last executing test programs: 38.020304644s ago: executing program 0 (id=7707): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 37.843258373s ago: executing program 0 (id=7708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x80007ffd, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) (async) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) getpgrp(0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) (async) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$notify(r2, 0x402, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) (async) fsopen(0x0, 0x1) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c03003ac01ea6a7263bab1b34605d316c13dbcfdb7000001e000004c400"/42], 0x35c}, 0x1, 0x0, 0x0, 0x40468d4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) fcntl$setlease(r6, 0x400, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (rerun: 32) 37.238063173s ago: executing program 0 (id=7713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) 37.053560761s ago: executing program 0 (id=7714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0xb}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) 36.500832797s ago: executing program 0 (id=7715): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xea8, 0x343400) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}, {&(0x7f0000000380)="b41fb7ea3175ebe466857965ea61c5a6f771e07af83378baa4156cd6362375df2d8d81e88d6c40654e105810f578cbaf6bb40ee2ffe412c661769709f6e7ff250f9cecb73e0fb05592c05835448bd974f3d5199dbe3671d7f7f8a3c39cedf5f8b3d263c51f2929adf5568e43c844096e926808003d43a39fd69df97b8294a524e329f6d2f27c404a8c09941f56d7e8a0e176e2a4ea6b89883d9ef4", 0x9b}], 0x2}, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) sendto$packet(r0, &(0x7f00000001c0)="05", 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x85}, 0x14) 36.287109624s ago: executing program 0 (id=7717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006900010028bd7000fddbdf250080000000000000080001000000000065bd6a89808a499041e6472bc42016d1a5e413c32ca9d98588eeeeb8abb7d43d5aca12ffe040a51aefec26a4ba63cb87900365c2a88a96470ba79a697fa62e8ed25fa50129ae4bb12d88e8b6a0b6ad17a34d124241e7887d41424ef05e4d0a8ddd88b5ad068c1657c3c0cd3c72df8f2abf38288e9899caa919c4e1e00e8215a2b17099c84424d270c8a4209a7c10a50bd49ee704d250b8e9f3da2ac2f57a8e0b6febdf42e3f91982d886724486ddb12d5ebb3551ab691ad6800cfa0921cd8ada96d0d0a6b0a3573fd642a68123896bcc607fd7167766ca4e62e845bf91f43f66a2fbe1946210e86cf87e3d496a30d971d3a0bde608fb82d4e495112656d7d029942356b6dab4aa43edcf0ce16585b6f24b072ccc1dc414390946419500fc8cd6a49ce31fa6ad11c10f3d07204ee6d58dfa6e129b40964cfe3576484226e6dfad19089d85e206c52402a4889af064372806ba1f56d570bf98ae12c617989bf315a3c2734b2289e63bcd35a55d323012d4a987511966394af0ff271b79a4f2ff00000000"], 0x20}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r5, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x8000, 0x80) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6(0xa, 0xa, 0x2) r10 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) syz_usb_control_io$printer(r10, 0x0, 0x0) 21.278796306s ago: executing program 32 (id=7717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r5, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x8000, 0x80) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6(0xa, 0xa, 0x2) r10 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) syz_usb_control_io$printer(r10, 0x0, 0x0) 