last executing test programs: 5m19.7380454s ago: executing program 4 (id=3606): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x24060400) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x13, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="9cd780d5b7e4"}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193df163e74963f86ddf08412e900092f8db0049d90491c3248040000f858dbb8", 0x29}, {&(0x7f0000000280)="00c89b005b1487ca00efd4e359e4ffe1671d4490b9", 0x15}], 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf25030000007c0001804400040020002d000a000000000000003a0000000000002d000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb020000000d0001007564703a73797a300000000014000280080003000100000008000100160000000e0001006574683a7663616e30000000100004800900010073797a3100000000280001801c000280080003000300000008000400bb0e000008000400a9a3000008000300ff0f0000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c4, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) unshare(0x24060400) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x13, @void}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="9cd780d5b7e4"}) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193df163e74963f86ddf08412e900092f8db0049d90491c3248040000f858dbb8", 0x29}, {&(0x7f0000000280)="00c89b005b1487ca00efd4e359e4ffe1671d4490b9", 0x15}], 0x2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf25030000007c0001804400040020002d000a000000000000003a0000000000002d000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb020000000d0001007564703a73797a300000000014000280080003000100000008000100160000000e0001006574683a7663616e30000000100004800900010073797a3100000000280001801c000280080003000300000008000400bb0e000008000400a9a3000008000300ff0f0000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c4, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 5m19.247593704s ago: executing program 4 (id=3612): recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/205, 0xcd}, 0x2}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4014) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 5m19.128199595s ago: executing program 4 (id=3613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffae1d) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="1a", 0x1, 0x280088c4, &(0x7f0000000480)={0xa, 0x4e23, 0x800000, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000005500)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=""/169, 0xa9}, 0x9}, {{&(0x7f0000001a40)=@ieee802154, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001ac0)=""/108, 0x6c}, {&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000001b80)=""/117, 0x75}, {&(0x7f0000001c00)=""/227, 0xe3}, {&(0x7f0000001d00)=""/12, 0xc}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/47, 0x2f}, {&(0x7f0000002d80)=""/18, 0x12}, {&(0x7f0000002dc0)=""/229, 0xe5}, {&(0x7f0000002ec0)=""/248, 0xf8}], 0xa, &(0x7f0000003080)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1, &(0x7f0000005140)=""/209, 0xd1}, 0x2}, {{&(0x7f0000005240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000052c0)=""/204, 0xcc}], 0x1, &(0x7f0000005400)=""/249, 0xf9}, 0xb352}], 0x4, 0x10002, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000140)=0x1, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 5m18.185675759s ago: executing program 4 (id=3615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000140)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000000c0)={0x10, 0x0, r4}) 5m17.976081534s ago: executing program 4 (id=3616): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m16.015525826s ago: executing program 4 (id=3626): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x2, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000180), 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/127, 0x7f}], 0x4, &(0x7f0000002100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x21) 5m0.872559658s ago: executing program 32 (id=3626): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x2, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000180), 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/127, 0x7f}], 0x4, &(0x7f0000002100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x21) 1m20.892021277s ago: executing program 1 (id=5290): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0xa921, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.411110463s ago: executing program 1 (id=5305): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x2a, 0x9, 0xfdfffffe, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x400000c0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0xfffffffb, 0x40, @local, @mcast2, 0x10, 0x8, 0x1, 0x86}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000700673c2bbd7000ffdadf8d19f6ee05a9b12dbf51f1ba352500000000", @ANYRES32=0x0, @ANYBLOB="0110040004e80200180034801400350076657468315f746f5f626f6e640000001400030076657468315f746f5f626f6e64000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m17.165007154s ago: executing program 1 (id=5307): r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x1, {0x7, 0x7fff, 0x5, 0x9}}) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4c040) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000780)={0x9a, "3e95eeb876c4bc90441ff02474b48ee511572fcb560d0a7054749feb86b8a932", 0x2, 0x100, 0x9, 0x1, 0x8, 0x3, 0x7, 0x28e}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000028006700000206907864010001ac1414aafffe4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200059078000634192ebf4d7bf300dd9b397aa7cd170f6e587454620af14161f53319f753e9080c003082716c150be6a546ff3046463dd275d453b16564ec930b67fe8bf7f28a4c7588842c09e4ef78eb620b27515f650e95d32e42a7931a2a230c6e628791ce587195336902f97f3ac3d12d609308207f6c15ce71a9ecb08a88c2d3ea38811a42d8cb00"/150], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001afdffffff0a000000000000000000e8", @ANYRES32=0x0, @ANYBLOB="00000000140003000400000000000000000000000000000014"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c006700000206907864010001ac1414aa00004e22b2988e9463e8495bd20aa2129319d22fbac205654a678e56a82659dd7ad3c0a8337185b042ee11ce0fcb63123a8e48958959e8d110a7a6fd8aaa28c2b307a5bd03d67a69", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000505020000"], 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000040000000100001304000002"], 0x0, 0x42, 0x0, 0x1, 0x6abb}, 0x28) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x282040, 0x2, 0x20}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x400400, 0x1ac) pread64(r5, &(0x7f00000006c0)=""/150, 0x96, 0x100000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000004c0)) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000180)=""/186, 0xba}, {0x0}], 0x2) r7 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000180)={0x9, 0x0, 0x8}, 0xc) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x3f, 0x1e, 0x100, &(0x7f0000000840)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 1m15.346536529s ago: executing program 1 (id=5315): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8e) r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x6, 0x7fffffff}]}) exit(0xffff) close_range(r3, 0xffffffffffffffff, 0x0) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 1m14.204171323s ago: executing program 1 (id=5318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x4132, 0xffffffffffffffff, 0x6000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402) ftruncate(r0, 0x6) r3 = socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000100)) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7064657673696d0000000f0002006e6574646d7673696d3018e60e6300000300e400ff00000000000000000000000000000008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) pipe(&(0x7f0000000040)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, 0xe) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x606640, 0x0) close(r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r9, 0x4b35, 0x80) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000100)=0x8) 1m14.126244394s ago: executing program 1 (id=5320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="2800700005000800f80000ea030007000500010001000000050002000100000005000600000000000400240008000c00648000000a001800030303030303000030aac1cab835c6c3990eeffab08f0973814553ea36609e33b1c7d94455a308c97376b711611e56ed5cfc6ab309e6e73f12eed1b9e8a5ead67a780e37"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (fail_nth: 3) 58.867497631s ago: executing program 33 (id=5320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="2800700005000800f80000ea030007000500010001000000050002000100000005000600000000000400240008000c00648000000a001800030303030303000030aac1cab835c6c3990eeffab08f0973814553ea36609e33b1c7d94455a308c97376b711611e56ed5cfc6ab309e6e73f12eed1b9e8a5ead67a780e37"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (fail_nth: 3) 33.540959284s ago: executing program 2 (id=5559): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x88, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0x0, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="98b1b368fac9"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xd}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4060884}, 0x4008010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 33.100218263s ago: executing program 2 (id=5564): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x1, 0x3}, 0x2}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000200000000900000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=r6, @ANYRES64=r7/1000+60000, @ANYBLOB="000000400100000002000060160100007ac373943c52b971ae817393c5f2ecc084956a8f84f9eedba53d50ddf1df0ef1e69e92fbe0241c2c16ebde1cf4a7cf17edab2662eb89ace3ae81c7e1caf4917c"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="100fa247722f775517c1c67fde85f24347d9ab29f552524ce03f2ccd6c91232f44cf21", 0x23}}, 0x200008f3) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r3, 0x80000, {0x0, 0x4ad32af5f8ad3b02, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x3c28bb2d4160cb13}, 0x10) 33.012158864s ago: executing program 2 (id=5565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0xe0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x3) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000003003e00edfffbfd94020000000000004000000000000000cf000000000000000f000000000038000b"], 0x78) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='-#{-\x00', &(0x7f0000000080)='./file1\x00', r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fcntl$notify(r1, 0x402, 0x80000018) 32.889683983s ago: executing program 2 (id=5566): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c", @ANYRES32=0x0], 0x30, 0x4000}], 0x1, 0x0) 32.736849256s ago: executing program 2 (id=5567): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x0, 0x4, 0x0, 0x0, 0x3, 0x18, 0x1, 0x2a5c, 0xff46, 0x4, 0x2000002, 0xc, 0x5db, 0xffffffff, 0x7, 0x111, 0x2, 0x10087, 0x3, 0x0, 0x6, 0x180002, 0x0, 0x7, 0x2000009, 0x0, 0x3c, 0x14, 0x0, 0xc, 0xe8]}) 32.721918752s ago: executing program 2 (id=5568): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x34, {0x41, 0x0, 0x0, 0x9}}}], 0x18}, 0x40e0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdb0, 0x73}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x48}, {0x36, 0x1}, {0x1b, 0x1}, {0x2}, {0xb}, {0x1b, 0x1}, {0x48}, {0x24, 0x1}, {0x12, 0x1}, {0x6c}, {0x4}, {0x3, 0x1}, {0x12}, {0x48}, {0x1b, 0x1}, {0xb}, {0x59371bf58640d37c}, {0x30}, {0x5, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = getpid() move_pages(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000180)=[0x10, 0x7f, 0x2, 0x8, 0x5], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) bind$802154_dgram(r8, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$dir(0xffffffffffffff9c, 0x0, 0x40a00, 0x80) 7.963423246s ago: executing program 3 (id=5641): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) preadv2(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1, 0x2, 0x101, 0x33) 7.841993849s ago: executing program 0 (id=5642): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000bc0)={{r0}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x5, {0x2c, 0x4, 0x3, 0x4, 0x7fffffff}, [0x6, 0x26ec, 0x4]}}, @subvolid=0xfff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff}, 0x80) fcntl$lock(r2, 0x6, &(0x7f0000000e80)={0x1, 0x2, 0x10000, 0x7fffffffffffffff}) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) memfd_create(&(0x7f0000000100)='/dev/vhost-net\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000bc0)={{r0}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x5, {0x2c, 0x4, 0x3, 0x4, 0x7fffffff}, [0x6, 0x26ec, 0x4]}}, @subvolid=0xfff}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) pipe2$watch_queue(&(0x7f0000000340), 0x80) (async) fcntl$lock(r2, 0x6, &(0x7f0000000e80)={0x1, 0x2, 0x10000, 0x7fffffffffffffff}) (async) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) memfd_create(&(0x7f0000000100)='/dev/vhost-net\x00', 0x1) (async) 7.832640586s ago: executing program 6 (id=5643): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x40000000}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0) 6.38917782s ago: executing program 3 (id=5645): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r0, 0x4b45, 0x4) r1 = syz_open_dev$video4linux(0x0, 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYBLOB="d52bb4b03e5257fe8b6050ddb2c92096bf15b66b7a182a796524040a0df5dacdff43253497139e9999c13365b012436a96158a4e3d88eca793b9daa9414fa548bf9e7d29bf2d37d15c54bb88171414d67df745195eadbe5107b30ff55c20", @ANYBLOB="9259c7d1e5e99005a659065827b4f5f439a7b51262e58932c6f6db6b11", @ANYRESHEX=r1], 0x38}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000000, &(0x7f0000006680)) syz_usb_connect(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x43]}, 0x2c) 6.089811118s ago: executing program 0 (id=5646): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x180) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x84, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000003ac0)={0x1, [{0x1, 0x3008, 0x7, &(0x7f00000002c0)="ce820eed8b0a5eeee75b97cd9e78e94bcc0b29384f8ab243bc66a79a80cdaff10169972896db180b1194bf382d167c7d5cb256ca62f67dcab94cbc83f67ef8562f4507f8aba810a47f001a128b0c496fa8bf2e31420b6f7c9e3b1ed932ed561da80c7db1887841124d2d7fbbf5c10d1a2d8b8f1bbecfdc79e76ea13e0b605dbb291d2cfc2ba9ed5873d5d8012cf9a6a1c5c41fdbf9c3a364157ba4e9ccc30df05c9844090934ee166b710f3a7d2c54b2b7054538e38530c72a57e64158dc81fac227ee95b4b8c2581887f0ac17bf66c1fe8df4520268ed5988f5ed7eef6d8a38d5c65cf11a0207934586cb8c32abcfd0c90091618a5a9b7b4cd25f4fac454a39c2f80af0c51574387701ee3de2f3f2a0c1d2e2e7eb8e4dc6de5e1445ecd4f7d104534725e970e0bfe63e5b9fc82ac0e1d1e01546f324f10c221a592140e495758d8d1f20e05544cf94d5e72fa84fe7df3de8e0e72ff7c2f4d1f882a1a2dbc0b2817330793b4511b9720cacbe7208f7736f608d6db886c69ce2c6bf21190c2f24f7de60b5ab2df58115d566f68f3bc4fef735a8a526e0f560399ed59504d5a5d2851021b5566fae05aaacde6eff34eb23c914cf8736165d4f13d2f96bf6553e66d0ee4e3b0ae34edb112933f28e1bca8638178b9c564933e756e531443becaa03c9b33428b034d48945065fb664b8a8c43a68f9c6d4509df55bd4092faf0e3e837b7c77c2b6bd0a50d127116450cb6d9ccc88110cd590ffa09d75dc47df5c61d00d2cb9f22841e83a65a211258eee13cecb209ad04bb53734d3f6012daa34d8084ffab2714d0666ccfbcc54875574d22ab0b689af21cadbc318fd80c5b44d29b5624cd56cf28ee5a95068c521198c278dbdabac7f03ed88ce201aa62d8c22faf9dc07882448d191d830a1feed3895898cd74ea9c2ab28f7afced2595c758791f444fe2d534d3684746053b161a14d454d92b44264c1c5eb4c40c986105c5651943046c558ff7728aa7d938dee2c03706cf260090c0ae75c364ab2683e53ecd6f4a36413b74543a2a6bd2ee75e3de28d6fc7e98f2dec5399e905eaf02b7972a8055d7e7102fac26608676a0e875c03c1f589c0b45b48e78435a8b7686941d1c62fc4ba1ec6c498e818278e22f307451e5f5d017ebc5a169a7030532001921926e9942711b5d252497dbb9f8234d97a05a209e15b3dcbe882b29e5b1c00cc9fae9422bba64ec4950352c4073b63b8a6edea884433c1fb4054c40765adb2f6105d2be004d096f0e3ad6f0c7bba6e574c04cbdaf24d7c483addb4f28ac23fd1cd0b171af76f8918f0f78b84b60101ac5c67cfdc25e65d4a102b566de3f4543c6100c6c1c22d7da9d37f5e58ed88f91953c9c1f5beb47edec5140a713db4a7fa5c28684a5215b5390068720cb1a9f77a18eacd2a4b093a973aa3db4492c3eb34e2b4137fe99fe59c9a594496e359f060659671192c05a719571279db60d604dc9b6992e3d7fbbf3e97c3965edbaaf7850c57fe464f57740ff77f3efe59d25ee0b149e713912a2ef12e9fe0768f0985b93bde61518dede6066f48a451c4cf324217fe801e81a311fad63853d9afbf6ccc3a3b7a1d33c87cdfc435a1c7a04e1abf1a77fb1742365c02e37bba66198a3ca009df284c7ad51b4c281881650ea964a32f5554c58d649a83ae06d981471118b3a4f7bccda3a69054f3b30f89047bb64fd612c91bb291d9eb30b97cbf33050ee063eebe716e41316a32a1a078ff1a151c134da5c87de3fd50709e44ac6f2bec3d84e800b6f415c1dd31af3644660d1e7f0c0c2ecc589f57701caf042ff6f46439793046c7c14d60ab88e6990e1cf4b546b2f9c7b8df84051e4102900c694f02084d075bf2ede406a69bce0d49c71afee35b01fb625a069cb8b19d3d6de5b710406e2111d1a2bf16828a18a4ca66bb83f761413be0c290e7a86c78af0e604b2b35030d8740d3dcecf97f0be10a4219003d9269ff353cf98c14c7dd5d2fe994565fdd79d4fc95ff91729d53ac0d871a1d56c7f3734f5d30a86e95a5d320e84282dfa8d15f3520ca30830561a4349d47deb76139197874f26b2658467716c467345d3dc19b0e4f738c1940f5c1e16ce5fb1e3d8fcfc34205311418a2ae1b326d716120df279815fa2c372e2591cf6faefdba489c02f7"}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x800000, 0x0}, {0x3, 0x0, 0xa43, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xe967, 0x0}, {0x0, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7c8, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r5, @ANYBLOB='\b'], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x20000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)) mremap(&(0x7f0000a87000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 5.991002848s ago: executing program 5 (id=5647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001b80)={0x2f}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) sendto$inet6(r1, &(0x7f0000000200)="d7", 0x1, 0x24008049, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c00"/27], 0xa0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000006000000000000000010000000000000fdffffffffffffff0000000000000000000000000000008000000000020001062c00000000000000480003006465666c617465000000"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 5.244690297s ago: executing program 6 (id=5648): syz_emit_ethernet(0xe, &(0x7f0000000180)={@link_local, @remote, @void, {@generic={0x88a2}}}, 0x0) (fail_nth: 3) 5.165011855s ago: executing program 6 (id=5649): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r2}) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002840)={0x0, 0x2710}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmmsg(r1, &(0x7f00000024c0)=[{{&(0x7f0000000480)=@xdp={0x2c, 0x9, r3, 0x9}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)="0617ee9b5ddca216cd0f0b5277f4745815104416f1e479daa043c116890bc7b50fe64d56df820c6b5c32b672654185123104b3b7a2353fe930ffff73bb2638af9053ed3d0d00adb706d1aa97db76810fc991fc582ad7c3e2e7d24aa1ee6eee84c90843897a76b0e4d0f0d392d6ca3fb71383a4f56f01f0ad0e16c58c3d8aae", 