last executing test programs: 14m51.4583111s ago: executing program 4 (id=3822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x17, 0x1c, 0x1f, 0x5, 0x8, 0x40}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14m51.353573755s ago: executing program 4 (id=3823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000003b74fa9edaee4d55019442695f4d00", @ANYRES16=r7, @ANYBLOB="8b332400000000000000150000000c009900080000000200000010001d800c00008005000c0000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r1, 0x520, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x6c, 0x84, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff028f}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7c47a515e56d"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x1a1}, @NL80211_BAND_LC={0x8, 0x5, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7fff}, @NL80211_BAND_LC={0x8, 0x5, 0x3}]}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xff}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x9c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000100c600fddbdf2502140004ff00480b00200000080005"], 0x2c}, 0x1, 0xba01}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x1ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800ab6c1a8e3c840c00000200000085000000820000008500000005000000bf910000000000080000008500f33bb70000000000000095524149c7e644e14d8917fe5258733dd8e9ba963f056eb69ea28343bb4ef3dc6be75401612a59495665da3f6dfe8890ea04ff9d7c6cdd9c734e0e0bcb9d812356308f6eb5f41a4e86f99f7387819df23706936a7232ab0d"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb3, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4084) r9 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x200000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x2, '\x00', 0x0, r0, 0x4, 0x4}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xffffffffffffffff}) 14m51.243159123s ago: executing program 4 (id=3824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000939000/0x3000)=nil, &(0x7f0000b79000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x30004807}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060500000000000300000000000000050001000700000089a42fb047c4e983c99523640e81daa0c555754c3b751aa1d9d55bfd790481d23690b3c1b6155afce8ed4f6e7bb4dcf13a52f23b82a27be4f2f611aa53ffeacc51f6b20ebbafe0db0891e45b"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x82, &(0x7f0000000180)={r5, 0x2}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000001}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x10, 0x10, 0xa4a, 0x1, {{0x22, 0x4, 0x1, 0x2e, 0x88, 0x66, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x94, 0xf, "33d693e53efdb678c7f840aabb"}, @lsrr={0x83, 0x1b, 0x9a, [@multicast1, @multicast1, @multicast1, @multicast2, @multicast2, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x34, 0x41, 0x1, 0x9, [{@remote, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x19}, {@local, 0x9}, {@local, 0x1}]}, @timestamp={0x44, 0xc, 0xfc, 0x0, 0x8, [0x4, 0x585c909f]}, @timestamp={0x44, 0x8, 0x77, 0x0, 0xd, [0x7]}]}}}}}) r9 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/148, 0x94, 0x0, &(0x7f0000000180)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2, r9, 0x8, &(0x7f0000000200)={0xfffffffd, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r9, 0x2, &(0x7f0000000b00)=[r9, r9, r9, r9], &(0x7f0000001300)=[{0x5, 0x6, 0x5, 0x5}, {0xfffffffd, 0x2, 0x4, 0x8}], 0x10, 0xf}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x38, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0x4, 0x4, 0xc, 0x5, 0x8}, @alu={0x7, 0x0, 0xe, 0x0, 0x7, 0xffffffffffffffe0, 0xfffffffffffffffb}, @ldst={0x2, 0x0, 0x6, 0x7, 0x9, 0xffffffffffffffff, 0xfffffffffffffff8}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xb, 0xb, 0x6, 0x80, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x8b, &(0x7f0000000640)=""/139, 0x41000, 0xf, '\x00', r8, @fallback=0x13, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0xd, 0x909, 0x3}, 0x10, r10, r2, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, r11, r12, r13, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x4, 0xa, 0xc}, {0x5, 0x4, 0x2, 0x4}, {0x1, 0x5, 0xb}, {0x4, 0x4, 0xd, 0x5}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x7}, 0x94) 14m50.939419651s ago: executing program 4 (id=3827): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000900)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/148, 0x94}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/179, 0xb3}], 0x4, &(0x7f0000000c40)=""/5, 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/140, 0x8c}, {&(0x7f0000000d40)=""/252, 0xfc}, {&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/93, 0x5d}], 0x6, &(0x7f00000010c0)=""/66, 0x42}, 0xf78}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) keyctl$reject(0x14, 0x0, 0x1ffffffd, 0x8000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}, {&(0x7f00000026c0)="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", 0x10f1}, {&(0x7f0000000100)="f8", 0x1}], 0x3, 0x0, 0x0, 0x2000c840}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="0c48defbb143c1d8ae592bcef634f7b0d643604ac4dffe2230b10837058430b4197cd328381e6e269c717604cf5d1eb0a8699b1971a0706961b9d61cd660e3c657c7039babf82124225d6c29489bf353263f997779c0fb2317ac1450497311b6e1bb3deb683bcbd910086c7346ce4df7ebe023a12febc086d4209722246b8d6c47516b69a6bb9c1910556059ff5d5b50326cb3117732469c6cf94379128597b0e2ed6dfa", 0xa4}, {&(0x7f0000000540)="62bac21eed0a921a53afd36295630c2279c4518cf92753a51316089a8223f9002c1ba104e3a514c418fe81711d9bd98347097f589025dad10fec77ad4673d3dd00729d2abdbf020b807f54e5c0abdc00dbf46dbec8c5ad10a1b96f990a7a3c1f1859728f03647a44345c4d8562a6d559fe76ed781f1d182329dc006b56b39c4ac35b983ae7b7e797f6b80ef850614e5a3f35c0447fa5fda885ef6f31100fef5552ab8dca9e63290a5fa61c158a6fac141152c932c3b941318ef325770536416dccc3d3eee7", 0xc5}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000300)="d0c1de6a9abfcca6741c67bc2c8a4dc3c0ad63ab9a288ab16b4b863577a47b59040db0715c8ddf05fec35f8078eec493b769efd4b0120a36d54ca418c97e70ea6e513748915f64", 0x47}, {&(0x7f0000000640)="d5215b", 0x3}], 0x5, &(0x7f00000006c0)=[@assoc={0x10, 0x117, 0x4, 0x8001}, @op={0x10}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xced9}], 0x60, 0x4040050}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="87498c0904a350833e398458d11caa332e7b75e3b2c055a62b97cfa78e156d13533991ce98be988140459d4a3883ab417cd8156793366bb70bfbcda547d3bd814435", 0x42}, {&(0x7f00000007c0)="d164b89738bb65e4d051c5ce3b52175f9e5f983fd44e1695e6b44823c4e370e0acc2be6426db12a4b2ba8333", 0x2c}, {&(0x7f0000000800)="07a70d5a9bb76fcd7ec1136d4964e7abb138702e12f01a48af6ab06637", 0x1d}], 0x3, 0x0, 0x0, 0x11}], 0x3, 0x20040894) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r5 = socket(0x10, 0x80000, 0x0) r6 = fsopen(&(0x7f0000000200)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='\xf7\xe6\xb8\xaa\xf6(\xda\xf2\x80o_', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="4000000010001fff000000000000000000066382e1697bc3b15271466d840f01e249a200c760497bdb742f347c504eabccf7e87375cf6aceab6c1458fc622d34ca8ab4389627fcaaf3717dcf321129f7ebb6bceee7e32e1ef5492016833f1d91f7a0725be19b58d0e042222cb58765d9e3121db393eac3b25cd57753f986a4a6a42270039c58c51b19f07a6acb4cb6139900372a483c1b5d0e94ea9beb251d3b42aed732dd33d24a2d340503d72540d44acfc375dd087476d8938e567b66e728b34b5ffe9140", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008001b0003000000"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = io_uring_setup(0x8f9, &(0x7f00000012c0)={0x0, 0x9e3f, 0x1000, 0x2, 0x0, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) 14m47.835480768s ago: executing program 4 (id=3835): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="020b077c45005fa100000000", 0xc}, {&(0x7f0000000480)="58b61e5a990b643554e485f2f1b0908d8ce2ccdd0efbffea06be5cb67b55cf39730bfe319597ed709578707e0052afbf8749", 0x32}], 0x2}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff0a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000327bd7000ffdbdf25660000000800a0000010000005001901050000000800a0007f0000000800a00003000000050019010600000008009f00020000000500190108000000050018012a000000"], 0x54}, 0x1, 0x0, 0x0, 0x41}, 0xccc0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$rdma_cm(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r8, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x2, {0xa, 0x4e22, 0x1, @loopback, 0x8}, r10}}, 0x38) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r12 = syz_io_uring_setup(0x1b34, &(0x7f0000000340)={0x0, 0x8da, 0x40, 0x0, 0x3e7}, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r12, 0xb, &(0x7f0000000440), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r12, 0x11, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 14m47.196092171s ago: executing program 4 (id=3838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fe, 0x2, 0x3, 0x5, 0x3, 0x2}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x293e, 0x100, 0x1, 0x80000124}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x351a, 0x100, 0x0, 0x0, 0x0) 14m32.106896616s ago: executing program 32 (id=3838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fe, 0x2, 0x3, 0x5, 0x3, 0x2}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x293e, 0x100, 0x1, 0x80000124}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x351a, 0x100, 0x0, 0x0, 0x0) 5m32.315353245s ago: executing program 0 (id=6853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_FILES(r1, 0x23, &(0x7f0000000000), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xf7, 0x1c, 0x3c, 0x10, 0x55f, 0xc650, 0x81c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xc0, 0x4, "", [{{0x9, 0x4, 0x31, 0x0, 0x1, 0xc6, 0xd0, 0xdf, 0x4a, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0xf7, 0x9, 0x6}}]}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xda, "80d39c8be07a1f25094905bcf753357fb7129702b006bb3eab1eb3087ce4a6bf"}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{r4}, r6, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000005c0)={{r2}, r6, 0x10, @inherit={0x70, &(0x7f00000000c0)={0x1, 0x5, 0x8000000000000000, 0x9, {0x8, 0x7, 0x8, 0x8, 0x9}, [0x8, 0xffff, 0x1, 0x4, 0x2]}}, @subvolid}) 5m29.282806085s ago: executing program 0 (id=6866): r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2c, 0x803, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r2}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002e40)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x1000, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x0, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PRATE64={0xffffffffffffff67, 0x5, 0xc8edf531dbea5038}]}}]}, 0x6c}}, 0x44080) 5m29.006711606s ago: executing program 0 (id=6869): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x100, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340)=0xffffffffffffffff, &(0x7f0000001140)=0x0, &(0x7f00000013c0), {0x6}, 0x0, 0x0, &(0x7f0000001600)=""/208, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) process_madvise(r4, &(0x7f0000001800)=[{&(0x7f0000001700)="ba8a8fe7b035e493e74376606c89e86624d4c9c46e8637914cc5104cc2", 0x1d}, {&(0x7f0000001740)="23a7acd3fd3f6ee6a55d2adbda9faab236334844f870de643bbc9178bc6275faadd87881dcbd74f11768de3a204de28d237413b82c50590235ebdf66358ef073b3f94a2a3eb03f782d900e2e15962816208026b1c58b43a2", 0x58}, {&(0x7f0000001880)="c77a231b9e8ac087ece091f4fa8929b6c903cf109fc23fb2787f4750f329035dcea6f26f702368d829ddec8a40f3591263f4596d705b5b4ed63e32e4a2d2921ee984c05992de6afd55a3468fbf9b7ac864ed70fe3495d7fa63c23ec42b5678a08e4c5e1a39a15e229e5206dafda3a38e2aaae42f7f7f3168e717078f6b27abb8eaded85a2669b4def165022c73913fdcc87323d2ae2b8a084e6d7faa40df536b331bd0e9d2af3209834efa4677a46f872f", 0xb1}], 0x3, 0x14, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000001940)=ANY=[@ANYBLOB="6368616e6765e86174203078303030303030303030303030303030335e212a7b006e6c383032313100"], 0x29) r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x1, 0x3, 0xfc, 0x4, 0x2, 0x7}, {0x80000000, 0x0, 0x6, 0xffff6947, 0x4, 0x6}]}) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5m28.090210439s ago: executing program 0 (id=6871): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x41}}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000002, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000380)={0x0, 0xfb, 0x15, 0x2, 0x9, "2313b2a6abcc96a27d1a3c42c83c97bb"}, 0x15, 0x2) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x26, 0x0, 0x1c8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc, [0x4, 0x5]}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, 0x0, 0x200) r6 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(0x3) 5m26.784346294s ago: executing program 0 (id=6875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c80)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) r4 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x1, r4}) r5 = geteuid() lstat(&(0x7f0000007280)='./file0\x00', &(0x7f00000072c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_clone3(&(0x7f0000007600)={0x200000, &(0x7f0000007340), &(0x7f0000007380), &(0x7f00000073c0)=0x0, {0xa}, &(0x7f0000007400)=""/255, 0xff, &(0x7f0000007500)=""/154, &(0x7f00000075c0)=[0x0], 0x1}, 0x58) stat(&(0x7f0000007680)='./file0\x00', &(0x7f00000076c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() rt_tgsigqueueinfo(0x0, r9, 0x15, &(0x7f0000000840)={0x22, 0x7, 0xfffff7ff}) rt_tgsigqueueinfo(0x0, r9, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) stat(&(0x7f0000007740)='./file0\x00', &(0x7f0000007780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$vbi(&(0x7f0000007800), 0x3, 0x2) r13 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000007840)={0x5, 0xffffdd41, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x356, 0x6}) read$FUSE(r2, &(0x7f0000007880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffda3) sendmmsg$unix(r2, &(0x7f00000099c0)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000580)="a81eebc0436c08b44ef142b21774fde29035fce9b2bfe37e15c7f1de527ed0da66cb09e22db5511b78cc29df9ed768cb2882eaae615cd4e59869ed403a20f55cdfab804c7b0117dfaf41d5aacf487f95ba77b8a6cd859bd8686550344c403831a215dba3d6c74ddc7e4b521d92e88828fc2c5658974ef6a480be44a52b4c6a3f3f08880ecc4dcab725a00cc55721d6f098d10eb38d872a68164029e7832785253aaeab9d200d21946abf3e66f0ae1de3f403a825362f332394956b4271cfa1ec85d1fe3f71f606b56a9e99f874c46928a0dafedc91dd2904129cdda2513d8e27", 0xe0}, {&(0x7f0000000680)="20008798082e8b076179a10acc43f7e871f1ea3197376275565a48af4fa548e33687d9738576d6d025e951d5ce7c8381b1ce4c1d8f0c32bc335ca45ac253509dc134285169214c1523512da763da9671eb77edd87133dcd7086972099179dca85604b6a6e2fb440f8bdc26016587a68304e7ec3c1eb0d3a6ec1ed4c6b24fb0e5b2153dc5511e72745918ba8ed76001e65976570bf5a9dc71319286fd805bf722aa2b788afbac1cb99294c70aeb9fb32d197538218baceb09849ed0726684dedc3ca1bbf8ccd5ad996827673411", 0xcd}, {&(0x7f0000000780)="174879413ed44e5bf22eedeed02a0def7efe4d38ca05c4d97f707037e06756783ee50fc9fc984d847b677a4a73738c55873a2fe7435518c26158e11ecb54396167504a0ec4ff63d6eb0e43dd03d6910e11bac05fb80e2e758319ad04318a006c8c0d46321dea14eab16f4247781a6d1296b7fbd31ad28737aac236f27d340259d9833bc7260eb4ffe65aeb047e9c68de11abde2581447ba4c7df85a218e6b7cfa371bdfebd89002be60ecd06a9837366c671efa18b10f285be611cb657e84c999871f8bbda180f50c7d7e995f5a269e4140ec87283c2d2bc0f08fa52260246a58307005d23649a5df4b28a23e9972000a91a8d17d1cc8195", 0xf8}, {&(0x7f0000000880)="652cde3d85a9c13c93603125e1e5a86099d626d719cedf9555c08a266c", 0x1d}, {&(0x7f00000008c0)="16eafc816686cdf4f2b989496904cbdbaf76e9f064458cafc6ee9da412dc9d3d6ae244813fe20f6498fd837fff4588dd06587a00d6827471df79833dc9c79a2b26d1077eb74541eee4f44e7a70e752bb9a89038840de8213fc9dbc830c5e76d96be752184aa473e100e6b7b02a88e8505df7c3012259601b43f5b11515788864b8487685dad0fcdc755ce4b9d2ff0f8fd44860caee567ce542749359251537e39b832d042435128f7faebdcc25e262bbde0aa7850ecd", 0xb6}, {&(0x7f0000000980)="dd262e32a2f57f4c6f8b14555c01e73aa6609adb2582118bcb03aa9da93aade259687425391ab3efab901a24e79557acc7a5736eb4ad93cfb5ddc3ef9ae6868db2d2a67ffaa03738f9d80d319026eb8bff9cfb58fe75d93772e11e2b91ff58ef9e", 0x61}, {&(0x7f0000000a00)="fecbd5c64f291609da7dae3a72d9a729b1ac0fa3efc121bde19e07306dab1ce827adbdef02ce72181ffbb6b0b3c7df30f7b588fc50dff6fcb59379b9eab827fae057899b01e07bc725ed4c1095ea40ff73d9c04cde74a7a084d35a2455ff7911826a061bb231256972a46fdf4358880124bb65678ed9859695915c94848b593cecad13c15e49cd56fb9dae022d887e0b95587f5bb6f13f9bdc31e6a95235f477e7195539130d005e910988e9709126148c8efafee9d86a26003a27697e220561baab242a7283d24e0e67386a6b59945a3406215d721ef6e095d637", 0xdb}, {&(0x7f0000000b00)="2a31cfd064ebb702765c6192a161a6c2236d56e3352dda62bc214058996f4ed2580b61f8c7ff39b886a232915c7b543932378e88efbf5d6f2abf2468948007f46f80f6ce113b822c46ca7f1e326762928d019188469315dae741f7b451763ad933ce0baecb73f9d1457dc9aa85324234222cc5bb07ff84f244c154d5b43aad39fd1c9cb143a39160b48aafe96b58a7d5febe9a60705e96b208a7dee483e86381224f9b50e2376e0c91cbd7837650e3fefb408ea7479dc4e689", 0xb9}, {&(0x7f0000000bc0)="9a4bbeb195dd826ec367aecf3be3", 0xe}, {&(0x7f0000000c00)="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", 0x1000}], 0xa, &(0x7f0000002140)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0xbc, 0x40}}, {{&(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004340)="c82aba0ed348a2b72eb34c152b343abef87a2e557cd08278f1e81f9d9c63a07b4c261bbeaddc33662524e7bfa5a3af771fccf58efcb74dd351df6d1101c9dc78befdd66ed64672c8d1dc509f18e51598e7c77a84462eefcd8521f746b04f19164d016c6f309840ee71d93efcbbbf5a349fb9a9b2cd311dd804cccb3938ae5e383f0bee957d2483bd4a1e", 0x8a}, {&(0x7f0000004400)="e4da493b031237a197a653e1bc845efbe2b2743c71254c154d59f02559ed24dace14899183dfc2254f2012c54f07ea4f2110676d75706d3d3fe0926a427d28439bec8825ee0a52eb44db56aa017c9c8b2424c87ade47da8428e4270293a48934f651c792bbc123fb7b0e35a829148bb3849b1fc7227a6a8cc593316ae0dd601fba12eeda12c8d421487880dba0a5103db186d96f8bb0a1ec33ed5b45363ba990d259f6cdcc8ea544f7df679f4d6f95922345d9809bc85a51ecbbc37c", 0xbc}, {&(0x7f00000044c0)="9c18777cde428d2325378303b66b4e9c9ec3a47d17cbeb78b457df9aee9807b2846ac915e8abe3b8046611f77ebcb7cc44016b6854be9bed104e5e28453f7183988d38bad01d94e07c7c993a936cd81eb99ddc11fbde313d0d78bdd46b782756163165bcd55a4a9bab7820911b1e79a7dd0b87f3ba475ad71912589551ffb9943a96a8984cf758787b3482f658ee0d2767676af3046d4b705ab78d667e47da50a2dc6a029529ee192c14fba12b3339287e41ae059d449632329da014907d65b772701409c6086fb1e626fd62ba61138ee142880dcf9c8b6fb7d67c121764bbea6f062c9c5e5d1b27bae1ad369bc0634ec8b079f48d", 0xf5}, {&(0x7f00000045c0)="0d0ce0a72ba9ebc85339d8d9cfa34ea8a2d5e76c1bedacafb8e5a340a79850616cc8efb2b7038079d0d9819df74621684836cfd1820e35a41525e6153c0469919537cc361b667c5c70f4788a35494c97a45d22af08b250734c7405f7b8a78b6a27ef446a17e40bf103ce35c4d87563776bfd4542f662bed8a63047b3bd42c97a33eb67916b591a3467384027ac64f9280836eb5c611d38f24298cee7a33b8dd59dfff2cc158d7eca0b41b1a6f717a4ed08010a6f2203a5d5335551a673bb7603", 0xc0}, {&(0x7f0000004680)="21fb1858", 0x4}, {&(0x7f00000046c0)="cb3f887c06bb8253af66639768b5d983d8827f3775adf0c6b968a537895729cecbaefcd9ee76b4922d27139401460e93cea67ba537a04f9f08b0c93f4a98441a780baf4f4fe63b1b4188d140349f4dee589ffc490ddb6e3506524df84ecc6acad47d526f6d71aae549cb525c13be2b57b3f128a7e70d9b36921507beb8c6776f1bb3e2cba9ae88759f6c848bfb0e7fb6cdf926", 0x93}, {&(0x7f0000004780)="8460209fa213a7ec8cc4f1e43946cbb1a2abf2fbd66580aab4a84b4d8fc4ee17cf4b9734dafe1443427045305ea0fbcee045e3e54e22265f35d3a194e547520a77665e309cd3a0d17f7a539f04381c095136398538eeab3867e853ac852854b266c6d576e84a5abb0798112700be56217c8717203f74c036207e868686e3541fcddae900651c2ca24b811b257ad7b0f1e273bd1156b35ff1be94c2cf1b", 0x9d}, {&(0x7f0000004840)="2d42f8ac6eede4a423789664d069bf64b44b4034e30368c8daf21f165046818283dc2fd20636f8a71062f81fa86cfbf3016c98c1b36086300ef3d8a319dddf244826f7602f0d4682c5", 0x49}, {&(0x7f00000048c0)="4f44cfa2ef496c2dd56b0c8077f163a9df", 0x11}, {&(0x7f0000004900)="ba691ccb156f544e47588f9d9c75a646736bcd3b8d4ec35fd22f04987d89a73879915da9fe57df518436464293b12c364e9e1c194310a22a6828868234c8319006ad7cfe4bcb7e9753ae5ed6de32dff7679a1667e2ec46ed4585710c4690a243f995a1506a44dfae069dac2c22e8a0c0afac09ccd8a62201ec4f4cce69ca388a0de319827a59a8286e60a632eb800c5d55b9374b1e9e0e6e3b1968bf6007ac4df0d43fd39ed57d6a33703ab9e6c035524b38b11baf14", 0xb6}], 0xa, 0x0, 0x0, 0x4}}, {{&(0x7f0000004a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)="93560103d5324393696eecd12ae9e477561d19ecbabad43ef83cb8afffdaa1d47c085393b6754e0bf43154551694fe6eb787e51e42f8f9366d2004509aeffc13f82eb2c7d2fcf2ed0b4a0fa13da0f78ce7a950157c7abd1a33db1a2d2aa6ac5707eafa511dc25caf0511160aa837286fea7bbec86de0b424d8fbd71a9984dc684edd76ba05a519008947d9fe4d21a785d483d063578739b87a8ad9d3b2366aaa52124144eeeb90", 0xa7}, {&(0x7f0000004b80)="ee945752ea3cf010006f0c46e0e3caedea6471327fab6f659819d0f0c967a4a1b9defb0ff58b7a3d8a83c4b4e9d31fbe6f8ee98fb96df77d11fd832a5a78c1490de552861cc0e23b739b1820ae996509d0cab00a9c1fc87667e8ae00d9abb10d7338dee22cb88be776cfdebf33a8b095113853460e5f4e070efb5f77cc2bf1572e7644c1aabd1cc65281d5ae22bdf9d9d578ceadf8cfd877eb996a822cdd3ad5e8de43b9064d597ab035a402cef82403f21f0335bf9ff8e39d5282153b707bba0b2921034ac635e70f437815238cbd4c94db629b4877b3ba1dae11d90e8a90e47b4e0bfd2ebb34da9430", 0xea}, {&(0x7f0000004c80)="2f70dd962156ddbf44fa7bc943ce24c3c6073eeaac02b7cfe734f94abad64b958fcf943b72ca9d957eed1c464e0e296023f46c17528df7b4b374a1f69ec74cef153223380d8d59e6d4be5934f11dda1bcbc066acb5145a9bfffe9ac00a93257ac4bca1f81483ffb23ea882fc224721ed", 0x70}, {&(0x7f0000004d00)="0abc19fdd906e9010174ccc78354055a35e199841517399745cc88150a5147be044d52bb066f66fb54ffd09f4b6b006fc261e67e7b917d52199db987c9d1d1bcf1ceededb71816449dd453d6bf791a53344483756199a45a7e8668e895376710d51d08e8ad16bd11d0570d565334ad336a0b04c2d8c6cf897ac5b9c62017bd12a1aa6f610a00fe", 0x87}], 0x4, &(0x7f0000004e00)=[@rights={{0x14, 