10.357874197s ago: executing program 5 (id=7839): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0, @ANYBLOB='ZA']) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000082c0)="e038c6225686d30b62f000c3ec97689a869d85852dd156d98e4a60743baaa151248dcbc7879031612c866b594efafe3d7ac14e32d6faf85dc3d78d73553ee9798cc41266a85e20aad55e8c04962175f9caea7e7e9e8bd3187327c17fb5d1fefa73e3b30f1cd82ae7118c63d5ee107b015f527910b201d78ffd4d6fb24a7014cab9f72822ae4b37f1d30a59bce83d68630ffd2bb755479f9f9439a6c0b599c27bdeeaae9643df05453181e44aac33598e66fc2bfc1d5c2ce060bb74b7cf7283f98312582c83d822ea3906b40a7b4250dd60b300142c6e4b4dc5ea188ebce0e396b84e4658773016e1e2bac6bbd720b29c7eb00a9fb93fd213af48671e06c637049148b02fb32fb2ab154201b5d9d899dc8d5ded14283bd474b2ba55ee436f434e08ffdadbef2442d5efa8a27dc3579232d928480b5bd30865b6410a816ca13109ea37d86a0648bd82a750fd924fa908e757cad5e61c1d42f078e400f821d5e1f81c6719ef24cd2667f9c882c26517cbd9f6c36416404f2f4d57231c2a356eb1b5960d9ca9f5aced73ef08d382885d23c71f9686a2a33989e18ba7dc98914e385dd61e56eb5b171a28452bbffbb5a12f9827732c452b0a7ee3746cc8a89f7093835f9df051bf865f08043d679584e2150707a4fc5f86d8720dd54e3bca14ab56bbd1d65cc66cf229da88d6f5ecc8e68bb7e88d36f167dbf261083bf2f0cc23f8abc4d6f5140ac55829de25bf2e7b75df0f09f1ea53ebd66ad3942708e17ae96308854e1798eb2179e620d86f8641a942095343c3c350ac50531c16061b99decba95e3f6c06bc4f71f416d780ffff4a9ac7dda8fa43d6b4f33cf9efb7abe1019be9201dec2c6cef28a4e179a8ec8f896f6895a2ed46c07aa6b4b1593cbd6c0668ef67c28beba772b15bd4c27d6a2433ab2b76e44073a3ee0ab04a7c7c29c172d7b08c31fd2f00c3e35e3f18ab72ba07470248549df5772f308d4f06ab74cdb49ca27bdb82491e55f28f6fd841b6b81b71f3d5d9aea35396155c5573f0b20699adcefe30c7aaabbdca46172e0b24087d0e66b8fc8eb10d0c91bd132e97aa868a626aa1962379d16c2024e2ed869f2426b15ea8f0d3137037a5b9e552dd8ea1fe6f6321621e6e2b0dc1a3da48318324cbc6c4bb86634407366f3ed039662c672440fb579a9b3bf3668d330ee2d1dd3b4c7a4a5a69de25458e63203c7ef586c5364e2c108ed7ad738860097ffba491837bde29460d3214684064da5f3767ec5bd3d87868707edd6b0350955c54d6ff15ff384218afcde6beafd7689ddf44e90c563d96624e4e46bb6070b200480ecbd3c9592e7a6117194c43b45b433f11cc489bff646a6144c1c29d962956d2c9108c998e9266e0f2c3994ea349b38c0277246ad008007282a34f4009046529f5790f2a61cc6585d26ae3349e56edf4c69c7240dae4850fe8e9c92835d6e9d22a4d4cb5228addcedc4e844f509591ab952510b8a911fc99429299d03fa9f74ce86271b60676071ec1a4479e1a96f21513452f7b86979b174cd0363110f715c5252e13f2dc28888e8b0316e6c8966f01d29e0133f73f214f7de9eb9eb84145fcac71fca446581dfae1c284dd5bf53087dc1e7ae78364785da61d36e12684b3cebda8969edd2cbc2b33ce8abb576cab636f6fdee0a8978184b68a3630a4ed3f1dde4333a61d1a3e5d9224fbaf9d6aa1b8f4f0cc6eb3794b678e830975e896d4ec2ca056b703950658a8053c6952478393903516f589f555f1cb9a354aaa770c30f627aad09546ed40e5269159f15481e152b7ebe6daedfe62b4d32ec793de6f996680a4b943233922045f19f9b585dd9447f701e8589e666017fba477dfc06dd2614e4082ab7feaaa3c9529af2c941de7ffeffb1e8504a7cfc96c6111e432c4fd391bc23de13e9429c95addc7ee2426ac70acb9755c7dbfac085c70370aab84f5a0f6c4b292a030f462ee2090589d94238b4d706c0868bb3c690ccf4680363d610b01ea41ab3feadca2ae54a51ff7bd19fb24ccd69935c75866273417ee654e7d41abbc592b020060aafc199951e16c35a4a37a82d22ea9150a05ad5cb81c65464a776cab98f9877e7cf6c46d5047cd3bd888742f306b06843513088dfeaf9c5993a5354f37a1a423d88a490db247565019027de766f8953b87a186010bf29d90ac26814515554f167c0117e223d61d8065ae1ba41ead857de4c7fdaf230b57a6a5d3908f7bbe7e5824b04947c0924c704986b8108aacf26d4d8cd633b391be