] ? __memcg_slab_post_alloc_hook+0x3e4/0xa20 [ 1687.098918][T22331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1687.098957][T22331] ? rcu_is_watching+0x15/0xb0 [ 1687.098982][T22331] ? memcpy_and_pad+0x48/0x80 [ 1687.099023][T22331] __vmalloc_node_noprof+0xc2/0x100 [ 1687.099058][T22331] ? copy_process+0x508/0x3d00 [ 1687.099090][T22331] ? copy_process+0x508/0x3d00 [ 1687.099131][T22331] dup_task_struct+0x228/0x9a0 [ 1687.099168][T22331] ? rt_spin_unlock+0x160/0x200 [ 1687.099195][T22331] copy_process+0x508/0x3d00 [ 1687.099230][T22331] ? kstrtoull+0x12f/0x1d0 [ 1687.099265][T22331] ? get_pid_task+0x20/0x1f0 [ 1687.099297][T22331] ? __pfx_copy_process+0x10/0x10 [ 1687.099344][T22331] kernel_clone+0x249/0x840 [ 1687.099383][T22331] ? __pfx_kernel_clone+0x10/0x10 [ 1687.099415][T22331] ? do_raw_spin_lock+0x12b/0x2f0 [ 1687.099468][T22331] __x64_sys_clone+0x1b6/0x230 [ 1687.099507][T22331] ? __pfx___x64_sys_clone+0x10/0x10 [ 1687.099561][T22331] ? __pfx_ksys_write+0x10/0x10 [ 1687.099608][T22331] do_syscall_64+0x14d/0xf80 [ 1687.099641][T22331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.099665][T22331] ? clear_bhb_loop+0x40/0x90 [ 1687.099694][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.099718][T22331] RIP: 0033:0x7f15a49fc799 [ 1687.099740][T22331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.099760][T22331] RSP: 002b:00007f15a2c34fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1687.099784][T22331] RAX: ffffffffffffffda RBX: 00007f15a4c76090 RCX: 00007f15a49fc799 [ 1687.099802][T22331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 1687.099817][T22331] RBP: 00007f15a2c35090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.099833][T22331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1687.099847][T22331] R13: 00007f15a4c76128 R14: 00007f15a4c76090 R15: 00007fff46a95988 [ 1687.099884][T22331] [ 1687.099926][T22331] Mem-Info: [ 1687.099967][T22331] active_anon:277 inactive_anon:28069 isolated_anon:0 [ 1687.099967][T22331] active_file:29897 inactive_file:36843 isolated_file:0 [ 1687.099967][T22331] unevictable:768 dirty:436 writeback:13 [ 1687.099967][T22331] slab_reclaimable:8198 slab_unreclaimable:126000 [ 1687.099967][T22331] mapped:47054 shmem:20693 pagetables:1918 [ 1687.099967][T22331] sec_pagetables:0 bounce:0 [ 1687.099967][T22331] kernel_misc_reclaimable:0 [ 1687.099967][T22331] free:1207913 free_pcp:6701 free_cma:0 [ 1687.100271][T22331] Node 0 active_anon:1108kB inactive_anon:112276kB active_file:119328kB inactive_file:147372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:188152kB dirty:1744kB writeback:52kB shmem:81236kB kernel_stack:15968kB pagetables:7528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1687.100390][T22331] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1687.100506][T22331] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.100715][T22331] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1687.101246][T22331] Node 0 DMA32 free:884088kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1108kB inactive_anon:112276kB active_file:119328kB inactive_file:147372kB unevictable:1536kB writepending:1696kB zspages:0kB present:3129332kB managed:2566592kB mlocked:0kB bounce:0kB free_pcp:26804kB local_pcp:13356kB free_cma:0kB [ 1687.101561][T22331] lowmem_reserve[]: 0 0 0 0 0 [ 1687.101631][T22331] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.101915][T22331] lowmem_reserve[]: 0 0 0 0 0 [ 1687.102484][T22331] Node 1 Normal free:3932204kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.102658][T22331] lowmem_reserve[]: 0 0 0 0 0 [ 1687.103079][T22331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1687.104560][T22331] Node 0 DMA32: 1954*4kB (UM) 3534*8kB (UME) 2760*16kB (UME) 650*32kB (UME) 631*64kB (UME) 534*128kB (UME) 434*256kB (UME) 258*512kB (UME) 113*1024kB (UME) 56*2048kB (UME) 49*4096kB (M) = 884088kB [ 1687.106156][T22331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1687.107157][T22331] Node 1 Normal: 3*4kB (UM) 0*8kB 8*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932204kB [ 1687.107959][T22331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.107977][T22331] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1687.108255][T22331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.108350][T22331] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1687.108406][T22331] 87429 total pagecache pages [ 1687.108418][T22331] 0 pages in swap cache [ 1687.108507][T22331] Free swap = 124996kB [ 1687.108545][T22331] Total swap = 124996kB [ 1687.108607][T22331] 2097051 pages RAM [ 1687.108629][T22331] 0 pages HighMem/MovableOnly [ 1687.108638][T22331] 423683 pages reserved [ 1687.108761][T22331] 0 pages cma reserved [ 1689.359253][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.359415][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.359564][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.359719][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.359866][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.360013][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.360157][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.360301][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.360448][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1689.518926][T22335] Can't find ip_set type Nsh:ip,port [ 1689.932148][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.932533][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.551684][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058f8c000: rx timeout, send abort [ 1691.027985][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058f8c000: abort rx timeout. Force session deactivation [ 1691.711364][T19849] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1691.834762][T19849] usb 8-1: device descriptor read/64, error -71 [ 1692.075317][T19849] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 1692.206402][T19849] usb 8-1: device descriptor read/64, error -71 [ 1692.311671][T19849] usb usb8-port1: attempt power cycle [ 1692.457861][T22307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.559109][T22307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.654434][T19849] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 1692.674422][T19849] usb 8-1: device descriptor read/8, error -71 [ 1692.911469][T19849] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 1692.931355][T19849] usb 8-1: device descriptor read/8, error -71 [ 1693.037050][T19849] usb usb8-port1: unable to enumerate USB device [ 1694.699902][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5109'. [ 1694.699927][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5109'. [ 1694.714306][T22375] loop6: detected capacity change from 0 to 7 [ 1694.805274][T22375] Dev loop6: unable to read RDB block 7 [ 1694.805309][T22375] loop6: AHDI p2 p3 [ 1694.805341][T22375] loop6: partition table partially beyond EOD, truncated [ 1694.806695][T22375] loop6: p2 size 1701016946 extends beyond EOD, truncated [ 1695.853952][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1695.854079][T10825] imon:send_packet: packet tx failed (-71) [ 1695.876788][T10825] imon 9-1:0.0: remote input dev register failed [ 1695.876951][T10825] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1695.955928][T21742] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.017195][T21742] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.017250][T21742] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.017291][T21742] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.531556][T10825] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1697.531579][T10825] imon:imon_probe: failed to initialize context! [ 1697.531592][T10825] imon 9-1:0.0: unable to register, err -19 [ 1697.928821][T10825] usb 9-1: USB disconnect, device number 20 [ 1698.105297][T22400] 9pnet_fd: Insufficient options for proto=fd [ 1698.168637][ T5858] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1698.330372][ T5858] usb 8-1: Using ep0 maxpacket: 32 [ 1698.361759][ T5858] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1698.361798][ T5858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1698.407287][ T5858] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1698.407319][ T5858] usb 8-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1698.407341][ T5858] usb 8-1: Product: syz [ 1698.407356][ T5858] usb 8-1: Manufacturer: syz [ 1698.407371][ T5858] usb 8-1: SerialNumber: syz [ 1698.415395][ T5858] usb 8-1: config 0 descriptor?? [ 1698.563639][ T5858] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1699.064182][ T56] usb 8-1: Failed to submit usb control message: -71 [ 1699.064223][ T56] usb 8-1: unable to send the bmi data to the device: -71 [ 1699.064245][ T56] usb 8-1: unable to get target info from device [ 1699.064263][ T56] usb 8-1: could not get target info (-71) [ 1699.064365][ T56] usb 8-1: could not probe fw (-71) [ 1699.067590][T19849] usb 8-1: USB disconnect, device number 27 [ 1699.102452][ T5858] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1699.340543][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 1699.429664][ T5858] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1699.429697][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.437076][ T5858] usb 6-1: config 0 descriptor?? [ 1699.469012][T22416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5116'. [ 1699.524890][ T5858] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1699.991207][T22179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1700.131014][T22179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1700.143095][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888025533800: rx timeout, send abort [ 1700.212226][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5117'. [ 1700.216261][T22179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1700.304367][ T5858] gspca_sunplus: reg_r err -71 [ 1700.304472][ T5858] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1700.307815][T22179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1700.342160][ T5858] usb 6-1: USB disconnect, device number 48 [ 1700.619654][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888025533800: abort rx timeout. Force session deactivation [ 1700.781630][ T37] kauditd_printk_skb: 64 callbacks suppressed [ 1700.781651][ T37] audit: type=1326 audit(2746.421:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22434 comm="syz.7.5119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fc4dc799 code=0x0 [ 1700.994954][T22438] sit0: entered promiscuous mode [ 1701.040995][T22438] netlink: 'syz.7.5119': attribute type 1 has an invalid length. [ 1701.041023][T22438] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5119'. [ 1701.366382][T22449] trusted_key: encrypted_key: insufficient parameters specified [ 1701.502135][ T5858] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1701.677114][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 1701.679436][ T5858] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1701.679471][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1701.712482][ T5858] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1701.712516][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.712539][ T5858] usb 6-1: Product: syz [ 1701.712556][ T5858] usb 6-1: Manufacturer: syz [ 1701.712572][ T5858] usb 6-1: SerialNumber: syz [ 1701.889351][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.940040][ T5858] usb 6-1: config 0 descriptor?? [ 1703.120485][ T5858] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input122 [ 1703.209213][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.212676][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1703.539844][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.561509][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.602494][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.626622][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.683836][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1703.931750][ T5858] rc_core: IR keymap rc-imon-pad not found [ 1703.931773][ T5858] Registered IR keymap rc-empty [ 1703.931857][ T5858] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1703.931874][ T5858] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1703.932265][ T5858] imon:send_packet: packet tx failed (-71) [ 1703.960781][ T5858] imon 6-1:0.0: remote input dev register failed [ 1703.961429][ T5858] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1703.971091][T22466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5126'. [ 1704.477711][ T5858] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1704.477736][ T5858] imon:imon_probe: failed to initialize context! [ 1704.477750][ T5858] imon 6-1:0.0: unable to register, err -19 [ 1704.567193][ T5858] usb 6-1: USB disconnect, device number 49 [ 1704.959780][ T5874] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1704.983433][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888093687000: rx timeout, send abort [ 1705.018675][ T5858] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1705.111197][ T5874] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1705.111261][ T5874] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1705.111284][ T5874] usb 8-1: Product: syz [ 1705.111354][ T5874] usb 8-1: Manufacturer: syz [ 1705.111396][ T5874] usb 8-1: SerialNumber: syz [ 1705.181456][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.181518][ T5858] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1705.181544][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.232369][ T5874] usb 8-1: config 0 descriptor?? [ 1705.249848][ T5858] usb 6-1: config 0 descriptor?? [ 1705.253251][ T5874] ch341 8-1:0.0: ch341-uart converter detected [ 1705.377369][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 1705.459753][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888093687000: abort rx timeout. Force session deactivation [ 1705.659165][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1705.671602][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 1705.675148][ T5858] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1705.677447][ T5858] pwc: recv_control_msg error -32 req 04 val 1000 [ 1705.679239][ T5858] pwc: recv_control_msg error -32 req 04 val 1300 [ 1705.876715][T22481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.880268][T22481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.971198][ T5858] pwc: recv_control_msg error -71 req 02 val 2000 [ 1705.976503][ T5858] pwc: recv_control_msg error -71 req 02 val 2100 [ 1705.996367][ T5858] pwc: recv_control_msg error -71 req 04 val 1500 [ 1705.997254][ T5858] pwc: recv_control_msg error -71 req 02 val 2500 [ 1706.004654][ T5858] pwc: recv_control_msg error -71 req 02 val 2400 [ 1706.007153][ T5858] pwc: recv_control_msg error -71 req 02 val 2600 [ 1706.014299][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 1706.023257][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 1706.031136][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 1706.036801][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 1706.265405][ T5874] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 1706.831491][ T5874] usb 8-1: USB disconnect, device number 28 [ 1706.874719][ T5874] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1706.875551][ T5874] ch341 8-1:0.0: device disconnected [ 1706.894656][ T5858] pwc: Registered as video103. [ 1706.990050][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input124 [ 1707.074800][ T5858] usb 6-1: USB disconnect, device number 50 [ 1707.252144][T22179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1710.914759][T22537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5137'. [ 1711.699168][T22179] veth0_vlan: entered promiscuous mode [ 1711.796736][T22547] overlay: ./file0 is not a directory [ 1711.856425][T22179] veth1_vlan: entered promiscuous mode [ 1712.020228][T22179] veth0_macvtap: entered promiscuous mode [ 1712.042148][T22179] veth1_macvtap: entered promiscuous mode [ 1712.105743][T22179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.156045][T22179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.352577][ T6539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.355223][ T6539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.355613][ T6539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.355962][ T6539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.648881][ T1232] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1712.899475][ T1232] usb 6-1: Using ep0 maxpacket: 32 [ 1712.911031][ T1232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.911124][ T1232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.911278][ T1232] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1712.911357][ T1232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.939257][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1712.939343][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1712.995219][ T1232] usb 6-1: config 0 descriptor?? [ 1713.142660][ T1232] hub 6-1:0.0: USB hub found [ 1713.218709][ T1232] hub 6-1:0.0: 1 port detected [ 1713.730358][ T37] audit: type=1326 audit(2760.007:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22559 comm="syz.7.5143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fc4dc799 code=0x0 [ 1714.040446][ T1232] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1714.040477][ T1232] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1714.122759][ T1232] usbhid 