0x7f}, {&(0x7f0000000580)="c639854bcbae17c531ff043ffbfe98b503c302ef0c8e5c61c524163566991c2aae598919b6c6e4a5e809373b855f400a00a59b5de4a02c480c0ff45693e2147f44b3ae82b1c800d761", 0x49}, {&(0x7f0000000600)="03c6b5beae2ed3dacf1e7516ff64bde48791caf6b865c5b01bf87178febd13537d39d429439b07793354609a78f204dcdcc9fbae1339b96e650b3d042f5881501b83", 0x42}, {&(0x7f0000000680)="5f3620876fdf1954cd76eca37721198fd9bc95f3fedc6d3b43aea8af77373ef63558500c9ed7d42c0b10cd7bc1b806e516dff6254ce984e7ca0a481c73fe0bd2be5bdc7c869bf6a0eca1663b29c7c1ac743a41968d7ccc288c5897ab6119ee213e", 0x61}, {&(0x7f0000000700)="3b9a256da977a0d0fd45189dcd772bf38c749339f4c61416f00ac4950bcd8027ae1f0038ccce155e664564104014d841ec1567d304106875789cdca349bb43bd115781297078c7d693c6cac501114cdfe640983ff536985e86ebe5431ef3ad0020604cf8d83a834f8fee567d235e1d76b8305854f8194295d8f9b98047e92e1403bf2ea0ad1c52b5ac1b6c1f90332fbbad54675dcd186434c61302a4b630b165ffe0a70fee27a0b7798efca14fe6cea23eaa1d6a215cec7f43dda34f3e182943501c00d113da7a2247a18be504cfc18f55d0743c8f7d8becae2ec654fad0d51473e038bd4c243cc7238aeca72f9bfdf34a96a64817e015bf50", 0xf9}, {&(0x7f0000000800)="9d59b31b36d13de3b2981f4cbb48674400c08896556e5098d3ebfdb20202f9cf4002b714238b7406f51bfec4a743f702a30b7a372d7fca9713424f2527f742bc3b17d8bb29be5f09c272ffed3e80df651ebf6b278d012a13ff3bb87ee9166bbf350201f9eefd06257d80e5ba8cd0b21ec86abe5c17e5914bfc173681e845f21a80136aacd319f57d6a2d80dcb203a8130a60a0f4f9a9a838d8e9a2b1f5b71b11bbee17cfe7f560775224ab46484558b55239e17a65d74149ad312a676c373d2a742ab5ed1854a9822706e37e4939950915ef3322b5c91abd", 0xd8}, {&(0x7f0000000900)="b3f670e527ed7e0315f0f04967416c5a54e85d41000e6836e152780f913e9c40bff982eb4bdd50226dd263ea73bf03838ce069c8e594334cb2f8a40c81915b479684fa3e9d9d51cd276d299a5ca9a166be6a08e70faf3728", 0x58}, {&(0x7f0000000980)="733e103d3771c2b315b65e808801d2231fb6387a7d79ede9a4b7f77cae6538f6e7ec61591e60062da11de249b8a7c2b36fd48b9f0bb5c401b4393760f58d6e8137fbeb9197d6c55165bdeb48926d7c171d5d1a12759cc74d55322e585557c13aedf98ed3a2f8788ea7f1ce4d1eb14b7ad219b09fbf3678bf7d1d2307cdfe10803456aeea8231322e8976a8003901dab2cf1a843081ba56c2b5608892a16e1d71a9a19c6a9cbc7803", 0xa8}, {&(0x7f0000000a40)="430437e1e46ac8da361c05cf6390765a1c39b069584e177fa5a12168ea01f830bfcd35c1f987feb8df54ba4ef6233b32acf36117f0ce0cd0ac82c76984b907fdbe779dcef876205c0b7d8e3810df436c5ee023f8e2662ada348d15ec305ce1e0854c9ce33665c0634d045bfcaf5a45515c73d398796c37974d39ceb3f9c14210aa97e43775d99a8480a6d9a96d72a2de6bdf0e15124b42bf89520db8bdd1f53cee751919e2882c16e9563e1abd5409c96680bfec46af31a06a379d940a09914906147e162143af6c8dc0e17858f4c5b03975abb2768ed254691ea94de37fb21f2401bbfb17a5b2d694a40f01e54d52e1675c51", 0xf3}], 0x9, &(0x7f0000000c00)=[{0x88, 0x1, 0x2, "f33e748812ef13ce1c474ec02016c43d9337fde18a1c42b17ce812bceb754b6472ec20a5cad0a03b2bece966c0a05431123a330d0343342fe346c0f28b209865e8990bb6c172f513b32acc01fe8dcef731e02c67e9b65a87b4bf74ff1e37cdc16f73d1134149a797348976722e306a4a17669e"}, {0x48, 0x108, 0x4, "9674ca463782ed2b3a1bd919377bde55755d5d908944f76bf5cc172ad3e70a0ff3ab934d37b06ff4e42648bc15a0cd812d64f173c18d21"}, {0xa0, 0x10b, 0x4, "526852e30cfde7ab1ee3248639c1000df76c4c75fd0da4098aeec70f1a75d70e69e0375f214b1a725f1ee3ab021cb61215b26f3d331290446e6a6a6067a2389b73d4d86905ca17dfa75779b7557a0b8ec94a00af750c7ee77114bfdd6711e4125b448378b4a3cde271b360d2390898523270fda1da217f8abd5c1f18ef3749546b1314e5dd1dc764b19d"}, {0x90, 0x11, 0x0, "5f620e60af70a2cfbbdb8012fb68c210d1b19091a4ba8fd8909491eafa20dd2a6158c94d3855f1607426602a184d27989bf18083b05e5af401232de489d5e236058fbdd7bde2439ef183db14edfb2b88ff645477725b503bb32a776dd4ce8c309edb4929723b35ed7281ae077900d5aa264d85e56eaa57c84b75c50f"}, {0x100, 0x1, 0x0, "961d487bd2aba5dca4c24e979225af64973481bc5343ee77f64aaa640ba3c46cd7a17df759a5872ecc52c55f297a9aac8427b4716c9f1b33c11f18366a821644ec84c1e6c412a3476021f325790ba7538c18d12dc21d8707f6fa0786f736011b004451eb28bd54ee6c14478cf8132fcd5e04654218b0b1bdfb81e3aa4e82161b9de560de609c697bdec96c73302ba7fe30c2e57f191449f94a4d2d14630d7ab6767a4ddbf903d61bc5a8fa0294f43922bcb201c95872644b5a2bdbcf2163c97151e6159a89157d948ca3a9fba2710289e3422cc07a0cf41962153f5aec0837e75a6e7281ece7e1a6e2cd7945"}, {0xe0, 0x5, 0x1, "a929f26d873fc3830b39d9445d84b97b7eaf0fff2412fc9ef02f083566e8b9ba8c5e3dda377f3f91b0ffd63cafa6b99f4831ec8082776fff24bd97fbf059735ec977d6b39eb49a67fbbf086e16ce1c00e289653bcb2545c2f4bc7eefbc5e2f982e03fa6e62a78da93c2bfebf66174521f85755e5c7036108fe3d6fc32c9f27d7d0667e992dc6a79edd8c858a26004bfb89f5da90d2f35f6c6d29e66a2a54d5ea5aa23f67db98d4c9917458cd72fef0faf6d5c1da88af83e62e2c74d4bca0c9798c5151593aace94a1dc386"}, {0x108, 0xff, 0x7, "f9d2bec58f6b3311ec05b85c51e1a5599f1dadd27675b72a33c6d0ec90c3c6bfea03036be607bfd043264393abd4a44923897f08e41295b0b0b9f34e5a884d628963f067940fbb7a631376533c92529d1596d7b2dd2a34be654d0e31ffb98d15ebaab6ff85cd626d4d8203c8ba6d216ef5f91d069ebe6ca517a6f84438212d7cea2a6076f9e5093a6612b035c775fc5913a1176d999823b10bf5c1bdde6892a3e464e1ec2ba2f40a117c50c5bcc32c8645fabaad856c3c15f1fe50526b1302c0e237143ef8bf47a93f37b67da03ac71593da247e1070478b1d794ef602f5cc7fadc596e7197c4ec77985e830f8f0c11fda9baba3"}], 0x4e8}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="c18cbc1eaf5da0ee02fbcf8082fb13e197264bed9e4b55d8325a2f0b4afc7d5f36e3035011683e1f37c11b6f", 0x2c}, {&(0x7f0000001140)="482add664739410cc6fc074201cd67cb45ba37cccd90564aece1f16d2f6dc08b80da5617ccda347823ec05e5299c5e245eb5e756c67694cad511e3a7f78c49fdc0391668e714fb876c969ee12caf30e793f5817ba31c84", 0x57}, {&(0x7f00000011c0)="e374b6d33418e2502237a6a96d3f6e359a503d438df3e2916045c6990f55b2924776ceff0b6bc58220fbb99f11e27514e1c368519bc4b0c581b13d46a3f6441f7844815c958950c8c8281eb1b75b4a33d34666d616c5401a3fe3dc05ec5a55cee0fdff2da5bab5a852f07058740d5702c1e6d8e3660d9a7d3f86ddb7c580e299e81346477f0fdbfd270b564c76053ecb8e8159a783460e6b8d00dcc091abc1455b4199369ed268bad8236b2caa3c07b1ab19e9e1bdf4523eff9f41d0e9c4f3f4297b16be6d", 0xc5}, {&(0x7f00000012c0)="0c8926083d40940aa578e760a5082fb5ad577ec0d30637e87c71183a8864dcba07c9fb1f15b277a887585e22c010cdaccada2ea6fffe8bd77ca5a0fcf3572a26a05620ec3f0e0bdbaaf6096684ee0b30abab850932d02fd6caaa0bb8a6a16936cef29764afa62d647071aa8c655879f682da88ce8bbb99749aae26d59f1ec77980efd3ac3c9d144bbe37b026743c829400ea569a9ce1bcc02cb950a03d287675e2b5e035198e72c3677920b1399b7c7387ba82143cd8ef432e64dbe2f4e35d603a03b264fcbf3b901f554f5c397e602e683a", 0xd2}, {&(0x7f00000013c0)="ad197cc44ec803e7bafd8c0bc7c7f1546bcf3f55cc89255418215ebccef0ead970d3efca2868b05b42dd8336f06160", 0x2f}, {&(0x7f0000001400)="9677445bfec19af2d18f2b3983a82b4290d926fbe27487a055019bf6c916ab39921787bb15b8e89ac0be57db635e34e938c4f718627a083aab1212136fb3c6fb921a7e7308c8391262f36ee676362bf0fd49da63caf205c962487785b98156bd35bbf3466add0456518c95682c2e85", 0x6f}, {&(0x7f0000001480)="67fef48a2592905f69ef84", 0xb}], 0x7, &(0x7f0000001540)=[{0x108, 0x103, 0x0, "230b58380f62f7bf740be53f568ca4cba794c4da0a1756116afcde931fb9d7bba84eef8bcc20ba3a36782b1dff1e9c6e405a93f7b2ecd00696b676a7a5a8df127849565a41dfb3d4a0b2e5e58947295687ecc57279e1ecc32a24dec827d53c6fe7cdb44caa3aaf3c55fa2edf0ac0744e2d2664f8307294d5a30bcebdf6c01c0914a726e18e1e58aabd8cdb0e9d9819dce578af88e7f7d11133ce7e2883f22d56dd5b8775d8f195d3b1be5ae721a273e42983859f66e59552add9d557cc473a4a53e3fd34a6ba250e303ce1380c0c1feb197724b7cb369676303a09d321ba76b9c63858c0b83e39a7d32ececfbabf5e1a87b47edfa5"}, {0x70, 0x114, 0x5, "6a8e10ef83e2cfcedef6c351aee658b39f150f4a6644eb0cedc9db8fd44a87384f51b0c79509e0e1001d23a27ffd5688c9530dfe96b931902ce5c3dd8496f6a176f70fe64f9126877f2c6c55946e1e28cee52486f36e8d9eea85c72621"}, {0xe0, 0x11, 0x4525, "61073f9db7f14f1de743bf6ea2285d0634ca5c7d472ed141633ce774a0f9b086ffb11b56fb1fbb78a4e61c1e3dadf919c55a6fcb0054eafba75da163bb1fd937b539260ffdf41dcfb0f3441746615dd61272097f5f42d4145df57255b0beba5d3418344f7e2aabb48e81a33d326a6a2ffe7c2bde9b4a249c204ff95b10bc7113ae907377bb11af904e04f94a56c163e9e7b66a7a7db6f5eb13b2c8def13682cc04c83f02e5707efec3b57f74e94d51fe8b8bc1494b21868b4676574135e75193ce949daccfafd40a321d52"}], 0x258}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000017c0)="a7", 0x1}, {&(0x7f0000001800)="1d327f3b834dca3df82ad94d021727550a667b65dda1c97c4edd832888a7b7134bda3d5d9556664c12f66b067dae0ceaefa772fc93be854b79a2f25f81c0165860403fa9b36379a8d8a0882433e8f9ec888965391629b87a37af272da45afa69736912d2e6c5cff3de5fdeff4fa298228741b06e203e8e27e643b8ffdd0e627ee5c2d21b5a2df4549c5c8bb61c327dce8d69390c8e68072b53c9891b2ad8505992d2d1951da0fce7eff6463d9b1444bb80c3d4250747cb6c438af03c3182a0cd996d370626f58e1e077fbdd10859dd5fa63a7b8b79985e309f0f5723d10f794d3953", 0xe2}, {&(0x7f0000001900)="70a4831a8933379897e0346498aa4211acedb865215a66ef4f136696e72dcaea5c8be76f041557bb6735696ad2b15fe1b18c34a783eadda5d47592e31b55fe47ad70a772112e320fe05b57285b24a4a181625416ee863f5104e65c3b9f6e070673a085689c45725cd749", 0x6a}, {&(0x7f0000001980)="3ed562e4f4a58d9b7e0dba298a70e3976fb4ca3cb037a7a305bc9bc382c94e98ef05417363ba79a68600676deaabcfa9c9579d5a4c343bb2a5bf3f7ac554cd02a915dbc8cf1db1a39056129a7aac9fcecc76f4030901dbd9c93b3680d370150a76b7b13bdeaae109bca1ac6614", 0x6d}, {&(0x7f0000001a00)="6a31c76b03eb467b402962418095eb681d2b4a3e3cf07bde912fda88b81f34bb9770fece481ceafc436f58218ea3f8ede2fdd6a7a20eed4987af6276322b5901b8fa3c6cbcaa2979d0ebd9670a2516273632c435b24c4a59ecccc136e4eb5f56e56428bfa3c2b67387b21ca8b9e510e1df0a7ebc97bdf9709db9f358", 0x7c}, {&(0x7f0000001a80)="b4a19bfce3b649a5a9bc1bddfed4953145d18c59460f76ccef9eed49abba66132ba9c1232d21ecd067e98025e27e95d65ffc4d5693b9fe142bcc8d6453d7cea38cf5855ba7c076b1e5ad03ae7457d95342a65c1622a5c5d72d11268055d226950dac5d795471a8be3ac7c33f0b8602360508e29fac7e40b003066e9530e947d927dd5d7d812fbc09c0090b4345889cda56ea8b6f5692e92efe7a1d37c5bf6558be8478593f93d84d0794ad62585645886dc726d806fa9ce674186d48a87a2075ca83ff9dd28f9105348723c3a732b2ee2d27c04108d9003419b5026d7a", 0xdd}, {&(0x7f0000001b80)="4e2d5c285254bacb072af4269f958b25dae15efc86f042d20e9759c295f5f2398c14497a2240b1472ca83551d48d911687f7b247e99b1c6b0010ac6af0656b7d5f0fbce8e52d7f7ae24759547e142538c48b8a73af61c86fba448e559a7462b02b5e44fac63b2c10435edb6ebfaa0029c8319706befbd6643724fe0895d19279c249acd0b7a80d621da06efec9367e93d3e2", 0x92}, {&(0x7f0000001c40)="f9ff443c4881edc97b6a9aa5b9d21f50e325e4b6bfa23117fa38dfc92c1ed1e13ca86290c071792df05846a4ae87e5bb8bcd9bd4beba97fd198d6701d45f40295c457bdd5da647dd05f61455e4bb2ae107d575afaf4eee1c198f2bec82343b7b7c709bc2d53489d840d82f585e", 0x6d}, {&(0x7f0000001cc0)="f31f7b75431743ed10200cb079789b6443d0985d37057ddebfca46bd4adf2d45a3db3f157ef07a5039eee01b89ebf11c312dfacfdb0aac83ffe693cf82341f0493c5953cec", 0x45}], 0x9, &(0x7f0000001e00)=[{0x88, 0x119, 0x5, "d867af088f3969747c1d28b34a1672183cf76d61370f7f85448f35dc019184349cadfd52339b3c88b5ca632e7bbc08a180215201fddc2b03d84a4ea3f2df2d74fd000be919b92f49aa3d95053b625aca662dbd6d646b5e51c997f31065d94ff851b04323f609e59ec5d54e88c69158ed8e0f936fe6d007"}, {0x50, 0x115, 0x1, "0f6a23af9a145e4db3b2d11a8043a19cb2cee03bfb1c388368a822b7d87c1d447fd863f3b7084900b66a388630a4ce187912741b2f19e3ce45be2e221ef6"}], 0xd8}}, {{&(0x7f0000001f00)=@ieee802154={0x24, @short={0x2, 0xfffc}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)="f571aeb9631b26bd80ae376281f29fb1de36ed13bb8fc33df805c8de4a3e59644819a9c9bf10b9274655fd7f035cd5a725c58e4e5d7b243a3b584426d45130f72c02b91159d8b0fe4142cc6045e24e26c02c520fac7cab1716d874a290cdbcf26247a862e80736881f5fa857445a60682edf680d35c808b59d2bca84aabc1307d8ce0e7d27dbeed7a005603bb08bb2e3a1090f66f76d5446c1", 0x99}, {&(0x7f0000002040)="b20e9c05b7638006e499d17c5298e3809c1bf90846e9b7827d22a0bbadb11656c8c48e66", 0x24}, {&(0x7f0000002080)="e1b5ef58d44bce066e981f4f5c791142bce3271ae2f3139a17f0154746696ababfdda1c98ad08bcaf6ddb12a78f690bb6ab2f069fb1374b96e35d3527763c9399d1cc90e05edfd5638fea571e3b2859c9b3b9856a23af049f937b57c77f2b6654572aabb083018813e21618247746826594337ab1e6a16ed5ab6", 0x7a}, {&(0x7f0000002100)="66ef0c4b993da969dd169759a5c4cb80301be3d59a44cacc306f3d9c3c4f8fd225a7c02291e19cb0abdb6db08e7ae13109ddda5bf3bcf9d1ba97370f074dea99d1a25b8536e8131f27b568c1f20cf323875d139db203dd7f5cd5a20d3802bf4d1f29bed9ca25e8104f63e8de76b40b7830bb3bca55878bb1aac796e48b8635b2388f93f418835e0315771743143529fac4800111d4c55531244420b7b1bb15584218d6180a6cedac3ae1a1aaab60fb184dae05a7", 0xb4}, {&(0x7f00000021c0)="540b338778f11cc1959ba52bcfc800a41bcd2ef4fc0fd28621579ec556d69f32b627a4d6d35643254946a53ca4e53c4fc1dac120edc74f2e8eeb0de57f2940ef7937523778d09c3e859add47", 0x4c}, {&(0x7f0000002240)="efdb5bfaee1a655167acd9ae271a2fbc23d04b6666", 0x15}, {&(0x7f0000002280)="5dc1f1dfd446f0c1024a7b67d1be8edb006d0813bb7bb1551e95b674bab8eee8df294ab2a7996bade33f26b7163b6cdcf50f5f60f1b8015a224e776bdc3c1222032025416f6c7663021ec22835e7f08629807a72396b56763dffe9c30578ac33a76ec0d81d23d18b0fab1052", 0x6c}], 0x7, &(0x7f0000002380)=[{0x48, 0x88, 0x9, "fc2edffcc200273d01c8d2fd29edc29cf636847fd042639fb662517ece855eb3af14f80654b84765b37ccdb5ea40931f9eedefb32393ea24"}, {0xe0, 0x0, 0x0, "e385bdc19d38b459d27f7a452e747d842e126ef2a6a09f5a896120cbff1e42d474d811030f9598f9a6cdc321f2cbc00502491429fb1434165547f9a7ec10024f156823eeb8c8ca76124c43e43ec110cda19f65944d4f10478d7a10de46633d3bc46108730a52f2246e592d266c5e4fad37b2dc1a702f5492710cead116cb4d551412cd4445905cff6bac8af6aac400650ec58101dea3343c091609b04030328e00c472367f584f273a94ca4df226e8da577393f38d65b04c9a3311dfcb5dc942486225282885c006ec26d3b1cf"}], 0x128}}], 0x4, 0x40000000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000025c0)={0x0, 0x96, "1247412c506cd0cae42799f2ea97fc345be3533f9a6099c2a4e5c42a07ffe2b731a16c8cb9ac5824761f8372ff28e346ff4d8e666d47d6f38c7b3a30ea90b0da422410fa4c08dd31441178f674d91f693c6823e316f4e9b5a374f5a9b99795b584325f4c2e073dfe5bb22958a2993e0009ee826e15e596a2e5b0837958f5ca31d9288e00c1f12748442e781eabf2690b2785dc461a7b"}, &(0x7f0000002680)=0x9e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000026c0)={r6, 0x80000000, 0x10}, &(0x7f0000002700)=0xc) r7 = semget$private(0x0, 0x4, 0x604) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000028c0)) semctl$SEM_INFO(r7, 0x1, 0x13, &(0x7f0000002740)=""/247) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080) 5.135533236s ago: executing program 5 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 4.851647404s ago: executing program 0 (id=5651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x6a144b89, @private2, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xb, 0x1c, 0x5, 0x8, 0x6, 0x8, 0xff, 0x6, 0x9, 0x5, 0x38, 0x5, 0xff, 0x6}, 0xe) (fail_nth: 3) 4.276202964s ago: executing program 0 (id=5652): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) 3.945334347s ago: executing program 0 (id=5653): syz_open_dev$dri(0x0, 0x1, 0x24a642) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x1, 0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="120101028feaba08cb042701be3a01020301090272"], &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010f050000"], 0x1, [{0x0, 0x0}]}) 3.814329231s ago: executing program 5 (id=5654): open(0x0, 0x80140, 0x2c) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r2, 0x48400}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "4efe6cb69690bed0f39ea43b97badcbce7d37758b7ace5b0c8079b392c89b327418204a0833dea41eab22835d27253b8d2b6d3dfa8dbe125d51edb5b9e10523629dfa41e7acdbe07b4faffe41dbc1006b72d1fb6250bf1c25ed3e7d5d4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0xf01, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) bind$xdp(r11, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc, r3}, 0x10) 3.123822433s ago: executing program 5 (id=5655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r0, 0xffffffffffffffff, 0x0, 0x2001}, 0x20) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={r6, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e21, 0x1, @local, 0x8cb}}, 0xfff7, 0x1}, 0x90) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setgroups(0x4000006d, &(0x7f0000000380)) fcntl$lock(r7, 0x6, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$alg(0x26, 0x5, 0x0) pivot_root(&(0x7f0000000180)='./control\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000007, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x40, "110100000014647cc0edb6a80200000f4cb852000004000063df71ea0a00", 0x30314442}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.073401543s ago: executing program 6 (id=5656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000440)={0x5, 0x502, 0x83, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x21, 0x3, 0x0, 0x0, "cc6f7e45fd0e1ee194b2318871608a4fc3d7c23a51971205adb67798dfbdd55d415d545e797a41d576dd6517035d3cb92d659ed25f8d53eba4eecd802166a3c0"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_clone(0x200, 0x0, 0xfffffffffffffcdd, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="07000000010001", 0x7) r5 = fanotify_init(0x8, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0c1, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000082be3d6992d7f3ca25641b50a5f1ae74d397019412c18b90e32f3adc2132a03506b78dfec3e4967c371fb555bb", @ANYRES16=r8, @ANYBLOB="010027bd70000000000002000000"], 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.557050923s ago: executing program 3 (id=5657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2.049691018s ago: executing program 6 (id=5658): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtclass={0x24, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {0xffff}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20040000) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x13}, 0x30, r6}) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x2) 1.928005467s ago: executing program 5 (id=5659): r0 = socket$netlink(0x10, 0x3, 0x13) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xff, {0xe, 0x100000001, 0x6, 0x49e, 0x8}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x7d1d, &(0x7f0000000700)={0x0, 0x100577, 0x2, 0x3, 0x42}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x1, 0x1880, 0x8002, 0x1d1, 0x0, r0}, 0x0, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x20010, 0xffffffffffffffff, 0xbdd8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000007c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x6, 0x0, 0x40000000000, 0xffffffffffffffff, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x7, 0x0, 0x3, 0x83, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x10000, 0x6, 0x0, 0x3, 0xfffffffffffffffd, 0x40000000, 0x2, 0x0, 0xffffffffffffffff, 0x800000000000, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffe, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0xffffffffffffffff, 0x80000000000000, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x82000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0x9, 0x0, 0x0, 0x2, 0x2, 0x100000000000, 0x7, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x2]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}]}) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x2d, 0x2, @tid=r4}, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1.820649267s ago: executing program 3 (id=5660): r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/rt_cache\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/uts\x00') 1.592152406s ago: executing program 6 (id=5661): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)={0x38, r2, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x20048814) write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0xff, 0x0, @time={0x2, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}], 0x54) ioctl$I2C_RDWR(r1, 0x707, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_emit_ethernet(0x4a, 0x0, 0x0) 1.591703243s ago: executing program 3 (id=5662): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) 771.677636ms ago: executing program 3 (id=5663): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x2) 114.01587ms ago: executing program 0 (id=5664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@newtaction={0x224, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x210, 0x1, [@m_ipt={0x1e0, 0x7, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x168, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x224}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}], 0x4}, 0xb}], 0x2, 0x10, 0x0) 0s ago: executing program 5 (id=5665): syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x2e) (async) listen(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async) timer_delete(r1) (async) listen(r2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x27, 0x0, 0x0, 0x1, 0x10000}, 0x28) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000200)={0x0, 0x7, 0x1000, 0x0, 0x0, 0xffffffff}) (async) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x82401, 0x2) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0xc0001) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) pipe(&(0x7f0000000000)) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150018081a000c8008000100c0b14412c4f40ad2474a120740a0f8d49cda5ab752960207a0e19c74d0face335d589214a3a8125a3533b49e992cfd2bd900"/73, @ANYRES64=r3], 0x38}}, 0x10) (async) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) openat(r4, &(0x7f0000000080)='./file0\x00', 0x404200, 0x0) kernel console output (not intermixed with test programs): 13: 00007ff6da566038 R14: 00007ff6da565fa0 R15: 00007ffe9ab08008 [ 1182.813503][T20955] [ 1182.813512][T20955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1182.840947][T20955] input: syz0 as /devices/virtual/input/input136 [ 1182.874051][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.880767][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.917691][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.922327][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.321700][T20968] FAULT_INJECTION: forcing a failure. [ 1183.321700][T20968] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.321741][T20968] CPU: 1 UID: 0 PID: 20968 Comm: syz.2.5259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1183.321768][T20968] Tainted: [L]=SOFTLOCKUP [ 1183.321776][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1183.321789][T20968] Call Trace: [ 1183.321798][T20968] [ 1183.321807][T20968] dump_stack_lvl+0xe8/0x150 [ 1183.321845][T20968] should_fail_ex+0x46b/0x600 [ 1183.321882][T20968] should_failslab+0xa8/0x100 [ 1183.321907][T20968] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1183.321939][T20968] ? __alloc_skb+0x1d0/0x7d0 [ 1183.322010][T20968] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.322041][T20968] __alloc_skb+0x1d0/0x7d0 [ 1183.322065][T20968] alloc_skb_with_frags+0xca/0x890 [ 1183.322101][T20968] sock_alloc_send_pskb+0x884/0x9a0 [ 1183.322143][T20968] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1183.322179][T20968] ? iov_iter_advance+0x8b/0x1c0 [ 1183.322210][T20968] tun_get_user+0x92d/0x3de0 [ 1183.322233][T20968] ? kernel_text_address+0xa5/0xe0 [ 1183.322264][T20968] ? arch_stack_walk+0xfb/0x150 [ 1183.322294][T20968] ? __pfx_tun_get_user+0x10/0x10 [ 1183.322321][T20968] ? __lock_acquire+0x6b5/0x2cf0 [ 1183.322354][T20968] ? ref_tracker_alloc+0x332/0x4a0 [ 1183.322387][T20968] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1183.322422][T20968] ? tun_get+0x1c/0x2f0 [ 1183.322446][T20968] ? tun_get+0x1c/0x2f0 [ 1183.322466][T20968] ? tun_get+0x1c/0x2f0 [ 1183.322488][T20968] tun_chr_write_iter+0x119/0x200 [ 1183.322521][T20968] vfs_write+0x629/0xba0 [ 1183.322561][T20968] ? __pfx_vfs_write+0x10/0x10 [ 1183.322605][T20968] ? __fget_files+0x2a/0x420 [ 1183.322643][T20968] ksys_write+0x156/0x270 [ 1183.322679][T20968] ? __pfx_ksys_write+0x10/0x10 [ 1183.322725][T20968] do_syscall_64+0x14d/0xf80 [ 1183.322748][T20968] ? trace_irq_disable+0x3b/0x150 [ 1183.322774][T20968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.322797][T20968] ? clear_bhb_loop+0x40/0x90 [ 1183.322824][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.322847][T20968] RIP: 0033:0x7f5aa177c819 [ 1183.322869][T20968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.322889][T20968] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1183.322914][T20968] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1183.322930][T20968] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 0000000000000003 [ 1183.322944][T20968] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.322967][T20968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.322981][T20968] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1183.323015][T20968] [ 1183.620683][ T1241] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1183.772482][ T1241] usb 2-1: Using ep0 maxpacket: 32 [ 1183.788936][ T1241] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1183.788975][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1183.789038][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1183.789053][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1183.789068][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1183.823468][ T1241] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1183.823501][ T1241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.823520][ T1241] usb 2-1: Product: syz [ 1183.823534][ T1241] usb 2-1: Manufacturer: syz [ 1183.823549][ T1241] usb 2-1: SerialNumber: syz [ 1183.838391][ T1241] usb 2-1: config 0 descriptor?? [ 1183.980684][T11575] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1184.110626][T11575] usb 4-1: device descriptor read/64, error -71 [ 1184.190767][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.194952][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.198799][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.199517][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.216875][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.219048][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.219503][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.222970][T20710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.226973][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.228550][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.228993][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.230841][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.233950][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.235219][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.235769][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.236217][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.236660][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.237098][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.237542][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.237992][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.238433][ T1241] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1184.238476][ T1241] input input137: Timeout waiting for response from device. [ 1184.289768][ T1241] usb 2-1: USB disconnect, device number 5 [ 1184.390269][T11575] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1184.441128][T20710] veth0_vlan: entered promiscuous mode [ 1184.465495][T20710] veth1_vlan: entered promiscuous mode [ 1184.522579][T11575] usb 4-1: device descriptor read/64, error -71 [ 1184.559069][T20710] veth0_macvtap: entered promiscuous mode [ 1184.593715][T20710] veth1_macvtap: entered promiscuous mode [ 1184.630525][T11575] usb usb4-port1: attempt power cycle [ 1184.644139][T20710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.673776][T20710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.710954][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.730330][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.733578][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.761717][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.982762][T11575] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1185.006060][T11575] usb 4-1: device descriptor read/8, error -71 [ 1185.195269][T21019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5281'. [ 1185.273324][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.273349][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.290256][T11575] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1185.315354][T11575] usb 4-1: device descriptor read/8, error -71 [ 1185.377367][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.377391][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.421411][T11575] usb usb4-port1: unable to enumerate USB device [ 1185.539750][T21028] netlink: 'syz.0.5147': attribute type 12 has an invalid length. [ 1185.869024][T21037] FAULT_INJECTION: forcing a failure. [ 1185.869024][T21037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.869052][T21037] CPU: 1 UID: 0 PID: 21037 Comm: syz.0.5289 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1185.869070][T21037] Tainted: [L]=SOFTLOCKUP [ 1185.869075][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1185.869083][T21037] Call Trace: [ 1185.869088][T21037] [ 1185.869094][T21037] dump_stack_lvl+0xe8/0x150 [ 1185.869117][T21037] should_fail_ex+0x46b/0x600 [ 1185.869139][T21037] _copy_from_iter+0x1d3/0x1670 [ 1185.869161][T21037] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1185.869179][T21037] ? __alloc_skb+0x27d/0x7d0 [ 1185.869192][T21037] ? __pfx__copy_from_iter+0x10/0x10 [ 1185.869209][T21037] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1185.869227][T21037] ? __alloc_skb+0x27d/0x7d0 [ 1185.869241][T21037] ? netlink_sendmsg+0x650/0xb40 [ 1185.869260][T21037] ? skb_put+0x11b/0x210 [ 1185.869274][T21037] netlink_sendmsg+0x6c0/0xb40 [ 1185.869297][T21037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.869317][T21037] ? unwind_get_return_address+0x4d/0x90 [ 1185.869341][T21037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1185.869362][T21037] ____sys_sendmsg+0x94c/0x9c0 [ 1185.869380][T21037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.869399][T21037] ? import_iovec+0x73/0xa0 [ 1185.869413][T21037] ___sys_sendmsg+0x2a5/0x360 [ 1185.869431][T21037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.869463][T21037] ? __fget_files+0x2a/0x420 [ 1185.869480][T21037] ? __fget_files+0x3a6/0x420 [ 1185.869501][T21037] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1185.869517][T21037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1185.869536][T21037] ? __pfx_ksys_write+0x10/0x10 [ 1185.869561][T21037] do_syscall_64+0x14d/0xf80 [ 1185.869575][T21037] ? trace_irq_disable+0x3b/0x150 [ 1185.869590][T21037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.869602][T21037] ? clear_bhb_loop+0x40/0x90 [ 1185.869625][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.869637][T21037] RIP: 0033:0x7f10f0b5c819 [ 1185.869650][T21037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.869661][T21037] RSP: 002b:00007f10eedb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.869676][T21037] RAX: ffffffffffffffda RBX: 00007f10f0dd5fa0 RCX: 00007f10f0b5c819 [ 1185.869685][T21037] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 1185.869693][T21037] RBP: 00007f10eedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.869701][T21037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.869709][T21037] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1185.869727][T21037] [ 1185.931364][T21037] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1186.343173][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1186.396621][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1186.408964][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1186.428933][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1186.443059][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1187.049901][T21063] FAULT_INJECTION: forcing a failure. [ 1187.049901][T21063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.049928][T21063] CPU: 1 UID: 0 PID: 21063 Comm: syz.2.5299 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1187.049946][T21063] Tainted: [L]=SOFTLOCKUP [ 1187.049951][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1187.049959][T21063] Call Trace: [ 1187.049964][T21063] [ 1187.049969][T21063] dump_stack_lvl+0xe8/0x150 [ 1187.050003][T21063] should_fail_ex+0x46b/0x600 [ 1187.050037][T21063] _copy_from_user+0x2d/0xb0 [ 1187.050059][T21063] wext_handle_ioctl+0xc7/0x1d0 [ 1187.050094][T21063] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1187.050140][T21063] ? __asan_memset+0x22/0x50 [ 1187.050169][T21063] ? smack_file_ioctl+0x263/0x360 [ 1187.050208][T21063] sock_ioctl+0x15c/0x7f0 [ 1187.050237][T21063] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.050266][T21063] ? __fget_files+0x2a/0x420 [ 1187.050292][T21063] ? __fget_files+0x3a6/0x420 [ 1187.050317][T21063] ? __fget_files+0x2a/0x420 [ 1187.050347][T21063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1187.050369][T21063] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.050396][T21063] __se_sys_ioctl+0xff/0x170 [ 1187.050416][T21063] do_syscall_64+0x14d/0xf80 [ 1187.050431][T21063] ? trace_irq_disable+0x3b/0x150 [ 1187.050445][T21063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.050457][T21063] ? clear_bhb_loop+0x40/0x90 [ 1187.050472][T21063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.050484][T21063] RIP: 0033:0x7f5aa177c819 [ 1187.050498][T21063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.050509][T21063] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.050523][T21063] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1187.050532][T21063] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 1187.050541][T21063] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.050548][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.050556][T21063] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1187.050575][T21063] [ 1187.150167][ T5869] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1187.346396][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 1187.348810][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.356894][ T5869] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1187.356926][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.356989][ T5869] usb 4-1: Product: syz [ 1187.357003][ T5869] usb 4-1: Manufacturer: syz [ 1187.357017][ T5869] usb 4-1: SerialNumber: syz [ 1188.268558][T21070] tipc: Failed to remove unknown binding: 66,0,0/0:2025085837/2025085840 [ 1188.268587][T21070] tipc: Failed to remove unknown binding: 66,0,0/0:2025085837/2025085839 [ 1188.268604][T21070] tipc: Failed to remove unknown binding: 66,0,0/0:2025085837/2025085838 [ 1188.523558][T21057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.530850][T21057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.540287][ T5810] Bluetooth: hci5: command tx timeout [ 1188.590954][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.594946][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.639289][T21073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5296'. [ 1189.080808][T21057] bridge_slave_0: left allmulticast mode [ 1189.080841][T21057] bridge_slave_0: left promiscuous mode [ 1189.081130][T21057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.175490][T21057] bridge_slave_1: left allmulticast mode [ 1189.175588][T21057] bridge_slave_1: left promiscuous mode [ 1189.175822][T21057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.318284][T21057] bond0: (slave bond_slave_0): Releasing backup interface [ 1189.411533][T21057] bond0: (slave bond_slave_1): Releasing backup interface [ 1189.540736][T21084] nbd: must specify an index to disconnect [ 1189.597926][T21057] team0: Port device team_slave_0 removed [ 1189.684322][T21057] team0: Port device team_slave_1 removed [ 1189.687706][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.687741][T21057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.760580][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.760618][T21057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.804286][T21057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1189.985843][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1189.997357][ T811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1190.151745][ T811] usb 2-1: Using ep0 maxpacket: 32 [ 1190.189044][ T811] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1190.189083][ T811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1190.189111][ T811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1190.189135][ T811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1190.189174][ T811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1190.205397][ T5869] usb 4-1: USB disconnect, device number 27 [ 1190.263445][ T811] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1190.263478][ T811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.263499][ T811] usb 2-1: Product: syz [ 1190.263515][ T811] usb 2-1: Manufacturer: syz [ 1190.263531][ T811] usb 2-1: SerialNumber: syz [ 1190.309505][T20516] udevd[20516]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.320383][T11575] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1190.392989][ T811] usb 2-1: config 0 descriptor?? [ 1190.475923][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.481562][T11575] usb 3-1: Using ep0 maxpacket: 32 [ 1190.523766][T11575] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1190.523818][T11575] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1190.523953][T11575] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1190.523983][T11575] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1190.524007][T11575] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1190.524096][T11575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1190.586896][T11575] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1190.586920][T11575] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1190.586934][T11575] usb 3-1: Product: syz [ 1190.586943][T11575] usb 3-1: Manufacturer: syz [ 1190.586952][T11575] usb 3-1: SerialNumber: syz [ 1190.620280][ T5810] Bluetooth: hci5: command tx timeout [ 1190.677604][T11575] usb 3-1: config 0 descriptor?? [ 1190.678266][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.678301][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.678852][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.678881][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.678906][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.678930][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.679471][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.679498][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.679522][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.679546][T21072] hid-generic 0008:0FFF:0007.0017: unknown main item tag 0x0 [ 1190.794503][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.808182][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.816796][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.818798][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.819688][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.840343][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.840798][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.857961][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.858364][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.858765][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.870367][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.882722][T11575] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1190.906319][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.906747][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.924252][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.936685][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.945084][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.960249][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.969167][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.979034][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.979639][ T811] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1190.979669][ T811] input input138: Timeout waiting for response from device. [ 1191.006995][T11575] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1191.031727][T21072] hid-generic 0008:0FFF:0007.