13610e195cebea8a7a39ada10068d2268b9aab5c9d22664d7d139282129dd8f750f9bc61db00394b9cfa8cacc0cd9b561a1bb0ae6ec38e3a7287fcbe5f3a4fea7c85fc0476e310867ce0b0aaeadc724c51a63a7c70d9465737acd8df649d34bde3480e17a9fe22c3535b7d0dfdae5e66211b42deb3984c527d4a959ad1da97dd18a6a148c0dbf0298ad88fe20851e8a44265c45ef00f10572e9bb3d7ebf203168be46e27515cec973953bfcf5ff9aa120bc97186dde6b8265bad0ebaedfbf26534934da99b02a55527608251246badab9181799534bf61bddd9a8576ff78f8c24a20bc661f3924052d8220304ff7a69fe7dcbcc81a85d0af4af259faf3bfcdc24397f4574e5777ecd893dfe6c888357310ca4cf5f349ea4c3f4d677434ded76b8d0b3e659fc05b8852dd2c8c38987a6d3e48fba5ba7a669963979f048b803a6eb8685b335aeeae387608b1abebf45837e96b801b897b8adf4fe942c18f1da170866c69785daf6e7021918a9fce89c3e12d8f01847327bececbafcbb518a832530718e0f47054c841b56c6a26f26f6eba6966170d5028962c9296a7d5633f8f4aaf434f060a2ff9ecf9ddef59f7e3b01c11afb145c0862344fe6088d7bec5482753b785cab1e0e618d157c7a80bcf67270ad80ed07bc9abbb602d0ede0a41d1f3f509ed242d2e46df39d35ff3c74646349bd395eb978b40a93b418bad2ffe9300328d110bffbb2af488d43c66ad3b151ddc4515dcbe47ecb3737a1ae1f2ba26c61f364c910b499800c8406549980afc57d13c27e2844d45d96d19dadcaf44f0211211d98b2078f9bebd13e1e6c41eccaab83f216cbd06e11c8603dee45f7db26b98f885dc0673050418fd8a432961432c0a32c8069ac4fceb84b3149c3da68014dbeaf1dd84ad735ac9585c8b82b4ff4c6eb8c74eb8ff8e3bc9b12bca61425aeb3f666a8df061af130d424192b2d68be0f0e9bfbfdf51873099d1bd54f62ca094641fc65a44e24976a07b6e85851c2c694395963963fe33646267f29882a2ad7fceab20ceab6cf33593ef0f1730f3e51359ba68dd333d86757becaa4be6ca5cd1180afae647832279fdfb11eaa7da119fc9a313eff2b7e285a1968f2a61a0a04ab129efb0de639d1414f6cb3f4d9f65b84799cb80506c06759b4eb764c290cd47788da3471ca953735c8d4a2ad355e3d7fdcedaf310f12843b1170ed4a592e00f42ad9670c335f3b9af65e9a76d94f0c336e4ee7826f1bf44528071be2100ccd138489768c6f64c4fc8b13f4c35b814be5cd78fab57ea47d6f1685ce80cbc23b8b5caeb213d673805437b5c16bfb9794357bf81f3087a40fffc4f04d1af5446114c59611d6e4dc1a8c223718bddba0dce2366a33a8102b114266b31872eb8703482238a078e2c40e8d1cd8de508f15d16e6e5b871f7419985cc3bc47356bf3d9457a8c0720d2d297f536b45a12e96e66d80c94fbb6c6bc820da85d2cfb0ef0264564f6ec5cfd9d0b4dd683e9bf9c9c7aa22bff96b7a891efd4222d5d5801e935ac135bdf8af974b4048fa417eaa08c4691a0d793ad25c528eb5e73b7a29675515650edad9af3ae5b017ed7ebc0fbbafbc55578955b7b0e96734ca47db62935a10fa8276f9c2bef28885b7ca0ac91e589e0d602a1bb60cd0b969a38def9025d926d03562b02450a904e9d34f2106d967dcf7d736a9281e83be082260bb937225113cdc9c88670e7f59fc87922d32f38150431560fce16b39455cd6c0ae325ecee9b9154328e7f45d7a6c82f7b33c2d04dfec497242061d670a99fc98ef2762dd9c7c5072a8d2a655a6c70ece7749e19f2e7e1768a0c3955dc25110bf3ccdce2a4b8d4724949eb5e1689c490b58ecdd5945faec89d1c3023e331bcf01c13ea6499555438ea4d76dbfb2ec513905c86532ed142913f136350dc72df345274807d9dd7315f4c1bdf5d65089c6d2e3543a061fb978fdcd9192c08747a618e05cb00561e5450767b854c5fd5dff09947bc74ca2a9c603c765c9338dd63c1b8d9a9765d12bb0a846c4097f2c47b4ce614473fdd6f5aa2873a14c935b1cf8a7f5b3e6e9aa898e47fade1bd83324f2c9cd5083365cf62a55c2792752d1da6d46b42effc4b998da7e27f22ebb02f69c22f567461d2ac049c19b122eca4fe2c96b04705fe5baa9d86bb0a93e22aa85f61258a8a0a5355bfe447b2313a551f5cbdf7dcb8ff2ec88df35d7ed853d1fe5c39b9df6db9d4eb23181a5964fca07d4cdd139105d11db6984f317fd04eb0f01a8b409b39bbc2f7b0eb585e670f28ceeb1c58fc406f98995d59c201e60b46032739474be2f755aa6c2d0602c8616b1d55c9682d2569f5d6f273ecda662469df0854111a9245a2821dfb082f1d752072033d58ab20f220dd767