6-1:0.0: can't add hid device: -71 [ 1714.122894][ T1232] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1714.276800][ T1232] usb 6-1: USB disconnect, device number 51 [ 1714.981819][T20090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.981843][T20090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.332485][T20090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.332509][T20090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.622267][T22592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1719.446531][T22588] Can't find ip_set type Nsh:ip,port [ 1720.716238][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058f4b400: rx timeout, send abort [ 1721.189110][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.189335][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.189550][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.189748][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.192699][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058f4b400: abort rx timeout. Force session deactivation [ 1721.199994][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.200559][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.201134][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.201728][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.202239][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1721.202797][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1722.038672][ T5874] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1723.098344][T22647] ubi: mtd0 is already attached to ubi31 [ 1723.148188][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1723.148243][ T5874] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1723.148262][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.156819][ T5874] usb 1-1: config 0 descriptor?? [ 1723.555231][T22649] Can't find ip_set type Nsh:ip,port [ 1724.228435][ T5874] ath6kl: Failed to submit usb control message: -110 [ 1724.228490][ T5874] ath6kl: unable to send the bmi data to the device: -110 [ 1724.228507][ T5874] ath6kl: Unable to send get target info: -110 [ 1724.286304][ T5874] ath6kl: Failed to init ath6kl core: -110 [ 1724.297984][ T5874] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1726.922301][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055f55000: rx timeout, send abort [ 1727.351932][ T5858] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1729.172407][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055f55000: abort rx timeout. Force session deactivation [ 1729.285881][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 1729.286945][ T5858] usb 9-1: device descriptor read/all, error -71 [ 1730.600779][T22695] libceph: resolve '0' (ret=-3): failed [ 1731.087768][T22703] __nla_validate_parse: 14 callbacks suppressed [ 1731.087827][T22703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5175'. [ 1731.304662][T19849] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1731.466982][T19849] usb 9-1: Using ep0 maxpacket: 32 [ 1731.472209][T19849] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1731.472242][T19849] usb 9-1: config 0 has no interface number 0 [ 1731.472290][T19849] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1731.472318][T19849] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1731.527519][T19849] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1731.527545][T19849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.527561][T19849] usb 9-1: Product: syz [ 1731.527571][T19849] usb 9-1: Manufacturer: syz [ 1731.527582][T19849] usb 9-1: SerialNumber: syz [ 1731.582872][T19849] usb 9-1: config 0 descriptor?? [ 1731.828165][T19849] radio-si470x 9-1:0.35: this is not a si470x device. [ 1732.353030][T19849] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1732.431620][T19849] usb 9-1: USB disconnect, device number 23 [ 1732.450133][T22699] vlan2: entered allmulticast mode [ 1732.450160][T22699] dummy0: entered allmulticast mode [ 1732.555734][ T5874] usb 1-1: USB disconnect, device number 71 [ 1733.476409][ T5874] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1733.645331][ T5874] usb 9-1: device descriptor read/64, error -71 [ 1733.877111][ T5874] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1734.012279][ T5874] usb 9-1: device descriptor read/64, error -71 [ 1734.114766][ T5874] usb usb9-port1: attempt power cycle [ 1735.304398][T22733] syz.7.5176 (22733): drop_caches: 2 [ 1735.517786][ T5858] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1735.619568][ T5874] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1735.640756][ T5874] usb 9-1: device descriptor read/8, error -71 [ 1735.770296][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 1735.786684][ T5858] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1735.786715][ T5858] usb 6-1: config 0 has no interface number 0 [ 1735.796549][ T5858] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1735.796634][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.796697][ T5858] usb 6-1: Product: syz [ 1735.796739][ T5858] usb 6-1: Manufacturer: syz [ 1735.796792][ T5858] usb 6-1: SerialNumber: syz [ 1735.888577][ T5858] usb 6-1: config 0 descriptor?? [ 1735.901022][ T5874] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1735.916156][ T5874] usb 9-1: device descriptor read/8, error -71 [ 1735.996768][ T5858] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1736.019767][ T5874] usb usb9-port1: unable to enumerate USB device [ 1736.194890][ T5858] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1736.380734][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1736.465529][ T5858] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1736.528645][T22745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5183'. [ 1736.536127][ T5858] usb 6-1: USB disconnect, device number 52 [ 1736.672678][ T5858] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1736.710514][ T5858] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1736.711563][ T5858] quatech2 6-1:0.51: device disconnected [ 1737.004737][T22752] FAULT_INJECTION: forcing a failure. [ 1737.004737][T22752] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.004777][T22752] CPU: 0 UID: 0 PID: 22752 Comm: syz.0.5186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1737.004809][T22752] Tainted: [L]=SOFTLOCKUP [ 1737.004818][T22752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1737.004832][T22752] Call Trace: [ 1737.004842][T22752] [ 1737.004852][T22752] dump_stack_lvl+0xe8/0x150 [ 1737.004893][T22752] should_fail_ex+0x46b/0x600 [ 1737.004925][T22752] should_failslab+0xa8/0x100 [ 1737.004951][T22752] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1737.004986][T22752] ? __alloc_skb+0x1d0/0x7d0 [ 1737.005016][T22752] ? __pfx_tcp_current_mss+0x10/0x10 [ 1737.005115][T22752] __alloc_skb+0x1d0/0x7d0 [ 1737.005151][T22752] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1737.005187][T22752] tcp_sendmsg_locked+0x137b/0x5490 [ 1737.005217][T22752] ? __lock_acquire+0x6b5/0x2cf0 [ 1737.005264][T22752] ? __lock_acquire+0x6b5/0x2cf0 [ 1737.005316][T22752] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1737.005356][T22752] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1737.005389][T22752] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.005426][T22752] tcp_sendmsg+0x2f/0x50 [ 1737.005454][T22752] ____sys_sendmsg+0x7da/0x9c0 [ 1737.005493][T22752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1737.005535][T22752] ? import_iovec+0x73/0xa0 [ 1737.005570][T22752] ___sys_sendmsg+0x2a5/0x360 [ 1737.005610][T22752] ? __pfx____sys_sendmsg+0x10/0x10 [ 1737.005672][T22752] ? __fget_files+0x2a/0x420 [ 1737.005695][T22752] ? __fget_files+0x3a6/0x420 [ 1737.005726][T22752] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1737.005755][T22752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1737.005790][T22752] ? __pfx_ksys_write+0x10/0x10 [ 1737.005828][T22752] do_syscall_64+0x14d/0xf80 [ 1737.005853][T22752] ? trace_irq_disable+0x3b/0x150 [ 1737.005874][T22752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.005893][T22752] ? clear_bhb_loop+0x40/0x90 [ 1737.005916][T22752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.005934][T22752] RIP: 0033:0x7f15a49fc799 [ 1737.005952][T22752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.005968][T22752] RSP: 002b:00007f15a2c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.005988][T22752] RAX: ffffffffffffffda RBX: 00007f15a4c75fa0 RCX: 00007f15a49fc799 [ 1737.006002][T22752] RDX: 0000000004009080 RSI: 0000200000000040 RDI: 0000000000000004 [ 1737.006014][T22752] RBP: 00007f15a2c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.006026][T22752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.006036][T22752] R13: 