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1191.115005][ T811] usb 2-1: USB disconnect, device number 6 [ 1191.116102][T11575] usb 3-1: USB disconnect, device number 9 [ 1191.163838][T11575] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1191.195388][T21102] fido_id[21102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1191.342477][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.462423][T21105] random: crng reseeded on system resumption [ 1191.735846][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 1191.735882][ T36] audit: type=1326 audit(1775340447.271:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736135][ T36] audit: type=1326 audit(1775340447.271:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736256][ T36] audit: type=1326 audit(1775340447.271:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736379][ T36] audit: type=1326 audit(1775340447.271:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736481][ T36] audit: type=1326 audit(1775340447.271:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736533][ T36] audit: type=1326 audit(1775340447.291:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736624][ T36] audit: type=1326 audit(1775340447.291:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736753][ T36] audit: type=1326 audit(1775340447.291:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736880][ T36] audit: type=1326 audit(1775340447.291:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1191.736967][ T36] audit: type=1326 audit(1775340447.291:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21106 comm="syz.1.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd3cc819 code=0x7ffc0000 [ 1192.596257][T21115] sctp: [Deprecated]: syz.1.5318 (pid 21115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1192.596257][T21115] Use struct sctp_sack_info instead [ 1192.700444][ T5810] Bluetooth: hci5: command tx timeout [ 1192.875977][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.177017][T21132] netlink: 'syz.2.5326': attribute type 4 has an invalid length. [ 1193.177043][T21132] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5326'. [ 1193.374798][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.207432][T21048] chnl_net:caif_netlink_parms(): no params data found [ 1194.762853][ T12] bridge_slave_1: left allmulticast mode [ 1194.762886][ T12] bridge_slave_1: left promiscuous mode [ 1194.763147][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.790154][ T5810] Bluetooth: hci5: command tx timeout [ 1194.848843][ T12] bridge_slave_0: left allmulticast mode [ 1194.848866][ T12] bridge_slave_0: left promiscuous mode [ 1194.849049][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.292646][T21156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5328'. [ 1198.102910][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.160448][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.182308][ T12] bond0 (unregistering): Released all slaves [ 1198.475927][T21048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.476167][T21048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.476393][T21048] bridge_slave_0: entered allmulticast mode [ 1198.479688][T21048] bridge_slave_0: entered promiscuous mode [ 1198.486934][T21048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.489239][T21048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.489485][T21048] bridge_slave_1: entered allmulticast mode [ 1198.502382][T21048] bridge_slave_1: entered promiscuous mode [ 1198.716656][T21048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.785746][T21048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.221559][T21181] netlink: 'syz.0.5334': attribute type 1 has an invalid length. [ 1199.221585][T21181] netlink: 'syz.0.5334': attribute type 3 has an invalid length. [ 1200.039269][T21048] team0: Port device team_slave_0 added [ 1200.099614][T21048] team0: Port device team_slave_1 added [ 1200.695057][T21204] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 1200.954499][T21204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1201.039545][T21206] vlan0: entered allmulticast mode [ 1201.039563][T21206] bond1: entered allmulticast mode [ 1201.138228][T21048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.138249][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.138279][T21048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.275623][T21048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.275645][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.275677][T21048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.522631][ T12] hsr_slave_0: left promiscuous mode [ 1201.562314][ T12] hsr_slave_1: left promiscuous mode [ 1201.563689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.563719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.626298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.626330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.758150][ T12] veth1_macvtap: left promiscuous mode [ 1201.758273][ T12] veth0_macvtap: left promiscuous mode [ 1201.758564][ T12] veth1_vlan: left promiscuous mode [ 1201.758765][ T12] veth0_vlan: left promiscuous mode [ 1203.023953][T21251] FAULT_INJECTION: forcing a failure. [ 1203.023953][T21251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.023995][T21251] CPU: 1 UID: 0 PID: 21251 Comm: syz.2.5358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1203.024026][T21251] Tainted: [L]=SOFTLOCKUP [ 1203.024034][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1203.024047][T21251] Call Trace: [ 1203.024056][T21251] [ 1203.024065][T21251] dump_stack_lvl+0xe8/0x150 [ 1203.024104][T21251] should_fail_ex+0x46b/0x600 [ 1203.024141][T21251] _copy_from_user+0x2d/0xb0 [ 1203.024164][T21251] hci_sock_reject_list_del+0x94/0x130 [ 1203.024199][T21251] ? __pfx_hci_sock_reject_list_del+0x10/0x10 [ 1203.024230][T21251] ? safesetid_security_capable+0xa9/0x1a0 [ 1203.024258][T21251] ? security_capable+0x7e/0x2c0 [ 1203.024295][T21251] hci_sock_ioctl+0x7f7/0x940 [ 1203.024331][T21251] sock_do_ioctl+0x101/0x320 [ 1203.024365][T21251] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1203.024404][T21251] ? smack_file_ioctl+0x263/0x360 [ 1203.024445][T21251] sock_ioctl+0x5c9/0x7f0 [ 1203.024476][T21251] ? __pfx_sock_ioctl+0x10/0x10 [ 1203.024506][T21251] ? __fget_files+0x2a/0x420 [ 1203.024535][T21251] ? __fget_files+0x3a6/0x420 [ 1203.024564][T21251] ? __fget_files+0x2a/0x420 [ 1203.024596][T21251] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1203.024622][T21251] ? __pfx_sock_ioctl+0x10/0x10 [ 1203.024650][T21251] __se_sys_ioctl+0xff/0x170 [ 1203.024677][T21251] do_syscall_64+0x14d/0xf80 [ 1203.024702][T21251] ? trace_irq_disable+0x3b/0x150 [ 1203.024728][T21251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.024751][T21251] ? clear_bhb_loop+0x40/0x90 [ 1203.024778][T21251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.024809][T21251] RIP: 0033:0x7f5aa177c819 [ 1203.024831][T21251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.024852][T21251] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.024877][T21251] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1203.024893][T21251] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 1203.024909][T21251] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.024923][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.024936][T21251] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1203.024971][T21251] [ 1204.116681][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1204.222903][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1204.826298][T21048] hsr_slave_0: entered promiscuous mode [ 1204.831978][T21048] hsr_slave_1: entered promiscuous mode [ 1204.832934][T21048] debugfs: 'hsr0' already exists in 'hsr' [ 1204.832958][T21048] Cannot create hsr debugfs directory [ 1204.908306][ T36] kauditd_printk_skb: 259 callbacks suppressed [ 1204.908327][ T36] audit: type=1326 audit(1775340460.561:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920167][ T36] audit: type=1326 audit(1775340460.561:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920225][ T36] audit: type=1326 audit(1775340460.571:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920272][ T36] audit: type=1326 audit(1775340460.571:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920318][ T36] audit: type=1326 audit(1775340460.571:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920361][ T36] audit: type=1326 audit(1775340460.571:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920407][ T36] audit: type=1326 audit(1775340460.571:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.920454][ T36] audit: type=1326 audit(1775340460.571:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.963730][ T36] audit: type=1326 audit(1775340460.621:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1204.970218][ T36] audit: type=1326 audit(1775340460.621:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21280 comm="syz.0.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1205.421276][T21072] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1205.570109][T21072] usb 4-1: Using ep0 maxpacket: 32 [ 1205.573316][T21072] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1205.574834][T21072] usb 4-1: config 4 has an invalid interface number: 117 but max is 1 [ 1205.574862][T21072] usb 4-1: config 4 has an invalid interface number: 12 but max is 1 [ 1205.574883][T21072] usb 4-1: config 4 has no interface number 0 [ 1205.574900][T21072] usb 4-1: config 4 has no interface number 1 [ 1205.574971][T21072] usb 4-1: config 4 interface 117 altsetting 76 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1205.575016][T21072] usb 4-1: config 4 interface 12 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1205.575045][T21072] usb 4-1: config 4 interface 12 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1205.575070][T21072] usb 4-1: config 4 interface 117 has no altsetting 0 [ 1205.578132][T21072] usb 4-1: New USB device found, idVendor=24c6, idProduct=f40b, bcdDevice=fc.0e [ 1205.578161][T21072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.578183][T21072] usb 4-1: Product: syz [ 1205.578199][T21072] usb 4-1: Manufacturer: syz [ 1205.578215][T21072] usb 4-1: SerialNumber: syz [ 1206.076683][T21072] usb 4-1: USB disconnect, device number 28 [ 1207.354749][T21325] program syz.3.5383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1208.659661][T14669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.687443][T14669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.691398][T14669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.703796][T14669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.711272][T14669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.890799][T21356] devpts: Bad value for 'max' [ 1209.362435][T21376] FAULT_INJECTION: forcing a failure. [ 1209.362435][T21376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.362475][T21376] CPU: 1 UID: 0 PID: 21376 Comm: syz.0.5399 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.362505][T21376] Tainted: [L]=SOFTLOCKUP [ 1209.362513][T21376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1209.362528][T21376] Call Trace: [ 1209.362537][T21376] [ 1209.362547][T21376] dump_stack_lvl+0xe8/0x150 [ 1209.362585][T21376] should_fail_ex+0x46b/0x600 [ 1209.362622][T21376] _copy_from_user+0x2d/0xb0 [ 1209.362646][T21376] wext_handle_ioctl+0xc7/0x1d0 [ 1209.362684][T21376] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1209.362720][T21376] ? __asan_memset+0x22/0x50 [ 1209.362750][T21376] ? smack_file_ioctl+0x263/0x360 [ 1209.362792][T21376] sock_ioctl+0x15c/0x7f0 [ 1209.362826][T21376] ? __pfx_sock_ioctl+0x10/0x10 [ 1209.362856][T21376] ? __fget_files+0x2a/0x420 [ 1209.362884][T21376] ? __fget_files+0x3a6/0x420 [ 1209.362911][T21376] ? __fget_files+0x2a/0x420 [ 1209.362943][T21376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1209.362976][T21376] ? __pfx_sock_ioctl+0x10/0x10 [ 1209.363005][T21376] __se_sys_ioctl+0xff/0x170 [ 1209.363030][T21376] do_syscall_64+0x14d/0xf80 [ 1209.363055][T21376] ? trace_irq_disable+0x3b/0x150 [ 1209.363082][T21376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.363104][T21376] ? clear_bhb_loop+0x40/0x90 [ 1209.363132][T21376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.363154][T21376] RIP: 0033:0x7f10f0b5c819 [ 1209.363174][T21376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.363194][T21376] RSP: 002b:00007f10eedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1209.363218][T21376] RAX: ffffffffffffffda RBX: 00007f10f0dd5fa0 RCX: 00007f10f0b5c819 [ 1209.363234][T21376] RDX: 0000200000000040 RSI: 0000000000008b32 RDI: 0000000000000006 [ 1209.363248][T21376] RBP: 00007f10eedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.363261][T21376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.363274][T21376] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1209.363309][T21376] [ 1209.455384][T21379] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5401'. [ 1209.470308][T15658] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1209.620156][T15658] usb 4-1: Using ep0 maxpacket: 16 [ 1209.623030][T15658] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.623061][T15658] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1209.626708][T15658] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1209.626738][T15658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.626762][T15658] usb 4-1: Product: syz [ 1209.626779][T15658] usb 4-1: Manufacturer: syz [ 1209.626796][T15658] usb 4-1: SerialNumber: syz [ 1210.010637][T21365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5397'. [ 1210.301703][T21401] random: crng reseeded on system resumption [ 1210.780769][T14669] Bluetooth: hci3: command tx timeout [ 1211.409954][T15658] usb 4-1: 0:2 : does not exist [ 1211.432441][T15658] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1211.586863][T15658] usb 4-1: USB disconnect, device number 29 [ 1211.723323][T21292] udevd[21292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.858897][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.080759][T21402] batman_adv: batadv0: Adding interface: macsec1 [ 1212.080774][T21402] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.080796][T21402] batman_adv: batadv0: Interface activated: macsec1 [ 1212.666297][ T5869] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1212.708126][T21446] FAULT_INJECTION: forcing a failure. [ 1212.708126][T21446] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.708166][T21446] CPU: 1 UID: 0 PID: 21446 Comm: syz.2.5423 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1212.708195][T21446] Tainted: [L]=SOFTLOCKUP [ 1212.708204][T21446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1212.708216][T21446] Call Trace: [ 1212.708225][T21446] [ 1212.708236][T21446] dump_stack_lvl+0xe8/0x150 [ 1212.708275][T21446] should_fail_ex+0x46b/0x600 [ 1212.708311][T21446] should_failslab+0xa8/0x100 [ 1212.708336][T21446] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 1212.708360][T21446] ? __lock_acquire+0x6b5/0x2cf0 [ 1212.708381][T21446] ? __kernfs_new_node+0xa9/0x960 [ 1212.708414][T21446] kstrdup+0x42/0x100 [ 1212.708446][T21446] __kernfs_new_node+0xa9/0x960 [ 1212.708485][T21446] ? __pfx___kernfs_new_node+0x10/0x10 [ 1212.708513][T21446] ? kernfs_root+0x1c/0x230 [ 1212.708548][T21446] ? kernfs_root+0x1c/0x230 [ 1212.708575][T21446] ? kernfs_root+0x1c/0x230 [ 1212.708608][T21446] kernfs_new_node+0x102/0x210 [ 1212.708643][T21446] kernfs_create_link+0xa7/0x200 [ 1212.708678][T21446] sysfs_do_create_link_sd+0x83/0x110 [ 1212.708708][T21446] driver_sysfs_add+0x89/0x210 [ 1212.708742][T21446] device_bind_driver+0x17/0x60 [ 1212.708772][T21446] usb_driver_claim_interface+0x23a/0x450 [ 1212.708815][T21446] claimintf+0x166/0x240 [ 1212.708843][T21446] usbdev_ioctl+0xda5/0x20c0 [ 1212.708884][T21446] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1212.708913][T21446] ? __fget_files+0x2a/0x420 [ 1212.708941][T21446] ? __fget_files+0x3a6/0x420 [ 1212.708969][T21446] ? __fget_files+0x2a/0x420 [ 1212.709002][T21446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1212.709026][T21446] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1212.709059][T21446] __se_sys_ioctl+0xff/0x170 [ 1212.709085][T21446] do_syscall_64+0x14d/0xf80 [ 1212.709110][T21446] ? trace_irq_disable+0x3b/0x150 [ 1212.709137][T21446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.709161][T21446] ? clear_bhb_loop+0x40/0x90 [ 1212.709189][T21446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.709211][T21446] RIP: 0033:0x7f5aa177c819 [ 