bfb25eb1097c8818bbc6955f0080dfa4eb7aa217983513832ef8c89a8962e5d084d8ad87fdab489bb4b7b062a23f0112e3ffaac7820cfd6bce2b61aa9430de6c2317806bafd789a47810d2879dd21ac2f63433c2e824a6848bb31a406ded5f22f9e5ebbc33b42231ea71ddd83bdd91e08193ce2cfd2bcce5b2a6caceb2e211f887ab89a36da1d887f912704cdf3502e8dc164227ca99f6a672cefcc4c45664f5596999f4c9378acc810d67153cfe24dcc6fa34650e850b9998dc6b91373980edb7882c3b17ba9abc290e70643478a1fe755fb57b220670f2af6242e87b03a2ca566e160defb2fbe1b5825f2c9c994af8f901d0e496616cf14780b7f3bab06caf8488efb18a3f595a389eefe5fc3737ea58f5e76c79366fce3f03ce6f3c7395d365a870796821fbe5668333cfb943dbe39d166a6e0e4452617c1167b6c4888409799c5470c5e00c070049f3ad4d3ef7e13389e1b4f98614a53112a73758c983c209bb3db3ef30d875e5cf261817639888959b327f1750acc9279d57c682c46cd9da60afa75f211d95b2022a002aa80c67ba00d2db75470f1f3c281135067810800fce45fd29c135199bd91519ef859f25906c976443ac00f5d0f16d4dcfe6d68f8c7038570f947b1ef1407d11c69338c568da9bd18d0c867a3af49d6351bd57d6d563e4f39b08ca0c8fa63ee0372d342470edbde115c480cc1ac6e07107061d3d10f706bbf4970a21fbfa1b742235be21356af8e23d78f11eeafda4e96f920cd30b76559cccaba90442fe3343cae3366533922f862a3e7e916839dad22d286b19b14478b00bfeca94722635c2dfe567348b6b74a777e613e291b25915bb24a5b694923aea31819ecf6bc771a8b7386e6e3dabd3d5e802b4066dae69b07afd341c604322302b60eb6181d700fa0583d74fd8852831b45d8debc114adbe3109152f7f3b6c82b3feec872f0eafaf08203a07b543912d22d046c0ccb61982064fa8990b7c28cb1965deeb66aecaa82b61c757235b9c3583db792ec4bc0f2ff3d78bbf70f17e09736694808caa407d9853a533ed188baf8c92af3cdb8b6b03369b238e8d0ae187199f9001d982db1c6f2ce2e438455c15410031a2fe678b52ada22375a961a6109cd7351a2c5b61d96110908233c0f278a33d9d596785e7af466dae8dd44a9f1e38251f3314c865766c7721641b82290e1178f011142919f0724b94ecbc7a1cfee6d0404c808198564df20efdac7bfeb321a04fded33a37ae1c4d0bd417ad243bf7e4e71a8aa07e23f355e1d232cab131757dc16873e88ec4838a8d50ec2df5ed12c0658d35b4c1fafc28eb49b960ef6608c7a31e9ad64608788be344c3f3f6805dfa452c90f3ce31e69ed73e343efc401bc52f0588be744c6d973aa1b8d202fc57a1712c30eebd3ad8003e45c043cdf3518385d0a89ee047f5a8d4b5023216b471c2ab4a15f0a55a88d6c1b4fb256e2533199460f347d0ab0345bc6e54709c6ba9bd1f23e37b7952e6e6688b504533331c23516f0fcabeb296b9e766e517b48d816d492dffa5651edd7b921e7b922bb4e2b9f13af9f4396d7d8ab5315c213e1ea51c9aec0c2f9e3c25316dc956b55d5977d7ef2b49256a07e859c619740118cb5fcba591dc077d029153b23f6646334f79767550546473ac4c5e6f9216ab7bbd303f11338ea9ab6da9ebbe18bc60d46cd426a2f7408ec97c1ea1de7fdcf44a20e8a6970fe50b7ffe40e7fa20ef96c9de831101b2dbfaa3482e1abb3881576e27a00727b0dd88b97ad044e71327e004b65ae58d3240ddadee43ee30bd802dc681f13e0ab4df574de8672fb089f8945f3885b78377002f72aba9306fcc3123f0878a1105fb0ebdeffb0cca9ddfc9f1a6204723ebe3dff3ab6d2971a5d87dce4fa699b1a3de1a504757063cedd47e71c7412030a924b96ba89cba010920285d19445373bacbbcd511a8995f6eed76b8377f1ed6be985398824cdf48a7172bfdc5f931acf21b86aaffcc1879dcfada667abb08fd240c16c3b6c46f3fe0878905656c7499aa8a18badbdf236dc38a1440b98d362051255da7991eb93ed77b93d85ebb3d14722378d8e4166f2d9f8afbdba86cc137856a491db99b4b4bbb11ce14d2c0c36a2c8b53591d969e0fecee033389e3a5616f9a996b4d3c045d95d3401ccd1677bf73c2e602d7a9172e38e91e7093ce48955ca58b2560c6744b73737cee15bd33cae4136acf60594a816ea40a2d640c4db9178db983095d93466c55b1cceefec1b8501bd29c2d846d68b7651c4bc1a02a1f814c7cfb973c00daf1f00694263803cb7bbf155ec531727bb5054597824d5ee8d4ae128d8014ee55cec35e1324e13c3df9a214cdea683247d4f75c5e30e21d831c01e5445d9585ffe0c2118ef