00007f15a4c76038 R14: 00007f15a4c75fa0 R15: 00007fff46a95988 [ 1737.006064][T22752] [ 1737.676825][ T5874] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1737.844089][ T5874] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1737.844129][ T5874] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1737.844151][ T5874] usb 5-1: Product: syz [ 1737.844166][ T5874] usb 5-1: Manufacturer: syz [ 1737.844182][ T5874] usb 5-1: SerialNumber: syz [ 1737.896106][ T5874] usb 5-1: config 0 descriptor?? [ 1737.974401][ T5874] ch341 5-1:0.0: ch341-uart converter detected [ 1740.336366][ T5874] usb 5-1: failed to send control message: -110 [ 1740.336430][ T5874] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1740.428143][ T5874] usb 5-1: USB disconnect, device number 33 [ 1740.442533][ T5874] ch341 5-1:0.0: device disconnected [ 1742.426960][T22806] 9p: Bad value for 'wfdno' [ 1744.032445][ T5874] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1744.924388][ T5874] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1744.924423][ T5874] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1744.963065][T10825] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1744.984546][ T5874] usb 8-1: Product: syz [ 1744.984599][ T5874] usb 8-1: Manufacturer: syz [ 1744.984640][ T5874] usb 8-1: SerialNumber: syz [ 1745.021451][ T5874] usb 8-1: config 0 descriptor?? [ 1745.043426][ T5874] ch341 8-1:0.0: ch341-uart converter detected [ 1745.105770][T10825] usb 5-1: Using ep0 maxpacket: 8 [ 1745.124100][T10825] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1745.124131][T10825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.124153][T10825] usb 5-1: config 0 has no interface number 0 [ 1745.198888][T10825] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1745.198930][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.199062][T10825] usb 5-1: Product: syz [ 1745.199088][T10825] usb 5-1: Manufacturer: syz [ 1745.199105][T10825] usb 5-1: SerialNumber: syz [ 1745.276228][T10825] usb 5-1: config 0 descriptor?? [ 1745.301954][T10825] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1745.302050][T10825] uvcvideo 5-1:0.31: No valid video chain found. [ 1745.660617][T22820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.684546][T22820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.079904][ T5874] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 1746.279726][ T5874] usb 8-1: USB disconnect, device number 29 [ 1746.318531][ T5874] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1746.353657][ T5874] ch341 8-1:0.0: device disconnected [ 1746.697734][ T5874] usb 5-1: USB disconnect, device number 34 [ 1747.322911][T22856] 9p: Bad value for 'wfdno' [ 1747.515810][ T5874] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1747.671084][ T5874] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1747.671119][ T5874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.671141][ T5874] usb 9-1: config 0 has no interface number 0 [ 1747.677965][ T5874] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1747.677998][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.678022][ T5874] usb 9-1: Product: syz [ 1747.678038][ T5874] usb 9-1: Manufacturer: syz [ 1747.678054][ T5874] usb 9-1: SerialNumber: syz [ 1747.708346][ T5874] usb 9-1: config 0 descriptor?? [ 1747.779149][ T5874] ims_pcu 9-1:0.41: Missing CDC union descriptor [ 1747.788687][ T5874] ims_pcu 9-1:0.41: probe with driver ims_pcu failed with error -22 [ 1748.425975][T22868] FAULT_INJECTION: forcing a failure. [ 1748.425975][T22868] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.426016][T22868] CPU: 0 UID: 0 PID: 22868 Comm: syz.5.5217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1748.426049][T22868] Tainted: [L]=SOFTLOCKUP [ 1748.426058][T22868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1748.426072][T22868] Call Trace: [ 1748.426082][T22868] [ 1748.426092][T22868] dump_stack_lvl+0xe8/0x150 [ 1748.426144][T22868] should_fail_ex+0x46b/0x600 [ 1748.426176][T22868] should_failslab+0xa8/0x100 [ 1748.426202][T22868] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1748.426238][T22868] ? __alloc_skb+0x1d0/0x7d0 [ 1748.426267][T22868] ? lockdep_hardirqs_on+0x7a/0x110 [ 1748.426307][T22868] __alloc_skb+0x1d0/0x7d0 [ 1748.426342][T22868] netlink_sendmsg+0x5d4/0xb40 [ 1748.426383][T22868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1748.426413][T22868] ? unwind_get_return_address+0x4d/0x90 [ 1748.426442][T22868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1748.426481][T22868] ____sys_sendmsg+0x94c/0x9c0 [ 1748.426522][T22868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1748.426564][T22868] ? import_iovec+0x73/0xa0 [ 1748.426598][T22868] ___sys_sendmsg+0x2a5/0x360 [ 1748.426639][T22868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1748.426717][T22868] ? __fget_files+0x2a/0x420 [ 1748.426745][T22868] ? __fget_files+0x3a6/0x420 [ 1748.426789][T22868] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1748.426824][T22868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1748.426859][T22868] ? __pfx_ksys_write+0x10/0x10 [ 1748.426895][T22868] do_syscall_64+0x14d/0xf80 [ 1748.426919][T22868] ? trace_irq_disable+0x3b/0x150 [ 1748.426941][T22868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.426960][T22868] ? clear_bhb_loop+0x40/0x90 [ 1748.426982][T22868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.427000][T22868] RIP: 0033:0x7fe91875c799 [ 1748.427017][T22868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.427033][T22868] RSP: 002b:00007fe9169ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1748.427053][T22868] RAX: ffffffffffffffda RBX: 00007fe9189d5fa0 RCX: 00007fe91875c799 [ 1748.427067][T22868] RDX: 0000000000000044 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1748.427079][T22868] RBP: 00007fe9169ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.427099][T22868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.427116][T22868] R13: 00007fe9189d6038 R14: 00007fe9189d5fa0 R15: 00007ffdd40b6218 [ 1748.427143][T22868] [ 1749.057035][ T5858] hid_parser_main: 222 callbacks suppressed [ 1749.057133][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057157][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057177][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057196][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057218][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057237][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057256][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057275][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057294][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.057313][ T5858] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 1749.301032][T22878] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5220'. [ 1749.402831][T22878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1749.432947][ T5858] hid-generic 00A0:0006:0003.0023: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1750.281775][ T5858] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1750.308771][ T31] usb 9-1: USB disconnect, device number 28 [ 1750.470835][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1750.474092][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1750.474127][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1750.531860][ T5858] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1750.531896][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.531919][ T5858] usb 6-1: Product: syz [ 1750.531935][ T5858] usb 6-1: Manufacturer: syz [ 1750.531950][ T5858] usb 6-1: SerialNumber: syz [ 1750.616846][ T5858] usb 6-1: config 0 descriptor?? [ 1750.617705][T22884] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1750.618643][T22884] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1750.929985][T22884] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1750.939544][T22884] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1751.321817][T22885] fido_id[22885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1751.725505][ T5858] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1751.920672][ T5858] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1752.016010][ T5858] usb 6-1: USB disconnect, device number 53 [ 1752.597828][T22906] 9p: Bad value for 'wfdno' [ 1752.683780][T22907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5225'. [ 1754.962354][T22917] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5229'. [ 1757.592301][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1757.754301][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1757.759826][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1757.822536][ T10] usb 5-1: config 120 has no interfaces? [ 