0x1, 0x1, [r0, r2]}}], 0x14, 0x4040004}}, {{&(0x7f0000004e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000004ec0)="af0ed7d22e4b677d33fb9ba0e59fe4aaf20c80f9ace4b32fc34e381fcb87b1d7695f0290ea5bfc43e04c795c0c22862e34debb578ebd8c79579396559a395eec7e05ed113fdfaef6249d30afab354f676e3ba2", 0x53}, {&(0x7f0000004f40)="09692805b7742aec7cee98a8486b821ad165952f28f5be3830f18e109054c31b098171e92910b64deddc0b29feec78f9d8292a180db50e5415e7033f5dcdf1ed32be67212fdba187a1d98a0d7f8e7e2d4cd52d8170878d8b1327af2eec811a2a5c469b9045cd794928641747fb1dcc0d30cfd981448cdbaaaeccae7ff48d210a5074db8419f1938b70576731e277e93243e2d3e94b51937278d043556aa19a1d4768fb0e347f6c9f830981ee618a8b9e135bf9fbbab1ae4b8d189d7544bee172c37ca0bfb9e734c1027ff369c03a165af68d3e4dde1d9a1992ae052494dd251b7f1eb310bc56f22e7963ee79d93620d28bb1", 0xf2}, {&(0x7f0000005040)="d43f463b15bb6639e65cfab6fa8bb46dc5ea1effecfcec29bf95f70132ca4cfa248c7d7a74a34c1ce96120e11d54ab624c2ecbc58ad762cfea89b539e49d3da98fbc6c6248770b2799ac838dfda4efd5aead22d8149a41e7e0c9133554abee61b6e65da19eb290f7808ff3f913598186cabc6f25983cc76783c6e7b27150ecd704d2c69be46a86aef771ccddd01a4582b34e3c912d473ffd46a7", 0x9a}, {&(0x7f0000005100)="3eac55d5e262785d0f80482715be8619a24c039e85d7f6ed31ddf9c51f21852ffe337645558aa76bb697ac735be2ab6aae2da9ee1cb94f4ff06445cd38a72b8a9db87dcc89df30648af36859137601029eb9f77352b1579ac02c0e7b7f8b48962e2f8b3cd6c6efc7cd956724c8669017f034c0bc41549aea2492396832c377e9f626545364cec9f2f97ce6d5a44926c481036bc5ab3d54e4d3a5dc07455e63c269cd086e6eb4fafa6893ba5da7162f9077339344c81b58e14e651d67785b79b29ad49e80e3fc8947503c9090d3d37d5e5a62638ca3624c3a", 0xd8}, {&(0x7f0000005200)="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", 0xfc}], 0x5, &(0x7f0000005880)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, r10}}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xf4, 0x10}}, {{&(0x7f0000005980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000005a00)}], 0x1, &(0x7f0000005dc0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r6}}}, @cred={{0x18}}, @cred={{0x18}}], 0x78, 0x40091}}, {{&(0x7f0000005e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007100)=[{&(0x7f0000005ec0)="1773bf319362e618573fbbae199c51134da73de89c4b80ee4428ed23819f916f5b3fe55faa64ebbdd26416e3646586d20b393eccce43eebf625a47d88f49d9de709eb50b4ff1793fd96fb6fdfbf4c5c2a62b448f7bbe3bc80bc72053c7f122a68080f8b02693469e1958174c6ffb247bd401c9527fdabce2778b623e1feeb814ae5c99d14eb2fe2550ffc5b02618f7a94403c6af9e3f105639f77fb5a33cc56a246ab8114761638044a7bcc9190d2e5c7cc27e6c342cc8", 0xb7}, {&(0x7f0000005f80)="4af71f303bd4d5e1d96e3048c86fa797e478b35f7e169894a7a3ebbcb5f24be3230756264abf794ef20ea68929dea4df2db0474f8455aed2e701c9f145e6a8a72ca987ae6c7061784906a27b652559f605fff59d1ead309b4c571c56cd390c9c3855bde82646d4cebcb881aeda9210f78f7f0f1fdb7dc458b3ece897ce60889e54fd432d21ab63683ec6b21a235fffc5507d8cd96d809d9a22aa15edbbb4bc5dcc425d7f67cb58a6a5d6e492330b6f6ff864b9bec0c18ed66ff18cfe282cc15f8874bf31f1cfa49d5567dd06fcd528ed2192e126ca6b2e2f9651ce1fcaa330d1e81e8d570282690abda0673fc2fe06775197579a8abf9ee5ac901b14ef0381f89a7d3e86cb39f32be055f15a84538489dcc225e2fd6a700dd5a6d0f934e7c7cb54d1c5258c952f186fbc0f2e02a00040640065221fdc578bd63a7233093314afad8d20b505d24c075e82eaa9f1fa50eed153668969040654389fe008dca74207ec400260adc259e57f4c6700e25c14d6892b0d53c4a5070ed82ec0d776eb3e86bc76da0e7e5401c67c0adecc8566041693c6e1c691c0dba11a85c00878c80f19f472c55c9184f45cccb60dfc0613f3770ce6deaf93b572958e4222658078335d927a034a2e1b007436195677bbfa91d742ecd94503fc09e36923aaccc65f2f6fc6b1dcbb053a0ae43be642475fa412e6cee312521aa8adad99385ea208cdc626cb19897a400a409795d32462b3095c9945097862029f3bbd7e6030ae3dfcdee7c7fbb0def7acc709de2459ce1e84e68c7c7be9bdcfd099f5c80dfb20853b9780f6073d2a8c44470f9c1d9bd5b44edad178c69a4f128194cb7393aeb31d56cd9be6f084a15d3fe6dfc268e8a877843e267f9fa08077455601896b081df22e4037dddf5258133df4fa1c7fb7eab61aca6b3704c65f642c27e9c745fc23b32e0e30c01b744e37f33925a7bc01262ed1be1519ea10e30ac12040b4e80cda3612af2ccdc9ce05f667832f4d0ff0fcf79170c2dca29adfc8f274b4611fb024d84499e6d4861afbf0676547aa1c3ece2bc5247fec528a493ca2d42d8e51d4fefb1b01de292c627a1e724e52847dca92ae783cbf8b84d8493bcfe1af8822d14c8e7468e40d043b6932a73c90245b662d8365e90079a9227b4a25dc5e5bad4323714f55ceab09d3eb3f39da5695304cbd1f8bb3e9184da2c7ea2b2af3a0b8328ad93647754eb64c658905ad742165ee3306a1e0aa5e0cd3820cce4dbb8692611c8f3e5093f845c42c15a65ec6bd989a0abdf36ea438430272346bc8ca348eb3c11dcaca77f958b9cb31b134856bb2efed1e041cdf8426a4de523d4771c487c5dece70d8aa551b4abda563a79f8c1be9ef374be83958da1d92abfd755c5d0de766e835172c39b6b11834c9b8f0be40ec368bdc5a2cacb64dacbbcc097fcc6a25b6963bde19f2b2ae1cce30ffa1e39c4eda11ef930ec508dbf5309108dc95a7e34b0ae1d5cf398ecf07643c4418c8df9a8d47204cabd1e74a3f663b8aa6b3cf272c8cb2d5b0b1566527b5550918449df4a2c8843624b2be5ced93ece7748ef4d2558ae5b27f03a1c7e3d22ac2bfc7c41ae59335cf8c7ec6194e05c4c22bd451142b30e589a8a60feacb2ed3d82cdfdf6080a076cbcc0fe20294fcae9c26d4b8b81f46557364ac766d8eb67b7a65e8cf64670ff89b423d93a7cb4dc67ca8181a650c43eca003d009c7021d391d09daac303c620d97574af69bc203fc64300a9538dc1d7783c618aa3331d09ff791db15f79d81b2a14f30ff1515455bb28036ba649f64990d1b482105849ff5f1b03cce9153875450f7030396b8deee71b389f07784edc01c61d7930dd15db3c055ec85a4dbdc7ba4b171d46d97f9d8f0a537790472d1e0062131ebe23aa6cb8235c3f29d53f1b132c2023c9fa1ca8a82986a199bf0bdca635f5014387b60e23f6bf2588681cdc7a43d03dcea03b3b4d94be19810a95afc1adc91ba304cf54254e7873b7e97911ae60351c88a34f00b3133d92203d2cff54477d6e3cd41cdd70431572175d7aafa3f8bb24f3e57b9e06f1a1e1a5a3d9d566deaf98af930d0fa3a9e0e064e6cae2496fe0fa48bd4d06af4a49c3bc9bf7bb3a08f9d0e22b16862c222c8a49ff6d08c1cbb091b1c679c986a2c208ed615684b2a9ba8e9cb47c679e11e3325a883a481799241ecff58c2e667b63801ad5fc45fffa6124ec13b1c858efdcf73e0afd0d6f9743cf526b8cfd2101e63d4eb8c11f4a7de6722eca261b2c9aee523af8f4e2c0db2d87f979e06af4a4f9fe8a8348fcfca2574b1586ed2ca2b6635b8f3ade051d828682c0a680d68bfd413d5a39162a296deccd3e34f3ff7cca22a7c2558c9a7a8ebc3dbf9968780e908b7af670b4a66ca9859b6f03f89fa2376d1cdc4cb57051af73533d0612eb44b9326297600bc5d79422d793210827ba036df3900ee736ce3ecb113d9fff492250fef22327e5237cc3c0dfa6fbaa7a896d483fdbc6935467fb0719fa31f60058997da81c4e64b43f0c83177a9d3e317fe52fb85f6e60e048e672f4fb5180d4322fa399832ec6f4484499b09ee1d91e0f04163693e106c5bb7499cae10c43881b69993074ffd27539d121f6f26f658c764ec335b716d3eb243d8de7d3832fd1433ff694ac314285b4755d4dd033693f860871e313c3089dfc7ce290a6a375d437db557ac3de16dfcb2afbc75fe671ccebeab5ab7b0800c075308b23a6add272f9d041c2eeef738d0c8d9d7a615a0610ab5adfa550258bc7d29ccd4f957baca0c938e8f6cbe8295ba656a0c6eaf31446e203debadab43c7619a7d1f177de6c55cc782cff0e25aea8d4974a6e15fcf42497aac4a6ebac498383b1d05972e60c5d9dc70f786d08c5f7abe56933fe170f76536e0b850586ee08acfa21770ce62b452311c6c55c3933d7bee88f22980851248e130018705e110064294ee26ddbf8885848d7d2c28b9c30deb5558be607926fba37e3e33fd1f8a430ea72d3cd7c28fc2f3857b0a71d9b8684eebc2a9c5feacde32662411cd6895a1ed8842d435c61dfbaf9988cb9001908886da1cea4687bcec414c28375b0db76671eea5e22ece3a2dec227f4643c174b4e6bb2b9fdccb8ff1de8328ccbd3c234583a0596e451c4fac595596a389912887a39e7e2d672984f573c84683199ed46de2cd9716d7bc99034333138f3e0ee55e4067500266bcde92fef1fef548ac0192790d50a077e74f2b51315bb279052b62d094d4f5d7b85ae950ad3ebb5127927972f38964a1102442f85c0a2e5115cc5acdfc1c4a8050de558911556c43360021689f9bcb2875183857d05333055718dc43508e5de085681e5a078a39965e0043bd5df4fbdec07eb0927eff021949637a0b401ed610bad98d14ef0a71f17fdd47d07d3b77c1d242ced86bff57fd3dac1aeb889231f1c6a60e3c1302c6dcfc5d47d222882daf7f087285d454783582605579905ecbd986959f19207df1b38174b88dc43863d1d9dfc2f047cdece0e6986a9b577e5da5d915b0347886d2d31271f055cca8e864c56d02abca748465879a871d9e43967ef48a58af9deac40f4b153867f2a1bbe08eeb7c961b20edec817dca6c50b36640d9f104d84c865e0b3683542fa58d2cb0a2c5ed77e01afc3ee6e1f7e47e613896e57e4580e309b571197766d7ed14993046aca5d7580138c72ec349960f80fb9a6abe92e5a23f0df89d9053fa49e7bdbea55f448f518e5ac5f5d9be99519cd66cd525b5904acf5871fad4331d23b0ed39c50d0baa8045cd052ffbcccfc2a6bcfdd41a23ffdaf204380e44efaed9af6ff0794c2b9bb93f2b809f09489c2be1e9a7d67aacf1c4075198bfc66ffca6cd358d68488924942befcb6ceac3a44f6dfd627db8122915599b54768886f2dd2bb323c3d4c449bd4416d4639af7ca72b7ef6f21b1ae4fd301d0911dee0b76c2817164b921777a2fe32d858400fbf392917e87707fc9ffbee7dd2a0fc7006bc5bff98390864b5a6ef010f034be26f2add2f556359738b6be63349a1354c3c57c9539f530e9c178937348c35677b7ce28f07a560fd8ab97d64d4ae5c9c13c57e6aff8e2e99610c44055b91323ff60e8cf3fbf76188faff2cd0ddf81576f4bb223b63ee791181d129a78206d3d54a2303a6d313e181a961c00ed89030550636b6a8dce31150c72f4520ef85b51ea873f3d378ff55998a63325f3d68980e2c7a59126bfa926860d2bf1c6209bfb3ad2b01a7dddf067f65c792e061c6ea9b3ba40dfc62ed0a44b917e286c57d80190740f850e1c79cad110d74b84201231ab6d1a53a0666e78933682a44c3753f272679cd48d5af7fa583a97f82096affa3c8dbf2cf6625766336f11cdabc7c4c2796257e92264d29840bac3e041c322612414f39b9637bac33843032b42c9bb359a71620912142d7f88985f63578394d98fdfa96fe3d008418b6ec6b7c33acc62932d8d0b4cf0d2d4ee6f5d4b9f60ef96772f0676fbef613b06068f0cc94bc6634f54ca135b4c2465d698011c4fea39e5a42c8f44d49e77ebbdf2ef1e38b4b7c74fe672ec662839f0a8f115335f0695eca5e5d127faf535549e27f7c180b9cb633f7c1942689395cfdb1657fa49381b6f2f58f56108b6a2fd72a1ddbefb0b4b6975827de69bc302eac84a6b702ca4651cf03e4ebef4fe96c6f66cca177604c01c794898fb3c483de92585fb8af6e4f619626e0d690a1bc33f847ccfc3e7eb0399bde0dc2d2a58e010795c846a68ff3d4c496c3f839c4628a65d8a7807f61627bd59ee87ab8a06586c72881605fbd4e6a9411033e37a76cd4ef603c74290dd0894d582713bed6a40880b8b2dae94ed499363fff34c04cf80591f48de4d5b8f94adbd6adcd96b5225f974bcc4f340645f1a2715d05f4c507d0d274e2c75651340b19c72557fbe2aae509654c83d691e7e7804a7cc22e44811d0016d326aed7329954d8db410e7700ec40490f405a102113baff19fd0814f24adedeeb1d01ab77570115f92639346cebc938fa1ca48ff119ccce1ed0ab5cdd90f5dbc9c796988f550a4307c854dea582e6c2992beed0085a2e41fdabfbbe56ec3f65076c1ab91e030eb13898b46fa82ba9cfdabd5e05595b654fec0a35bfafd2ba2f784f1c24000cec058f14ea01611f9b735d5fc280947d32a73412712f97feca2f42c633c4fc75811dee5c13e727125898efbe7d940d8442195af679e45d173f81c58d87659b0c3f6bbe816b0d668c114e3281f117df1b9c2b105721026155d3c77e707bcfc9af98c891ee2737ad005a587b184f8f9ecd09046e2394fc76c39bf5d0b8c77358012a691b21912b71c003f5eb8d1cbdc09a1c45303afff48ac14ca949dbe506865618f7905fa1da5b5fa46ee0a01ba549c1a9da0a367010b318cae83add97fffc761823fcd5332efbd820072f0fc80fe749a357558767b823ff65564eb1278b964c41efd62425250b54ada4e4abffac6000f88e1749141e9f7f55b79bca7e12cbf0a39d1e45c675ee4c6760d68b195275cf10d0e16e64d36dc0766824c4c00e826c01bc36f7d704fe3a4719d7e2247336929c71f47efdd01b2f5a25852e2d3dcda9625fec2d9c07e564bcf7d87c1d8b4a6f930363e855dd97dc54b8ceb1f35383a4ba7495c9079699288e6537de3dba3a6db0ac06d995940c8c7086cc94262008dc1520281d0a48f5077c5ed0ba079c1c8e31199ddb6e992103c481dac1361608ac60ca12c6f02254220d18f88de23b0838c775fd9524b9ab2dc4872637014fb06398cf22062", 0x1000}, {&(0x7f0000006f80)="c8e077c017f7fd78cb084f62b29c44bfbeef32dddd70a994c128e9853fe78a4644864a698c1489f413b5becde39176fea2388b1e65777036126f1b4407d810a58b84fc4404a6f3c88cec27dc9a29416d41821387d1398b78012289", 0x5b}, {&(0x7f0000007000)="a5654930f8413a4d858b0ae0f5822a63de12daf4e85f29b32764553c50aa8eea5fbc4ef34d2e323868932e95e6a21ed3beaaf842546e4901d98266512284df9b6ed235fa218813297d0b65bee9706e8af856357d12b6b932a2fbb8baf081ab0cca6651560454a2833a45af56026a1f15750348931dc682f92a84bf9ef9b08e8d51542420713dbd9153194c7812143c9618837e98b89645dabdaa0f1696424ccc1ca05763faf75c6900cb977f6f2b6f2afdea1a26ec04384c780f1e5dbb697469b945fe1da704a8ba794b58152c99858893", 0xd1}], 0x4}}, {{&(0x7f0000007140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007240)=[{&(0x7f00000071c0)="90438cd9ba138ad3b3128246130a9c540f32d6c3046d544acbb97b0f89e6c36db4731007cfae26ad767a0010e6109bbbae1b0bb9f4b14aa9084238d47b1829ec283fa85a", 0x44}], 0x1, &(0x7f00000098c0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0c0000000100000001000000180000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r11, @ANYBLOB="300001000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0xcc, 0x4000104}}], 0x7, 0x2040001) r16 = socket$rxrpc(0x21, 0x2, 0xa) r17 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r16, &(0x7f0000000100)={0x80000010}) setsockopt$sock_int(r16, 0x1, 0x7, &(0x7f00000002c0), 0x4) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m23.663645314s ago: executing program 0 (id=6886): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4010) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x201}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1010, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "3d196e85f3a47d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000340)='e', 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8"], 0x7c}}, 0x20044000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001f875113bf000300", @ANYRES32=r5, @ANYBLOB="0c009900050000000b00000004005e80"], 0x2c}}, 0x0) 5m8.156708489s ago: executing program 33 (id=6886): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4010) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x201}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1010, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "3d196e85f3a47d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000340)='e', 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8"], 0x7c}}, 0x20044000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001f875113bf000300", @ANYRES32=r5, @ANYBLOB="0c009900050000000b00000004005e80"], 0x2c}}, 0x0) 8.918275707s ago: executing program 1 (id=8428): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000001380)={&(0x7f0000000180)={0x2, 0xffff, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x1e}}], 0x58}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x3}, @TCA_PIE_TARGET={0x8, 0x1, 0xff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) 8.18327395s ago: executing program 6 (id=8429): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e24, @remote}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) unshare(0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r2, 0x100101) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000015c0)=ANY=[@ANYBLOB="62000400f92801044411fe286fcf88fa67a8afda1517592ca07234cfd44922c2e4b79548def6d130569a7393a652400d9a7bb6de6f067145a5d5935487eaa2a07df81bffe29bafcac9eae7ea581ed8655a1cfbe457480d0ba081d3dc2a437e884e00d3b6e810ad6f3ac4a01358c3fa28e08043957a20569acc14bd37ab4c4a0191af7c837f3b65b5a32f85b2854a85006e14d6e397aa8a6ed97e237809586acd51eaa4ef34324f907f2747713568001ec0fbf09bbbc34dcdae1413fa68413386ad84d7cb403b6b15d5def358c9c5"], 0x8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001540)={0x3, 0x0, [{0x8000000, 0x68, &(0x7f0000000440)=""/104}, {0xdddd0000, 0x1000, &(0x7f00000004c0)=""/4096}, {0xffffffff, 0x56, &(0x7f00000014c0)=""/86}]}) accept4(r2, 0x0, 0x0, 0x80800) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x7acb, &(0x7f00000001c0)={0x0, 0x5112, 0x800, 0x1, 0x10e}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 8.182936394s ago: executing program 1 (id=8430): io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000280)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2000, 0x3}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) 6.814822365s ago: executing program 6 (id=8432): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0xfffc}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000d00)={0x5, 0x5, 0x1, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x42) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f00000082c0)={0x2020}, 0x2020) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) 6.363079228s ago: executing program 1 (id=8435): socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) 6.231830163s ago: executing program 1 (id=8437): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x8, 0x8000, 0xaa}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000003}]}]}], {0x14}}, 0xc0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x9, 0x0, 0x18) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000000000)=0x4c) 6.030585875s ago: executing program 1 (id=8438): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) 5.943570156s ago: executing program 5 (id=8439): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f00000000c0)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1b) 5.810369113s ago: executing program 2 (id=8440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) ppoll(&(0x7f0000000080)=[{r1, 0x349}], 0x1, 0x0, 0x0, 0x3f) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.807927797s ago: executing program 6 (id=8441): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r5, 0x6, 0x1) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x82802, 0x60) write$tcp_mem(r6, &(0x7f0000000740)={0xfffffffffffffff8, 0x20, 0x0, 0x20, 0xdc15}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x404290}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040603f59ec3597b83a68df7020aebcf490000000000f0d3ee900300000905000100070000000900000073797a310000"], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$tun(r1, 0x0, 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000540)=""/249, 0xf9}], 0x6}, 0x20122) 5.767680359s ago: executing program 5 (id=8442): io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000280)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2000, 0x3}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) 5.767087007s ago: executing program 1 (id=8452): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000080)) 4.911543567s ago: executing program 2 (id=8444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc9, 0x21000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600140000000012080003002e000040a8001b000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab", 0xd8}], 0x1}, 0x20000800) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':'], 0x20) 4.330846676s ago: executing program 2 (id=8446): getdents64(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRES64=r0, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e280)={0x2020}, 0x1776) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="080000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c909ff0f00000000000087afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf", 0xee1}], 0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf254f00000008000300", @ANYRES32=r8, @ANYBLOB="50007a80"], 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x24004c00) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r11 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r11, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="af7eded501cf7e64523a97b828fab3e0c3f44cb7103ef881f664fc30a9ff933fe79de621f958aac094192a0d6d8e8f7b3405915c3e3dc678c94f6b55a1c1746f8bdd962eeaf8e50761c952f09d3c9118f0c1fc5672ae591cad8f1fb0efd252b8d9ca49803c3d57db519bd586ea8946bc73e752dd70b899eb81cdb6a37f584af982110bc22cd9a8719d1b4177006d896579bf51dbff4dd3a024111e1666b1d7f3c67aacdb55ad6291759b66dfc61cef54beab0877c1a19a4f52f38ac0c02444020930"], 0xc) syz_open_dev$dri(&(0x7f0000000200), 0x8, 0x511000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 3.932563533s ago: executing program 5 (id=8447): socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) 3.709124863s ago: executing program 6 (id=8448): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x153102) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x5, 0x7f, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000001c0), 0x71, r11}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r11, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x9, 0x7}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r13 = fcntl$dupfd(r10, 0x0, r10) setsockopt$RXRPC_SECURITY_KEY(r13, 0x110, 0x1, &(0x7f0000000000)='-}-)&\\\x00', 0x7) write$hidraw(r13, &(0x7f0000000000)="a4eb3bc784d3c5bda3bbfd9bc28c394fae2d88a23f2b3ccf948b858e2f629a8449d7f80116023e0c9981c29629eb", 0x2e) 3.541483993s ago: executing program 5 (id=8449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @pix={0x5, 0x8001, 0x7367020a, 0x7, 0xe7b, 0xc, 0x1, 0x3, 0x0, 0x3, 0x1, 0x4}}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.317200721s ago: executing program 5 (id=8450): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251500000068000180140002006970366772653000000000000000000008000100", @ANYBLOB="d90744eeec3e2983382f11aaa6b537ae07de80dc0f4a9ab0d26688d6d3e4c5922d9a06c4fa51c279997aec7221f67fc337", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYBLOB="5de57ec74ad4ff9180287c421afb465af85d912863583f9cc00cfc146b9169180288d83043fa399edeff048ad75b782b55cbdfcc55d7821743e0a0a3e07805453657d9bad4f70d78d6a226624b76674742832c4bf34a045f90a0386c86b8f9532867a944b087d314211d00ac5eb343ac32d75cbaad87a12a5db3c758b2ecf3c77273041548c85c726b3530cc205aef795c4ddc6540b579fdee84d5dc3ab3ddcf0b4f7b80dd359e1e1fd031b8af74373d5bba8e4e7a16b75806d9ae3f3b16f30e7c40"], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0xc8e2e5b2270ac528) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x89, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) 3.109337741s ago: executing program 3 (id=8451): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x8, 0x8000, 0xaa}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000003}]}]}], {0x14}}, 0xc0}}, 0x0) 2.950476826s ago: executing program 2 (id=8453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x100) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/79) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000440)=[@release={0x40046304}], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001000)="40f89f3d4c95230c984038e20912943c702a0761f4c34c68791d6e2850e56eaca785a98f29219a11f7d529d9d1af49d8d301a04e05a092164ead28fd63c11cfc4b91d13bd266b2f4f41290b72638ff1b146078fe24b9abc399b6ea235eabe09bf4003d04300f36f1dc469f160b2fa9ea3305a505252f4b24610e1b8978f5b9f60dd46fb5def3a6c72ba2a75fd32661f01cbeb526547161d89e7c753173f187892a8b2a81fd0357d3e833d0223ffcf6ed9717099e1fd1aca3f0806512a3569e98631dea6f01efd72d50aacc13227363cd72c712379a5c9075227dc5b2e5e6efabcf6e", 