4fc28522a24b27ce2943f015d5c19b5ba482565d3a47f5127586ad89e1fac525e5fa9d00d5e55fce3bf4f27082e31f032d6932c3fbb48e2e0cd703647138c13a6073766c96171c71f4beefe8b215802634c3738ba81f0c6056af50ea203997ef1b922b695fd4344d9f727c37651341589a13c1ab6b351b07ff64bf6ae14dd69917b75dfa442b00a23a0ad6e6c630945cd98cf347dbf0d0d188f7306b9f0fc795504137469f41672fed9a17a599336b68248e34eeb91f97f8b70729d263892e2ccb2de34d360a4cae4ff6cb064e98466cdabf086427cee880a6f61e248e728361f0c5e63e3e36b02898cdf8c3498b404336c042721d995bf3a14d9d71f52c5ab05ca93c16137512c9c63d272d45e33d9cf142dd277e48f5b189c95492186b933fa0ebce0318f7990fac1b8d8c614d8e3d27d36686960f6d748c208f63e332bf6ea63838548c66647aef8474d30227907ceaf045c73e025288b8f8acf851427be6ed8e5e2c3d33bcba629d7b898b743520b27da74dcf3a5dc629335ff3e092992d1c7b6af3d2f8c36c6ee23eb81a9ef85d552b3fa4aee5f6aa66eec68803a78dc069003fbc0d1192ba4b69e60f4bc24855cfa66820f035f64af0337364e9ab004ccf9085611d193d029a39eaa8744a825b115483bd95f860490584adf23e0d89a230076d59aad4b4fe155f0d08652158d436dc675f19d67755f1cd34ce2e664a303f4255443f476c243a87d913c3c9e874c2fe9150ddd32e9689c3ec362daf35912d3dfa8918c42558c8a184b4e671e3b8058f7908e441dfaa5e916869b2427fcc50ebb300a7d2de13f7a09dcee9a925bd908e69f872e0bc4dd34f8270f42b06d03f7012f81265c07bccb91e82b9fcae107943eb88642246324100276d7450aa2b2b4f8e7d231ef899bb2ba3d2d70f95c6964f4f66a86116d0337246aff0dbc968d0db97c5cbbb57fb6956d778ad93cdc283ec9be7db1981f9699c441638d3a163e7fb1fb805247395bd7c7ad8882b03aa60913bf0a628112c775994dbf64ad39a127f4ec7d8a69a9a53ec7b7432d26a633f235f394a8bb63de555ba9c182cc6a9156e2306a0810654f00972ce0189ce6ece74310e63c740232b646a3c9cf1f6a3a2b64bd75b1a816e8d44ca2ade740c104035a22257f144dc4ee6c6032779e3e48dfbcdb73f946a68785754b1f50295b69c936dd09a03d68f61952292fb34697266cc948d7d95aa728afa6cc85421b808231c97813108274a45115b36fe5d2c4f0c3746f4800d21f24dde9c88baf29dc1fe81c6248c908374ba3a9f8715867e4bfecea3cbcd1cdc0664b84548c78158b4591692d5d81e3410e4064f28cb197abb50e208d91b97d3f486e515df8a7e0463d18f48dee252faacc90d606b6b21581015cb851ee97984801ea601af6afea838c54223fdadcf5101891a747f1bc092d3736eef6c5add35f1a7db55066e5072865f7d9f133ca6cbf698637e5c7901c69e0f53d54e1790d9da5d161cde872f5d17f82663e1cfbb6396f33b46f83868164c17bd8f4cf70cef6a2b4bff3b34704e1ab0e55ad78da6fa6c25ad1573183f32c4f8e1e7ad18062811073ab8f66cd3b93c70f81d72609c2c343667309a7799c2d5461da5a0556650effbc9d641a8d21521de75302b465fa78083b6385edb3aceeebda1827e075aa48b25580979203b440eca68c716ac895abf45e7294963de6198247c0ea54b989a00ca029909157939f3ff3c6a6cfb61da14f4ae429a2024993fa3600c6beddaecb5c86ce0476b00e7ee5f65323d700049c7f25555f28b245779045d17ffa905caba5850931212e99326c01f56ca75dcc6af9dfbe19dda1fb46a817f359447a03c7973033bf6777cac272f4b448b6638cd4133f1e203296ac96f9746ee3c985a55b7736eaf89caa2db557f76e6c9c8bd4ad4bfd5e80767fb296378d3fbfb68940bea75987b170ce6adf13939e04b7458295385617745e853875be2cccf789ce20aa988f0921f0e83aa131ae83ffda1aa32afd6c1dcfdcb9cb6a31d9c2c7fcfa0c82fd7d8682d5160e15b822b722c71ddea162057faf4bd99bdaadb6ee634ac56fbd5a9b2bf8d7b2be684a4bc0d4fbd62e2df222539876631b8462b3630fa7a2d6417e391370d8ccdf687b1798488fc715fa6e067e405ddd95cd6acf3210f4a5c16ae8047ae2d83e3e8b09fa732e00ded16bec0a7896e3b8da4e408c8e8725249c15d84b3db7c0bee7395f9ca4e27e7325cf586d36ea727df8cc1f2b45a3df4fab8dbf745a15d01c1938ea1bb449c0bf96beed1f7edcb5a6d864eb46ed341a70eaef2a014ec5667ea8188d107f72892248a945de3f4e428c374bd451e7807ec4e32867992400e75357b8f8246ae8f33f078fdd4dff8ca7724cfc1c09