1212.709232][T21446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.709253][T21446] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.709278][T21446] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1212.709295][T21446] RDX: 0000200000000000 RSI: 000000008004550f RDI: 0000000000000003 [ 1212.709310][T21446] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.709324][T21446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.709338][T21446] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1212.709375][T21446] [ 1212.841902][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1212.843408][ T5869] usb 4-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.843432][ T5869] usb 4-1: config 172 has 0 interfaces, different from the descriptor's value: 2 [ 1212.846616][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 1212.846765][ T5869] usb 4-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 1212.846787][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.870860][T14669] Bluetooth: hci3: command tx timeout [ 1213.060201][ T5869] usb 4-1: USB disconnect, device number 30 [ 1213.123867][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.638148][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.777853][T21048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1213.970166][ T811] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1214.107880][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.168123][T21048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1214.263439][T21048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1214.378096][T21048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1214.940301][T14669] Bluetooth: hci3: command tx timeout [ 1214.979867][T21349] chnl_net:caif_netlink_parms(): no params data found [ 1215.323532][ T13] bridge_slave_1: left allmulticast mode [ 1215.323565][ T13] bridge_slave_1: left promiscuous mode [ 1215.323831][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.414094][ T13] bridge_slave_0: left allmulticast mode [ 1215.414130][ T13] bridge_slave_0: left promiscuous mode [ 1215.414419][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.020912][T14669] Bluetooth: hci3: command tx timeout [ 1217.115545][T21567] FAULT_INJECTION: forcing a failure. [ 1217.115545][T21567] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.115585][T21567] CPU: 0 UID: 0 PID: 21567 Comm: syz.2.5459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1217.115616][T21567] Tainted: [L]=SOFTLOCKUP [ 1217.115624][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1217.115638][T21567] Call Trace: [ 1217.115647][T21567] [ 1217.115657][T21567] dump_stack_lvl+0xe8/0x150 [ 1217.115698][T21567] should_fail_ex+0x46b/0x600 [ 1217.115735][T21567] should_failslab+0xa8/0x100 [ 1217.115762][T21567] kmem_cache_alloc_noprof+0x87/0x680 [ 1217.115796][T21567] ? ep_insert+0x3b5/0x1820 [ 1217.115834][T21567] ? ep_insert+0x54a/0x1820 [ 1217.115869][T21567] ep_insert+0x54a/0x1820 [ 1217.115917][T21567] ? __pfx_ep_insert+0x10/0x10 [ 1217.115956][T21567] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1217.115981][T21567] ? lockdep_hardirqs_on+0x7a/0x110 [ 1217.116006][T21567] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1217.116031][T21567] ? mutex_lock_nested+0x152/0x1d0 [ 1217.116062][T21567] ? do_epoll_ctl+0x3d2/0xe90 [ 1217.116095][T21567] do_epoll_ctl+0x7fd/0xe90 [ 1217.116132][T21567] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1217.116163][T21567] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1217.116207][T21567] do_syscall_64+0x14d/0xf80 [ 1217.116231][T21567] ? trace_irq_disable+0x3b/0x150 [ 1217.116259][T21567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.116280][T21567] ? clear_bhb_loop+0x40/0x90 [ 1217.116306][T21567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.116328][T21567] RIP: 0033:0x7f5aa177c819 [ 1217.116350][T21567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.116366][T21567] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1217.116389][T21567] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1217.116405][T21567] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1217.116420][T21567] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.116434][T21567] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1217.116449][T21567] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1217.116487][T21567] [ 1217.685837][T21585] FAULT_INJECTION: forcing a failure. [ 1217.685837][T21585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.685864][T21585] CPU: 0 UID: 0 PID: 21585 Comm: syz.2.5466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1217.685883][T21585] Tainted: [L]=SOFTLOCKUP [ 1217.685887][T21585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1217.685895][T21585] Call Trace: [ 1217.685901][T21585] [ 1217.685906][T21585] dump_stack_lvl+0xe8/0x150 [ 1217.685937][T21585] should_fail_ex+0x46b/0x600 [ 1217.685958][T21585] _copy_from_user+0x2d/0xb0 [ 1217.685971][T21585] video_usercopy+0x36f/0x14b0 [ 1217.685993][T21585] ? smk_tskacc+0x311/0x3a0 [ 1217.686012][T21585] ? __pfx___video_do_ioctl+0x10/0x10 [ 1217.686031][T21585] ? __pfx_video_usercopy+0x10/0x10 [ 1217.686048][T21585] ? smack_file_ioctl+0x2c2/0x360 [ 1217.686075][T21585] ? __fget_files+0x2a/0x420 [ 1217.686092][T21585] ? __fget_files+0x3a6/0x420 [ 1217.686117][T21585] v4l2_ioctl+0x190/0x1e0 [ 1217.686146][T21585] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1217.686176][T21585] __se_sys_ioctl+0xff/0x170 [ 1217.686201][T21585] do_syscall_64+0x14d/0xf80 [ 1217.686225][T21585] ? trace_irq_disable+0x3b/0x150 [ 1217.686250][T21585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.686274][T21585] ? clear_bhb_loop+0x40/0x90 [ 1217.686299][T21585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.686319][T21585] RIP: 0033:0x7f5aa177c819 [ 1217.686340][T21585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.686362][T21585] RSP: 002b:00007f5a9f9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.686376][T21585] RAX: ffffffffffffffda RBX: 00007f5aa19f5fa0 RCX: 00007f5aa177c819 [ 1217.686386][T21585] RDX: 0000200000000340 RSI: 00000000c02c564a RDI: 0000000000000003 [ 1217.686394][T21585] RBP: 00007f5a9f9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.686402][T21585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.686410][T21585] R13: 00007f5aa19f6038 R14: 00007f5aa19f5fa0 R15: 00007fff20909898 [ 1217.686429][T21585] [ 1218.190963][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.271246][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.314693][ T13] bond0 (unregistering): Released all slaves [ 1218.493058][T21349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.493431][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.493631][T21349] bridge_slave_0: entered allmulticast mode [ 1218.495347][T21349] bridge_slave_0: entered promiscuous mode [ 1218.571650][T21349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.571809][T21349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.572045][T21349] bridge_slave_1: entered allmulticast mode [ 1218.574942][T21349] bridge_slave_1: entered promiscuous mode [ 1218.575664][ T13] tipc: Left network mode [ 1218.629530][T21610] FAULT_INJECTION: forcing a failure. [ 1218.629530][T21610] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.629559][T21610] CPU: 1 UID: 0 PID: 21610 Comm: syz.3.5478 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1218.629577][T21610] Tainted: [L]=SOFTLOCKUP [ 1218.629582][T21610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1218.629590][T21610] Call Trace: [ 1218.629595][T21610] [ 1218.629601][T21610] dump_stack_lvl+0xe8/0x150 [ 1218.629624][T21610] should_fail_ex+0x46b/0x600 [ 1218.629654][T21610] should_failslab+0xa8/0x100 [ 1218.629669][T21610] __kmalloc_cache_noprof+0x84/0x690 [ 1218.629682][T21610] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 1218.629702][T21610] wakeup_source_sysfs_add+0x57/0x2c0 [ 1218.629721][T21610] wakeup_source_register+0x18a/0x390 [ 1218.629741][T21610] ep_modify+0x2e1/0xa50 [ 1218.629774][T21610] ? __pfx_ep_modify+0x10/0x10 [ 1218.629809][T21610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1218.629837][T21610] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1218.629861][T21610] ? mutex_lock_nested+0x152/0x1d0 [ 1218.629886][T21610] ? do_epoll_ctl+0x3d2/0xe90 [ 1218.629904][T21610] do_epoll_ctl+0x6be/0xe90 [ 1218.629925][T21610] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1218.629944][T21610] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1218.629968][T21610] do_syscall_64+0x14d/0xf80 [ 1218.629992][T21610] ? trace_irq_disable+0x3b/0x150 [ 1218.630017][T21610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.630039][T21610] ? clear_bhb_loop+0x40/0x90 [ 1218.630065][T21610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.630086][T21610] RIP: 0033:0x7ff6da2ec819 [ 1218.630105][T21610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.630124][T21610] RSP: 002b:00007ff6d853e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1218.630148][T21610] RAX: ffffffffffffffda RBX: 00007ff6da565fa0 RCX: 00007ff6da2ec819 [ 1218.630164][T21610] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004 [ 1218.630171][T21610] RBP: 00007ff6d853e090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.630179][T21610] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1218.630187][T21610] R13: 00007ff6da566038 R14: 00007ff6da565fa0 R15: 00007ffe9ab08008 [ 1218.630207][T21610] [ 1219.072671][T21349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.102041][T21349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.634275][T21349] team0: Port device team_slave_0 added [ 1219.685008][T21048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.695409][T21349] team0: Port device team_slave_1 added [ 1220.020209][ T13] hsr_slave_0: left promiscuous mode [ 1220.070549][ T13] hsr_slave_1: left promiscuous mode [ 1220.071738][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.071767][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.151374][ T13] batman_adv: batadv0: Interface deactivated: macsec1 [ 1220.151406][ T13] batman_adv: batadv0: Removing interface: macsec1 [ 1220.297439][T21658] FAULT_INJECTION: forcing a failure. [ 1220.297439][T21658] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.297496][T21658] CPU: 0 UID: 0 PID: 21658 Comm: syz.2.5492 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1220.297526][T21658] Tainted: [L]=SOFTLOCKUP [ 1220.297533][T21658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1220.297545][T21658] Call Trace: [ 1220.297554][T21658] [ 1220.297563][T21658] dump_stack_lvl+0xe8/0x150 [ 1220.297593][T21658] should_fail_ex+0x46b/0x600 [ 1220.297614][T21658] should_failslab+0xa8/0x100 [ 1220.297628][T21658] kmem_cache_alloc_noprof+0x87/0x680 [ 1220.297648][T21658] ? alloc_empty_file+0x55/0x1d0 [ 1220.297666][T21658] alloc_empty_file+0x55/0x1d0 [ 1220.297682][T21658] path_openat+0x11b/0x38a0 [ 1220.297706][T21658] ? try_to_take_rt_mutex+0x840/0xb00 [ 1220.297725][T21658] ? arch_stack_walk+0xfb/0x150 [ 1220.297743][T21658] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1220.297767][T21658] ? __pfx_path_openat+0x10/0x10 [ 1220.297786][T21658] ? __lock_acquire+0x6b5/0x2cf0 [ 1220.297806][T21658] ? do_raw_spin_lock+0x12b/0x2f0 [ 1220.297835][T21658] do_file_open+0x23e/0x4a0 [ 1220.297854][T21658] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1220.297870][T21658] ? __pfx_do_file_open+0x10/0x10 [ 1220.297887][T21658] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1220.297919][T21658] ? alloc_fd+0x64e/0x6c0 [ 1220.297941][T21658] do_sys_openat2+0x113/0x200 [ 1220.297958][T21658] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.297974][T21658] ? ksys_write+0x248/0x270 [ 1220.297993][T21658] ? __pfx_ksys_write+0x10/0x10 [ 1220.298014][T21658] __x64_sys_openat+0x138/0x170 [ 1220.298033][T21658] do_syscall_64+0x14d/0xf80 [ 1220.298048][T21658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.298061][T21658] ? clear_bhb_loop+0x40/0x90 [ 1220.298076][T21658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.298088][T21658] RIP: 0033:0x7f5aa173d04e [ 1220.298101][T21658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1220.298112][T21658] RSP: 002b:00007f5a9f9b4f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.298126][T21658] RAX: ffffffffffffffda RBX: 00007f5a9f9b56c0 RCX: 00007f5aa173d04e [ 1220.298136][T21658] RDX: 0000000000000000 RSI: 00007f5aa1812328 RDI: ffffffffffffff9c [ 1220.298144][T21658] RBP: 00007f5a9f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.298152][T21658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.298160][T21658] R13: 00007f5aa19f6128 R14: 00007f5aa19f6090 R15: 00007fff20909898 [ 1220.298179][T21658] [ 1220.776921][ T13] veth1_macvtap: left promiscuous mode [ 1220.791743][ T13] veth0_macvtap: left promiscuous mode [ 1220.798253][ T13] veth1_vlan: left promiscuous mode [ 1220.819425][ T13] veth0_vlan: left promiscuous mode [ 1221.274892][T21663] netlink: 'syz.2.5494': attribute type 5 has an invalid length. [ 1221.274919][T21663] netlink: 'syz.2.5494': attribute type 4 has an invalid length. [ 1221.395958][T21654] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1221.395983][T21654] binder: 21653:21654 ioctl 4018620d 2000000002c0 returned -1 [ 1222.432216][T21672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5496'. [ 1222.433529][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5496'. [ 1222.459083][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1222.519453][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1222.923307][T21349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.923328][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.923358][T21349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.942723][T21349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.942744][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.942775][T21349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.948825][T21048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.018287][T17334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.023262][T17334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.114721][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.114875][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.192178][T21349] hsr_slave_0: entered promiscuous mode [ 1223.193679][T21349] hsr_slave_1: entered promiscuous mode [ 1223.194183][T21680] FAULT_INJECTION: forcing a failure. [ 1223.194183][T21680] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.194222][T21680] CPU: 0 UID: 0 PID: 21680 Comm: syz.3.5499 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1223.194253][T21680] Tainted: [L]=SOFTLOCKUP [ 1223.194262][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1223.194275][T21680] Call Trace: [ 1223.194285][T21680] [ 1223.194294][T21680] dump_stack_lvl+0xe8/0x150 [ 1223.194334][T21680] should_fail_ex+0x46b/0x600 [ 1223.194371][T21680] should_failslab+0xa8/0x100 [ 1223.194398][T21680] __kmalloc_noprof+0xdf/0x7b0 [ 1223.194420][T21680] ? io_write+0x113d/0x1770 [ 1223.194444][T21680] ? io_cache_alloc_new+0x40/0x100 [ 1223.194472][T21680] io_cache_alloc_new+0x40/0x100 [ 1223.194502][T21680] io_arm_apoll+0x487/0x950 [ 1223.194537][T21680] ? __pfx_io_arm_apoll+0x10/0x10 [ 1223.194562][T21680] ? __fget_files+0x3a6/0x420 [ 1223.194605][T21680] ? __io_issue_sqe+0x1f7/0x4b0 [ 1223.194631][T21680] ? io_file_get_normal+0xec/0x310 [ 1223.194656][T21680] ? io_arm_poll_handler+0x1d6/0x2a0 [ 1223.194690][T21680] io_queue_async+0x175/0x2d0 [ 1223.194721][T21680] io_submit_sqes+0x12cc/0x24e0 [ 1223.194773][T21349] debugfs: 'hsr0' already exists in 'hsr' [ 1223.194780][T21680] __se_sys_io_uring_enter+0x2cc/0x1970 [ 1223.194797][T21349] Cannot create hsr debugfs directory [ 1223.194821][T21680] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1223.194847][T21680] ? fput+0xa0/0xd0 [ 1223.194876][T21680] ? ksys_write+0x248/0x270 [ 1223.194912][T21680] ? __pfx_ksys_write+0x10/0x10 [ 1223.194952][T21680] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1223.194981][T21680] do_syscall_64+0x14d/0xf80 [ 1223.195005][T21680] ? trace_irq_disable+0x3b/0x150 [ 1223.195029][T21680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.195050][T21680] ? clear_bhb_loop+0x40/0x90 [ 1223.195076][T21680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.195097][T21680] RIP: 0033:0x7ff6da2ec819 [ 1223.195119][T21680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.195138][T21680] RSP: 002b:00007ff6d853e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1223.195162][T21680] RAX: ffffffffffffffda RBX: 00007ff6da565fa0 RCX: 00007ff6da2ec819 [ 1223.195178][T21680] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1223.195191][T21680] RBP: 00007ff6d853e090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.195204][T21680] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1223.195218][T21680] R13: 00007ff6da566038 R14: 00007ff6da565fa0 R15: 00007ffe9ab08008 [ 1223.195251][T21680] [ 1225.738084][T21349] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1226.096330][T21349] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1226.205129][T21349] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1226.206624][T21722] FAULT_INJECTION: forcing a failure. [ 1226.206624][T21722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1226.206660][T21722] CPU: 1 UID: 0 PID: 21722 Comm: syz.0.5511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.206690][T21722] Tainted: [L]=SOFTLOCKUP [ 1226.206698][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1226.206711][T21722] Call Trace: [ 1226.206720][T21722] [ 1226.206730][T21722] dump_stack_lvl+0xe8/0x150 [ 1226.206769][T21722] should_fail_ex+0x46b/0x600 [ 1226.206805][T21722] prepare_alloc_pages+0x22a/0x6b0 [ 1226.206839][T21722] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1226.206876][T21722] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1226.206905][T21722] ? __pfx_policy_nodemask+0x10/0x10 [ 1226.206930][T21722] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1226.206963][T21722] ? rt_spin_unlock+0x14f/0x200 [ 1226.206998][T21722] alloc_pages_mpol+0xd1/0x380 [ 1226.207026][T21722] folio_alloc_mpol_noprof+0x39/0xe0 [ 1226.207054][T21722] swap_cache_alloc_folio+0xd5/0x240 [ 1226.207088][T21722] swap_cluster_readahead+0x53a/0x690 [ 1226.207127][T21722] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1226.207172][T21722] ? get_vma_policy+0x27b/0x3c0 [ 1226.207199][T21722] swapin_readahead+0x196/0xc50 [ 1226.207233][T21722] ? is_bpf_text_address+0x26/0x2b0 [ 1226.207269][T21722] ? swap_table_get+0x1e/0x260 [ 1226.207296][T21722] ? __pfx_swapin_readahead+0x10/0x10 [ 1226.207329][T21722] ? swap_table_get+0x1e/0x260 [ 1226.207354][T21722] ? swap_table_get+0x1e/0x260 [ 