0xe2}, 0x64) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xfffffffe, 0x0, 0x7d, 0x1, 0x5, 0x3, 0x3, 0x13, 0x4, [0x55f, 0x7ff2, 0x800, 0x7, 0x9, 0x4, 0x7, 0x40000000]}}) r9 = dup3(r7, r0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1000000b, 0x6, 0xfffffffe, 0xb49, 0x9, 0xb, 0x5, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.917580722s ago: executing program 3 (id=8454): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'wg1\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0x5, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffff6, &(0x7f0000000200)=[{0xffffffffffffdff7, 0x0, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x10}) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 1.93534194s ago: executing program 3 (id=8455): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x1, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x1, 0x3, 0x7, 0x100}, "01ff8e82d6f8ae5c1f2d98b2"}}}}, 0x3e) (fail_nth: 7) 1.914977182s ago: executing program 2 (id=8456): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6e, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0x9, "c8f46976e79e56"}]}, @lsrr={0x83, 0xf, 0x54, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 1.803547751s ago: executing program 2 (id=8457): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0xfffc}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x5, 0x6e5, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2c, 0xb3, 0xbb, 0x10, 0x19d2, 0x1095, 0x42c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d3, 0x2, 0x2, 0x60, 0x40, 0x8, "", [{{0x9, 0x4, 0x95, 0xb0, 0xf, 0xff, 0xff, 0xff, 0xbd, [@hid_hid={0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x220}}], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0xf7, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xf3, 0x8, 0x3, [@generic={0x4c, 0x6, "b841e2fffa63761e7745d5c8be8c7da72f93ad53cd075b084d911245d212168746fdfa57aa3f1b13d6565516adecb3a5f3918290cfaa0a979a1ebb05f5c0ec74ded26b4bbefc5897f85b"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x81, 0xb, 0x99}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x6, 0x3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0xfb, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xf}, @generic={0x3a, 0x11, "1e143cfafe9c727bc9a1d15af20a728d908eb7f93a592a0e197e92d5d9ab046894bba768dd070d61c7fe86890dc575a87bc4fed1f2662538"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x13, 0x8}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x2, 0x1, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x1, 0x6, 0xc, [@generic={0xac, 0xd, "9909d04b172e17b8baa759e1c0bad5a2055b3bddd320d097acfcb650e085624b93a7edff6da55ddcf608e39f62b2a8ad5c9dfbf1c573df976571759ab0d68de2939e08dd45e5e525b8e9568033f2a0aa9f6a94e798c8ad9905367bc2620040b2f6ad2f175c7fa438e1991dd97f171a912d503528e74b96cb9405db6c7ae54ea65ee310d1c3c824187826cb5e62f9aa791ac69f81fb6af722893ee2ddbd0fc8534b6d9fe2465d381c342f"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x9, 0x3, 0x0, [@generic={0x3f, 0x22, "1fd1a5b675cca5b27247a17cb15f3304c5e684055fe91d9bd1b080a0e0958cb1e1a61062570ee36075dd14ce2ea7724540b2b0b7bdfebd21a93b4b7603"}, @generic={0xe7, 0x31, "c948ffa202f7bab2a8777ebd0341bc3c2dcc6c8f1108f051374d07b1d9dc495b8432828b65432e561d2e04ba1ee84752a7017d08f8192ce87e01eaab9f5d99d786c3f1d1fceffbc4fc7f245e9afaf4944acc1829b4241224444ce9fe2997be02bb6d543a0aea917c353923f38d0bfcba09aae5ce0648387f9e032d3c14d19f9587e6ac92bee78e00448fc3e53366544cce32fb6431b437f70d50f26d522c733695daa5ea704be9115570d9a8872ac33c342d7933debb5883c0cc4d48b4453c2e9a839324cc1ce4608d34d6a92c336cb4fc55b278e8f01d40b030256aea1ec8df29aa50ada6"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x5, 0x7, [@generic={0xd2, 0xf, "60591d7ecaf95812f6f9ada12450e1cf4029893a05d6ad32a86bcf9963eb4274b487e2d2411dd3a675fc163faf54cf8cc5078b9ec3ef345f81beba38af52faeda354a3f007db3a6df8575a9eceb23fdc4a5fcbb70688f96239a7a90e3298c374d7edfa469c248884769b05b9ac7f844153c31cb79195e841a0eed09db85dc86c713eaecda7a8b9375d357fb1c83aaaf1018541b992627eb1cc726adcfd4f8db60f28e220bd88545b812ba639f04bb763f6a417388c98fb87045945f159a91abb7d6a46670e53c7379992a61c62affaa2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xb3e2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0xf, 0x1, [@generic={0x6c, 0x22, "411420716a590e2d8b568141aa0278ef24806e24b7a86cf542a002400244ef6fbf0b369650443d801904ccd700666989e2a375e28ad672f4537e8376ff0b483e4e7bac321da368f5832656e745f84701fb58d703b5f7fa5d958864e853c81dcef9c3c5272ea637bb1722"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x0, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}, @generic={0x20, 0x2, "530432ea274c3a9129b8bfaaa75a39ade94e1e45246504f1b03e31333cbb"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x5, 0x9, 0x7}}]}}, {{0x9, 0x4, 0xa3, 0x4, 0x5, 0x72, 0xd8, 0xab, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0x28}, [@mixer_unit={0x8, 0x24, 0x4, 0x6, 0x70, "54e560"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0xc, '0x ~'}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x5, 0x5, "2c8c7997df18"}]}], [{{0x9, 0x5, 0xe, 0x4, 0x8, 0x6, 0x9}}, {{0x9, 0x5, 0x6, 0xb, 0x20, 0x7, 0xff, 0x5, [@generic={0xeb, 0x21, "4cf12a65ae789756edd42de1a048063cddea65ade9307127f3ceb8c5844bbffd40c330400001abcf901231a8c31bb1b9d1293a2bc9f3f30288e0a903fd9af66e774e03f2e546849ef7ed9faee3b1c373eccf1d071de55750ea97f4299587e2cd7b40e51d123ca38a6a2f769ac4acb60133848e4cfff08175f3f93b3f21931ed1eb7fb5eeb5db4d9b1ae08b45112666fea2c4713a44489fed51c8d391fb49c87cc4f25e709075b6fb386a87de956b609e9ed42e0e142d26dc2e27a4d4fdd7e7468b6bc0768397e588c56a6f133a82b9b9539b92697822766958dbbfb0b75ae9014cc22ddc3d46b2d07d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6f, 0x0, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x7f, 0x6, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x8b, 0xd2, 0x40, [@generic={0x101, 0x21, "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"}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0xfb, 0xff, 0x0, 0xf1}, 0x7d, &(0x7f00000000c0)={0x5, 0xf, 0x7d, 0x4, [@generic={0x5c, 0x10, 0xa, "70767a40d086163dd32eb4208dbfabba558cfe10259bb591e9a78099dc233c4c0ab8b923bfa994ae4ea85946d95da19edf7e13af43ef55ec4c89aea529d1b1701073dfde5f92cf37e92ba5468b394bda8df2781f103c7f0b55"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf3, 0x0, 0x7, 0x3763, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x9, 0x6ab}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x4, 0xe5}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x407}}, {0xb, &(0x7f00000001c0)=@string={0xb, 0x3, "07747fa8ce680f0a7a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x10, &(0x7f0000000340)=@string={0x10, 0x3, "48f27b4c8cb1113d2309c3ef07e7"}}, {0x92, &(0x7f0000000380)=ANY=[@ANYBLOB="92036aeb2b77ee12d654388e544a2fd89669963a9ed6da3df2af2710e8058d7ee4627b514a0e8c8e8d6d856a06fbdf7200f013ce152bd92fa52d67d1595ccf9b65ac71cb07dd1b1e8e777ed33352344e33e89e3adc79708bad3b949d46b28cfe870c4d5f9becff512941cb4f2763385207ac6dc33164bbbc2b46f2461f50498bc938d2"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1a3b}}, {0xa5, &(0x7f0000000bc0)=@string={0xa5, 0x3, "8f8413077f642b13be9a28d0b7d76a760b4c0172121f180cc54d08e4788a6b32302f2e3a0ab45db759297dac5e18fba152df8b5b1973d838d92e50b69165ee4dc3e793e635616f39a2f25ee2b11229feabd32b63237f997781bd35083046abf92d13dca3a2ce6c160597c708a1b1410cb1a7d44a35770d486e08b2bedbd2b247ece782d20d7bdd4282b68118e0a0e41950b39cca1720e7ec9f3e04a6cd4615a67cf7e2"}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000d00)={0x5, 0x5, 0x1, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfd, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket(0xa, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xe4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xe}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x100}]}, {0x4}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb0a7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xe, 0x6, 0xa, 0x3, 0xe, 0x1, 0x3, 0xd, 0xf, 0xe, 0x7, 0xa, 0x0, 0xe, 0xd, 0xd], 0x0, [0x233, 0x400, 0x8, 0x4, 0x587, 0x3, 0x101, 0x3, 0x8, 0x7, 0x9, 0x7, 0x9, 0x0, 0x4, 0x6], [0x3, 0x7f, 0xd9a1, 0x1, 0x5, 0x972, 0x8, 0xfffe, 0x3, 0x4, 0x4, 0x3, 0x6, 0x1ff, 0x0, 0x500]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8000000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3149ec6}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0xb1ae54093a5f73d4}, 0x4004000) connect$pppoe(r3, 0x0, 0x42) socket$inet6_tcp(0xa, 0x1, 0x0) 1.22137146s ago: executing program 3 (id=8458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @remote, 0xfffeffff}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="904621a1fb661959fb4387cd894882e302b7689fc828e0947b101243a41548f41eed39cfdbd8d24c0852fec12bf2", 0x2e}], 0x1, &(0x7f00000000c0)=[@init={0x18, 0x84, 0x2000000, {0x9, 0x7ff, 0x4, 0x3}}], 0x18, 0x800}, {&(0x7f0000000100)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="f508b5c88e4b58db719ce056c5e20cd8e797ff8ff481c7a6167bd64e51fbd1ab0ae4ae6e2953f54e1c709036a4c116d6df0a85fccd314ad6527983b5835b24e94f07eac19bd3970acc820a078c5a23a99d3f981236ade216e675754fa4ec9b8dc4dc668f28c4cb0883ff06cf", 0x6c}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x2, 0x6, 0x7, 0x1}}], 0x18, 0x4000}, {&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x4, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000280)="39cf1981a26a4f4d78deb49945cb71af7b974f0d7a9de8ce23a79461293f05ac1f42030d49d294114b77297827197c9ad1e89dddd1f9b7a64429b74af8fc65eed493c12073087a71a64fb5ed78750e49cc490ec595c2", 0x56}], 0x1, 0x0, 0x0, 0x20000001}], 0x3, 0x20008000) 975.307123ms ago: executing program 3 (id=8459): socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) 608.972794ms ago: executing program 6 (id=8460): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @pix={0x5, 0x8001, 0x7367020a, 0x7, 0xe7b, 0xc, 0x1, 0x3, 0x0, 0x3, 0x1, 0x4}}}) 431.92865ms ago: executing program 6 (id=8461): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) syz_usb_connect$midi(0x3, 0x42, &(0x7f0000000800)=ANY=[@ANYBLOB="120110020000000840e97f7cb910ef1eba9367d2af62050ba017010203010902300001010110040904000001010320030724019200070007240300fa005509050343000407010107250103198278"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000880)='autofs\x00', 0x1) io_submit(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000008c0)) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025c77000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4) kernel console output (not intermixed with test programs): _thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1784.612478][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.653033][ T3688] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.685811][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.693170][ T3688] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1784.698612][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.703512][ T3688] Node 0 [ 1784.713812][ T5895] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1784.713842][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.737442][ T5895] usb 4-1: config 0 descriptor?? [ 1784.742748][ T3688] DMA32 free:1211392kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155448kB inactive_anon:0kB active_file:63836kB inactive_file:15716kB unevictable:1536kB writepending:2340kB zspages:0kB present:3129332kB managed:2552720kB mlocked:0kB bounce:0kB free_pcp:42704kB local_pcp:21336kB free_cma:0kB [ 1784.780679][ T3688] lowmem_reserve[]: 0 0 0 0 0 [ 1784.785464][ T3688] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1784.823186][ T3688] lowmem_reserve[]: 0 0 0 0 0 [ 1784.828292][ T3688] Node 1 Normal free:3938264kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11288kB local_pcp:9240kB free_cma:0kB [ 1784.861544][ T3688] lowmem_reserve[]: 0 0 0 0 [ 1784.861594][ T797] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1784.861606][ T3688] 0 [ 1784.867227][ T3688] [ 1784.875401][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.881550][ T3688] Node 0 [ 1784.896303][ T797] usb 6-1: Product: syz [ 1784.903500][ T797] usb 6-1: Manufacturer: syz [ 1784.908642][ T797] usb 6-1: SerialNumber: syz [ 1784.912895][ T3688] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1784.929618][ T797] usb 6-1: config 0 descriptor?? [ 1784.944306][ T3688] Node 0 DMA32: 7715*4kB (UME) 6041*8kB (UME) 3917*16kB (UME) 1384*32kB (UME) 204*64kB (UME) 35*128kB (UME) 111*256kB (UME) 128*512kB (UME) 107*1024kB (UM) 11*2048kB (UME) 191*4096kB (UM) = 1212068kB [ 1784.949373][ T797] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1785.011144][ T3688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1785.029243][ T3688] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 2*32kB (M) 5*64kB (UM) 4*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (M) 3*2048kB (UM) 958*4096kB (M) = 3938264kB [ 1785.065718][ T3688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.065745][ T3688] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1785.065763][ T3688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.065780][ T3688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.065797][ T3688] 52899 total pagecache pages [ 1785.065820][ T3688] 0 pages in swap cache [ 1785.065830][ T3688] Free swap = 124996kB [ 1785.065839][ T3688] Total swap = 124996kB [ 1785.065849][ T3688] 2097051 pages RAM [ 1785.065857][ T3688] 0 pages HighMem/MovableOnly [ 1785.065866][ T3688] 427036 pages reserved [ 1785.065874][ T3688] 0 pages cma reserved [ 1785.272646][ T3729] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1785.548703][ T797] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1785.557116][ T797] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1785.568835][ T797] usb 6-1: USB disconnect, device number 35 [ 1785.652531][ T3745] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1786.182696][ T3776] FAULT_INJECTION: forcing a failure. [ 1786.182696][ T3776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.204203][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.5.8109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.204258][ T3776] Tainted: [L]=SOFTLOCKUP [ 1786.204266][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1786.204278][ T3776] Call Trace: [ 1786.204286][ T3776] [ 1786.204295][ T3776] dump_stack_lvl+0xe8/0x150 [ 1786.204328][ T3776] should_fail_ex+0x412/0x560 [ 1786.204378][ T3776] _copy_to_user+0x31/0xb0 [ 1786.204401][ T3776] rng_dev_read+0x3ef/0x7b0 [ 1786.204425][ T3776] ? __pfx_rng_dev_read+0x10/0x10 [ 1786.204449][ T3776] ? bpf_lsm_file_permission+0x9/0x20 [ 1786.204471][ T3776] ? security_file_permission+0x75/0x260 [ 1786.204496][ T3776] ? rw_verify_area+0x2a6/0x4d0 [ 1786.204521][ T3776] vfs_readv+0x587/0x840 [ 1786.204548][ T3776] ? __pfx_rng_dev_read+0x10/0x10 [ 1786.204574][ T3776] ? __pfx_vfs_readv+0x10/0x10 [ 1786.204611][ T3776] ? __fget_files+0x2a/0x420 [ 1786.204643][ T3776] ? __fget_files+0x3a0/0x420 [ 1786.204669][ T3776] ? __fget_files+0x2a/0x420 [ 1786.204704][ T3776] __ia32_compat_sys_preadv+0x1c6/0x2c0 [ 1786.204731][ T3776] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 1786.204765][ T3776] __do_fast_syscall_32+0x20d/0x640 [ 1786.204790][ T3776] ? do_fast_syscall_32+0x33/0x70 [ 1786.204811][ T3776] ? asm_int80_emulation+0x1a/0x20 [ 1786.204829][ T3776] ? do_int80_emulation+0x274/0x4d0 [ 1786.204850][ T3776] ? trace_irq_disable+0x3b/0x150 [ 1786.204880][ T3776] do_fast_syscall_32+0x33/0x70 [ 1786.204903][ T3776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1786.204926][ T3776] RIP: 0023:0xf7f07f6c [ 1786.204944][ T3776] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1786.204961][ T3776] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 1786.204982][ T3776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1786.204996][ T3776] RDX: 0000000000000001 RSI: 0000000000000802 RDI: 0000000040000008 [ 1786.205009][ T3776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1786.205020][ T3776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1786.205031][ T3776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1786.205058][ T3776] [ 1786.477924][ T797] usb 4-1: USB disconnect, device number 78 [ 1786.484958][ T796] usb 3-1: USB disconnect, device number 42 [ 1786.630144][T27548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1786.644534][T27548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1786.658730][T27548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1786.672764][T27548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1786.685022][T27548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1786.711643][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1786.722163][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1786.731836][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1786.741978][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1786.751609][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1787.055950][ T797] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1787.371841][ T797] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 1787.380112][ T797] usb 6-1: config 0 has no interface number 0 [ 1787.395411][ T3836] chnl_net:caif_netlink_parms(): no params data found [ 1787.565043][ T797] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1787.596563][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.604607][ T797] usb 6-1: Product: syz [ 1787.615987][ T797] usb 6-1: Manufacturer: syz [ 1787.620624][ T797] usb 6-1: SerialNumber: syz [ 1787.636384][ T797] usb 6-1: config 0 descriptor?? [ 1787.867250][ T797] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1787.991584][ T3915] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1788.138175][ T3835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.180735][ T3835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.412783][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.427203][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.440921][ T797] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1788.451952][ T3836] bridge_slave_0: entered allmulticast mode [ 1788.458862][ T797] sq905c 6-1:0.6: probe with driver sq905c failed with error -71 [ 1788.469813][ T3836] bridge_slave_0: entered promiscuous mode [ 1788.478303][ T797] usb 6-1: USB disconnect, device number 36 [ 1788.487848][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.501132][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.508737][ T3836] bridge_slave_1: entered allmulticast mode [ 1788.519594][ T3836] bridge_slave_1: entered promiscuous mode [ 1788.583559][ T3836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.597634][ T3836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.684116][ T3836] team0: Port device team_slave_0 added [ 1788.698076][ T3836] team0: Port device team_slave_1 added [ 1788.759970][ T3836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.770389][ T3836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.798243][ T3836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.827845][ T3836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.843571][ T3836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.876501][ T5832] Bluetooth: hci5: command tx timeout [ 1788.879026][ T3836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.162920][ T3836] hsr_slave_0: entered promiscuous mode [ 1789.179709][ T3836] hsr_slave_1: entered promiscuous mode [ 1789.299262][T29155] bridge_slave_1: left allmulticast mode [ 1789.305485][T29155] bridge_slave_1: left promiscuous mode [ 1789.313399][T29155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.325137][T29155] : left allmulticast mode [ 1789.330094][T29155] : left promiscuous mode [ 1789.334896][T29155] bridge0: port 1() entered disabled state [ 1789.602261][T29155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1789.612473][T29155] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1789.621919][T29155] bond0 (unregistering): Released all slaves [ 1789.632900][T29155] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1789.644283][T29155] bond1 (unregistering): Released all slaves [ 1790.166394][ T797] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1790.368302][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 1790.395937][ T797] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1790.404340][ T797] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1790.435642][ T797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1790.449814][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1790.462108][ T797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1790.472291][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1790.485988][ T797] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1790.535526][T29155] hsr_slave_0: left promiscuous mode [ 1790.545922][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.574515][T29155] hsr_slave_1: left promiscuous mode [ 1790.582649][ T797] usb 2-1: config 0 descriptor?? [ 1790.588552][T29155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.598391][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.616256][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.624815][T29155] pimreg (unregistering): left allmulticast mode [ 1790.632896][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.671365][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.700770][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.738135][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.765718][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.777532][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.805135][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.822682][ T797] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1790.835998][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.846827][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1790.866922][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.879435][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.890622][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.906355][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.917709][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.929202][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.941083][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.956670][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.965880][ T5832] Bluetooth: hci5: command tx timeout [ 1790.976731][T29155] team0 (unregistering): Port device team_slave_1 removed [ 1790.984278][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.008080][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.023588][T29155] team0 (unregistering): Port device team_slave_0 removed [ 1791.031483][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1791.038475][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1791.042466][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.047205][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1791.067740][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1791.076805][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1791.086766][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1791.099581][ T5909] usb 2-1: USB disconnect, device number 100 [ 1791.117261][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.119838][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1791.142160][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1791.151766][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.162451][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.175543][ T5909] usblp0: removed [ 1791.193750][ T10] usb 6-1: config 0 descriptor?? [ 1791.196275][ T4205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.435325][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1791.595758][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.602097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.680346][ T4211] FAULT_INJECTION: forcing a failure. [ 1791.680346][ T4211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.696299][ T4211] CPU: 0 UID: 0 PID: 4211 Comm: syz.5.8127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1791.696337][ T4211] Tainted: [L]=SOFTLOCKUP [ 1791.696346][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1791.696356][ T4211] Call Trace: [ 1791.696363][ T4211] [ 1791.696372][ T4211] dump_stack_lvl+0xe8/0x150 [ 1791.696403][ T4211] should_fail_ex+0x412/0x560 [ 1791.696432][ T4211] _copy_to_user+0x31/0xb0 [ 1791.696453][ T4211] __copy_siginfo_to_user32+0xd3/0x150 [ 1791.696480][ T4211] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 1791.696514][ T4211] ? posixtimer_deliver_signal+0x304/0x410 [ 1791.696543][ T4211] ia32_setup_rt_frame+0x6ba/0xae0 [ 1791.696579][ T4211] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1791.696611][ T4211] arch_do_signal_or_restart+0x460/0x830 [ 1791.696636][ T4211] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1791.696676][ T4211] exit_to_user_mode_loop+0x86/0x480 [ 1791.696698][ T4211] ? rcu_is_watching+0x15/0xb0 [ 1791.696727][ T4211] __do_fast_syscall_32+0x415/0x640 [ 1791.696752][ T4211] ? do_fast_syscall_32+0x33/0x70 [ 1791.696773][ T4211] ? asm_int80_emulation+0x1a/0x20 [ 1791.696791][ T4211] ? do_int80_emulation+0x274/0x4d0 [ 1791.696811][ T4211] ? trace_irq_disable+0x3b/0x150 [ 1791.696841][ T4211] do_fast_syscall_32+0x33/0x70 [ 1791.696863][ T4211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1791.696886][ T4211] RIP: 0023:0xf7f07f6c [ 1791.696903][ T4211] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1791.696919][ T4211] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 1791.696940][ T4211] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 00000000800004c0 [ 1791.696950][ T4211] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1791.696960][ T4211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1791.696969][ T4211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1791.696979][ T4211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1791.697004][ T4211] [ 1791.956508][T10823] usb 6-1: USB disconnect, device number 37 [ 1791.996856][T10823] usblp0: removed [ 1792.047635][ T4253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8130'. [ 1792.049302][ T4265] FAULT_INJECTION: forcing a failure. [ 1792.049302][ T4265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.087124][ T4265] CPU: 1 UID: 0 PID: 4265 Comm: syz.3.8129 Tainted: G L syzkaller #0 PREEMPT(full) [ 1792.087157][ T4265] Tainted: [L]=SOFTLOCKUP [ 1792.087165][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1792.087176][ T4265] Call Trace: [ 1792.087184][ T4265] [ 1792.087193][ T4265] dump_stack_lvl+0xe8/0x150 [ 1792.087235][ T4265] should_fail_ex+0x412/0x560 [ 1792.087268][ T4265] _copy_to_iter+0x404/0x17d0 [ 1792.087311][ T4265] ? __pfx__copy_to_iter+0x10/0x10 [ 1792.087345][ T4265] ? stats_show+0x6e6/0x700 [ 1792.087453][ T4265] seq_read_iter+0xbf5/0xe10 [ 1792.087495][ T4265] seq_read+0x367/0x480 [ 1792.087517][ T4265] ? kstrtouint+0x6e/0xe0 [ 1792.087549][ T4265] ? __pfx_seq_read+0x10/0x10 [ 1792.087572][ T4265] ? __debugfs_file_get+0x5e0/0x720 [ 1792.087599][ T4265] ? __pfx___debugfs_file_get+0x10/0x10 [ 1792.087623][ T4265] ? apparmor_file_permission+0x1f4/0x300 [ 1792.087653][ T4265] full_proxy_read+0x127/0x1f0 [ 1792.087677][ T4265] ? __pfx_full_proxy_read+0x10/0x10 [ 1792.087701][ T4265] vfs_read+0x20c/0xa70 [ 1792.087720][ T4265] ? fdget_pos+0x246/0x320 [ 1792.087752][ T4265] ? __pfx___mutex_lock+0x10/0x10 [ 1792.087776][ T4265] ? __pfx_vfs_read+0x10/0x10 [ 1792.087798][ T4265] ? __fget_files+0x2a/0x420 [ 1792.087829][ T4265] ? __fget_files+0x3a0/0x420 [ 1792.087854][ T4265] ? __fget_files+0x2a/0x420 [ 1792.087889][ T4265] ksys_read+0x150/0x270 [ 1792.087912][ T4265] ? __pfx_ksys_read+0x10/0x10 [ 1792.087943][ T4265] __do_fast_syscall_32+0x20d/0x640 [ 1792.087968][ T4265] ? do_fast_syscall_32+0x33/0x70 [ 1792.087988][ T4265] ? asm_int80_emulation+0x1a/0x20 [ 1792.088006][ T4265] ? do_int80_emulation+0x274/0x4d0 [ 1792.088027][ T4265] ? trace_irq_disable+0x3b/0x150 [ 1792.088059][ T4265] do_fast_syscall_32+0x33/0x70 [ 1792.088082][ T4265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1792.088105][ T4265] RIP: 0023:0xf7fb2f6c [ 1792.088124][ T4265] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1792.088141][ T4265] RSP: 002b:00000000f543450c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1792.088161][ T4265] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800034c0 [ 1792.088175][ T4265] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.088187][ T4265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1792.088199][ T4265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1792.088216][ T4265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1792.088246][ T4265] [ 1792.164149][ T3836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1792.487476][ T3836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1792.509587][ T3836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1792.565351][ T3836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1792.606841][T10823] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1792.719546][T29155] IPVS: stop unused estimator thread 0... [ 1792.722821][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8131'. [ 1792.777925][T10823] usb 2-1: device descriptor read/64, error -71 [ 1792.843065][ T3836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.882530][ T3836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.903752][T29157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.910988][T29157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.951433][T29157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.958676][T29157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.025064][T10823] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1793.033327][ T3836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.046148][ T5909] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1793.058450][ T5832] Bluetooth: hci5: command tx timeout [ 1793.122236][ T3836] veth0_vlan: entered promiscuous mode [ 1793.167692][ T3836] veth1_vlan: entered promiscuous mode [ 1793.177713][T10823] usb 2-1: device descriptor read/64, error -71 [ 1793.205812][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1793.214203][ T5909] usb 6-1: config 0 has an invalid interface number: 162 but max is 1 [ 1793.236133][ T5909] usb 6-1: config 0 has an invalid interface number: 120 but max is 1 [ 1793.253623][ T5909] usb 6-1: config 0 has no interface number 0 [ 1793.262870][ T3836] veth0_macvtap: entered promiscuous mode [ 1793.268770][ T5909] usb 6-1: config 0 has no interface number 1 [ 1793.288141][ T3836] veth1_macvtap: entered promiscuous mode [ 1793.293961][ T5909] usb 6-1: config 0 interface 120 has no altsetting 0 [ 1793.296385][T10823] usb usb2-port1: attempt power cycle [ 1793.314940][ T5909] usb 6-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=25.32 [ 1793.337362][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.348122][ T3836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.359309][ T5909] usb 6-1: Product: syz [ 1793.368212][ T5909] usb 6-1: Manufacturer: syz [ 1793.377196][ T5909] usb 6-1: SerialNumber: syz [ 1793.397253][ T3836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.413158][ T5909] usb 6-1: config 0 descriptor?? [ 1793.422791][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.432734][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.454872][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.473183][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.618469][T29153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.636157][T29153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.645777][T10823] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1793.666761][T10823] usb 2-1: device descriptor read/8, error -71 [ 1793.691534][ T5909] usb 6-1: USB disconnect, device number 38 [ 1793.720289][T29153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.730380][T29153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.877122][ T4334] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1793.906048][T10823] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1793.926831][T10823] usb 2-1: device descriptor read/8, error -71 [ 1794.035927][T10823] usb usb2-port1: unable to enumerate USB device [ 1794.237196][ T4341] FAULT_INJECTION: forcing a failure. [ 1794.237196][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.259808][ T4341] CPU: 0 UID: 0 PID: 4341 Comm: syz.3.8135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1794.259835][ T4341] Tainted: [L]=SOFTLOCKUP [ 1794.259841][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1794.259851][ T4341] Call Trace: [ 1794.259858][ T4341] [ 1794.259866][ T4341] dump_stack_lvl+0xe8/0x150 [ 1794.259896][ T4341] should_fail_ex+0x412/0x560 [ 1794.259924][ T4341] should_failslab+0xa8/0x100 [ 1794.259947][ T4341] __kvmalloc_node_noprof+0x178/0x8a0 [ 1794.259966][ T4341] ? nla_strdup+0xb8/0x140 [ 1794.259981][ T4341] ? nf_tables_newchain+0x1c7a/0x2890 [ 1794.260008][ T4341] nf_tables_newchain+0x1c7a/0x2890 [ 1794.260040][ T4341] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1794.260090][ T4341] ? nft_trans_table_add+0x230/0x430 [ 1794.260115][ T4341] ? nfnl_pernet+0x23/0x240 [ 1794.260144][ T4341] ? __nla_parse+0x40/0x60 [ 1794.260163][ T4341] nfnetlink_rcv+0x1240/0x27b0 [ 1794.260212][ T4341] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1794.260247][ T4341] ? ref_tracker_free+0x693/0x840 [ 1794.260293][ T4341] ? __netlink_deliver_tap+0x807/0x850 [ 1794.260317][ T4341] ? netlink_deliver_tap+0x2e/0x1b0 [ 1794.260354][ T4341] netlink_unicast+0x80f/0x9b0 [ 1794.260382][ T4341] ? __pfx_netlink_unicast+0x10/0x10 [ 1794.260404][ T4341] ? netlink_sendmsg+0x650/0xb40 [ 1794.260425][ T4341] ? skb_put+0x11b/0x210 [ 1794.260447][ T4341] netlink_sendmsg+0x813/0xb40 [ 1794.260478][ T4341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1794.260503][ T4341] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1794.260528][ T4341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1794.260549][ T4341] ____sys_sendmsg+0x972/0x9f0 [ 1794.260576][ T4341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1794.260598][ T4341] ? kstrtoull+0x12f/0x1d0 [ 1794.260626][ T4341] ___sys_sendmsg+0x2a5/0x360 [ 1794.260649][ T4341] ? __pfx____sys_sendmsg+0x10/0x10 [ 1794.260669][ T4341] ? get_pid_task+0x20/0x1f0 [ 1794.260684][ T4341] ? get_pid_task+0x20/0x1f0 [ 1794.260697][ T4341] ? get_pid_task+0x20/0x1f0 [ 1794.260735][ T4341] ? __fget_files+0x2a/0x420 [ 1794.260757][ T4341] ? __fget_files+0x3a0/0x420 [ 1794.260787][ T4341] __sys_sendmsg+0x183/0x260 [ 1794.260807][ T4341] ? __pfx___sys_sendmsg+0x10/0x10 [ 1794.260844][ T4341] __do_fast_syscall_32+0x20d/0x640 [ 1794.260867][ T4341] ? do_fast_syscall_32+0x33/0x70 [ 1794.260884][ T4341] ? asm_int80_emulation+0x1a/0x20 [ 1794.260900][ T4341] ? do_int80_emulation+0x274/0x4d0 [ 1794.260916][ T4341] ? trace_irq_disable+0x3b/0x150 [ 1794.260942][ T4341] do_fast_syscall_32+0x33/0x70 [ 1794.260961][ T4341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1794.260980][ T4341] RIP: 0023:0xf7fb2f6c [ 1794.260996][ T4341] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1794.261010][ T4341] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1794.261028][ T4341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1794.261040][ T4341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1794.261058][ T4341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1794.261067][ T4341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1794.261076][ T4341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1794.261101][ T4341] [ 1794.840592][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1794.905918][T10823] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1795.065930][T10823] usb 6-1: Using ep0 maxpacket: 16 [ 1795.073127][T10823] usb 6-1: config 2 has an invalid interface number: 142 but max is 0 [ 1795.082490][T10823] usb 6-1: config 2 has an invalid descriptor of length 110, skipping remainder of the config [ 1795.094713][T10823] usb 6-1: config 2 has no interface number 0 [ 1795.101317][ T4382] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1795.113774][T10823] usb 6-1: config 2 interface 142 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1795.128993][ T5832] Bluetooth: hci5: command tx timeout [ 1795.143730][T10823] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1795.153339][T10823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.161783][T10823] usb 6-1: Product: syz [ 1795.166307][T10823] usb 6-1: Manufacturer: syz [ 1795.170934][T10823] usb 6-1: SerialNumber: syz [ 1795.190706][T10823] usb 6-1: NFC: intf ffff88807c2ed000 id ffffffff8f1d0ca0 [ 1795.238164][ T4393] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1795.390451][T10823] usb 6-1: USB disconnect, device number 39 [ 1795.555857][ T797] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1795.708352][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.715692][ T5909] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1795.729356][ T797] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1795.742548][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1795.754891][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1795.765062][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1795.830148][ T797] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1795.844330][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1795.856392][ T797] usb 3-1: Product: syz [ 1795.866853][ T797] usb 3-1: Manufacturer: syz [ 1795.871475][ T797] usb 3-1: SerialNumber: syz [ 1795.874114][ T797] usb 3-1: config 0 descriptor?? [ 1795.887259][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1795.895359][ T5909] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1795.914125][ T5909] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.925338][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1795.946549][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.104275][ T4395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8147'. [ 1796.119939][ T797] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1796.135165][ T797] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1796.152788][ T797] usb 3-1: USB disconnect, device number 43 [ 1796.175227][ T5909] usb 2-1: USB disconnect, device number 105 [ 1796.245686][ T5895] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1796.398595][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1796.407568][ T5895] usb 6-1: config 0 has no interface number 0 [ 1796.413727][ T5895] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1796.426119][ T5895] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.436515][ T5895] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1796.450797][ T5895] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1796.458522][ T5895] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1796.467725][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.480890][ T5895] usb 6-1: config 0 descriptor?? [ 1796.619060][ T4469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1796.645968][ T5909] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1796.686889][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1796.795689][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1796.809247][ T5909] usb 2-1: config index 0 descriptor too short (expected 52, got 45) [ 1796.817653][ T5909] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.832779][ T5909] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 1796.842099][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.850317][ T5909] usb 2-1: Product: syz [ 1796.854501][ T5909] usb 2-1: Manufacturer: syz [ 1796.860639][ T5909] usb 2-1: SerialNumber: syz [ 1797.079096][ T4410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.090994][T10823] usb 2-1: USB disconnect, device number 106 [ 1797.107475][ T5895] uclogic 0003:145F:0212.0035: pen parameters not found [ 1797.114470][ T5895] uclogic 0003:145F:0212.0035: interface is invalid, ignoring [ 1797.137396][ T5895] usb 6-1: USB disconnect, device number 40 [ 1797.215886][ T5908] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1797.366412][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1797.373790][ T5908] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1797.383366][ T5908] usb 3-1: config 0 has no interface number 0 [ 1797.390047][ T5908] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1797.416888][ T5908] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1797.426536][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.434626][ T5908] usb 3-1: Product: syz [ 1797.439166][ T5908] usb 3-1: Manufacturer: syz [ 1797.443778][ T5908] usb 3-1: SerialNumber: syz [ 1797.451445][ T5908] usb 3-1: config 0 descriptor?? [ 1797.460665][ T4488] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1797.671110][ T4488] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1797.724021][ T4526] FAULT_INJECTION: forcing a failure. [ 1797.724021][ T4526] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.737062][ T4526] CPU: 1 UID: 0 PID: 4526 Comm: syz.6.8167 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.737095][ T4526] Tainted: [L]=SOFTLOCKUP [ 1797.737103][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1797.737115][ T4526] Call Trace: [ 1797.737123][ T4526] [ 1797.737132][ T4526] dump_stack_lvl+0xe8/0x150 [ 1797.737166][ T4526] should_fail_ex+0x412/0x560 [ 1797.737208][ T4526] should_failslab+0xa8/0x100 [ 1797.737236][ T4526] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1797.737259][ T4526] ? __alloc_skb+0x1d0/0x7d0 [ 1797.737277][ T4526] ? __local_bh_enable_ip+0xd0/0x130 [ 1797.737306][ T4526] __alloc_skb+0x1d0/0x7d0 [ 1797.737329][ T4526] __ip_append_data+0x2ca0/0x3f30 [ 1797.737370][ T4526] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1797.737408][ T4526] ? __pfx___ip_append_data+0x10/0x10 [ 1797.737430][ T4526] ? do_raw_spin_lock+0x12b/0x2f0 [ 1797.737453][ T4526] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1797.737475][ T4526] ip_append_data+0x10d/0x190 [ 1797.737499][ T4526] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1797.737521][ T4526] udp_sendmsg+0x557/0x22f0 [ 1797.737560][ T4526] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1797.737580][ T4526] ? __lock_acquire+0x6b5/0x2cf0 [ 1797.737604][ T4526] ? __pfx_udp_sendmsg+0x10/0x10 [ 1797.737655][ T4526] ? __pfx_aa_sk_perm+0x10/0x10 [ 1797.737681][ T4526] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1797.737712][ T4526] ? __fget_files+0x3a0/0x420 [ 1797.737738][ T4526] ? sock_rps_record_flow+0x19/0x400 [ 1797.737760][ T4526] ? __pfx_inet_sendmsg+0x10/0x10 [ 1797.737782][ T4526] ? inet_sendmsg+0x29c/0x370 [ 1797.737803][ T4526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1797.737825][ T4526] ? __pfx_inet_sendmsg+0x10/0x10 [ 1797.737847][ T4526] __sys_sendto+0x5de/0x710 [ 1797.737869][ T4526] ? __pfx___sys_sendto+0x10/0x10 [ 1797.737910][ T4526] ? fput+0xa0/0xd0 [ 1797.737935][ T4526] ? ksys_write+0x242/0x270 [ 1797.737962][ T4526] __ia32_sys_sendto+0xdd/0x100 [ 1797.737985][ T4526] __do_fast_syscall_32+0x20d/0x640 [ 1797.738010][ T4526] ? do_fast_syscall_32+0x33/0x70 [ 1797.738030][ T4526] ? asm_int80_emulation+0x1a/0x20 [ 1797.738048][ T4526] ? do_int80_emulation+0x274/0x4d0 [ 1797.738074][ T4526] do_fast_syscall_32+0x33/0x70 [ 1797.738096][ T4526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1797.738117][ T4526] RIP: 0023:0xf6ffef6c [ 1797.738134][ T4526] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1797.738150][ T4526] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1797.738170][ T4526] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000c80 [ 1797.738184][ T4526] RDX: 0000000000006200 RSI: 0000000012000000 RDI: 0000000000000000 [ 1797.738202][ T4526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1797.738213][ T4526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1797.738224][ T4526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1797.738252][ T4526] [ 1798.049369][ T4529] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1798.091112][ T5908] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1798.102932][ T5908] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1798.196932][ T4538] team_slave_0: entered promiscuous mode [ 1798.203200][ T4538] team_slave_1: entered promiscuous mode [ 1798.210922][ T4538] vlan3: entered promiscuous mode [ 1798.237638][ T4538] team0: entered promiscuous mode [ 1798.429013][ T4550] lo: Caught tx_queue_len zero misconfig [ 1798.435060][ T4550] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1798.659686][ T4553] pim6reg: entered allmulticast mode [ 1799.746851][ T4583] bond1: entered allmulticast mode [ 1799.767533][ T4583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1799.905769][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1799.939691][ T5895] usb 3-1: USB disconnect, device number 44 [ 1800.970112][ T4638] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1801.210691][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1801.288409][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1801.466050][ T5909] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1801.513971][ T4679] FAULT_INJECTION: forcing a failure. [ 1801.513971][ T4679] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.558951][ T4679] CPU: 0 UID: 0 PID: 4679 Comm: syz.6.8195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.558982][ T4679] Tainted: [L]=SOFTLOCKUP [ 1801.559000][ T4679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1801.559012][ T4679] Call Trace: [ 1801.559020][ T4679] [ 1801.559029][ T4679] dump_stack_lvl+0xe8/0x150 [ 1801.559061][ T4679] should_fail_ex+0x412/0x560 [ 1801.559092][ T4679] should_failslab+0xa8/0x100 [ 1801.559117][ T4679] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1801.559138][ T4679] kmem_cache_alloc_noprof+0x87/0x650 [ 1801.559157][ T4679] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1801.559176][ T4679] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1801.559200][ T4679] radix_tree_node_alloc+0x7e/0x3a0 [ 1801.559224][ T4679] idr_get_free+0x2b3/0xa70 [ 1801.559254][ T4679] idr_alloc_u32+0x18d/0x320 [ 1801.559367][ T4679] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1801.559389][ T4679] ? tcf_exts_init_ex+0x414/0x7c0 [ 1801.559416][ T4679] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1801.559445][ T4679] cls_bpf_change+0x413/0xd90 [ 1801.559475][ T4679] ? __pfx___mutex_lock+0x10/0x10 [ 1801.559505][ T4679] ? __pfx_cls_bpf_change+0x10/0x10 [ 1801.559554][ T4679] tc_new_tfilter+0xff8/0x1780 [ 1801.559599][ T4679] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1801.559648][ T4679] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1801.559667][ T4679] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1801.559698][ T4679] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1801.559723][ T4679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1801.559747][ T4679] ? ref_tracker_free+0x693/0x840 [ 1801.559774][ T4679] ? __copy_skb_header+0xa3/0x4a0 [ 1801.559797][ T4679] ? __pfx_ref_tracker_free+0x10/0x10 [ 1801.559833][ T4679] netlink_rcv_skb+0x232/0x4b0 [ 1801.559862][ T4679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1801.559890][ T4679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1801.559927][ T4679] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.559959][ T4679] netlink_unicast+0x80f/0x9b0 [ 1801.559999][ T4679] ? __pfx_netlink_unicast+0x10/0x10 [ 1801.560026][ T4679] ? netlink_sendmsg+0x650/0xb40 [ 1801.560050][ T4679] ? skb_put+0x11b/0x210 [ 1801.560070][ T4679] netlink_sendmsg+0x813/0xb40 [ 1801.560105][ T4679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1801.560134][ T4679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1801.560161][ T4679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1801.560184][ T4679] ____sys_sendmsg+0x972/0x9f0 [ 1801.560213][ T4679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1801.560237][ T4679] ? kstrtoull+0x12f/0x1d0 [ 1801.560270][ T4679] ___sys_sendmsg+0x2a5/0x360 [ 1801.560296][ T4679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1801.560318][ T4679] ? get_pid_task+0x20/0x1f0 [ 1801.560335][ T4679] ? get_pid_task+0x20/0x1f0 [ 1801.560350][ T4679] ? get_pid_task+0x20/0x1f0 [ 1801.560390][ T4679] ? __fget_files+0x2a/0x420 [ 1801.560415][ T4679] ? __fget_files+0x3a0/0x420 [ 1801.560449][ T4679] __sys_sendmsg+0x183/0x260 [ 1801.560469][ T4679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1801.560506][ T4679] __do_fast_syscall_32+0x20d/0x640 [ 1801.560530][ T4679] ? do_fast_syscall_32+0x33/0x70 [ 1801.560550][ T4679] ? asm_int80_emulation+0x1a/0x20 [ 1801.560568][ T4679] ? do_int80_emulation+0x274/0x4d0 [ 1801.560587][ T4679] ? trace_irq_disable+0x3b/0x150 [ 1801.560617][ T4679] do_fast_syscall_32+0x33/0x70 [ 1801.560637][ T4679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1801.560660][ T4679] RIP: 0023:0xf6ffef6c [ 1801.560677][ T4679] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1801.560693][ T4679] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1801.560713][ T4679] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 1801.560726][ T4679] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1801.560738][ T4679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1801.560749][ T4679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1801.560761][ T4679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1801.560788][ T4679] [ 1801.576755][ T4687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8197'. [ 1801.615824][ T5909] usb 4-1: device descriptor read/64, error -71 [ 1801.618998][ T5895] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1801.855999][ T5909] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1802.025957][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 1802.073297][ T5895] usb 6-1: config 2 has an invalid interface number: 149 but max is 1 [ 1802.088789][ T4705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1802.105034][ T5895] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1802.125790][ T5909] usb 4-1: device descriptor read/64, error -71 [ 1802.155775][ T5895] usb 6-1: config 2 has an invalid interface number: 163 but max is 1 [ 1802.245896][ T5895] usb 6-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1802.257719][ T5895] usb 6-1: config 2 has no interface number 0 [ 1802.267863][ T5895] usb 6-1: config 2 has no interface number 1 [ 1802.274474][ T4709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8200'. [ 1802.289529][ T5895] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0x4 has an invalid bInterval 247, changing to 11 [ 1802.326130][ T5909] usb usb4-port1: attempt power cycle [ 1802.333666][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has an invalid descriptor for endpoint zero, skipping [ 1802.347885][ T5895] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1802.359839][ T5895] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 1802.636833][ T5895] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1802.691851][ T5909] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1802.699978][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xF, skipping [ 1802.743393][ T5909] usb 4-1: device descriptor read/8, error -71 [ 1802.811766][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1802.833368][ T5895] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1802.865129][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1802.941300][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1802.957062][ T5895] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xE, skipping [ 1802.994939][ T5895] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1802.995727][ T5909] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1803.046679][ T5909] usb 4-1: device descriptor read/8, error -71 [ 1803.083337][ T5895] usb 6-1: config 2 interface 163 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1803.105724][ T5895] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1803.130940][ T5895] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1803.161186][ T5895] usb 6-1: config 2 interface 149 has no altsetting 0 [ 1803.166300][ T5909] usb usb4-port1: unable to enumerate USB device [ 1803.225919][ T5895] usb 6-1: config 2 interface 163 has no altsetting 0 [ 1803.238777][ T5895] usb 6-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=42.c1 [ 1803.255770][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.271009][ T5895] usb 6-1: Product: ч [ 1803.280905][ T5895] usb 6-1: Manufacturer: 琇꡿棎ਏ [ 1803.291072][ T5895] usb 6-1: SerialNumber: ࠁ [ 1803.354405][ T4669] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1803.701325][ T4733] lo: Caught tx_queue_len zero misconfig [ 1803.824904][ T4741] FAULT_INJECTION: forcing a failure. [ 1803.824904][ T4741] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.855754][ T4741] CPU: 0 UID: 0 PID: 4741 Comm: syz.1.8208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.855786][ T4741] Tainted: [L]=SOFTLOCKUP [ 1803.855794][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.855805][ T4741] Call Trace: [ 1803.855813][ T4741] [ 1803.855823][ T4741] dump_stack_lvl+0xe8/0x150 [ 1803.855855][ T4741] should_fail_ex+0x412/0x560 [ 1803.855888][ T4741] should_failslab+0xa8/0x100 [ 1803.855915][ T4741] __kmalloc_noprof+0xe8/0x760 [ 1803.855938][ T4741] ? tomoyo_encode+0x28b/0x550 [ 1803.855971][ T4741] tomoyo_encode+0x28b/0x550 [ 1803.856003][ T4741] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1803.856040][ T4741] ? tomoyo_path_number_perm+0x219/0x630 [ 1803.856065][ T4741] tomoyo_path_number_perm+0x246/0x630 [ 1803.856092][ T4741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1803.856120][ T4741] ? __lock_acquire+0x6b5/0x2cf0 [ 1803.856178][ T4741] ? __fget_files+0x2a/0x420 [ 1803.856209][ T4741] ? __fget_files+0x3a0/0x420 [ 1803.856235][ T4741] ? __fget_files+0x2a/0x420 [ 1803.856272][ T4741] security_file_ioctl_compat+0xc3/0x2a0 [ 1803.856299][ T4741] __ia32_compat_sys_ioctl+0x139/0x950 [ 1803.856325][ T4741] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1803.856352][ T4741] ? __fget_files+0x3a0/0x420 [ 1803.856385][ T4741] ? fput+0xa0/0xd0 [ 1803.856412][ T4741] ? ksys_write+0x242/0x270 [ 1803.856444][ T4741] __do_fast_syscall_32+0x20d/0x640 [ 1803.856469][ T4741] ? do_fast_syscall_32+0x33/0x70 [ 1803.856490][ T4741] ? asm_int80_emulation+0x1a/0x20 [ 1803.856508][ T4741] ? do_int80_emulation+0x274/0x4d0 [ 1803.856532][ T4741] ? trace_irq_disable+0x3b/0x150 [ 1803.856564][ T4741] do_fast_syscall_32+0x33/0x70 [ 1803.856587][ T4741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.856609][ T4741] RIP: 0023:0xf6ffef6c [ 1803.856627][ T4741] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1803.856645][ T4741] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1803.856665][ T4741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001275 [ 1803.856678][ T4741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1803.856690][ T4741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1803.856701][ T4741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1803.856713][ T4741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1803.856740][ T4741] [ 1803.858385][ T4741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1804.156274][ T5908] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1804.306013][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1804.317238][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1804.335920][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.378548][ T5908] usb 3-1: config 0 descriptor?? [ 1804.585908][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1804.607637][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1804.650879][ T4769] netlink: 'syz.3.8214': attribute type 4 has an invalid length. [ 1804.686563][ T5908] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1804.695498][ T5908] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1804.735846][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1804.746088][ T5895] option 6-1:2.149: GSM modem (1-port) converter detected [ 1804.750827][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.830637][ T5895] usb 6-1: USB disconnect, device number 41 [ 1804.844486][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1804.861758][ T5895] option 6-1:2.149: device disconnected [ 1804.876695][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1804.908473][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1804.975450][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1804.990197][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.004426][ T10] usb 2-1: Product: syz [ 1805.010662][ T10] usb 2-1: Manufacturer: syz [ 1805.018485][ T10] usb 2-1: SerialNumber: syz [ 1805.037758][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1805.060357][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input137 [ 1805.255686][ T10] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1805.265668][ T5895] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1805.273520][ T10] (id 0x00) [ 1805.345718][ T10] rc_core: IR keymap rc-imon-pad not found [ 1805.360311][ T10] Registered IR keymap rc-empty [ 1805.366145][ T10] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1805.377676][ T10] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1805.447264][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1805.467973][ T5895] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.472393][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1805.479529][ T5895] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1805.568924][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input138 [ 1805.594952][ T5895] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1805.600389][ T10] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:107> initialized [ 1805.635808][ T5895] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1805.653627][ T5895] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1805.659210][ T4755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.663516][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.719154][ T4755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.720185][ T5895] usb 6-1: Product: syz [ 1805.732750][ T5895] usb 6-1: Manufacturer: syz [ 1805.738131][ T5895] usb 6-1: SerialNumber: syz [ 1805.816157][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1805.841275][ T5895] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input139 [ 1805.879204][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8212'. [ 1805.923451][ T796] usb 2-1: USB disconnect, device number 107 [ 1806.026556][ T5895] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1806.039554][ T5895] (id 0x00) [ 1806.101708][ T4854] FAULT_INJECTION: forcing a failure. [ 1806.101708][ T4854] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.116744][ T5895] rc_core: IR keymap rc-imon-pad not found [ 1806.122568][ T5895] Registered IR keymap rc-empty [ 1806.127950][ T5895] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1806.138438][ T4854] CPU: 1 UID: 0 PID: 4854 Comm: syz.3.8223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1806.138470][ T4854] Tainted: [L]=SOFTLOCKUP [ 1806.138477][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1806.138488][ T4854] Call Trace: [ 1806.138497][ T4854] [ 1806.138506][ T4854] dump_stack_lvl+0xe8/0x150 [ 1806.138538][ T4854] should_fail_ex+0x412/0x560 [ 1806.138569][ T4854] should_failslab+0xa8/0x100 [ 1806.138596][ T4854] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1806.138617][ T4854] ? __alloc_skb+0x186/0x7d0 [ 1806.138635][ T4854] ? __alloc_skb+0x1d0/0x7d0 [ 1806.138651][ T4854] ? __local_bh_enable_ip+0xd0/0x130 [ 1806.138680][ T4854] __alloc_skb+0x1d0/0x7d0 [ 1806.138702][ T4854] netlink_sendmsg+0x5d4/0xb40 [ 1806.138739][ T4854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.138771][ T4854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1806.138800][ T4854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1806.138825][ T4854] ____sys_sendmsg+0x972/0x9f0 [ 1806.138855][ T4854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1806.138880][ T4854] ? kstrtoull+0x12f/0x1d0 [ 1806.138911][ T4854] ___sys_sendmsg+0x2a5/0x360 [ 1806.138945][ T4854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1806.138969][ T4854] ? get_pid_task+0x20/0x1f0 [ 1806.138987][ T4854] ? get_pid_task+0x20/0x1f0 [ 1806.139002][ T4854] ? get_pid_task+0x20/0x1f0 [ 1806.139043][ T4854] ? __fget_files+0x2a/0x420 [ 1806.139067][ T4854] ? __fget_files+0x3a0/0x420 [ 1806.139103][ T4854] __sys_sendmsg+0x183/0x260 [ 1806.139125][ T4854] ? __pfx___sys_sendmsg+0x10/0x10 [ 1806.139161][ T4854] __do_fast_syscall_32+0x20d/0x640 [ 1806.139187][ T4854] ? do_fast_syscall_32+0x33/0x70 [ 1806.139209][ T4854] ? asm_int80_emulation+0x1a/0x20 [ 1806.139228][ T4854] ? do_int80_emulation+0x274/0x4d0 [ 1806.139250][ T4854] ? trace_irq_disable+0x3b/0x150 [ 1806.139282][ T4854] do_fast_syscall_32+0x33/0x70 [ 1806.139304][ T4854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1806.139323][ T4854] RIP: 0023:0xf7fb2f6c [ 1806.139338][ T4854] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1806.139352][ T4854] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1806.139370][ T4854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 1806.139382][ T4854] RDX: 000000002400c890 RSI: 0000000000000000 RDI: 0000000000000000 [ 1806.139393][ T4854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1806.139403][ T4854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1806.139413][ T4854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1806.139437][ T4854] [ 1806.139604][ T5895] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1806.490555][ T5895] imon:send_packet: packet tx failed (-71) [ 1806.525841][ T5895] imon 6-1:155.0: remote input dev register failed [ 1806.533244][ T5895] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1806.615206][ T4875] netlink: 'syz.5.8227': attribute type 2 has an invalid length. [ 1806.637091][ T5895] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1806.640535][ T4875] : entered promiscuous mode [ 1806.643722][ T5895] imon:imon_probe: failed to initialize context! [ 1806.661162][ T4875] netlink: 'syz.5.8227': attribute type 2 has an invalid length. [ 1806.676102][ T4875] : left promiscuous mode [ 1806.683760][ T5895] imon 6-1:155.0: unable to register, err -19 [ 1806.745343][ T5895] usb 6-1: USB disconnect, device number 42 [ 1806.910884][ T4897] netlink: 'syz.3.8229': attribute type 3 has an invalid length. [ 1807.858997][ T4917] binder: 4916:4917 ioctl c0306201 80000180 returned -14 [ 1808.042218][ T4923] ALSA: mixer_oss: invalid OSS volume '' [ 1808.243054][ T4928] random: crng reseeded on system resumption [ 1808.375920][ T4937] FAULT_INJECTION: forcing a failure. [ 1808.375920][ T4937] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.391909][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: syz.1.8241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.391930][ T4937] Tainted: [L]=SOFTLOCKUP [ 1808.391934][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1808.391941][ T4937] Call Trace: [ 1808.391946][ T4937] [ 1808.391951][ T4937] dump_stack_lvl+0xe8/0x150 [ 1808.391972][ T4937] should_fail_ex+0x412/0x560 [ 1808.391991][ T4937] should_failslab+0xa8/0x100 [ 1808.392006][ T4937] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1808.392018][ T4937] ? __alloc_skb+0x186/0x7d0 [ 1808.392029][ T4937] ? __alloc_skb+0x1d0/0x7d0 [ 1808.392038][ T4937] ? __local_bh_enable_ip+0xd0/0x130 [ 1808.392054][ T4937] __alloc_skb+0x1d0/0x7d0 [ 1808.392066][ T4937] netlink_sendmsg+0x5d4/0xb40 [ 1808.392088][ T4937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.392106][ T4937] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1808.392123][ T4937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1808.392137][ T4937] ____sys_sendmsg+0x972/0x9f0 [ 1808.392153][ T4937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1808.392167][ T4937] ? kstrtoull+0x12f/0x1d0 [ 1808.392185][ T4937] ___sys_sendmsg+0x2a5/0x360 [ 1808.392200][ T4937] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.392213][ T4937] ? get_pid_task+0x20/0x1f0 [ 1808.392223][ T4937] ? get_pid_task+0x20/0x1f0 [ 1808.392231][ T4937] ? get_pid_task+0x20/0x1f0 [ 1808.392252][ T4937] ? __fget_files+0x2a/0x420 [ 1808.392268][ T4937] ? __fget_files+0x3a0/0x420 [ 1808.392287][ T4937] __sys_sendmsg+0x183/0x260 [ 1808.392300][ T4937] ? __pfx___sys_sendmsg+0x10/0x10 [ 1808.392321][ T4937] __do_fast_syscall_32+0x20d/0x640 [ 1808.392336][ T4937] ? do_fast_syscall_32+0x33/0x70 [ 1808.392353][ T4937] ? asm_int80_emulation+0x1a/0x20 [ 1808.392367][ T4937] ? do_int80_emulation+0x274/0x4d0 [ 1808.392379][ T4937] ? trace_irq_disable+0x3b/0x150 [ 1808.392396][ T4937] do_fast_syscall_32+0x33/0x70 [ 1808.392409][ T4937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1808.392422][ T4937] RIP: 0023:0xf6ffef6c [ 1808.392432][ T4937] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1808.392442][ T4937] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1808.392455][ T4937] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1808.392462][ T4937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1808.392469][ T4937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1808.392475][ T4937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1808.392482][ T4937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1808.392496][ T4937] [ 1809.118812][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8245'. [ 1809.190611][ T4947] vlan0: entered allmulticast mode [ 1809.198611][ T4947] dummy0: entered allmulticast mode [ 1809.220548][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8245'. [ 1809.259006][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8243'. [ 1809.331198][ T4962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1809.488807][ T4974] syzkaller0: entered promiscuous mode [ 1809.494340][ T4974] syzkaller0: entered allmulticast mode [ 1809.762435][ T796] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1809.925717][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 1809.934085][ T796] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1809.946348][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1809.965722][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1810.006357][ T796] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1810.047237][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8254'. [ 1810.057490][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1810.514721][ T5004] FAULT_INJECTION: forcing a failure. [ 1810.514721][ T5004] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.529827][ T5004] CPU: 1 UID: 0 PID: 5004 Comm: syz.1.8257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1810.529847][ T5004] Tainted: [L]=SOFTLOCKUP [ 1810.529851][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1810.529858][ T5004] Call Trace: [ 1810.529863][ T5004] [ 1810.529868][ T5004] dump_stack_lvl+0xe8/0x150 [ 1810.529889][ T5004] should_fail_ex+0x412/0x560 [ 1810.529908][ T5004] should_failslab+0xa8/0x100 [ 1810.529924][ T5004] __kmalloc_cache_noprof+0x88/0x660 [ 1810.529937][ T5004] ? netdevice_event+0x3cb/0x8f0 [ 1810.530068][ T5004] netdevice_event+0x3cb/0x8f0 [ 1810.530085][ T5004] ? __up_read+0x291/0x6b0 [ 1810.530096][ T5004] ? __pfx_netdevice_event+0x10/0x10 [ 1810.530110][ T5004] ? __pfx_del_netdev_ips+0x10/0x10 [ 1810.530124][ T5004] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 1810.530139][ T5004] ? __pfx_add_default_gids+0x10/0x10 [ 1810.530153][ T5004] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 1810.530168][ T5004] ? __pfx_add_netdev_ips+0x10/0x10 [ 1810.530182][ T5004] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 1810.530199][ T5004] ? cfg802154_netdev_notifier_call+0x136/0x8f0 [ 1810.530269][ T5004] notifier_call_chain+0x1be/0x400 [ 1810.530290][ T5004] netif_set_mac_address+0x39f/0x4e0 [ 1810.530307][ T5004] ? __pfx_netif_set_mac_address+0x10/0x10 [ 1810.530320][ T5004] ? down_write+0x16d/0x200 [ 1810.530337][ T5004] ? do_setlink+0x99a/0x4590 [ 1810.530351][ T5004] do_setlink+0x9b1/0x4590 [ 1810.530363][ T5004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1810.530380][ T5004] ? __pfx_do_setlink+0x10/0x10 [ 1810.530391][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.530418][ T5004] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1810.530436][ T5004] ? rcu_is_watching+0x15/0xb0 [ 1810.530451][ T5004] ? trace_contention_end+0x3d/0x150 [ 1810.530468][ T5004] ? __mutex_lock+0x319/0x1300 [ 1810.530480][ T5004] ? __pfx___nla_validate_parse+0x10/0x10 [ 1810.530495][ T5004] ? rtnl_newlink+0x8a1/0x1be0 [ 1810.530514][ T5004] ? __pfx___mutex_lock+0x10/0x10 [ 1810.530530][ T5004] ? full_name_hash+0x92/0xe0 [ 1810.530559][ T5004] rtnl_newlink+0x15a9/0x1be0 [ 1810.530581][ T5004] ? __pfx_rtnl_newlink+0x10/0x10 [ 1810.530607][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.530622][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.530636][ T5004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1810.530650][ T5004] ? unwind_next_frame+0xa5/0x23c0 [ 1810.530678][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.530693][ T5004] ? is_bpf_text_address+0x26/0x2b0 [ 1810.530707][ T5004] ? kernel_text_address+0xa5/0xe0 [ 1810.530731][ T5004] ? __pfx_rtnl_newlink+0x10/0x10 [ 1810.530747][ T5004] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1810.530765][ T5004] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1810.530780][ T5004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1810.530798][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.530819][ T5004] netlink_rcv_skb+0x232/0x4b0 [ 1810.530836][ T5004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1810.530853][ T5004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1810.530874][ T5004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1810.530894][ T5004] netlink_unicast+0x80f/0x9b0 [ 1810.530912][ T5004] ? __pfx_netlink_unicast+0x10/0x10 [ 1810.530927][ T5004] ? netlink_sendmsg+0x650/0xb40 [ 1810.530942][ T5004] ? skb_put+0x11b/0x210 [ 1810.530955][ T5004] netlink_sendmsg+0x813/0xb40 [ 1810.530975][ T5004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.530993][ T5004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1810.531009][ T5004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1810.531023][ T5004] ____sys_sendmsg+0x972/0x9f0 [ 1810.531045][ T5004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1810.531059][ T5004] ? kstrtoull+0x12f/0x1d0 [ 1810.531078][ T5004] ___sys_sendmsg+0x2a5/0x360 [ 1810.531093][ T5004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1810.531106][ T5004] ? get_pid_task+0x20/0x1f0 [ 1810.531115][ T5004] ? get_pid_task+0x20/0x1f0 [ 1810.531124][ T5004] ? get_pid_task+0x20/0x1f0 [ 1810.531147][ T5004] ? __fget_files+0x2a/0x420 [ 1810.531163][ T5004] ? __fget_files+0x3a0/0x420 [ 1810.531183][ T5004] __sys_sendmsg+0x183/0x260 [ 1810.531196][ T5004] ? __pfx___sys_sendmsg+0x10/0x10 [ 1810.531219][ T5004] __do_fast_syscall_32+0x20d/0x640 [ 1810.531233][ T5004] ? do_fast_syscall_32+0x33/0x70 [ 1810.531244][ T5004] ? asm_int80_emulation+0x1a/0x20 [ 1810.531255][ T5004] ? do_int80_emulation+0x274/0x4d0 [ 1810.531266][ T5004] ? trace_irq_disable+0x3b/0x150 [ 1810.531284][ T5004] do_fast_syscall_32+0x33/0x70 [ 1810.531297][ T5004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1810.531309][ T5004] RIP: 0023:0xf6ffef6c [ 1810.531320][ T5004] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1810.531329][ T5004] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1810.531342][ T5004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1810.531349][ T5004] RDX: 0000000024000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.531356][ T5004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1810.531365][ T5004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1810.531375][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1810.531398][ T5004] [ 1810.532765][ T5004] vlan0: entered promiscuous mode [ 1810.534757][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1811.057279][ T5004] vlan0: entered allmulticast mode [ 1811.062439][ T5004] veth0_vlan: entered allmulticast mode [ 1811.081242][ T5004] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1811.272476][ T796] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1811.292600][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.300970][ T796] usb 6-1: Product: syz [ 1811.305292][ T796] usb 6-1: Manufacturer: syz [ 1811.319639][ T796] usb 6-1: SerialNumber: syz [ 1811.356893][ T796] usb 6-1: config 0 descriptor?? [ 1811.393886][ T5013] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1811.493376][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8262'. [ 1811.775367][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8266'. [ 1811.893170][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1812.128654][ T5053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8268'. [ 1812.620531][ T5895] usb 6-1: USB disconnect, device number 43 [ 1813.314152][ T5082] netlink: 'syz.3.8276': attribute type 3 has an invalid length. [ 1813.332122][ T5082] netlink: 'syz.3.8276': attribute type 3 has an invalid length. [ 1813.403530][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1813.428947][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1813.875705][ T5895] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1814.053748][ T5895] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1814.064212][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.081052][ T5895] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1814.091497][ T5895] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1814.100776][ T5895] usb 6-1: Manufacturer: syz [ 1814.119265][ T5895] usb 6-1: config 0 descriptor?? [ 1814.246446][ T5895] rc_core: IR keymap rc-hauppauge not found [ 1814.252516][ T5895] Registered IR keymap rc-empty [ 1814.265808][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1814.305907][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input141 [ 1814.412577][ T5895] usb 6-1: USB disconnect, device number 44 [ 1815.136661][ T5172] netlink: 'syz.3.8296': attribute type 8 has an invalid length. [ 1815.214463][ T29] audit: type=1326 audit(1774074769.210:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.271562][ T29] audit: type=1326 audit(1774074769.210:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.355118][ T5172] netlink: 'syz.3.8296': attribute type 4 has an invalid length. [ 1815.363026][ T29] audit: type=1326 audit(1774074769.210:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.410255][ T5172] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8296'. [ 1815.496122][ T29] audit: type=1326 audit(1774074769.210:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.582022][ T29] audit: type=1326 audit(1774074769.210:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.799136][ T29] audit: type=1326 audit(1774074769.210:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1815.849178][ T5198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1815.883481][ T5200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1815.893640][ T5200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1815.974913][ T29] audit: type=1326 audit(1774074769.220:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1816.061716][ T29] audit: type=1326 audit(1774074769.220:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1816.177166][ T29] audit: type=1326 audit(1774074769.220:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1816.200025][ T29] audit: type=1326 audit(1774074769.220:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.6.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1816.542410][ T5209] netlink: 'syz.1.8304': attribute type 2 has an invalid length. [ 1816.551424][ T5209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1816.616307][ T5211] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1816.812337][ T5220] FAULT_INJECTION: forcing a failure. [ 1816.812337][ T5220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.826083][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz.5.8308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.826102][ T5220] Tainted: [L]=SOFTLOCKUP [ 1816.826106][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1816.826113][ T5220] Call Trace: [ 1816.826118][ T5220] [ 1816.826122][ T5220] dump_stack_lvl+0xe8/0x150 [ 1816.826142][ T5220] should_fail_ex+0x412/0x560 [ 1816.826161][ T5220] _copy_from_iter+0x1d3/0x1670 [ 1816.826180][ T5220] ? rcu_is_watching+0x15/0xb0 [ 1816.826199][ T5220] ? __pfx__copy_from_iter+0x10/0x10 [ 1816.826218][ T5220] ? netlink_sendmsg+0x650/0xb40 [ 1816.826235][ T5220] ? skb_put+0x11b/0x210 [ 1816.826247][ T5220] netlink_sendmsg+0x6c0/0xb40 [ 1816.826267][ T5220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.826284][ T5220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1816.826301][ T5220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1816.826315][ T5220] ____sys_sendmsg+0x972/0x9f0 [ 1816.826331][ T5220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1816.826345][ T5220] ? kstrtoull+0x12f/0x1d0 [ 1816.826363][ T5220] ___sys_sendmsg+0x2a5/0x360 [ 1816.826377][ T5220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1816.826390][ T5220] ? get_pid_task+0x20/0x1f0 [ 1816.826400][ T5220] ? get_pid_task+0x20/0x1f0 [ 1816.826408][ T5220] ? get_pid_task+0x20/0x1f0 [ 1816.826430][ T5220] ? __fget_files+0x2a/0x420 [ 1816.826446][ T5220] ? __fget_files+0x3a0/0x420 [ 1816.826465][ T5220] __sys_sendmsg+0x183/0x260 [ 1816.826481][ T5220] ? __pfx___sys_sendmsg+0x10/0x10 [ 1816.826513][ T5220] __do_fast_syscall_32+0x20d/0x640 [ 1816.826528][ T5220] ? do_fast_syscall_32+0x33/0x70 [ 1816.826539][ T5220] ? asm_int80_emulation+0x1a/0x20 [ 1816.826550][ T5220] ? do_int80_emulation+0x274/0x4d0 [ 1816.826562][ T5220] ? trace_irq_disable+0x3b/0x150 [ 1816.826580][ T5220] do_fast_syscall_32+0x33/0x70 [ 1816.826592][ T5220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.826605][ T5220] RIP: 0023:0xf7f07f6c [ 1816.826616][ T5220] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1816.826625][ T5220] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1816.826638][ T5220] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 1816.826645][ T5220] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1816.826652][ T5220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1816.826658][ T5220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1816.826665][ T5220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1816.826678][ T5220] [ 1817.127450][ T5222] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1817.245890][ T5895] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1817.386145][ T4495] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1817.397539][ T5895] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1817.408494][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.415944][ T796] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1817.419790][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.440303][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1817.455404][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1817.465117][ T5895] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1817.473288][ T5895] usb 4-1: Manufacturer: syz [ 1817.481424][ T5895] usb 4-1: config 0 descriptor?? [ 1817.516069][ T4495] usb 6-1: device descriptor read/64, error -71 [ 1817.575701][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 1817.583486][ T796] usb 2-1: config 2 has an invalid interface number: 149 but max is 1 [ 1817.591808][ T796] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1817.600698][ T796] usb 2-1: config 2 has an invalid interface number: 163 but max is 1 [ 1817.609411][ T796] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1817.619701][ T796] usb 2-1: config 2 has no interface number 0 [ 1817.625846][ T796] usb 2-1: config 2 has no interface number 1 [ 1817.631993][ T796] usb 2-1: config 2 interface 149 altsetting 176 endpoint 0x4 has an invalid bInterval 247, changing to 11 [ 1817.643755][ T796] usb 2-1: config 2 interface 149 altsetting 176 has an invalid descriptor for endpoint zero, skipping [ 1817.655080][ T796] usb 2-1: config 2 interface 149 altsetting 176 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1817.666662][ T796] usb 2-1: config 2 interface 149 altsetting 176 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 1817.678170][ T796] usb 2-1: config 2 interface 149 altsetting 176 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1817.689399][ T796] usb 2-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xF, skipping [ 1817.703517][ T796] usb 2-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1817.715972][ T796] usb 2-1: config 2 interface 149 altsetting 176 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1817.736434][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.746758][ T796] usb 2-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1817.758576][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.769293][ T796] usb 2-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1817.784122][ T796] usb 2-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xE, skipping [ 1817.797506][ T4495] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1817.798075][ T796] usb 2-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1817.817542][ T796] usb 2-1: config 2 interface 163 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1817.830999][ T796] usb 2-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1817.842202][ T796] usb 2-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1817.856535][ T796] usb 2-1: config 2 interface 149 has no altsetting 0 [ 1817.868629][ T796] usb 2-1: config 2 interface 163 has no altsetting 0 [ 1817.878507][ T796] usb 2-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=42.c1 [ 1817.900030][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.916042][ T796] usb 2-1: Product: ч [ 1817.925767][ T796] usb 2-1: Manufacturer: 琇꡿棎ਏ [ 1817.931334][ T796] usb 2-1: SerialNumber: ࠁ [ 1817.951812][ T5229] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1817.971972][ T4495] usb 6-1: device descriptor read/64, error -71 [ 1817.991278][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.001858][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.040160][ T5895] appleir 0003:05AC:8243.0036: item fetching failed at offset 0/1 [ 1818.060477][ T5895] appleir 0003:05AC:8243.0036: parse failed [ 1818.074863][ T5895] appleir 0003:05AC:8243.0036: probe with driver appleir failed with error -22 [ 1818.087360][ T4495] usb usb6-port1: attempt power cycle [ 1818.262873][ T5895] usb 4-1: USB disconnect, device number 83 [ 1818.435671][ T4495] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1818.456370][ T4495] usb 6-1: device descriptor read/8, error -71 [ 1818.710533][ T4495] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1818.747308][ T4495] usb 6-1: device descriptor read/8, error -71 [ 1818.856115][ T4495] usb usb6-port1: unable to enumerate USB device [ 1819.312663][ T5293] fuse: Unknown parameter 'us1N [ 1819.312663][ T5293] [ 1819.312663][ T5293] er_id' [ 1820.234189][ T796] option 2-1:2.149: GSM modem (1-port) converter detected [ 1820.317053][ T796] usb 2-1: USB disconnect, device number 108 [ 1820.343061][ T796] option 2-1:2.149: device disconnected [ 1820.379935][ T5320] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1820.510328][ T5332] pim6reg: entered allmulticast mode [ 1820.520386][ T5329] syzkaller0: entered promiscuous mode [ 1820.526638][ T5329] syzkaller0: entered allmulticast mode [ 1820.534191][ T5332] team0: entered allmulticast mode [ 1820.550056][ T5332] team_slave_0: entered allmulticast mode [ 1820.563709][ T5332] team_slave_1: entered allmulticast mode [ 1820.598093][ T5332] team0: left allmulticast mode [ 1820.603208][ T5332] team_slave_0: left allmulticast mode [ 1820.608868][ T5332] team_slave_1: left allmulticast mode [ 1820.614822][ T5332] pim6reg: left allmulticast mode [ 1820.855015][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1820.873418][ T5348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8329'. [ 1820.882818][ T5348] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8329'. [ 1820.891994][ T5348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8329'. [ 1821.639401][ T5362] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 1821.888991][ T4495] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1822.056045][ T4495] usb 6-1: Using ep0 maxpacket: 16 [ 1822.069173][ T4495] usb 6-1: config 2 has an invalid interface number: 149 but max is 1 [ 1822.079516][ T4495] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1822.094572][ T4495] usb 6-1: config 2 has an invalid interface number: 163 but max is 1 [ 1822.114137][ T4495] usb 6-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1822.134899][ T4495] usb 6-1: config 2 has no interface number 0 [ 1822.141981][ T4495] usb 6-1: config 2 has no interface number 1 [ 1822.149572][ T4495] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0x4 has an invalid bInterval 247, changing to 11 [ 1822.172503][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has an invalid descriptor for endpoint zero, skipping [ 1822.259672][ T4495] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1822.288069][ T4495] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 1822.327518][ T4495] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1822.354232][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xF, skipping [ 1822.386184][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1822.500863][ T5400] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8342'. [ 1822.519944][ T5400] FAULT_INJECTION: forcing a failure. [ 1822.519944][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.534811][ T4495] usb 6-1: config 2 interface 149 altsetting 176 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1822.546724][ T5400] CPU: 1 UID: 0 PID: 5400 Comm: syz.6.8342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1822.546754][ T5400] Tainted: [L]=SOFTLOCKUP [ 1822.546760][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1822.546772][ T5400] Call Trace: [ 1822.546779][ T5400] [ 1822.546788][ T5400] dump_stack_lvl+0xe8/0x150 [ 1822.546818][ T5400] should_fail_ex+0x412/0x560 [ 1822.546851][ T5400] should_failslab+0xa8/0x100 [ 1822.546877][ T5400] __kmalloc_node_noprof+0xf0/0x7c0 [ 1822.546901][ T5400] ? qdisc_alloc+0x92/0x9e0 [ 1822.546932][ T5400] qdisc_alloc+0x92/0x9e0 [ 1822.546967][ T5400] qdisc_create+0x12c/0xf20 [ 1822.546997][ T5400] tc_modify_qdisc+0x16f0/0x2290 [ 1822.547019][ T5400] ? rcu_is_watching+0x15/0xb0 [ 1822.547056][ T5400] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1822.547081][ T5400] ? __dev_queue_xmit+0x277/0x3890 [ 1822.547130][ T5400] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1822.547153][ T5400] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1822.547186][ T5400] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1822.547213][ T5400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1822.547240][ T5400] ? ref_tracker_free+0x693/0x840 [ 1822.547266][ T5400] ? __copy_skb_header+0xa3/0x4a0 [ 1822.547290][ T5400] ? __pfx_ref_tracker_free+0x10/0x10 [ 1822.547328][ T5400] netlink_rcv_skb+0x232/0x4b0 [ 1822.547358][ T5400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1822.547388][ T5400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1822.547427][ T5400] ? netlink_deliver_tap+0x2e/0x1b0 [ 1822.547458][ T5400] netlink_unicast+0x80f/0x9b0 [ 1822.547494][ T5400] ? __pfx_netlink_unicast+0x10/0x10 [ 1822.547519][ T5400] ? netlink_sendmsg+0x650/0xb40 [ 1822.547551][ T5400] ? skb_put+0x11b/0x210 [ 1822.547571][ T5400] netlink_sendmsg+0x813/0xb40 [ 1822.547604][ T5400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.547634][ T5400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1822.547664][ T5400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1822.547689][ T5400] ____sys_sendmsg+0x972/0x9f0 [ 1822.547721][ T5400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.547747][ T5400] ? kstrtoull+0x12f/0x1d0 [ 1822.547781][ T5400] ___sys_sendmsg+0x2a5/0x360 [ 1822.547804][ T5400] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.547826][ T5400] ? get_pid_task+0x20/0x1f0 [ 1822.547843][ T5400] ? get_pid_task+0x20/0x1f0 [ 1822.547857][ T5400] ? get_pid_task+0x20/0x1f0 [ 1822.547891][ T5400] ? __fget_files+0x2a/0x420 [ 1822.547919][ T5400] ? __fget_files+0x3a0/0x420 [ 1822.547955][ T5400] __sys_sendmsg+0x183/0x260 [ 1822.547979][ T5400] ? __pfx___sys_sendmsg+0x10/0x10 [ 1822.548022][ T5400] __do_fast_syscall_32+0x20d/0x640 [ 1822.548047][ T5400] ? do_fast_syscall_32+0x33/0x70 [ 1822.548069][ T5400] ? asm_int80_emulation+0x1a/0x20 [ 1822.548088][ T5400] ? do_int80_emulation+0x274/0x4d0 [ 1822.548109][ T5400] ? trace_irq_disable+0x3b/0x150 [ 1822.548141][ T5400] do_fast_syscall_32+0x33/0x70 [ 1822.548165][ T5400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1822.548188][ T5400] RIP: 0023:0xf6ffef6c [ 1822.548206][ T5400] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1822.548224][ T5400] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1822.548245][ T5400] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0 [ 1822.548259][ T5400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1822.548271][ T5400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1822.548283][ T5400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1822.548295][ T5400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1822.548323][ T5400] [ 1822.548456][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1823.028064][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 1823.092470][ T4495] usb 6-1: config 2 interface 149 altsetting 176 has a duplicate endpoint with address 0xE, skipping [ 1823.129494][ T4495] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1823.188843][ T4495] usb 6-1: config 2 interface 163 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1823.266643][ T4495] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1823.326036][ T4495] usb 6-1: config 2 interface 163 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1823.367836][ T4495] usb 6-1: config 2 interface 149 has no altsetting 0 [ 1823.374663][ T4495] usb 6-1: config 2 interface 163 has no altsetting 0 [ 1823.384505][ T4495] usb 6-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=42.c1 [ 1823.404895][ T4495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.413287][ T4495] usb 6-1: Product: ч [ 1823.417964][ T4495] usb 6-1: Manufacturer: 琇꡿棎ਏ [ 1823.448740][ T4495] usb 6-1: SerialNumber: ࠁ [ 1823.482357][ T5366] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1823.682207][ T5443] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1823.692674][ T5445] FAULT_INJECTION: forcing a failure. [ 1823.692674][ T5445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.710713][ T5445] CPU: 1 UID: 0 PID: 5445 Comm: syz.3.8356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1823.710743][ T5445] Tainted: [L]=SOFTLOCKUP [ 1823.710751][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1823.710763][ T5445] Call Trace: [ 1823.710771][ T5445] [ 1823.710779][ T5445] dump_stack_lvl+0xe8/0x150 [ 1823.710811][ T5445] should_fail_ex+0x412/0x560 [ 1823.710845][ T5445] strncpy_from_user+0x36/0x2b0 [ 1823.710874][ T5445] do_getname+0x77/0x250 [ 1823.710903][ T5445] do_sys_openat2+0xca/0x200 [ 1823.710939][ T5445] ? __pfx_do_sys_openat2+0x10/0x10 [ 1823.710969][ T5445] ? ksys_write+0x242/0x270 [ 1823.710991][ T5445] __ia32_sys_creat+0x8f/0xc0 [ 1823.711018][ T5445] __do_fast_syscall_32+0x20d/0x640 [ 1823.711039][ T5445] ? do_fast_syscall_32+0x33/0x70 [ 1823.711057][ T5445] ? asm_int80_emulation+0x1a/0x20 [ 1823.711072][ T5445] ? do_int80_emulation+0x274/0x4d0 [ 1823.711094][ T5445] do_fast_syscall_32+0x33/0x70 [ 1823.711113][ T5445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1823.711134][ T5445] RIP: 0023:0xf7fb2f6c [ 1823.711151][ T5445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1823.711166][ T5445] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 1823.711187][ T5445] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 000000004d39dcca [ 1823.711201][ T5445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.711213][ T5445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1823.711224][ T5445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1823.711236][ T5445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1823.711263][ T5445] [ 1823.896530][ T5453] syzkaller0: entered promiscuous mode [ 1823.902661][ T5453] syzkaller0: entered allmulticast mode [ 1824.043199][ T5461] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1824.167265][ T5467] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1824.860082][ T5485] FAULT_INJECTION: forcing a failure. [ 1824.860082][ T5485] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.900245][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: syz.3.8365 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.900277][ T5485] Tainted: [L]=SOFTLOCKUP [ 1824.900285][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1824.900296][ T5485] Call Trace: [ 1824.900305][ T5485] [ 1824.900312][ T5485] dump_stack_lvl+0xe8/0x150 [ 1824.900333][ T5485] should_fail_ex+0x412/0x560 [ 1824.900362][ T5485] should_failslab+0xa8/0x100 [ 1824.900387][ T5485] __kmalloc_noprof+0xe8/0x760 [ 1824.900410][ T5485] ? sock_kmalloc+0xd6/0x160 [ 1824.900443][ T5485] sock_kmalloc+0xd6/0x160 [ 1824.900463][ T5485] skcipher_recvmsg+0x54f/0x1140 [ 1824.900485][ T5485] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1824.900496][ T5485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1824.900513][ T5485] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1824.900533][ T5485] ? security_socket_recvmsg+0x7e/0x2c0 [ 1824.900554][ T5485] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1824.900574][ T5485] sock_recvmsg+0x172/0x1b0 [ 1824.900604][ T5485] sock_read_iter+0x251/0x320 [ 1824.900622][ T5485] ? __pfx_sock_read_iter+0x10/0x10 [ 1824.900641][ T5485] ? bpf_lsm_file_permission+0x9/0x20 [ 1824.900653][ T5485] ? security_file_permission+0x75/0x260 [ 1824.900666][ T5485] ? rw_verify_area+0x2a6/0x4d0 [ 1824.900697][ T5485] ? import_ubuf+0xfb/0x1d0 [ 1824.900721][ T5485] aio_read+0x33a/0x4d0 [ 1824.900749][ T5485] ? __pfx_aio_read+0x10/0x10 [ 1824.900786][ T5485] io_submit_one+0x79d/0x14c0 [ 1824.900799][ T5485] ? irqentry_exit+0x59e/0x620 [ 1824.900815][ T5485] ? trace_irq_disable+0x3b/0x150 [ 1824.900837][ T5485] ? __pfx_io_submit_one+0x10/0x10 [ 1824.900879][ T5485] ? __might_fault+0xaf/0x130 [ 1824.900902][ T5485] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 1824.900923][ T5485] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1824.900942][ T5485] __do_fast_syscall_32+0x20d/0x640 [ 1824.900957][ T5485] ? do_fast_syscall_32+0x33/0x70 [ 1824.900968][ T5485] ? asm_int80_emulation+0x1a/0x20 [ 1824.900980][ T5485] ? do_int80_emulation+0x274/0x4d0 [ 1824.900999][ T5485] ? trace_irq_disable+0x3b/0x150 [ 1824.901029][ T5485] do_fast_syscall_32+0x33/0x70 [ 1824.901052][ T5485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1824.901072][ T5485] RIP: 0023:0xf7fb2f6c [ 1824.901089][ T5485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1824.901107][ T5485] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 1824.901126][ T5485] RAX: ffffffffffffffda RBX: 00000000f744b000 RCX: 000000000000027f [ 1824.901139][ T5485] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1824.901151][ T5485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1824.901162][ T5485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1824.901173][ T5485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1824.901202][ T5485] [ 1825.504947][ T4495] option 6-1:2.149: GSM modem (1-port) converter detected [ 1825.578514][ T4495] usb 6-1: USB disconnect, device number 49 [ 1825.609138][ T4495] option 6-1:2.149: device disconnected [ 1825.834408][ T5528] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1826.256253][ T5541] kAFS: unable to lookup cell '' [ 1826.359490][ T5550] kAFS: unable to lookup cell '(,c' [ 1826.736667][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8377'. [ 1827.048048][ T5565] fuse: Unknown parameter '' [ 1827.326379][ T4495] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1827.691072][ T4495] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1827.704999][ T4495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.768477][ T4495] usb 4-1: Product: syz [ 1827.775278][ T4495] usb 4-1: Manufacturer: syz [ 1827.787688][ T4495] usb 4-1: SerialNumber: syz [ 1827.820308][ T4495] usb 4-1: config 0 descriptor?? [ 1827.864141][ T4495] hub 4-1:0.0: bad descriptor, ignoring hub [ 1827.934027][ T4495] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1827.969223][ T5578] FAULT_INJECTION: forcing a failure. [ 1827.969223][ T5578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1827.982947][ T5578] CPU: 0 UID: 0 PID: 5578 Comm: syz.5.8382 Tainted: G L syzkaller #0 PREEMPT(full) [ 1827.982976][ T5578] Tainted: [L]=SOFTLOCKUP [ 1827.982983][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1827.982995][ T5578] Call Trace: [ 1827.983003][ T5578] [ 1827.983008][ T5578] dump_stack_lvl+0xe8/0x150 [ 1827.983029][ T5578] should_fail_ex+0x412/0x560 [ 1827.983047][ T5578] prepare_alloc_pages+0x22a/0x650 [ 1827.983070][ T5578] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1827.983107][ T5578] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1827.983135][ T5578] ? __pfx_policy_nodemask+0x10/0x10 [ 1827.983161][ T5578] alloc_pages_mpol+0x232/0x4a0 [ 1827.983177][ T5578] vma_alloc_folio_noprof+0xea/0x210 [ 1827.983192][ T5578] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1827.983212][ T5578] do_wp_page+0x1204/0x5a00 [ 1827.983245][ T5578] ? __pfx_css_rstat_updated+0x10/0x10 [ 1827.983265][ T5578] ? __resched_curr+0x1ff/0x3f0 [ 1827.983300][ T5578] ? __pfx_do_wp_page+0x10/0x10 [ 1827.983314][ T5578] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.983327][ T5578] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.983342][ T5578] handle_mm_fault+0x1520/0x3310 [ 1827.983372][ T5578] ? handle_mm_fault+0xee/0x3310 [ 1827.983407][ T5578] ? __pfx_handle_mm_fault+0x10/0x10 [ 1827.983446][ T5578] ? __pfx___up_read+0x10/0x10 [ 1827.983459][ T5578] ? lock_mm_and_find_vma+0xa7/0x340 [ 1827.983472][ T5578] do_user_addr_fault+0x75b/0x1340 [ 1827.983495][ T5578] exc_page_fault+0x6a/0xc0 [ 1827.983511][ T5578] asm_exc_page_fault+0x26/0x30 [ 1827.983529][ T5578] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1827.983556][ T5578] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1827.983573][ T5578] RSP: 0018:ffffc9000c317678 EFLAGS: 00050206 [ 1827.983589][ T5578] RAX: ffffffff84ac7601 RBX: ffff88803ae800e8 RCX: 000000000000c5d0 [ 1827.983600][ T5578] RDX: 0000000000000000 RSI: ffff88803ae83ce8 RDI: 0000000080004000 [ 1827.983607][ T5578] RBP: ffffc9000c3177e8 R08: ffff88803ae902b7 R09: 1ffff110075d2056 [ 1827.983614][ T5578] R10: dffffc0000000000 R11: ffffed10075d2057 R12: dffffc0000000000 [ 1827.983622][ T5578] R13: 0000000000000000 R14: 00007ffffffff000 R15: 00000000000101d0 [ 1827.983633][ T5578] ? _copy_to_iter+0x3d1/0x17d0 [ 1827.983654][ T5578] _copy_to_iter+0x493/0x17d0 [ 1827.983680][ T5578] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.983713][ T5578] ? __pfx__copy_to_iter+0x10/0x10 [ 1827.983739][ T5578] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.983752][ T5578] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1827.983763][ T5578] ? tipc_wait_for_rcvmsg+0x4f6/0x640 [ 1827.983779][ T5578] __skb_datagram_iter+0xf8/0x980 [ 1827.983792][ T5578] ? tipc_sk_anc_data_recv+0x507/0x6b0 [ 1827.983803][ T5578] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1827.983829][ T5578] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 1827.983852][ T5578] skb_copy_datagram_iter+0xb5/0x270 [ 1827.983879][ T5578] tipc_recvstream+0x72d/0xe70 [ 1827.983908][ T5578] ? __pfx_tipc_recvstream+0x10/0x10 [ 1827.983924][ T5578] sock_recvmsg+0x172/0x1b0 [ 1827.983940][ T5578] ____sys_recvmsg+0x1e6/0x4a0 [ 1827.983963][ T5578] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1827.983984][ T5578] ? get_compat_msghdr+0x34b/0x4c0 [ 1827.984025][ T5578] ___sys_recvmsg+0x215/0x590 [ 1827.984043][ T5578] ? get_pid_task+0x20/0x1f0 [ 1827.984055][ T5578] ? __pfx____sys_recvmsg+0x10/0x10 [ 1827.984084][ T5578] ? __fget_files+0x3a0/0x420 [ 1827.984113][ T5578] __sys_recvmsg+0x180/0x250 [ 1827.984138][ T5578] ? __pfx___sys_recvmsg+0x10/0x10 [ 1827.984182][ T5578] __do_fast_syscall_32+0x20d/0x640 [ 1827.984198][ T5578] ? do_fast_syscall_32+0x33/0x70 [ 1827.984210][ T5578] ? asm_int80_emulation+0x1a/0x20 [ 1827.984220][ T5578] ? do_int80_emulation+0x274/0x4d0 [ 1827.984231][ T5578] ? trace_irq_disable+0x3b/0x150 [ 1827.984251][ T5578] do_fast_syscall_32+0x33/0x70 [ 1827.984273][ T5578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1827.984296][ T5578] RIP: 0023:0xf7f07f6c [ 1827.984313][ T5578] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1827.984329][ T5578] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1827.984343][ T5578] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 1827.984350][ T5578] RDX: 0000000000003f01 RSI: 0000000000000000 RDI: 0000000000000000 [ 1827.984356][ T5578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1827.984362][ T5578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1827.984368][ T5578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1827.984383][ T5578] [ 1828.507519][ T4495] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1828.575277][ T4495] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1828.586678][ T4495] dib0700: firmware download failed at 7 with -22 [ 1828.808639][ T5586] netlink: 'syz.1.8384': attribute type 10 has an invalid length. [ 1828.818495][ T5586] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1828.947870][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'. [ 1829.075173][ T5606] binder: 5605:5606 ioctl 8002f515 80000140 returned -22 [ 1829.151746][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8387'. [ 1829.436784][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8391'. [ 1830.056126][ T10] usb 4-1: USB disconnect, device number 84 [ 1830.264497][ T5646] netlink: 'syz.3.8395': attribute type 27 has an invalid length. [ 1830.276158][ T5646] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1830.865311][ T5668] kAFS: unable to lookup cell '' [ 1830.871424][ T5668] kAFS: unable to lookup cell '(,c' [ 1831.675967][ T4495] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1831.909217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1832.327199][ T4495] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1832.336361][ T4495] usb 4-1: config 0 has no interface number 0 [ 1832.352202][ T4495] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1832.374859][ T4495] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1832.395765][ T4495] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1832.419142][ T4495] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1832.429746][ T4495] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1832.443463][ T4495] usb 4-1: Product: syz [ 1832.461733][ T4495] usb 4-1: SerialNumber: syz [ 1832.479108][ T4495] usb 4-1: config 0 descriptor?? [ 1832.491759][ T5677] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1832.507612][ T4495] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 1832.515844][ T797] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1832.528302][ T4495] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input142 [ 1832.686105][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 1832.699287][ T797] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1832.714564][ T797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1832.725743][ T797] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1832.734838][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.761796][ T797] usb 6-1: config 0 descriptor?? [ 1833.290398][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1833.290796][ T10] usb 4-1: USB disconnect, device number 85 [ 1833.297399][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1833.339461][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1833.398293][ T10] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1833.551850][ T5728] ptrace attach of "./syz-executor exec"[28137] was attempted by "./syz-executor exec"[5728] [ 1833.867403][T27548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1833.878711][T27548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1833.890095][T27548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1833.901071][T27548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1833.910674][T27548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1834.331934][T29779] bridge0: port 3(syz_tun) entered disabled state [ 1834.372672][T29779] syz_tun (unregistering): left allmulticast mode [ 1834.380102][T29779] syz_tun (unregistering): left promiscuous mode [ 1834.388759][T29779] bridge0: port 3(syz_tun) entered disabled state [ 1834.589398][ T5741] chnl_net:caif_netlink_parms(): no params data found [ 1835.411014][ T797] usbhid 6-1:0.0: can't add hid device: -71 [ 1835.417064][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.417229][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.417453][ T5741] bridge_slave_0: entered allmulticast mode [ 1835.501118][ T797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1835.518102][ T5741] bridge_slave_0: entered promiscuous mode [ 1835.779946][ T797] usb 6-1: USB disconnect, device number 50 [ 1835.939381][ T5900] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1835.982809][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.991161][ T5832] Bluetooth: hci1: command tx timeout [ 1836.002158][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.031904][ T5741] bridge_slave_1: entered allmulticast mode [ 1836.051415][ T5741] bridge_slave_1: entered promiscuous mode [ 1836.091670][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.148515][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.343159][ T5741] team0: Port device team_slave_0 added [ 1836.353537][ T5741] team0: Port device team_slave_1 added [ 1836.403349][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.412935][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1836.441773][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.464125][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.493913][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1836.598005][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.768701][ T5741] hsr_slave_0: entered promiscuous mode [ 1836.808105][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1836.818608][ T5741] hsr_slave_1: entered promiscuous mode [ 1836.825163][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 1836.832944][ T5741] Cannot create hsr debugfs directory [ 1837.215641][ T5741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.359710][ T5741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.769784][ T5741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.840452][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8436'. [ 1837.875269][ T5741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.902879][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8436'. [ 1837.981257][ T6097] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1838.049060][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1838.061014][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1838.071904][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1838.075819][ T5832] Bluetooth: hci1: command tx timeout [ 1838.090708][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1838.097618][ T796] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1838.162183][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.181777][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1838.194753][T29149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.201971][T29149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.216992][T29149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.224082][T29149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.257609][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 1838.264956][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.278115][ T796] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.289955][ T796] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1838.302269][ T796] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1838.316554][ T796] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1838.334822][ T796] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1838.337011][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.345052][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.368246][ T796] usb 6-1: Product: syz [ 1838.379253][ T796] usb 6-1: Manufacturer: syz [ 1838.385345][ T796] usb 6-1: SerialNumber: syz [ 1838.409435][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1838.413319][ T5741] veth0_vlan: entered promiscuous mode [ 1838.429961][ T796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input143 [ 1838.434297][ T5741] veth1_vlan: entered promiscuous mode [ 1838.474886][ T5741] veth0_macvtap: entered promiscuous mode [ 1838.485116][ T5741] veth1_macvtap: entered promiscuous mode [ 1838.505129][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1838.522089][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1838.537914][T29157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.548949][T29157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.559995][T29157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.570290][T29157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.636002][ T796] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1838.659060][ T796] (id 0x00) [ 1838.718215][T29155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.728882][T29155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.765850][ T796] rc_core: IR keymap rc-imon-pad not found [ 1838.771700][ T796] Registered IR keymap rc-empty [ 1838.780732][ T796] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1838.783744][T29155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.802708][T29155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.926083][ T796] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1839.137755][ T796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1839.153452][ T796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input144 [ 1839.189398][ T796] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:51> initialized [ 1839.204678][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.214678][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.570308][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8427'. [ 1840.081731][ T4312] usb 6-1: USB disconnect, device number 51 [ 1840.147270][ T5832] Bluetooth: hci1: command tx timeout [ 1841.872775][T27548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1841.884434][T27548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1841.894254][T27548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1841.908895][T27548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1841.925669][T27548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1841.979277][ T6219] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8441'. [ 1842.226164][ T5832] Bluetooth: hci1: command tx timeout [ 1842.364862][ T6242] netlink: 'syz.2.8444': attribute type 27 has an invalid length. [ 1842.414910][ T6242] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1843.084845][ T6252] pim6reg: entered allmulticast mode [ 1843.245565][ T6273] pim6reg: left allmulticast mode [ 1843.304778][ T6256] tipc: Started in network mode [ 1843.314217][ T6256] tipc: Node identity 4, cluster identity 4711 [ 1843.339775][ T6256] tipc: Node number set to 4 [ 1843.431953][ T5909] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1843.440087][ T6256] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8446'. [ 1843.462087][ T5909] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1843.475297][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 1843.777367][T29149] bond0: (slave netdevsim0): Releasing backup interface [ 1843.877890][ T4312] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1843.989136][ T5832] Bluetooth: hci3: command tx timeout [ 1844.004344][ T6371] binder: BINDER_SET_CONTEXT_MGR already set [ 1844.020472][ T6371] binder: 6369:6371 ioctl 4018620d 800000c0 returned -16 [ 1844.055978][ T4312] usb 6-1: Using ep0 maxpacket: 32 [ 1844.095118][ T4312] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1844.121892][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.139239][ T4312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1844.149337][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.160155][ T4312] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1844.172840][ T6238] bridge_slave_0: entered allmulticast mode [ 1844.182505][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.192749][ T6238] bridge_slave_0: entered promiscuous mode [ 1844.230955][ T4312] usb 6-1: config 0 descriptor?? [ 1844.248765][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.264888][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.273539][ T6238] bridge_slave_1: entered allmulticast mode [ 1844.286629][ T6238] bridge_slave_1: entered promiscuous mode [ 1844.581614][T29149] team0: Port device bridge0 removed [ 1844.695738][T29149] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1844.705099][T29149] bond0 (unregistering): Released all slaves [ 1844.720010][T29149] bond1 (unregistering): Released all slaves [ 1844.788346][T29149] tipc: Left network mode [ 1844.810758][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.882944][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.055132][ T6452] FAULT_INJECTION: forcing a failure. [ 1845.055132][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.067839][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.3.8455 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.067870][ T6452] Tainted: [L]=SOFTLOCKUP [ 1845.067877][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1845.067889][ T6452] Call Trace: [ 1845.067898][ T6452] [ 1845.067906][ T6452] dump_stack_lvl+0xe8/0x150 [ 1845.067938][ T6452] should_fail_ex+0x412/0x560 [ 1845.067971][ T6452] should_failslab+0xa8/0x100 [ 1845.067995][ T6452] ? dst_alloc+0x105/0x170 [ 1845.068017][ T6452] kmem_cache_alloc_noprof+0x87/0x650 [ 1845.068036][ T6452] ? fib_lookup+0x76/0x440 [ 1845.068056][ T6452] dst_alloc+0x105/0x170 [ 1845.068080][ T6452] ip_route_input_rcu+0x23e5/0x3130 [ 1845.068111][ T6452] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1845.068141][ T6452] ? ipt_do_table+0x2b2/0x1630 [ 1845.068280][ T6452] ? lock_acquire+0xf0/0x2e0 [ 1845.068309][ T6452] ? ip_route_input_noref+0xad/0x270 [ 1845.068331][ T6452] ip_route_input_noref+0x17c/0x270 [ 1845.068353][ T6452] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1845.068375][ T6452] ? __pfx_udp_v4_early_demux+0x10/0x10 [ 1845.068400][ T6452] ? ipt_do_table+0x2b2/0x1630 [ 1845.068433][ T6452] ? __pfx_ipt_do_table+0x10/0x10 [ 1845.068459][ T6452] ip_rcv_finish_core+0x5af/0x1c00 [ 1845.068495][ T6452] ip_rcv_finish+0x14c/0x2a0 [ 1845.068524][ T6452] NF_HOOK+0x336/0x3c0 [ 1845.068550][ T6452] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1845.068574][ T6452] ? NF_HOOK+0x9e/0x3c0 [ 1845.068597][ T6452] ? __pfx_NF_HOOK+0x10/0x10 [ 1845.068628][ T6452] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1845.068659][ T6452] ? netif_receive_skb+0x102/0xc50 [ 1845.068684][ T6452] ? __pfx_ip_rcv+0x10/0x10 [ 1845.068708][ T6452] netif_receive_skb+0x45b/0xc50 [ 1845.068739][ T6452] ? __pfx_netif_receive_skb+0x10/0x10 [ 1845.068762][ T6452] ? __lock_acquire+0x6b5/0x2cf0 [ 1845.068791][ T6452] ? tun_rx_batched+0x185/0x790 [ 1845.068815][ T6452] tun_rx_batched+0x1de/0x790 [ 1845.068841][ T6452] ? __pfx_tun_rx_batched+0x10/0x10 [ 1845.068871][ T6452] ? tun_get_user+0x2354/0x3dd0 [ 1845.068890][ T6452] ? __local_bh_enable_ip+0xd0/0x130 [ 1845.068917][ T6452] ? tun_get_user+0x2669/0x3dd0 [ 1845.068934][ T6452] tun_get_user+0x2a78/0x3dd0 [ 1845.068965][ T6452] ? aa_file_perm+0x192/0x15e0 [ 1845.068988][ T6452] ? aa_file_perm+0x50e/0x15e0 [ 1845.069005][ T6452] ? __pfx_tun_get_user+0x10/0x10 [ 1845.069023][ T6452] ? aa_file_perm+0x192/0x15e0 [ 1845.069046][ T6452] ? __lock_acquire+0x6b5/0x2cf0 [ 1845.069078][ T6452] ? ref_tracker_alloc+0x35c/0x4c0 [ 1845.069108][ T6452] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1845.069139][ T6452] ? tun_get+0x1c/0x2f0 [ 1845.069162][ T6452] ? tun_get+0x1c/0x2f0 [ 1845.069181][ T6452] ? tun_get+0x1c/0x2f0 [ 1845.069203][ T6452] tun_chr_write_iter+0x113/0x200 [ 1845.069225][ T6452] vfs_write+0x61d/0xb90 [ 1845.069254][ T6452] ? __pfx_vfs_write+0x10/0x10 [ 1845.069285][ T6452] ? __fget_files+0x2a/0x420 [ 1845.069320][ T6452] ksys_write+0x150/0x270 [ 1845.069343][ T6452] ? __pfx_ksys_write+0x10/0x10 [ 1845.069373][ T6452] __do_fast_syscall_32+0x20d/0x640 [ 1845.069399][ T6452] ? do_fast_syscall_32+0x33/0x70 [ 1845.069426][ T6452] ? asm_int80_emulation+0x1a/0x20 [ 1845.069444][ T6452] ? do_int80_emulation+0x274/0x4d0 [ 1845.069463][ T6452] ? trace_irq_disable+0x3b/0x150 [ 1845.069493][ T6452] do_fast_syscall_32+0x33/0x70 [ 1845.069515][ T6452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1845.069538][ T6452] RIP: 0023:0xf708ef6c [ 1845.069556][ T6452] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1845.069573][ T6452] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1845.069594][ T6452] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1845.069607][ T6452] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 1845.069618][ T6452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1845.069629][ T6452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1845.069641][ T6452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1845.069669][ T6452] [ 1845.558213][ T6238] team0: Port device team_slave_0 added [ 1845.569160][ T6238] team0: Port device team_slave_1 added [ 1845.619254][ T6462] ptrace attach of "./syz-executor exec"[28137] was attempted by "./syz-executor exec"[6462] [ 1845.682466][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.689827][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.717357][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.731832][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.739093][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.771095][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.851907][ T6238] hsr_slave_0: entered promiscuous mode [ 1845.858803][ T6238] hsr_slave_1: entered promiscuous mode [ 1845.866920][ T6238] debugfs: 'hsr0' already exists in 'hsr' [ 1845.872685][ T6238] Cannot create hsr debugfs directory [ 1846.017702][T29149] hsr_slave_0: left promiscuous mode [ 1846.025298][T29149] pimreg (unregistering): left allmulticast mode [ 1846.066425][ T5832] Bluetooth: hci3: command tx timeout [ 1846.817677][ T4312] usbhid 6-1:0.0: can't add hid device: -71 [ 1846.823738][ T4312] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1846.897857][ T4312] usb 6-1: USB disconnect, device number 52 [ 1846.957133][T29149] IPVS: stop unused estimator thread 0... [ 1899.105998][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1951.975606][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1951.982588][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5195/1:b..l [ 1951.991081][ C0] rcu: (detected by 0, t=10502 jiffies, g=274341, q=450 ncpus=2) [ 1951.998912][ C0] task:udevd state:R running task stack:21096 pid:5195 tgid:5195 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1952.013575][ C0] Call Trace: [ 1952.016867][ C0] [ 1952.019796][ C0] __schedule+0x15dd/0x52d0 [ 1952.024306][ C0] ? truncate_inode_pages_range+0xcf0/0xe30 [ 1952.030210][ C0] ? __kernel_text_address+0xd/0x30 [ 1952.035399][ C0] ? __pfx___schedule+0x10/0x10 [ 1952.040248][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1952.045262][ C0] irqentry_exit+0x599/0x620 [ 1952.049841][ C0] ? trace_irq_disable+0x3b/0x150 [ 1952.054868][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1952.060856][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 1952.066139][ C0] Code: e9 30 ff ff ff e8 75 e6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 cc 0f 0a cc 48 8d 3d 2e 6b 73 [ 1952.085737][ C0] RSP: 0000:ffffc90003c27388 EFLAGS: 00000286 [ 1952.091794][ C0] RAX: f4aa4b53ac677e00 RBX: 0000000000000246 RCX: 0000000000000046 [ 1952.099758][ C0] RDX: 000000005a44979c RSI: ffffffff8e168271 RDI: ffffffff8c27c200 [ 1952.107719][ C0] RBP: 0000000000000000 R08: ffffffff826f2ffc R09: ffffffff8e75e520 [ 1952.115682][ C0] R10: dffffc0000000000 R11: ffffed100afcdef1 R12: 0000000000000002 [ 1952.123641][ C0] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 1952.131611][ C0] ? kernfs_root+0x1c/0x230 [ 1952.136122][ C0] ? kernfs_root+0x1c/0x230 [ 1952.140620][ C0] kernfs_root+0x38/0x230 [ 1952.144943][ C0] ? kernfs_root+0x1c/0x230 [ 1952.149442][ C0] kernfs_parent+0x51/0x190 [ 1952.153940][ C0] ? kernfs_get_inode+0x6a1/0x780 [ 1952.158961][ C0] kernfs_put+0x71/0x470 [ 1952.163197][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1952.168383][ C0] ? __pfx_kernfs_evict_inode+0x10/0x10 [ 1952.173924][ C0] evict+0x61e/0xb10 [ 1952.177902][ C0] ? __pfx_evict+0x10/0x10 [ 1952.182311][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1952.187148][ C0] ? iput+0xb25/0xe80 [ 1952.191134][ C0] __dentry_kill+0x1a2/0x5e0 [ 1952.195716][ C0] ? shrink_kill+0x8d/0x2c0 [ 1952.200206][ C0] shrink_kill+0xa9/0x2c0 [ 1952.204524][ C0] shrink_dentry_list+0x2e0/0x5e0 [ 1952.209553][ C0] shrink_dcache_tree+0xcf/0x310 [ 1952.214487][ C0] ? __pfx_select_collect+0x10/0x10 [ 1952.219682][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 1952.225221][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1952.230326][ C0] d_invalidate+0xde/0x210 [ 1952.234730][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 1952.239745][ C0] ? kernfs_dop_revalidate+0x404/0x5e0 [ 1952.245196][ C0] lookup_fast+0x3c3/0x5b0 [ 1952.249618][ C0] ? inode_permission+0x346/0x5f0 [ 1952.254659][ C0] link_path_walk+0x720/0x18d0 [ 1952.259450][ C0] path_openat+0x2c3/0x3860 [ 1952.263949][ C0] ? arch_stack_walk+0xfb/0x150 [ 1952.268807][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1952.274189][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1952.279676][ C0] ? __pfx_path_openat+0x10/0x10 [ 1952.284622][ C0] ? __x64_sys_openat+0x138/0x170 [ 1952.289643][ C0] ? do_syscall_64+0x14d/0xf80 [ 1952.294397][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.300475][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1952.305439][ C0] do_file_open+0x23e/0x4a0 [ 1952.309956][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1952.314988][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1952.319826][ C0] ? alloc_fd+0x64b/0x6c0 [ 1952.324158][ C0] do_sys_openat2+0x113/0x200 [ 1952.328832][ C0] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1952.334286][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1952.339487][ C0] __x64_sys_openat+0x138/0x170 [ 1952.344337][ C0] do_syscall_64+0x14d/0xf80 [ 1952.348916][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.354969][ C0] ? clear_bhb_loop+0x40/0x90 [ 1952.359641][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.365523][ C0] RIP: 0033:0x7f45d70a7407 [ 1952.369929][ C0] RSP: 002b:00007ffe974aafe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1952.378333][ C0] RAX: ffffffffffffffda RBX: 00007f45d7804880 RCX: 00007f45d70a7407 [ 1952.386293][ C0] RDX: 0000000000080000 RSI: 00007ffe974ab160 RDI: ffffffffffffff9c [ 1952.394253][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1952.402211][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558662bc47f5 [ 1952.410168][ C0] R13: 0000558662bc47f5 R14: 0000000000000001 R15: 0000000000000000 [ 1952.418140][ C0] [ 1952.421151][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g274341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1952.432415][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1952.442389][ C0] rcu: RCU grace-period kthread stack dump: [ 1952.448261][ C0] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1952.461735][ C0] Call Trace: [ 1952.465005][ C0] [ 1952.467928][ C0] __schedule+0x15dd/0x52d0 [ 1952.472429][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1952.477373][ C0] ? __pfx___schedule+0x10/0x10 [ 1952.482219][ C0] ? schedule+0x90/0x360 [ 1952.486453][ C0] schedule+0x164/0x360 [ 1952.490600][ C0] schedule_timeout+0x158/0x2c0 [ 1952.495450][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1952.500818][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1952.506103][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1952.511895][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1952.517436][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1952.522281][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1952.527470][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 1952.532231][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1952.537507][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1952.542702][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1952.548502][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1952.553090][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1952.558279][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1952.564074][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1952.569010][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1952.574050][ C0] kthread+0x388/0x470 [ 1952.578107][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1952.583297][ C0] ? __pfx_kthread+0x10/0x10 [ 1952.587875][ C0] ret_from_fork+0x51e/0xb90 [ 1952.592463][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1952.597567][ C0] ? __switch_to+0xc7d/0x1450 [ 1952.602239][ C0] ? __pfx_kthread+0x10/0x10 [ 1952.606821][ C0] ret_from_fork_asm+0x1a/0x30 [ 1952.611594][ C0] [ 1952.614605][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1952.620919][ C0] CPU: 0 UID: 0 PID: 6644 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 1952.632191][ C0] Tainted: [L]=SOFTLOCKUP [ 1952.636500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1952.646548][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 1952.653218][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2 [ 1952.672825][ C0] RSP: 0018:ffffc9000cb07580 EFLAGS: 00000293 [ 1952.678889][ C0] RAX: ffffffff81b9bebd RBX: 1ffff110170e812d RCX: ffff888062063d00 [ 1952.686849][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1952.694828][ C0] RBP: ffffc9000cb076a8 R08: ffffffff9011a3b7 R09: 1ffffffff2023476 [ 1952.702799][ C0] R10: dffffc0000000000 R11: fffffbfff2023477 R12: ffff8880b8740968 [ 1952.710759][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 1952.718723][ C0] FS: 00007f9d88f49c80(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 1952.727640][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1952.734214][ C0] CR2: 00007ffdbb6c9f48 CR3: 0000000079e6e000 CR4: 00000000003526f0 [ 1952.742180][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 1952.750144][ C0] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1952.758109][ C0] Call Trace: [ 1952.761395][ C0] [ 1952.764332][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1952.769550][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1952.775885][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1952.781070][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1952.786172][ C0] flush_tlb_mm_range+0x5c3/0x10c0 [ 1952.791283][ C0] ? up_write+0x1ab/0x410 [ 1952.795604][ C0] dup_mmap+0x17a2/0x1d90 [ 1952.799941][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1952.804613][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1952.809816][ C0] copy_mm+0x13b/0x4a0 [ 1952.813883][ C0] copy_process+0x18b6/0x3cd0 [ 1952.818561][ C0] ? copy_process+0x921/0x3cd0 [ 1952.823326][ C0] ? __pfx_copy_process+0x10/0x10 [ 1952.828352][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1952.833284][ C0] kernel_clone+0x248/0x8e0 [ 1952.837785][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1952.842817][ C0] __x64_sys_clone+0x1b6/0x230 [ 1952.847578][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1952.852876][ C0] do_syscall_64+0x14d/0xf80 [ 1952.857457][ C0] ? trace_irq_disable+0x3b/0x150 [ 1952.862475][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.868535][ C0] ? clear_bhb_loop+0x40/0x90 [ 1952.873203][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.879090][ C0] RIP: 0033:0x7f9d890e3636 [ 1952.883501][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1952.903127][ C0] RSP: 002b:00007ffdbb6c9b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1952.911546][ C0] RAX: ffffffffffffffda RBX: 00007ffdbb6c9b48 RCX: 00007f9d890e3636 [ 1952.919515][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1952.927473][ C0] RBP: 0000555a02c7cc30 R08: 0000000000000000 R09: 00000000000000d0 [ 1952.935430][ C0] R10: 00007f9d88f49f50 R11: 0000000000000246 R12: 0000555a02c8afc0 [ 1952.943473][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1952.951444][ C0]