a25370a91046dfbc5fd017e19a777986873ba16ba1cfddced5b806c9425ea3d69c89a32a9fee140d94e57d866c63ea2e8d156c0d88b223cea4d27173e013ca24a6c52a61e42ee98f866e2697b6396bb6b61775a21ade7ce2be002385baca43943f78be3a0fc850ef9d1143111d8174f7419dd88a50b6c95a981120bf57c0d2cae4c7e8897fde0b169b0aed7757194107335d3e42c6ec5fbc74e0b90a51e2705f6363bf2d3e82562672ac9b80fbddc2734e1da4e4ec2bb315d482c81694a97ebc9aaeda1d6b3c43f6519f0a4ed84465e1b29591e7dae4cee81a2b6661c4502f816ac3ed8ce9dfd9789ea7c50c4faa3f899a9ee30a99f76886ba569693e9502d6708346e999a7fc6c7459b37d427a4f38b763ede44565b433d3cd650ca77d204b8453dc4e22a48286480458670a956f141db54ce25bfd7452c82f36bb5fc2b8fb72616e38db821422cef94bbac1411c14d2380dfce8be19a075f6227f201e7122e7db3128124175c03659416319a72edfab706969cdb71cdd09fe8ebdfecca38625a8c624747ab51f5526fc3de28a10b929ee09d17b671005eaf116e09fbbacda416daff14844525732d4dac9973cdfa08a7f22bd528ad88d566cf89304e66adf58343c2664fd4302df7acc006a19ea4f2eb9b8dab885746bc8d3558e59c18d0f369d8ba2dfcb22f0c9fdbea4e9b24edd463e937125c414d10631124bdd96fd6852d7aee8f98586bc29b8a73b0ccd46be1b0c9f30557879f44a3fa410f3813eae1bf91aec934805c9103a254f8e205e3842acf5f0d8b6f2768b2c2d2bebc7ea8d8c25918b24e2771692c6946c36df450faa01a55eb1c956e41b9960708a8311b63a19329ef146a9efad77643c2697a6e9a6a1f1fb35001e632bb6c5e59903d4989845a31368bf07e61b51c6f5842d7f9c578c799ebfa6b79f5c8c4e3a3f2f2c6b158c9418245a00187ccd5a82442677084bc8b7c1af30128e47350d26663b6623981662d3a9d789d25e7aae1a7b2c25dee925ccd131c182fc83e176c18c6746888b9d3240d8a936ee2c67bacb0fedd1f0350a71b811a5c6fa4ec59e63c310c83503723167594b368c0bcff911f9b9ce225a3d25edbbb4c6d3f4563a008594b9106908ae65e419b7ef0e4ae481a539ef49d76507888ad026977bd6a04184912864d47175b49ed65e8c50f78cf2168fc074277a664b2a9b6ad2bc0c3fc30139a5b592e0eb3f06be25db4dcf06b2eac9cbc91a27fd87f4b58a8dad02741bb956e32b4d82e0149fb7966667841dc07b0817f24de5280f10dd01d005421d26b84d28e20dc5b54510c3c98698a8371f8b4b340ea323897cd63e0a760e9f4c7aa0c5596ee37ce0ca13250048e798a826cd950b11940180209ac6a483c0ed28acd71ea25b77af5a315be6e0d823802f695bad207076956ebdb7e8af11df33485a76acc8236de50bc9fc740d09cf198f3590a2b152b4362f83f231d88cf8f462fdf86489166686538adb0eb7a65ec066942a6fe1d7ca11d366eb688570c263d93e53223915e75317e753bdd0f0952a8b8a03c37e6e9367e2ab88b3b754bd63336a8913f8235bc6535fd0b157848b53373c9057f7b0c2222140b780a2701af1e00a441967d7b2351490c00a8eaac7d242023c078f25d83383c8db822e119284aff9885585a427ef605ce187f3a496a9be4405fd4cc2e3a324770e77b7d5200918b1929cf17e27e5b27ac3802db7fd72db731257bf0000e56825da31882c0fad7e412aa22da3573714e8df92bccfe597d2bcda46bb09d7e14e09e813863d5461ba5e887808460d0aad9317c8011bef29c58c80fdb503ec15b6aafa1ef2443edc3ff57106c649691709d96b7c0426f7a70ede2a2e33724c2367955c6dfb4b87d581e30b60e86f650c62ac001246a1d88d2ed92c35227e20590b298d2aa81fb6339e5e9acc0871e0d4df4be6bf3fb314a6853d145736425071a40f0497954bdac563ccd1496850b97098055a6f7fb0cb0f83853423634f4cb9cd9f60f691fa816813d6a3547c63974df8129f2a0e8f091f76c68948d9ad1e8e2a9af84c5aafa0d67cbf8dabb2dfb3dee22b253452f5a436bc037b6e561b961", 0x2000, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0xfffffffffffffffe, 0x4, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x18, 0x0, 0x903ef02, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x0, 0x0, 0xfffc, 0xffff, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x7, 0x0, 0xfffffdfffffffffd, 0xfa11, 0x2}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x4b63, 