1226.207379][T21722] ? swap_table_get+0x1e/0x260 [ 1226.207406][T21722] ? swap_table_get+0x219/0x260 [ 1226.207436][T21722] ? swap_cache_get_folio+0x500/0x510 [ 1226.207470][T21722] do_swap_page+0x516/0x4670 [ 1226.207526][T21722] ? __pte_offset_map+0x178/0x200 [ 1226.207560][T21722] ? do_swap_page+0xcd/0x4670 [ 1226.207586][T21722] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1226.207620][T21722] handle_mm_fault+0xad2/0x13c0 [ 1226.207663][T21722] ? handle_mm_fault+0xe7/0x13c0 [ 1226.207698][T21722] ? __pfx_handle_mm_fault+0x10/0x10 [ 1226.207752][T21722] ? lock_mm_and_find_vma+0xa7/0x340 [ 1226.207778][T21722] do_user_addr_fault+0x75b/0x1340 [ 1226.207824][T21722] exc_page_fault+0x6a/0xc0 [ 1226.207849][T21722] asm_exc_page_fault+0x26/0x30 [ 1226.207869][T21722] RIP: 0010:__get_user_4+0x14/0x20 [ 1226.207897][T21722] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1226.207918][T21722] RSP: 0018:ffffc90004c0fd58 EFLAGS: 00050283 [ 1226.207940][T21722] RAX: 0000200000000180 RBX: 0000200000000180 RCX: 0000000000000046 [ 1226.207956][T21722] RDX: 00007ffffffff000 RSI: ffffffff8d7c1916 RDI: ffffffff8ba67a00 [ 1226.207972][T21722] RBP: ffffc90004c0fea8 R08: ffffffff8212618f R09: ffff8880720983b0 [ 1226.207989][T21722] R10: 0000000000000100 R11: 00000000c0385720 R12: 0000000000005700 [ 1226.208004][T21722] R13: 1ffff92000981fb0 R14: ffff88808809d440 R15: 0000000040045731 [ 1226.208030][T21722] ? __might_fault+0xaf/0x130 [ 1226.208060][T21722] snd_rawmidi_ioctl+0x33f/0xbd0 [ 1226.208090][T21722] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 1226.208129][T21722] ? __fget_files+0x2a/0x420 [ 1226.208158][T21722] ? __fget_files+0x3a6/0x420 [ 1226.208186][T21722] ? __fget_files+0x2a/0x420 [ 1226.208219][T21722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1226.208244][T21722] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 1226.208270][T21722] __se_sys_ioctl+0xff/0x170 [ 1226.208297][T21722] do_syscall_64+0x14d/0xf80 [ 1226.208321][T21722] ? trace_irq_disable+0x3b/0x150 [ 1226.208349][T21722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.208372][T21722] ? clear_bhb_loop+0x40/0x90 [ 1226.208401][T21722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.208423][T21722] RIP: 0033:0x7f10f0b5c819 [ 1226.208444][T21722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.208464][T21722] RSP: 002b:00007f10eedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.208487][T21722] RAX: ffffffffffffffda RBX: 00007f10f0dd5fa0 RCX: 00007f10f0b5c819 [ 1226.208512][T21722] RDX: 0000200000000180 RSI: 0000000040045731 RDI: 0000000000000003 [ 1226.208528][T21722] RBP: 00007f10eedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.208543][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.208557][T21722] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1226.208594][T21722] [ 1226.332026][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1226.425712][T21730] FAULT_INJECTION: forcing a failure. [ 1226.425712][T21730] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.425749][T21730] CPU: 1 UID: 0 PID: 21730 Comm: syz.0.5514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.425777][T21730] Tainted: [L]=SOFTLOCKUP [ 1226.425784][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1226.425804][T21730] Call Trace: [ 1226.425813][T21730] [ 1226.425821][T21730] dump_stack_lvl+0xe8/0x150 [ 1226.425856][T21730] should_fail_ex+0x46b/0x600 [ 1226.425889][T21730] should_failslab+0xa8/0x100 [ 1226.425913][T21730] __kmalloc_cache_noprof+0x84/0x690 [ 1226.425934][T21730] ? __io_queue_proc+0x23a/0x4d0 [ 1226.425965][T21730] __io_queue_proc+0x23a/0x4d0 [ 1226.425994][T21730] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 1226.426018][T21730] comedi_poll+0x591/0x8f0 [ 1226.426044][T21730] ? __pfx_comedi_poll+0x10/0x10 [ 1226.426069][T21730] __io_arm_poll_handler+0x3b3/0xbd0 [ 1226.426111][T21730] io_poll_add+0xda/0x200 [ 1226.426135][T21730] ? __pfx_io_poll_add+0x10/0x10 [ 1226.426158][T21730] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 1226.426184][T21730] ? __fget_files+0x2a/0x420 [ 1226.426212][T21730] ? __fget_files+0x2a/0x420 [ 1226.426235][T21730] ? __fget_files+0x3a6/0x420 [ 1226.426262][T21730] __io_issue_sqe+0x180/0x4b0 [ 1226.426285][T21730] ? io_file_get_normal+0xec/0x310 [ 1226.426309][T21730] io_issue_sqe+0x164/0xf90 [ 1226.426340][T21730] io_submit_sqes+0xd34/0x24e0 [ 1226.426396][T21730] __se_sys_io_uring_enter+0x2cc/0x1970 [ 1226.426430][T21730] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1226.426453][T21730] ? fput+0xa0/0xd0 [ 1226.426477][T21730] ? ksys_write+0x248/0x270 [ 1226.426508][T21730] ? __pfx_ksys_write+0x10/0x10 [ 1226.426542][T21730] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1226.426567][T21730] do_syscall_64+0x14d/0xf80 [ 1226.426588][T21730] ? trace_irq_disable+0x3b/0x150 [ 1226.426611][T21730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.426631][T21730] ? clear_bhb_loop+0x40/0x90 [ 1226.426655][T21730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.426674][T21730] RIP: 0033:0x7f10f0b5c819 [ 1226.426695][T21730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.426711][T21730] RSP: 002b:00007f10eedb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1226.426734][T21730] RAX: ffffffffffffffda RBX: 00007f10f0dd5fa0 RCX: 00007f10f0b5c819 [ 1226.426748][T21730] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1226.426761][T21730] RBP: 00007f10eedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.426774][T21730] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1226.426786][T21730] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1226.426825][T21730] [ 1227.049067][T21721] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1227.150127][T21349] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1227.377880][T21048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.699631][T21349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.812456][T21349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.597568][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.597817][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.737994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.747430][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.872664][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1229.063454][T21782] QAT: failed to copy from user cfg_data. [ 1229.364551][ T36] kauditd_printk_skb: 254 callbacks suppressed [ 1229.364574][ T36] audit: type=1326 audit(1775340485.021:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.364695][ T36] audit: type=1326 audit(1775340485.021:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.365381][ T36] audit: type=1326 audit(1775340485.021:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.365435][ T36] audit: type=1326 audit(1775340485.021:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.365488][ T36] audit: type=1326 audit(1775340485.021:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.365790][ T36] audit: type=1326 audit(1775340485.021:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.368274][ T36] audit: type=1326 audit(1775340485.021:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.368984][ T36] audit: type=1326 audit(1775340485.021:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6da2ad04e code=0x7ffc0000 [ 1229.369035][ T36] audit: type=1326 audit(1775340485.021:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1229.370507][ T36] audit: type=1326 audit(1775340485.031:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.3.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6da2ad04e code=0x7ffc0000 [ 1229.820252][T21048] veth0_vlan: entered promiscuous mode [ 1229.863205][T21048] veth1_vlan: entered promiscuous mode [ 1230.049300][T21349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.091860][T21048] veth0_macvtap: entered promiscuous mode [ 1230.125680][T21048] veth1_macvtap: entered promiscuous mode [ 1230.202559][T21048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.238643][T21048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.310853][ T144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.312902][ T144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.313194][ T144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.313424][ T144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.370323][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5538'. [ 1230.840168][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.840193][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.153612][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.153639][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.168926][T21848] FAULT_INJECTION: forcing a failure. [ 1231.168926][T21848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.168968][T21848] CPU: 0 UID: 0 PID: 21848 Comm: syz.2.5545 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1231.168999][T21848] Tainted: [L]=SOFTLOCKUP [ 1231.169008][T21848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.169022][T21848] Call Trace: [ 1231.169032][T21848] [ 1231.169042][T21848] dump_stack_lvl+0xe8/0x150 [ 1231.169090][T21848] should_fail_ex+0x46b/0x600 [ 1231.169128][T21848] _copy_to_user+0x31/0xb0 [ 1231.169153][T21848] simple_read_from_buffer+0xe1/0x170 [ 1231.169190][T21848] proc_fail_nth_read+0x1be/0x230 [ 1231.169223][T21848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1231.169255][T21848] ? rw_verify_area+0x2ac/0x4e0 [ 1231.169289][T21848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1231.169319][T21848] vfs_read+0x212/0xa80 [ 1231.169362][T21848] ? __pfx_vfs_read+0x10/0x10 [ 1231.169399][T21848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1231.169425][T21848] ? lockdep_hardirqs_on+0x7a/0x110 [ 1231.169452][T21848] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1231.169476][T21848] ? mutex_lock_nested+0x152/0x1d0 [ 1231.169507][T21848] ? fdget_pos+0x252/0x320 [ 1231.169545][T21848] ksys_read+0x156/0x270 [ 1231.169583][T21848] ? __pfx_ksys_read+0x10/0x10 [ 1231.169630][T21848] do_syscall_64+0x14d/0xf80 [ 1231.169655][T21848] ? trace_irq_disable+0x3b/0x150 [ 1231.169682][T21848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.169705][T21848] ? clear_bhb_loop+0x40/0x90 [ 1231.169734][T21848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.169757][T21848] RIP: 0033:0x7f5aa173d04e [ 1231.169785][T21848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1231.169805][T21848] RSP: 002b:00007f5a9f993fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1231.169830][T21848] RAX: ffffffffffffffda RBX: 00007f5a9f9946c0 RCX: 00007f5aa173d04e [ 1231.169847][T21848] RDX: 000000000000000f RSI: 00007f5a9f9940a0 RDI: 0000000000000003 [ 1231.169862][T21848] RBP: 00007f5a9f994090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.169876][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.169890][T21848] R13: 00007f5aa19f6218 R14: 00007f5aa19f6180 R15: 00007fff20909898 [ 1231.169927][T21848] [ 1232.642196][T21349] veth0_vlan: entered promiscuous mode [ 1232.675157][T21349] veth1_vlan: entered promiscuous mode [ 1232.742693][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5551'. [ 1232.772608][T21349] veth0_macvtap: entered promiscuous mode [ 1232.797723][T21349] veth1_macvtap: entered promiscuous mode [ 1232.895436][T21349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.959568][T21349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.993295][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.993504][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.993558][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.993604][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.335362][T21895] tmpfs: Bad value for 'mpol' [ 1233.435085][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.435111][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.615141][T17337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.615167][T17337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.904951][T15658] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1233.933800][ T9] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1234.080242][T15658] usb 6-1: Using ep0 maxpacket: 16 [ 1234.081500][T15658] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 1234.084580][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.084610][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.084661][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.084751][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.084783][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.084813][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.089429][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.089458][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.089609][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.089640][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.089725][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.089751][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.094205][ T9] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1234.098796][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 0 [ 1234.098841][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 55, changing to 4 [ 1234.098866][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 1234.099880][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.099901][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.099942][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.100187][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.100217][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.100242][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.102007][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.102029][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.102071][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.102148][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.102174][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.102200][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.107085][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.107110][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.107206][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.107232][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.107257][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.107282][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.119821][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1234.120197][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 1234.120276][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.125333][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.125359][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.125405][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.125431][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.125457][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.125488][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.133331][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.133358][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.133403][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.133429][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.133455][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.133488][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.159307][T15658] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 1234.159336][T15658] usb 6-1: config 4 has no interface number 0 [ 1234.159381][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1234.159407][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 1234.159432][T15658] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 62434, setting to 64 [ 1234.159540][T15658] usb 6-1: config 4 interface 38 has no altsetting 0 [ 1234.187828][T15658] usb 6-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a2.ed [ 1234.187860][T15658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.187880][T15658] usb 6-1: Product: syz [ 1234.187894][T15658] usb 6-1: Manufacturer: syz [ 1234.187907][T15658] usb 6-1: SerialNumber: syz [ 1234.359940][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.397936][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1234.594589][T21901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.617797][T21901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.945013][T21925] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5387'. [ 1235.125621][T11575] usb 4-1: USB disconnect, device number 32 [ 1235.351048][T21929] input: syz0 as /devices/virtual/input/input139 [ 1235.631667][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.660851][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.663161][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.680247][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.690387][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.785401][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1235.891526][T21938] tmpfs: Bad value for 'mpol' [ 1236.000360][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 1236.004928][ T5876] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1236.004963][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1236.004991][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1236.005017][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1236.005140][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1236.008263][ T5876] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1236.008291][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.008313][ T5876] usb 7-1: Product: syz [ 1236.008330][ T5876] usb 7-1: Manufacturer: syz [ 1236.008346][ T5876] usb 7-1: SerialNumber: syz [ 1236.134152][ T5876] usb 7-1: config 0 descriptor?? [ 1236.363501][T15658] usb 6-1: bad CDC descriptors [ 1236.385770][T15658] usb 6-1: USB disconnect, device number 9 [ 1236.484309][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.486701][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.487222][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.487843][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.488318][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.489950][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.492257][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.492749][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.495628][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.496134][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.496617][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.497102][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.498024][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.498666][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.499168][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.499659][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.501864][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.503026][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.503747][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.510881][ T5876] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1236.510939][ T5876] input input140: Timeout waiting for response from device. [ 1236.539085][ T5876] usb 7-1: USB disconnect, device number 2 [ 1236.582184][ T36] kauditd_printk_skb: 161 callbacks suppressed [ 1236.582205][ T36] audit: type=1326 audit(1775340492.241:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.582261][ T36] audit: type=1326 audit(1775340492.241:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.586984][ T36] audit: type=1326 audit(1775340492.241:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.604686][ T36] audit: type=1326 audit(1775340492.261:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.606076][ T36] audit: type=1326 audit(1775340492.261:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.606407][ T36] audit: type=1326 audit(1775340492.261:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.630109][ T36] audit: type=1326 audit(1775340492.271:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.654130][ T36] audit: type=1326 audit(1775340492.301:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.654188][ T36] audit: type=1326 audit(1775340492.301:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.654234][ T36] audit: type=1326 audit(1775340492.301:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21942 comm="syz.0.5574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f0b5c819 code=0x7ffc0000 [ 1236.687919][T21949] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1237.140206][ T5876] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1237.443260][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1237.443296][ T5876] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1237.444885][ T5876] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1237.472728][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1237.472765][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1237.472788][ T5876] usb 4-1: Product: syz [ 1237.472805][ T5876] usb 4-1: Manufacturer: syz [ 1237.472822][ T5876] usb 4-1: SerialNumber: syz [ 1237.513785][T21961] FAULT_INJECTION: forcing a failure. [ 1237.513785][T21961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.513821][T21961] CPU: 0 UID: 0 PID: 21961 Comm: syz.6.5578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1237.513849][T21961] Tainted: [L]=SOFTLOCKUP [ 1237.513857][T21961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1237.513868][T21961] Call Trace: [ 1237.513876][T21961] [ 1237.513885][T21961] dump_stack_lvl+0xe8/0x150 [ 1237.513918][T21961] should_fail_ex+0x46b/0x600 [ 1237.513951][T21961] _copy_to_user+0x31/0xb0 [ 1237.513972][T21961] simple_read_from_buffer+0xe1/0x170 [ 1237.514002][T21961] proc_fail_nth_read+0x1be/0x230 [ 1237.514030][T21961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.514058][T21961] ? rw_verify_area+0x2ac/0x4e0 [ 1237.514092][T21961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.514117][T21961] vfs_read+0x212/0xa80 [ 1237.514154][T21961] ? __pfx_vfs_read+0x10/0x10 [ 1237.514185][T21961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1237.514207][T21961] ? lockdep_hardirqs_on+0x7a/0x110 [ 1237.514229][T21961] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1237.514251][T21961] ? mutex_lock_nested+0x152/0x1d0 [ 1237.514276][T21961] ? fdget_pos+0x252/0x320 [ 1237.514310][T21961] ksys_read+0x156/0x270 [ 1237.514341][T21961] ? __pfx_ksys_read+0x10/0x10 [ 1237.514380][T21961] do_syscall_64+0x14d/0xf80 [ 1237.514401][T21961] ? trace_irq_disable+0x3b/0x150 [ 1237.514424][T21961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.514444][T21961] ? clear_bhb_loop+0x40/0x90 [ 1237.514469][T21961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.514488][T21961] RIP: 0033:0x7f513342d04e [ 1237.514507][T21961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1237.514524][T21961] RSP: 002b:00007f51316c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1237.514546][T21961] RAX: ffffffffffffffda RBX: 00007f51316c66c0 RCX: 00007f513342d04e [ 1237.514560][T21961] RDX: 000000000000000f RSI: 00007f51316c60a0 RDI: 0000000000000005 [ 1237.514573][T21961] RBP: 00007f51316c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.514585][T21961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.514597][T21961] R13: 00007f51336e6038 R14: 00007f51336e5fa0 R15: 00007ffdd7845c78 [ 1237.514629][T21961] [ 1237.880645][ T5876] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1237.980344][T14669] Bluetooth: hci0: command tx timeout [ 1238.000796][ T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.099865][ T43] usb 4-1: USB disconnect, device number 33 [ 1238.128567][T21956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.129170][T21956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.144890][ T43] usblp0: removed [ 1238.477739][ T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.720238][T21974] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1238.752814][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b778c00: rx timeout, send abort [ 1238.758197][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b778c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1238.780205][ T43] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1238.856403][ T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.911225][ T43] usb 4-1: device descriptor read/64, error -71 [ 1238.928623][T21983] tmpfs: Bad value for 'mpol' [ 1239.113339][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.113430][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.170137][ T43] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1239.300161][ T43] usb 4-1: device descriptor read/64, error -71 [ 1239.375814][ T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.420753][ T43] usb usb4-port1: attempt power cycle [ 1239.880167][ T43] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1239.904464][ T43] usb 4-1: device descriptor read/8, error -71 [ 1239.975835][T21935] chnl_net:caif_netlink_parms(): no params data found [ 1240.060225][T14669] Bluetooth: hci0: command tx timeout [ 1240.080193][T15658] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1240.140173][ T43] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 1240.170967][ T43] usb 4-1: device descriptor read/8, error -71 [ 1240.240102][T15658] usb 7-1: Using ep0 maxpacket: 32 [ 1240.243768][T15658] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1240.243806][T15658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1240.243836][T15658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1240.243863][T15658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1240.243893][T15658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1240.246805][T15658] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1240.246838][T15658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.246859][T15658] usb 7-1: Product: syz [ 1240.246875][T15658] usb 7-1: Manufacturer: syz [ 1240.246891][T15658] usb 7-1: SerialNumber: syz [ 1240.271977][T15658] usb 7-1: config 0 descriptor?? [ 1240.280820][ T43] usb usb4-port1: unable to enumerate USB device [ 1240.362918][T21935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.363137][T21935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.363361][T21935] bridge_slave_0: entered allmulticast mode [ 1240.366223][T21935] bridge_slave_0: entered promiscuous mode [ 1240.379038][T21935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.379192][T21935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.379455][T21935] bridge_slave_1: entered allmulticast mode [ 1240.383517][T21935] bridge_slave_1: entered promiscuous mode [ 1240.462539][T21935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.467828][T21935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.559030][T21935] team0: Port device team_slave_0 added [ 1240.563311][T21935] team0: Port device team_slave_1 added [ 1240.624272][T21935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.624292][T21935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.624322][T21935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.643868][T21935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.643888][T21935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.643917][T21935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.741258][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.741624][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.742016][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.742500][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.745872][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.746365][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.757575][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.757955][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.758275][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.758599][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.758923][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.759257][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.770352][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.770856][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.780597][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.785605][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.786097][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.786578][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.790254][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.790755][T15658] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1240.790805][T15658] input input141: Timeout waiting for response from device. [ 1240.807187][T15658] usb 7-1: USB disconnect, device number 3 [ 1241.002296][T21935] hsr_slave_0: entered promiscuous mode [ 1241.003198][T21935] hsr_slave_1: entered promiscuous mode [ 1241.003867][T21935] debugfs: 'hsr0' already exists in 'hsr' [ 1241.003885][T21935] Cannot create hsr debugfs directory [ 1241.538432][T22008] netlink: 'syz.6.5592': attribute type 8 has an invalid length. [ 1241.929906][T22011] FAULT_INJECTION: forcing a failure. [ 1241.929906][T22011] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.929951][T22011] CPU: 1 UID: 0 PID: 22011 Comm: syz.0.5593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1241.929986][T22011] Tainted: [L]=SOFTLOCKUP [ 1241.929995][T22011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1241.930008][T22011] Call Trace: [ 1241.930017][T22011] [ 1241.930027][T22011] dump_stack_lvl+0xe8/0x150 [ 1241.930068][T22011] should_fail_ex+0x46b/0x600 [ 1241.930105][T22011] should_failslab+0xa8/0x100 [ 1241.930132][T22011] kmem_cache_alloc_noprof+0x87/0x680 [ 1241.930167][T22011] ? alloc_empty_file+0x55/0x1d0 [ 1241.930200][T22011] alloc_empty_file+0x55/0x1d0 [ 1241.930230][T22011] path_openat+0x11b/0x38a0 [ 1241.930275][T22011] ? try_to_take_rt_mutex+0x840/0xb00 [ 1241.930309][T22011] ? arch_stack_walk+0xfb/0x150 [ 1241.930343][T22011] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1241.930387][T22011] ? __pfx_path_openat+0x10/0x10 [ 1241.930432][T22011] ? __lock_acquire+0x6b5/0x2cf0 [ 1241.930458][T22011] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1241.930501][T22011] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.930543][T22011] do_file_open+0x23e/0x4a0 [ 1241.930577][T22011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1241.930607][T22011] ? __pfx_do_file_open+0x10/0x10 [ 1241.930639][T22011] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1241.930695][T22011] ? alloc_fd+0x64e/0x6c0 [ 1241.930737][T22011] do_sys_openat2+0x113/0x200 [ 1241.930770][T22011] ? __pfx_do_sys_openat2+0x10/0x10 [ 1241.930800][T22011] ? ksys_write+0x248/0x270 [ 1241.930837][T22011] ? __pfx_ksys_write+0x10/0x10 [ 1241.930875][T22011] __x64_sys_openat+0x138/0x170 [ 1241.930910][T22011] do_syscall_64+0x14d/0xf80 [ 1241.930936][T22011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.930960][T22011] ? clear_bhb_loop+0x40/0x90 [ 1241.930987][T22011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.931011][T22011] RIP: 0033:0x7f10f0b5c819 [ 1241.931034][T22011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.931054][T22011] RSP: 002b:00007f10eed74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1241.931080][T22011] RAX: ffffffffffffffda RBX: 00007f10f0dd6180 RCX: 00007f10f0b5c819 [ 1241.931098][T22011] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1241.931114][T22011] RBP: 00007f10eed74090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.931129][T22011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.931143][T22011] R13: 00007f10f0dd6218 R14: 00007f10f0dd6180 R15: 00007ffca6e47fb8 [ 1241.931180][T22011] [ 1242.339366][T14669] Bluetooth: hci0: command tx timeout [ 1242.730360][T22016] FAULT_INJECTION: forcing a failure. [ 1242.730360][T22016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.730403][T22016] CPU: 1 UID: 0 PID: 22016 Comm: syz.6.5595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1242.730435][T22016] Tainted: [L]=SOFTLOCKUP [ 1242.730443][T22016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1242.730456][T22016] Call Trace: [ 1242.730466][T22016] [ 1242.730476][T22016] dump_stack_lvl+0xe8/0x150 [ 1242.730516][T22016] should_fail_ex+0x46b/0x600 [ 1242.730554][T22016] _copy_from_iter+0x1d3/0x1670 [ 1242.730595][T22016] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1242.730638][T22016] ? __alloc_skb+0x27d/0x7d0 [ 1242.730660][T22016] ? __pfx__copy_from_iter+0x10/0x10 [ 1242.730690][T22016] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1242.730724][T22016] ? __alloc_skb+0x27d/0x7d0 [ 1242.730752][T22016] ? netlink_sendmsg+0x650/0xb40 [ 1242.730785][T22016] ? skb_put+0x11b/0x210 [ 1242.730812][T22016] netlink_sendmsg+0x6c0/0xb40 [ 1242.730855][T22016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.730889][T22016] ? unwind_get_return_address+0x4d/0x90 [ 1242.730917][T22016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.730955][T22016] ____sys_sendmsg+0x94c/0x9c0 [ 1242.730988][T22016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.731025][T22016] ? import_iovec+0x73/0xa0 [ 1242.731051][T22016] ___sys_sendmsg+0x2a5/0x360 [ 1242.731084][T22016] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.731149][T22016] ? __fget_files+0x2a/0x420 [ 1242.731178][T22016] ? __fget_files+0x3a6/0x420 [ 1242.731218][T22016] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1242.731247][T22016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.731284][T22016] ? __pfx_ksys_write+0x10/0x10 [ 1242.731331][T22016] do_syscall_64+0x14d/0xf80 [ 1242.731354][T22016] ? trace_irq_disable+0x3b/0x150 [ 1242.731380][T22016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.731403][T22016] ? clear_bhb_loop+0x40/0x90 [ 1242.731432][T22016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.731455][T22016] RIP: 0033:0x7f513346c819 [ 1242.731476][T22016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.731496][T22016] RSP: 002b:00007f51316c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.731520][T22016] RAX: ffffffffffffffda RBX: 00007f51336e5fa0 RCX: 00007f513346c819 [ 1242.731537][T22016] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1242.731551][T22016] RBP: 00007f51316c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.731565][T22016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.731578][T22016] R13: 00007f51336e6038 R14: 00007f51336e5fa0 R15: 00007ffdd7845c78 [ 1242.731621][T22016] [ 1243.353114][T22024] FAULT_INJECTION: forcing a failure. [ 1243.353114][T22024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.353155][T22024] CPU: 0 UID: 0 PID: 22024 Comm: syz.3.5598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.353186][T22024] Tainted: [L]=SOFTLOCKUP [ 1243.353194][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1243.353208][T22024] Call Trace: [ 1243.353215][T22024] [ 1243.353225][T22024] dump_stack_lvl+0xe8/0x150 [ 1243.353265][T22024] should_fail_ex+0x46b/0x600 [ 1243.353301][T22024] _copy_from_user+0x2d/0xb0 [ 1243.353324][T22024] sock_do_ioctl+0x195/0x320 [ 1243.353358][T22024] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1243.353391][T22024] ? __asan_memset+0x22/0x50 [ 1243.353419][T22024] ? smack_file_ioctl+0x263/0x360 [ 1243.353470][T22024] sock_ioctl+0x5c9/0x7f0 [ 1243.353499][T22024] ? __pfx_sock_ioctl+0x10/0x10 [ 1243.353526][T22024] ? __fget_files+0x2a/0x420 [ 1243.353553][T22024] ? __fget_files+0x3a6/0x420 [ 1243.353579][T22024] ? __fget_files+0x2a/0x420 [ 1243.353608][T22024] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1243.353632][T22024] ? __pfx_sock_ioctl+0x10/0x10 [ 1243.353659][T22024] __se_sys_ioctl+0xff/0x170 [ 1243.353683][T22024] do_syscall_64+0x14d/0xf80 [ 1243.353707][T22024] ? trace_irq_disable+0x3b/0x150 [ 1243.353733][T22024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.353756][T22024] ? clear_bhb_loop+0x40/0x90 [ 1243.353783][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.353805][T22024] RIP: 0033:0x7ff6da2ec819 [ 1243.353825][T22024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.353844][T22024] RSP: 002b:00007ff6d853e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.353868][T22024] RAX: ffffffffffffffda RBX: 00007ff6da565fa0 RCX: 00007ff6da2ec819 [ 1243.353885][T22024] RDX: 0000200000000180 RSI: 0000000000008948 RDI: 0000000000000004 [ 1243.353900][T22024] RBP: 00007ff6d853e090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.353914][T22024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.353927][T22024] R13: 00007ff6da566038 R14: 00007ff6da565fa0 R15: 00007ffe9ab08008 [ 1243.353968][T22024] [ 1243.872345][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 1243.872368][ T36] audit: type=1326 audit(1775340499.531:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.872420][ T36] audit: type=1326 audit(1775340499.531:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.875991][ T36] audit: type=1326 audit(1775340499.531:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.885016][ T36] audit: type=1326 audit(1775340499.541:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.885503][ T36] audit: type=1326 audit(1775340499.541:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.886598][ T36] audit: type=1326 audit(1775340499.541:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.886986][ T36] audit: type=1326 audit(1775340499.541:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.887761][ T36] audit: type=1326 audit(1775340499.541:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.909359][T22004] bond_slave_0: entered promiscuous mode [ 1243.909422][T22004] bond_slave_1: entered promiscuous