1757.844208][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 1757.844231][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.844247][ T10] usb 5-1: Product: syz [ 1757.844258][ T10] usb 5-1: Manufacturer: syz [ 1757.844270][ T10] usb 5-1: SerialNumber: syz [ 1757.904026][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1758.162340][T22929] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 1758.512118][ T10] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 1758.841036][T22951] 9p: Bad value for 'wfdno' [ 1759.160728][T22957] FAULT_INJECTION: forcing a failure. [ 1759.160728][T22957] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.160829][T22957] CPU: 0 UID: 0 PID: 22957 Comm: syz.7.5241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1759.160865][T22957] Tainted: [L]=SOFTLOCKUP [ 1759.160874][T22957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1759.160889][T22957] Call Trace: [ 1759.160899][T22957] [ 1759.160910][T22957] dump_stack_lvl+0xe8/0x150 [ 1759.160952][T22957] should_fail_ex+0x46b/0x600 [ 1759.160983][T22957] should_failslab+0xa8/0x100 [ 1759.161008][T22957] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1759.161049][T22957] ? __get_vm_area_node+0x171/0x350 [ 1759.161086][T22957] __get_vm_area_node+0x171/0x350 [ 1759.161124][T22957] __vmalloc_node_range_noprof+0x372/0x1730 [ 1759.161157][T22957] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.161189][T22957] ? __pfx___schedule+0x10/0x10 [ 1759.161235][T22957] ? irqentry_exit+0x59e/0x620 [ 1759.161265][T22957] ? trace_irq_disable+0x3b/0x150 [ 1759.161294][T22957] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1759.161346][T22957] ? __vmalloc_noprof+0x18/0x120 [ 1759.161383][T22957] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.161410][T22957] __vmalloc_noprof+0xd2/0x120 [ 1759.161445][T22957] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.161479][T22957] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.161514][T22957] bpf_prog_alloc+0x3c/0x1a0 [ 1759.161546][T22957] bpf_prog_load+0x7ba/0x1ae0 [ 1759.161594][T22957] ? __pfx_bpf_prog_load+0x10/0x10 [ 1759.161622][T22957] ? lockdep_hardirqs_on+0x7a/0x110 [ 1759.161682][T22957] __sys_bpf+0x618/0x950 [ 1759.161712][T22957] ? __pfx___sys_bpf+0x10/0x10 [ 1759.161770][T22957] __x64_sys_bpf+0x7c/0x90 [ 1759.161797][T22957] do_syscall_64+0x14d/0xf80 [ 1759.161828][T22957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.161853][T22957] ? clear_bhb_loop+0x40/0x90 [ 1759.161882][T22957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.161905][T22957] RIP: 0033:0x7f75fc4dc799 [ 1759.161927][T22957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.161947][T22957] RSP: 002b:00007f75fa70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1759.161972][T22957] RAX: ffffffffffffffda RBX: 00007f75fc756090 RCX: 00007f75fc4dc799 [ 1759.161988][T22957] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1759.162003][T22957] RBP: 00007f75fa70d090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.162018][T22957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.162030][T22957] R13: 00007f75fc756128 R14: 00007f75fc756090 R15: 00007ffd569edaa8 [ 1759.162065][T22957] [ 1759.162222][T22957] syz.7.5241: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1759.163514][T22957] CPU: 0 UID: 0 PID: 22957 Comm: syz.7.5241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1759.163547][T22957] Tainted: [L]=SOFTLOCKUP [ 1759.163556][T22957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1759.163570][T22957] Call Trace: [ 1759.163579][T22957] [ 1759.163609][T22957] dump_stack_lvl+0xe8/0x150 [ 1759.163645][T22957] warn_alloc+0x263/0x3e0 [ 1759.163679][T22957] ? __pfx_warn_alloc+0x10/0x10 [ 1759.163700][T22957] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1759.163738][T22957] ? __get_vm_area_node+0x171/0x350 [ 1759.163801][T22957] ? __get_vm_area_node+0x2e1/0x350 [ 1759.163850][T22957] __vmalloc_node_range_noprof+0x397/0x1730 [ 1759.163934][T22957] ? __pfx___schedule+0x10/0x10 [ 1759.163984][T22957] ? irqentry_exit+0x59e/0x620 [ 1759.164014][T22957] ? trace_irq_disable+0x3b/0x150 [ 1759.164050][T22957] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1759.164095][T22957] ? __vmalloc_noprof+0x18/0x120 [ 1759.164133][T22957] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.164162][T22957] __vmalloc_noprof+0xd2/0x120 [ 1759.164196][T22957] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.164230][T22957] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1759.164266][T22957] bpf_prog_alloc+0x3c/0x1a0 [ 1759.164299][T22957] bpf_prog_load+0x7ba/0x1ae0 [ 1759.164370][T22957] ? __pfx_bpf_prog_load+0x10/0x10 [ 1759.164400][T22957] ? lockdep_hardirqs_on+0x7a/0x110 [ 1759.164460][T22957] __sys_bpf+0x618/0x950 [ 1759.164491][T22957] ? __pfx___sys_bpf+0x10/0x10 [ 1759.164555][T22957] __x64_sys_bpf+0x7c/0x90 [ 1759.164581][T22957] do_syscall_64+0x14d/0xf80 [ 1759.164613][T22957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.164638][T22957] ? clear_bhb_loop+0x40/0x90 [ 1759.164667][T22957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.164691][T22957] RIP: 0033:0x7f75fc4dc799 [ 1759.164712][T22957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.164732][T22957] RSP: 002b:00007f75fa70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1759.164755][T22957] RAX: ffffffffffffffda RBX: 00007f75fc756090 RCX: 00007f75fc4dc799 [ 1759.164773][T22957] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1759.164789][T22957] RBP: 00007f75fa70d090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.164805][T22957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.164819][T22957] R13: 00007f75fc756128 R14: 00007f75fc756090 R15: 00007ffd569edaa8 [ 1759.164855][T22957] [ 1759.166296][T22957] Mem-Info: [ 1759.167142][T22957] active_anon:275 inactive_anon:30651 isolated_anon:0 [ 1759.167142][T22957] active_file:29952 inactive_file:36898 isolated_file:0 [ 1759.167142][T22957] unevictable:768 dirty:728 writeback:0 [ 1759.167142][T22957] slab_reclaimable:8223 slab_unreclaimable:126362 [ 1759.167142][T22957] mapped:47059 shmem:23629 pagetables:1811 [ 1759.167142][T22957] sec_pagetables:0 bounce:0 [ 1759.167142][T22957] kernel_misc_reclaimable:0 [ 1759.167142][T22957] free:1199091 free_pcp:12196 free_cma:0 [ 1759.170774][T22957] Node 0 active_anon:1100kB inactive_anon:122604kB active_file:119548kB inactive_file:147592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:188172kB dirty:2912kB writeback:0kB shmem:92980kB kernel_stack:15800kB pagetables:7100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1759.171049][T22957] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1759.171201][T22957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.171380][T22957] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1759.171799][T22957] Node 0 DMA32 free:848800kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:122604kB active_file:119548kB inactive_file:147592kB unevictable:1536kB writepending:2912kB zspages:0kB present:3129332kB managed:2566592kB mlocked:0kB bounce:0kB free_pcp:48784kB local_pcp:20636kB free_cma:0kB [ 1759.172055][T22957] lowmem_reserve[]: 0 0 0 0 0 [ 1759.172509][T22957] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.172665][T22957] lowmem_reserve[]: 0 0 0 0 0 [ 1759.172990][T22957] Node 1 Normal free:3932204kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.173374][T22957] lowmem_reserve[]: 0 0 0 0 0 [ 1759.173457][T22957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1759.174701][T22957] Node 0 DMA32: 3031*4kB (UM) 3182*8kB (UME) 2853*16kB (UME) 419*32kB (UME) 393*64kB (UME) 566*128kB (UME) 395*256kB (UME) 249*512kB (UME) 112*1024kB (UME) 56*2048kB (UME) 48*4096kB (M) = 848828kB [ 1759.176949][T22957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1759.177692][T22957] Node 1 Normal: 3*4kB (UM) 0*8kB 8*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932204kB [ 1759.179734][T22957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1759.179809][T22957] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1759.179887][T22957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1759.179934][T22957] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1759.180017][T22957] 90475 total pagecache pages [ 1759.180139][T22957] 0 pages in swap cache [ 1759.180175][T22957] Free swap = 124996kB [ 1759.180239][T22957] Total swap = 124996kB [ 1759.180409][T22957] 2097051 pages RAM [ 1759.180661][T22957] 0 pages HighMem/MovableOnly [ 1759.180925][T22957] 423683 pages reserved [ 1759.180962][T22957] 0 pages cma reserved [ 1760.434331][T22961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1762.907283][ T5858] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1763.090745][ T5858] usb 9-1: Using ep0 maxpacket: 8 [ 1763.104821][ T5858] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1763.104884][ T5858] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1763.104910][ T5858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1763.104938][ T5858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1763.104964][ T5858] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1763.105011][ T5858] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1763.105037][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.239954][T22993] 9p: Bad value for 'wfdno' [ 1763.419006][ T5858] usb 9-1: usb_control_msg returned -32 [ 1763.419064][ T5858] usbtmc 9-1:16.0: can't read capabilities [ 1763.743254][T22999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1763.801474][T23002] usbtmc 9-1:16.0: control status returned 0 [ 1763.872266][T23001] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5254'. [ 1764.043842][ T10] usb 9-1: USB disconnect, device number 29 [ 1764.202978][ T5874] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1764.364850][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 1764.368265][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1764.393267][ T5874] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1764.393316][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.393341][ T5874] usb 5-1: Product: syz [ 1764.393359][ T5874] usb 5-1: Manufacturer: syz [ 1764.393378][ T5874] usb 5-1: SerialNumber: syz [ 1764.470796][ T5874] usb 5-1: config 0 descriptor?? [ 1764.471992][T23000] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1764.535749][ T5874] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1764.902890][T20090] usb 5-1: Failed to submit usb control message: -71 [ 1764.902932][T20090] usb 5-1: unable to send the bmi data to the device: -71 [ 1764.902954][T20090] usb 5-1: unable to get target info from device [ 1764.902970][T20090] usb 5-1: could not get target info (-71) [ 1764.903148][T20090] usb 5-1: could not probe fw (-71) [ 1764.950620][ T31] usb 5-1: USB disconnect, device number 36 [ 1766.967979][T23025] 9p: Bad value for 'wfdno' [ 1767.004579][T23032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.005215][T23032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.174211][T11238] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1767.508353][T10825] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1767.671271][T10825] usb 6-1: Using ep0 maxpacket: 8 [ 1767.710509][T10825] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1767.710533][T10825] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1767.710553][T10825] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1767.713199][T10825] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1767.713222][T10825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.713237][T10825] usb 6-1: Product: ࠁ [ 1767.713250][T10825] usb 6-1: Manufacturer: ࠧ [ 1767.713262][T10825] usb 6-1: SerialNumber: syz [ 1768.037860][T23047] netlink: 'syz.4.5272': attribute type 1 has an invalid length. [ 1768.434141][T23050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.434877][T23050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.581726][T23054] FAULT_INJECTION: forcing a failure. [ 1768.581726][T23054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.581768][T23054] CPU: 0 UID: 0 PID: 23054 Comm: syz.0.5273 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1768.581800][T23054] Tainted: [L]=SOFTLOCKUP [ 1768.581809][T23054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1768.581824][T23054] Call Trace: [ 1768.581834][T23054] [ 1768.581844][T23054] dump_stack_lvl+0xe8/0x150 [ 1768.581887][T23054] should_fail_ex+0x46b/0x600 [ 1768.581919][T23054] _copy_to_user+0x31/0xb0 [ 1768.581951][T23054] simple_read_from_buffer+0xe1/0x170 [ 1768.581987][T23054] proc_fail_nth_read+0x1be/0x230 [ 1768.582042][T23054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.582074][T23054] ? rw_verify_area+0x2ac/0x4e0 [ 1768.582106][T23054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.582136][T23054] vfs_read+0x212/0xa80 [ 1768.582193][T23054] ? __pfx_vfs_read+0x10/0x10 [ 1768.582229][T23054] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1768.582263][T23054] ? lockdep_hardirqs_on+0x7a/0x110 [ 1768.582293][T23054] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1768.582327][T23054] ? mutex_lock_nested+0x152/0x1d0 [ 1768.582344][T23054] ? fdget_pos+0x252/0x320 [ 1768.582392][T23054] ksys_read+0x156/0x270 [ 1768.582429][T23054] ? __pfx_ksys_read+0x10/0x10 [ 1768.582474][T23054] do_syscall_64+0x14d/0xf80 [ 1768.582507][T23054] ? trace_irq_disable+0x3b/0x150 [ 1768.582526][T23054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.582560][T23054] ? clear_bhb_loop+0x40/0x90 [ 1768.582590][T23054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.582615][T23054] RIP: 0033:0x7f15a49bcfce [ 1768.582636][T23054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1768.582655][T23054] RSP: 002b:00007f15a2c34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.582684][T23054] RAX: ffffffffffffffda RBX: 00007f15a2c356c0 RCX: 00007f15a49bcfce [ 1768.582696][T23054] RDX: 000000000000000f RSI: 00007f15a2c350a0 RDI: 0000000000000006 [ 1768.582707][T23054] RBP: 00007f15a2c35090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.582732][T23054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.582746][T23054] R13: 00007f15a4c76128 R14: 00007f15a4c76090 R15: 00007fff46a95988 [ 1768.582782][T23054] [ 1768.732199][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5274'. [ 1769.007844][T23053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1769.852959][T10825] cdc_ncm 6-1:1.0: bind() failure [ 1770.107605][T10825] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1770.127537][T23065] loop2: detected capacity change from 0 to 7 [ 1770.127740][T10825] cdc_ncm 6-1:1.1: bind() failure [ 1770.967405][T10825] usb 6-1: USB disconnect, device number 54 [ 1770.970215][T23065] loop2: [ 1770.970248][T23065] loop2: partition table partially beyond EOD, truncated [ 1771.214904][T23072] 9p: Bad value for 'wfdno' [ 1771.445193][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.445363][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1771.755767][T10825] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1773.561675][T10825] usb 6-1: Using ep0 maxpacket: 16 [ 1773.575393][T10825] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1773.575424][T10825] usb 6-1: config 0 has no interface number 0 [ 1773.575470][T10825] usb 6-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.575516][T10825] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1773.575541][T10825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.649095][T10825] usb 6-1: config 0 descriptor?? [ 1773.661795][T10825] usbhid 6-1:0.4: couldn't find an input interrupt endpoint [ 1774.010784][T23089] netlink: 'syz.8.5285': attribute type 1 has an invalid length. [ 1775.601661][ T1232] usb 6-1: USB disconnect, device number 55 [ 1775.841847][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1776.060504][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1776.060541][ T10] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1776.060563][ T10] usb 9-1: Product: syz [ 1776.060579][ T10] usb 9-1: Manufacturer: syz [ 1776.060595][ T10] usb 9-1: SerialNumber: syz [ 1776.066463][ T1232] hid_parser_main: 5 callbacks suppressed [ 1776.066488][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066521][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066560][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066589][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066618][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066647][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066674][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066702][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066729][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.066756][ T1232] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 1776.143072][ T10] usb 9-1: config 0 descriptor?? [ 1776.246109][ T10] ch341 9-1:0.0: ch341-uart converter detected [ 1776.427697][ T1232] hid-generic 00A0:0006:0003.0024: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1777.260458][ T10] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1777.263019][ T10] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 1777.312958][T23109] fido_id[23109]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1777.445731][ T31] usb 9-1: USB disconnect, device number 30 [ 1777.503420][ T31] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1777.504279][ T31] ch341 9-1:0.0: device disconnected [ 1778.332940][T23121] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5294'. [ 