0x3) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) socket$nl_route(0x10, 0x3, 0x0) 9.347573004s ago: executing program 5 (id=7847): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0xffffffff, 0x3ce, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x2bc, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x100, 0x0, r9}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x777e, 0xef92, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 6.829189409s ago: executing program 2 (id=7861): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000001d00)="c0eebb5299bdada31f26fffa4585ac99e025386d1af9425b2045d3b4687fe7700230631df00c8462a477bd46331fcc20f0e300a9fc246515d5aded0700af802894478610ee8dbcfc7e5b0e23811c6d09cf2f0741fea6fe6868b6f725af8adb655712a98bbb881921d9007aefd1d807e7468c2d748cd0e8a340c839ac7c485dcb9998dee5b17a343ecf20918aa3ad423da392701a11480bdf814615b80ba6892a6636d1246eea12337e6bb8403406b901786cf664551e6fec686fd9c7187da8131fd61257bb3f5b312be5000945df6091dab8b91137ef5e313f4176ab4fe81ecc4ef5ffa6ce03f2ea72579d7821440cd7b25474a70e3369d25b13574b093f5476aa63d42c903f0b37d76a016eafcfe712446439b1da852cd6257d38da6811e88751d8ebdef67085abb62491079c2fbc77e4405fd0519f8f9b97730db6f8969626c89b8c492c67b4c74db2baf16207edd3b6cb0f5c7525ee46c6b46771211b2d3290a16f56faf33388098703bf26129b6c19edeec45cabfe6a056c4419539505740f35a8098a9296a6b69976489688442b32acf739d37a05266265fd1f20b3c64d3fbf73feb9e95de70e06f3e36955cebd3a0e049846b13fea6af108b2b51566dfb619908d09635e8f0e2e4808c378624b269d793d13b3e62283bee82fde1419a5bc3fff72dd980b69a35e6b1b08bfcd62b38f073945dab068e4dc1ef57aae2eff5e8585719b670a6220cc8a77a6b3bdd518b3bd22d2247b537dad6a66b844641c6e3b7ca19755464b5e13fe8cd8661f12699fdde6bbdeac072d5360229536c77b59cddcc78d8935e565bb3af1ae7258d800a4597b4a9b6b951243debbd8d989adc1711da91a22c80e6dc6afacf7cdb50d58c80e8a4f3c4f54cedc3c6b3f0d839d9d7c0adfd1e10ea2e1c2b377391fb6f6580fdfa42df0a76b53a3a177f816b1d973b9bce5c79076838171887e3b8dbc967d470172a4b851c59e062ba36d45bb25d0e399c0215fd319ebe5e0d98bbdfcad6be48e1d5df1069f5848dbc5502044fbe304822bb747f1b54215498cdc2051bc382d5a11bbe8788db0b91777c291e9349884b37524570d2ed49d1c53fb33afa66c54eada8f0a5472d2fa94a3f54fc6ddab2b0a79622d56a7387eb6af4518d53ed4284cb490f586868dd4be4d74f6336d076846ace9adc81f5ecbcc8167a10e7ad0ce74eafbf65b91f8bd07433102e8033bd5d0eaba55d3430014b28e8bbfebce12fa23f82e47f9ee8ca5a118bde05407e644a705fad5e8057960e4d99bfb8567ddfc4c5c7e607da515ee79ac0ecf457e91e4590c0ce2b7f51d0d95037ee5e967a48215310bb5d73d38e8e3aa9968c04d37ec9dfb65d8415b4da1c651b608b2d413bfa8f66b20c9d98630ff336f91310be313ed18aff398bd38cf90714d954c76a7da3d56a5bd6d541b3f34693fa36d91", 0x400}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @local, 0x8}}, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806"], 0x0) stat64(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b24d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x7, 0xfffe}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x4004000) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009640)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/237, 0xed}, {&(0x7f0000000400)=""/28, 0x1c}], 0x7, &(0x7f0000000480)=""/209, 0xd1}, 0x1}, {{&(0x7f0000009880)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/107, 0x6b}, {&(0x7f0000000a80)=""/110, 0x6e}], 0xa, &(0x7f0000000b80)=""/85, 0x55}, 0xfffffffe}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/6, 0x6}], 