mode [ 1243.914914][T22004] vlan2: entered promiscuous mode [ 1243.914942][T22004] bond0: entered promiscuous mode [ 1243.916502][ T36] audit: type=1326 audit(1775340499.571:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.916888][ T36] audit: type=1326 audit(1775340499.571:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22027 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6da2ec819 code=0x7ffc0000 [ 1243.971996][T22032] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1244.040138][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1244.192830][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1244.217205][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1244.217243][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1244.217272][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1244.217299][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1244.217327][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1244.235881][ T31] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1244.235916][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.235937][ T31] usb 7-1: Product: syz [ 1244.235952][ T31] usb 7-1: Manufacturer: syz [ 1244.237314][ T31] usb 7-1: SerialNumber: syz [ 1244.251725][ T31] usb 7-1: config 0 descriptor?? [ 1244.635484][T14669] Bluetooth: hci0: command tx timeout [ 1244.881203][ T59] bridge_slave_1: left allmulticast mode [ 1244.881240][ T59] bridge_slave_1: left promiscuous mode [ 1244.881524][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.001564][ T59] bridge_slave_0: left allmulticast mode [ 1245.001598][ T59] bridge_slave_0: left promiscuous mode [ 1245.009585][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.019320][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.019838][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.020666][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.022567][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.023147][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.023606][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.024066][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.024575][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.025107][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.025574][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.026121][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.026557][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.027040][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.027536][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.028047][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.028487][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.029020][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.029724][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.030778][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.031428][ T31] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1245.031479][ T31] input input142: Timeout waiting for response from device. [ 1245.043611][ T31] usb 7-1: USB disconnect, device number 4 [ 1245.648777][T22053] Bluetooth: MGMT ver 1.23 [ 1246.697265][T22076] CIFS mount error: No usable UNC path provided in device string! [ 1246.697265][T22076] [ 1246.697303][T22076] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1248.407931][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.509848][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.559672][ T59] bond0 (unregistering): Released all slaves [ 1248.800285][T21924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1248.901094][ T59] !: left promiscuous mode [ 1248.952304][T21924] usb 7-1: Using ep0 maxpacket: 32 [ 1248.955033][T21924] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1248.955068][T21924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1248.955097][T21924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1248.955122][T21924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1248.955151][T21924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1248.958291][T21924] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1248.958322][T21924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.958353][T21924] usb 7-1: Product: syz [ 1248.958371][T21924] usb 7-1: Manufacturer: syz [ 1248.958388][T21924] usb 7-1: SerialNumber: syz [ 1248.996298][T21924] usb 7-1: config 0 descriptor?? [ 1249.514805][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.516285][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.516754][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.517186][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.519511][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.553615][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.555094][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.555896][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.556400][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.556988][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.559221][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.559695][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.560286][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.560792][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.561414][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.561893][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.562587][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.563215][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.566007][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.566655][T21924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1249.566707][T21924] input input143: Timeout waiting for response from device. [ 1249.686024][T21924] usb 7-1: USB disconnect, device number 5 [ 1250.863345][T21924] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1251.010152][T21924] usb 4-1: Using ep0 maxpacket: 16 [ 1251.060874][T21924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.060915][T21924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.060960][T21924] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1251.060986][T21924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.114075][T21924] usb 4-1: config 0 descriptor?? [ 1251.373164][T21924] usbhid 4-1:0.0: can't add hid device: -71 [ 1251.373318][T21924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1251.400291][T21924] usb 4-1: USB disconnect, device number 38 [ 1253.896120][ T59] hsr_slave_0: left promiscuous mode [ 1253.962289][ T59] hsr_slave_1: left promiscuous mode [ 1254.087855][ T59] veth1_macvtap: left promiscuous mode [ 1254.087980][ T59] veth0_macvtap: left promiscuous mode [ 1254.088267][ T59] veth1_vlan: left promiscuous mode [ 1254.088489][ T59] veth0_vlan: left promiscuous mode [ 1256.755919][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1256.851061][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1256.960195][T21924] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1257.111814][T21924] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1257.113566][T21924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.113594][T21924] usb 7-1: config 0 has no interfaces? [ 1257.149256][T21924] usb 7-1: string descriptor 0 read error: -22 [ 1257.149427][T21924] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 1257.149453][T21924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.225750][T21924] usb 7-1: config 0 descriptor?? [ 1257.697843][ T5876] usb 7-1: USB disconnect, device number 6 [ 1259.216084][T22184] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1260.927537][T21935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1260.950189][T21072] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1261.051872][T21935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1261.101051][T21072] usb 4-1: Using ep0 maxpacket: 8 [ 1261.104679][T21072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1261.104719][T21072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1261.104742][T21072] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1261.104768][T21072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1261.104791][T21072] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1261.104833][T21072] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1261.104859][T21072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.185521][T21072] usb 4-1: config 0 descriptor?? [ 1261.243114][T21935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1261.260356][T22208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5647'. [ 1261.260910][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5647'. [ 1261.353292][T14669] Bluetooth: hci1: urb ffff888032225300 submission failed (90) [ 1261.365417][T21935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1261.831303][T22224] netlink: 'syz.6.5649': attribute type 4 has an invalid length. [ 1261.877240][T22224] netlink: 'syz.6.5649': attribute type 4 has an invalid length. [ 1262.027454][T22229] FAULT_INJECTION: forcing a failure. [ 1262.027454][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.027497][T22229] CPU: 0 UID: 0 PID: 22229 Comm: syz.0.5651 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.027528][T22229] Tainted: [L]=SOFTLOCKUP [ 1262.027536][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1262.027550][T22229] Call Trace: [ 1262.027559][T22229] [ 1262.027570][T22229] dump_stack_lvl+0xe8/0x150 [ 1262.027611][T22229] should_fail_ex+0x46b/0x600 [ 1262.027648][T22229] _copy_to_user+0x31/0xb0 [ 1262.027674][T22229] simple_read_from_buffer+0xe1/0x170 [ 1262.027710][T22229] proc_fail_nth_read+0x1be/0x230 [ 1262.027743][T22229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1262.027775][T22229] ? rw_verify_area+0x2ac/0x4e0 [ 1262.027810][T22229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1262.027840][T22229] vfs_read+0x212/0xa80 [ 1262.027883][T22229] ? __pfx_vfs_read+0x10/0x10 [ 1262.027920][T22229] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1262.027946][T22229] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.027972][T22229] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1262.027996][T22229] ? mutex_lock_nested+0x152/0x1d0 [ 1262.028027][T22229] ? fdget_pos+0x252/0x320 [ 1262.028066][T22229] ksys_read+0x156/0x270 [ 1262.028103][T22229] ? __pfx_ksys_read+0x10/0x10 [ 1262.028150][T22229] do_syscall_64+0x14d/0xf80 [ 1262.028174][T22229] ? trace_irq_disable+0x3b/0x150 [ 1262.028208][T22229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.028232][T22229] ? clear_bhb_loop+0x40/0x90 [ 1262.028260][T22229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.028283][T22229] RIP: 0033:0x7f10f0b1d04e [ 1262.028304][T22229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1262.028323][T22229] RSP: 002b:00007f10eedb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1262.028348][T22229] RAX: ffffffffffffffda RBX: 00007f10eedb66c0 RCX: 00007f10f0b1d04e [ 1262.028364][T22229] RDX: 000000000000000f RSI: 00007f10eedb60a0 RDI: 0000000000000004 [ 1262.028378][T22229] RBP: 00007f10eedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.028392][T22229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.028405][T22229] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1262.028442][T22229] [ 1262.212345][T21935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.240826][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1262.379107][T21935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.400149][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1262.402638][ T31] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1262.402668][ T31] usb 7-1: config 0 has no interface number 0 [ 1262.402717][ T31] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1262.402742][ T31] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1262.402772][ T31] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25971, setting to 1024 [ 1262.402801][ T31] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1262.402828][ T31] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.408828][ T31] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1262.408861][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.408882][ T31] usb 7-1: Product: syz [ 1262.408898][ T31] usb 7-1: Manufacturer: syz [ 1262.408914][ T31] usb 7-1: SerialNumber: syz [ 1262.442917][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.443053][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.443632][ T31] usb 7-1: config 0 descriptor?? [ 1262.445336][T22224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1262.551218][ T31] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input144 [ 1262.554926][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.555080][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.996833][ C0] bcm5974 7-1:0.119: trackpad urb failed: -1 [ 1263.000498][ T1232] usb 7-1: USB disconnect, device number 7 [ 1263.741149][ T43] usb 4-1: USB disconnect, device number 39 [ 1264.346449][T21935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.461757][T22263] netlink: 'syz.3.5657': attribute type 10 has an invalid length. [ 1264.546754][T22264] netlink: 'syz.3.5657': attribute type 10 has an invalid length. [ 1264.599355][T22263] team0: Failed to send options change via netlink (err -105) [ 1264.605673][T22263] team0: Port device dummy0 added [ 1264.615556][T22264] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1264.750645][T22264] team0: Failed to send options change via netlink (err -105) [ 1264.750905][T22264] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1264.751565][T22264] team0: Port device dummy0 removed [ 1264.764675][T22264] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1265.089571][T21935] veth0_vlan: entered promiscuous mode [ 1265.170697][T21935] veth1_vlan: entered promiscuous mode [ 1265.379650][T21935] veth0_macvtap: entered promiscuous mode [ 1265.458383][T21935] veth1_macvtap: entered promiscuous mode [ 1265.471861][T22289] random: crng reseeded on system resumption [ 1265.827248][T22290] batman_adv: batadv0: Adding interface: macsec1 [ 1265.827334][T22290] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.827383][T22290] batman_adv: batadv0: Interface activated: macsec1 [ 1266.683517][T21935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.724980][T21935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.848923][T22298] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASA[ 1266.848923][T22298] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 1266.848954][T22298] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1266.848980][T22298] CPU: 0 UID: 0 PID: 22298 Comm: syz.0.5664 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1266.849012][T22298] Tainted: [L]=SOFTLOCKUP [ 1266.849021][T22298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1266.849035][T22298] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1266.849071][T22298] Code: e8 f5 a4 61 fd f6 c3 01 0f 85 0a 01 00 00 e8 87 9f 61 fd 4c 89 f3 eb 07 e8 7d 9f 61 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1266.849090][T22298] RSP: 0018:ffffc9000611f698 EFLAGS: 00010202 [ 1266.849113][T22298] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1266.849128][T22298] RDX: ffffc9001254f000 RSI: 00000000000001cd RDI: 00000000000001ce [ 1266.849144][T22298] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.849159][T22298] R10: 0c00000001000000 R11: 0300000001000800 R12: 000000000000000a [ 1266.849176][T22298] R13: ffff888034bba900 R14: ffff888060478880 R15: 0000000000000008 [ 1266.849191][T22298] FS: 00007f10eedb66c0(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 1266.849209][T22298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.849225][T22298] CR2: 0000001b34815000 CR3: 0000000031008000 CR4: 00000000003526f0 [ 1266.849247][T22298] Call Trace: [ 1266.849256][T22298] [ 1266.849271][T22298] aead_recvmsg+0x719/0x1030 [ 1266.849307][T22298] ? __pfx_aead_recvmsg+0x10/0x10 [ 1266.849335][T22298] ? __pfx_aead_recvmsg+0x10/0x10 [ 1266.849363][T22298] sock_recvmsg_nosec+0x10c/0x140 [ 1266.849407][T22298] ____sys_recvmsg+0x3ef/0x4b0 [ 1266.849435][T22298] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1266.849469][T22298] ? import_iovec+0x73/0xa0 [ 1266.849491][T22298] ___sys_recvmsg+0x215/0x590 [ 1266.849516][T22298] ? __lock_acquire+0x6b5/0x2cf0 [ 1266.849539][T22298] ? __pfx____sys_recvmsg+0x10/0x10 [ 1266.849560][T22298] ? get_futex_key+0x8cd/0x1690 [ 1266.849606][T22298] do_recvmmsg+0x33a/0x800 [ 1266.849633][T22298] ? __pfx_do_recvmmsg+0x10/0x10 [ 1266.849665][T22298] ? __pfx_do_futex+0x10/0x10 [ 1266.849690][T22298] __x64_sys_recvmmsg+0x198/0x250 [ 1266.849716][T22298] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1266.849746][T22298] do_syscall_64+0x14d/0xf80 [ 1266.849771][T22298] ? trace_irq_disable+0x3b/0x150 [ 1266.849797][T22298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.849820][T22298] ? clear_bhb_loop+0x40/0x90 [ 1266.849845][T22298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.849868][T22298] RIP: 0033:0x7f10f0b5c819 [ 1266.849887][T22298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.849907][T22298] RSP: 002b:00007f10eedb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1266.849930][T22298] RAX: ffffffffffffffda RBX: 00007f10f0dd5fa0 RCX: 00007f10f0b5c819 [ 1266.849947][T22298] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 1266.849965][T22298] RBP: 00007f10f0bf2c91 R08: 0000000000000000 R09: 0000000000000000 [ 1266.849977][T22298] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 1266.849990][T22298] R13: 00007f10f0dd6038 R14: 00007f10f0dd5fa0 R15: 00007ffca6e47fb8 [ 1266.850012][T22298] [ 1266.850019][T22298] Modules linked in: [ 1266.850079][T22298] ---[ end trace 0000000000000000 ]--- [ 1266.861108][T22298] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1266.861148][T22298] Code: e8 f5 a4 61 fd f6 c3 01 0f 85 0a 01 00 00 e8 87 9f 61 fd 4c 89 f3 eb 07 e8 7d 9f 61 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1266.861166][T22298] RSP: 0018:ffffc9000611f698 EFLAGS: 00010202 [ 1266.861187][T22298] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1266.861201][T22298] RDX: ffffc9001254f000 RSI: 00000000000001cd RDI: 00000000000001ce [ 1266.861215][T22298] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.861229][T22298] R10: 0c00000001000000 R11: 0300000001000800 R12: 000000000000000a [ 1266.861243][T22298] R13: ffff888034bba900 R14: ffff888060478880 R15: 0000000000000008 [ 1266.861259][T22298] FS: 00007f10eedb66c0(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 1266.861277][T22298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.861292][T22298] CR2: 0000001b34815000 CR3: 0000000031008000 CR4: 00000000003526f0 [ 1266.861316][T22298] Kernel panic - not syncing: Fatal exception [ 1266.861871][T22298] Kernel Offset: disabled