1778.432049][T10825] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1779.541688][T23124] syz.4.5295 (23124): drop_caches: 2 [ 1780.326451][T10825] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1780.326483][T10825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.326504][T10825] usb 6-1: config 0 has no interface number 0 [ 1780.420822][T10825] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1780.420854][T10825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.420876][T10825] usb 6-1: Product: syz [ 1780.420892][T10825] usb 6-1: Manufacturer: syz [ 1780.420908][T10825] usb 6-1: SerialNumber: syz [ 1780.509813][T10825] usb 6-1: config 0 descriptor?? [ 1780.582242][T10825] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 1780.582308][T10825] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1781.118412][T10825] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1781.303913][T10825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1781.303965][T10825] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1781.303991][T10825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.341099][T10825] usb 9-1: config 0 descriptor?? [ 1781.794144][ T5858] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1781.937073][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 1781.939587][ T5858] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 1781.939615][ T5858] usb 1-1: config 0 has no interface number 0 [ 1781.939664][ T5858] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1781.939711][ T5858] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1781.939737][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.021068][ T5858] usb 1-1: config 0 descriptor?? [ 1782.051359][ T5858] usbhid 1-1:0.4: couldn't find an input interrupt endpoint [ 1782.217830][ T5858] usb 6-1: USB disconnect, device number 56 [ 1782.451813][T10825] ath6kl: Failed to submit usb control message: -110 [ 1782.451884][T10825] ath6kl: unable to send the bmi data to the device: -110 [ 1782.451902][T10825] ath6kl: Unable to send get target info: -110 [ 1782.493565][T10825] ath6kl: Failed to init ath6kl core: -110 [ 1782.494163][T10825] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1782.851557][T23143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5301'. [ 1782.906789][T23143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5301'. [ 1783.127760][T21947] Bluetooth: hci3: command 0x0406 tx timeout [ 1784.403888][ T36] usb 1-1: USB disconnect, device number 73 [ 1784.625751][T23158] netlink: 'syz.4.5297': attribute type 1 has an invalid length. [ 1785.414819][T23171] FAULT_INJECTION: forcing a failure. [ 1785.414819][T23171] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.414867][T23171] CPU: 0 UID: 0 PID: 23171 Comm: syz.4.5307 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1785.414924][T23171] Tainted: [L]=SOFTLOCKUP [ 1785.414940][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1785.414965][T23171] Call Trace: [ 1785.414981][T23171] [ 1785.414998][T23171] dump_stack_lvl+0xe8/0x150 [ 1785.415043][T23171] should_fail_ex+0x46b/0x600 [ 1785.415074][T23171] should_failslab+0xa8/0x100 [ 1785.415101][T23171] __kmalloc_noprof+0xdf/0x7b0 [ 1785.415138][T23171] ? tomoyo_encode+0x28b/0x550 [ 1785.415169][T23171] tomoyo_encode+0x28b/0x550 [ 1785.415199][T23171] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1785.415246][T23171] ? tomoyo_path_number_perm+0x219/0x630 [ 1785.415280][T23171] tomoyo_path_number_perm+0x246/0x630 [ 1785.415315][T23171] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1785.415352][T23171] ? __lock_acquire+0x6b5/0x2cf0 [ 1785.415413][T23171] ? __fget_files+0x2a/0x420 [ 1785.415448][T23171] ? __fget_files+0x2a/0x420 [ 1785.415476][T23171] ? __fget_files+0x3a6/0x420 [ 1785.415506][T23171] ? __fget_files+0x2a/0x420 [ 1785.415577][T23171] security_file_ioctl+0xc3/0x2a0 [ 1785.415614][T23171] __se_sys_ioctl+0x47/0x170 [ 1785.415655][T23171] do_syscall_64+0x14d/0xf80 [ 1785.415687][T23171] ? trace_irq_disable+0x3b/0x150 [ 1785.415716][T23171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.415740][T23171] ? clear_bhb_loop+0x40/0x90 [ 1785.415770][T23171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.415793][T23171] RIP: 0033:0x7f3c3e70c799 [ 1785.415816][T23171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.415836][T23171] RSP: 002b:00007f3c3c924028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.415861][T23171] RAX: ffffffffffffffda RBX: 00007f3c3e986180 RCX: 00007f3c3e70c799 [ 1785.415879][T23171] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 1785.415895][T23171] RBP: 00007f3c3c924090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.415910][T23171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.415925][T23171] R13: 00007f3c3e986218 R14: 00007f3c3e986180 R15: 00007ffe3d5b17d8 [ 1785.415962][T23171] [ 1785.415984][T23171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1785.418134][T23171] input: syz0 as /devices/virtual/input/input125 [ 1786.279332][T23177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5308'. [ 1787.254661][T10825] usb 9-1: USB disconnect, device number 31 [ 1789.541970][T23198] ptrace attach of "./syz-executor exec"[23199] was attempted by "./syz-executor exec"[23198] [ 1790.242391][T10825] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1790.349351][T23205] netlink: 'syz.0.5317': attribute type 1 has an invalid length. [ 1790.413915][T10825] usb 6-1: Using ep0 maxpacket: 16 [ 1790.416263][T10825] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1790.416292][T10825] usb 6-1: config 0 has no interface number 0 [ 1790.416339][T10825] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.416381][T10825] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1790.416406][T10825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.482531][T10825] usb 6-1: config 0 descriptor?? [ 1790.514383][T10825] usbhid 6-1:0.4: couldn't find an input interrupt endpoint [ 1792.373413][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1792.694974][T10825] usb 6-1: USB disconnect, device number 57 [ 1792.967181][T23236] nbd: socks must be embedded in a SOCK_ITEM attr [ 1793.788870][T23252] FAULT_INJECTION: forcing a failure. [ 1793.788870][T23252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.788910][T23252] CPU: 0 UID: 0 PID: 23252 Comm: syz.8.5335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1793.788941][T23252] Tainted: [L]=SOFTLOCKUP [ 1793.788950][T23252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1793.788973][T23252] Call Trace: [ 1793.788982][T23252] [ 1793.788993][T23252] dump_stack_lvl+0xe8/0x150 [ 1793.789071][T23252] should_fail_ex+0x46b/0x600 [ 1793.789120][T23252] _copy_from_user+0x2d/0xb0 [ 1793.789169][T23252] __copy_msghdr+0x3c5/0x5b0 [ 1793.789209][T23252] ___sys_sendmsg+0x213/0x360 [ 1793.789249][T23252] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.789322][T23252] ? __fget_files+0x2a/0x420 [ 1793.789349][T23252] ? __fget_files+0x3a6/0x420 [ 1793.789388][T23252] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1793.789424][T23252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1793.789469][T23252] ? __pfx_ksys_write+0x10/0x10 [ 1793.789517][T23252] do_syscall_64+0x14d/0xf80 [ 1793.789548][T23252] ? trace_irq_disable+0x3b/0x150 [ 1793.789574][T23252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.789599][T23252] ? clear_bhb_loop+0x40/0x90 [ 1793.789628][T23252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.789652][T23252] RIP: 0033:0x7f8c19c9c799 [ 1793.789674][T23252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.789696][T23252] RSP: 002b:00007f8c17eee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.789722][T23252] RAX: ffffffffffffffda RBX: 00007f8c19f15fa0 RCX: 00007f8c19c9c799 [ 1793.789739][T23252] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 1793.789755][T23252] RBP: 00007f8c17eee090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.789771][T23252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.789786][T23252] R13: 00007f8c19f16038 R14: 00007f8c19f15fa0 R15: 00007ffdbfc3dfa8 [ 1793.789823][T23252] [ 1793.951976][T23251] netlink: 'syz.0.5332': attribute type 1 has an invalid length. [ 1794.172353][T23256] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5336'. [ 1794.338231][ T5782] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1794.490663][ T5782] usb 8-1: Using ep0 maxpacket: 32 [ 1794.496828][ T5782] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1794.498758][ T5782] usb 8-1: config 120 has no interfaces? [ 1794.526010][ T5782] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 1794.526041][ T5782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.526063][ T5782] usb 8-1: Product: syz [ 1794.526079][ T5782] usb 8-1: Manufacturer: syz [ 1794.526096][ T5782] usb 8-1: SerialNumber: syz [ 1794.558170][ T38] INFO: task syz.9.5026:22067 blocked for more than 143 seconds. [ 1794.558248][ T38] Tainted: G L syzkaller #0 [ 1794.558289][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1794.558325][ T38] task:syz.9.5026 state:D stack:27800 pid:22067 tgid:22061 ppid:20854 task_flags:0x400040 flags:0x00080002 [ 1794.558500][ T38] Call Trace: [ 1794.558510][ T38] [ 1794.558525][ T38] __schedule+0x1553/0x5240 [ 1794.558585][ T38] ? check_path+0x21/0x40 [ 1794.558612][ T38] ? check_noncircular+0xda/0x150 [ 1794.558638][ T38] ? __pfx___schedule+0x10/0x10 [ 1794.558677][ T38] ? schedule+0x90/0x360 [ 1794.558709][ T38] schedule+0x164/0x360 [ 1794.558740][ T38] schedule_timeout+0xc3/0x2c0 [ 1794.558771][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1794.558800][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1794.558842][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1794.558873][ T38] ? wait_for_completion+0x274/0x5e0 [ 1794.558971][ T38] wait_for_completion+0x2cc/0x5e0 [ 1794.559111][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1794.559232][ T38] __flush_work+0x9e0/0xda0 [ 1794.559331][ T38] ? __flush_work+0x104/0xda0 [ 1794.559443][ T38] ? __pfx___flush_work+0x10/0x10 [ 1794.559550][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 1794.559693][ T38] ? flush_work+0xd/0x30 [ 1794.559794][ T38] n_tty_poll+0x2db/0x760 [ 1794.560041][ T38] ? __pfx_n_tty_poll+0x10/0x10 [ 1794.576773][ T38] tty_poll+0xc1/0x170 [ 1794.576877][ T38] ? __pfx_tty_poll+0x10/0x10 [ 1794.576967][ T38] do_sys_poll+0x92e/0xfa0 [ 1794.577282][ T38] ? __pfx_do_sys_poll+0x10/0x10 [ 1794.577362][ T38] ? futex_unqueue+0x22/0x240 [ 1794.577688][ T38] ? __pfx_futex_wait+0x10/0x10 [ 1794.577881][ T38] __x64_sys_poll+0x190/0x350 [ 1794.577966][ T38] ? __pfx___x64_sys_poll+0x10/0x10 [ 1794.578066][ T38] do_syscall_64+0x14d/0xf80 [ 1794.578153][ T38] ? trace_irq_disable+0x3b/0x150 [ 1794.578221][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.578287][ T38] ? clear_bhb_loop+0x40/0x90 [ 1794.578373][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.578439][ T38] RIP: 0033:0x7fc3cd8ec799 [ 1794.578495][ T38] RSP: 002b:00007fc3cbb25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1794.578561][ T38] RAX: ffffffffffffffda RBX: 00007fc3cdb66090 RCX: 00007fc3cd8ec799 [ 1794.578606][ T38] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 1794.578648][ T38] RBP: 00007fc3cd982c99 R08: 0000000000000000 R09: 0000000000000000 [ 1794.578690][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.578726][ T38] R13: 00007fc3cdb66128 R14: 00007fc3cdb66090 R15: 00007ffea8939488 [ 1794.578829][ T38] [ 1794.578943][ T38] [ 1794.578943][ T38] Showing all locks held in the system: [ 1794.578974][ T38] 4 locks held by pr/legacy/17: [ 1794.579020][ T38] 1 lock held by khungtaskd/38: [ 1794.579054][ T38] #0: ffffffff8ddcb880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1794.579240][ T38] 6 locks held by kworker/u8:2/43: [ 1794.579372][ T38] 2 locks held by getty/5552: [ 1794.579406][ T38] #0: ffff8880329220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1794.579557][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1794.579725][ T38] 7 locks held by kworker/1:3/5782: [ 1794.579739][ T38] 6 locks held by kworker/0:4/5858: [ 1794.579754][ T38] 5 locks held by kworker/u8:14/6334: [ 1794.579807][ T38] 2 locks held by udevd/20785: [ 1794.579822][ T38] 5 locks held by kworker/u8:28/21740: [ 1794.579835][ T38] 1 lock held by syz.9.5026/22067: [ 1794.579845][ T38] #0: ffff888077c8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1794.579982][ T38] 1 lock held by syz.4.5339/23259: [ 1794.580030][ T38] 1 lock held by syz.0.5338/23261: [ 1794.580063][ T38] #0: ffff8880222ab6b0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 1794.580215][ T38] 5 locks held by syz.0.5338/23262: [ 1794.580249][ T38] [ 1794.580262][ T38] ============================================= [ 1794.580262][ T38] [ 1794.580295][ T38] NMI backtrace for cpu 1 [ 1794.580351][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1794.580438][ T38] Tainted: [L]=SOFTLOCKUP [ 1794.580460][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1794.580501][ T38] Call Trace: [ 1794.580533][ T38] [ 1794.580556][ T38] dump_stack_lvl+0xe8/0x150 [ 1794.580631][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1794.580704][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1794.580792][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1794.580865][ T38] sys_info+0x135/0x170 [ 1794.581019][ T38] watchdog+0xfd9/0x1030 [ 1794.581108][ T38] ? watchdog+0x21a/0x1030 [ 1794.581199][ T38] kthread+0x388/0x470 [ 1794.581264][ T38] ? __pfx_watchdog+0x10/0x10 [ 1794.581359][ T38] ? __pfx_kthread+0x10/0x10 [ 1794.581439][ T38] ret_from_fork+0x51e/0xb90 [ 1794.581527][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1794.581610][ T38] ? __switch_to+0xc7d/0x1450 [ 1794.581709][ T38] ? __pfx_kthread+0x10/0x10 [ 1794.581775][ T38] ret_from_fork_asm+0x1a/0x30 [ 1794.581869][ T38] [ 1794.581946][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1794.582043][ C0] NMI backtrace for cpu 0 [ 1794.582062][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1794.582088][ C0] Tainted: [L]=SOFTLOCKUP [ 1794.582095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1794.582107][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1794.582214][ C0] Code: e8 8e f0 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df fe fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1794.582232][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1794.582249][ C0] RAX: 1ffffffff332a000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1794.582263][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1794.582275][ C0] RBP: ffffffff99950730 R08: 0000000000000000 R09: 0000000000000000 [ 1794.582287][ C0] R10: dffffc0000000000 R11: ffffffff852f62f0 R12: dffffc0000000000 [ 1794.582303][ C0] R13: 0000000000000000 R14: ffffffff999504a0 R15: 0000000000000000 [ 1794.582315][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 1794.582332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1794.582345][ C0] CR2: 0000000000000000 CR3: 000000007c9dc000 CR4: 00000000003526f0 [ 1794.582361][ C0] Call Trace: [ 1794.582368][ C0] [ 1794.582378][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1794.582411][ C0] serial8250_console_write+0x120d/0x1b90 [ 1794.582445][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1794.582475][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1794.582507][ C0] console_flush_one_record+0x68b/0xb90 [ 1794.582540][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1794.582572][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1794.582602][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1794.582632][ C0] legacy_kthread_func+0x1b6/0x250 [ 1794.582662][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1794.582690][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1794.582720][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1794.582753][ C0] kthread+0x388/0x470 [ 1794.582772][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1794.582807][ C0] ? __pfx_kthread+0x10/0x10 [ 1794.582829][ C0] ret_from_fork+0x51e/0xb90 [ 1794.582857][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1794.582882][ C0] ? __switch_to+0xc7d/0x1450 [ 1794.582906][ C0] ? __pfx_kthread+0x10/0x10 [ 1794.582926][ C0] ret_from_fork_asm+0x1a/0x30 [ 1794.582953][ C0] [ 1794.585506][ T5858] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1794.634672][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1794.634745][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1794.634822][ T38] Tainted: [L]=SOFTLOCKUP [ 1794.634830][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1794.634842][ T38] Call Trace: [ 1794.634851][ T38] [ 1794.634860][ T38] vpanic+0x56c/0xa60 [ 1794.634897][ T38] ? __pfx___schedule+0x10/0x10 [ 1794.634980][ T38] ? __pfx_vpanic+0x10/0x10 [ 1794.635094][ T38] panic+0xc5/0xd0 [ 1794.635170][ T38] ? __pfx_panic+0x10/0x10 [ 1794.635271][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1794.635352][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1794.635383][ T38] watchdog+0x1023/0x1030 [ 1794.635416][ T38] ? watchdog+0x21a/0x1030 [ 1794.635451][ T38] kthread+0x388/0x470 [ 1794.635477][ T38] ? __pfx_watchdog+0x10/0x10 [ 1794.635502][ T38] ? __pfx_kthread+0x10/0x10 [ 1794.635526][ T38] ret_from_fork+0x51e/0xb90 [ 1794.635558][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1794.635585][ T38] ? __switch_to+0xc7d/0x1450 [ 1794.635615][ T38] ? __pfx_kthread+0x10/0x10 [ 1794.635638][ T38] ret_from_fork_asm+0x1a/0x30 [ 1794.635673][ T38] [ 1794.636293][ T38] Kernel Offset: disabled