0x4, &(0x7f00000042c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000ec0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/43, 0x2b}, {&(0x7f0000000f80)=""/130, 0x82}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/77, 0x4d}, {&(0x7f00000052c0)=""/4096, 0x1000}], 0x6, &(0x7f00000062c0)=""/151, 0x97}, 0x8}, {{&(0x7f0000006380)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000006400)=""/182, 0xb6}, {&(0x7f00000064c0)=""/4096, 0x1000}], 0x2, &(0x7f0000007500)=""/11, 0xb}, 0x2}, {{&(0x7f0000007540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007740)=[{&(0x7f00000075c0)=""/237, 0xed}, {&(0x7f00000076c0)=""/84, 0x54}], 0x2, &(0x7f0000007780)=""/250, 0xfa}, 0x1}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000007880)=""/247, 0xf7}, {&(0x7f0000007980)=""/184, 0xb8}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/229, 0xe5}, {&(0x7f0000008b40)=""/40, 0x28}, {&(0x7f0000008b80)=""/84, 0x54}, {&(0x7f0000008c00)=""/168, 0xa8}], 0x7, &(0x7f0000008d00)=""/183, 0xb7}, 0x7fffffff}, {{&(0x7f0000008dc0)=@can, 0x80, &(0x7f00000094c0)=[{&(0x7f0000008e40)=""/162, 0xa2}, {&(0x7f0000008f00)=""/243, 0xf3}, {&(0x7f0000009000)=""/215, 0xd7}, {&(0x7f0000009100)=""/114, 0x72}, {&(0x7f0000009180)=""/98, 0x62}, {&(0x7f0000009200)=""/116, 0x74}, {&(0x7f0000009280)=""/108, 0x6c}, {&(0x7f0000009300)=""/220, 0xdc}, {&(0x7f0000009400)=""/136, 0x88}], 0x9, &(0x7f0000009540)=""/207, 0xcf}, 0x5}], 0x8, 0x40, &(0x7f0000009780)) 6.389672827s ago: executing program 2 (id=7862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) 6.210805581s ago: executing program 5 (id=7863): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) r0 = socket$inet(0x2, 0x5, 0xce1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) 6.07631198s ago: executing program 2 (id=7864): r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4018641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.474766494s ago: executing program 3 (id=7867): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0x3185, 0x40, 0xfffffffe, 0xfff, 0xc5800000, 0x9}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000080)=0x20000000000101, 0x12) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x4e24, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 5.191278353s ago: executing program 3 (id=7868): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) unshare(0x600) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x147ae13, 0x200}, 0xc) 5.033101142s ago: executing program 3 (id=7869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x6}, 0x8) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x200, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r5, 0x200000) preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/80, 0x50}, {0x0}], 0x2, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x211a, 0x80, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r6, 0x0}) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) 4.679065453s ago: executing program 5 (id=7870): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x86f, 0x1}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406"], 0x0) recvmmsg(r6, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x1, 0x12300, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}}, 0x4800) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbd8be17d192210800458e00280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020002907800e7f21d19f041d783a092af8ee776724d166d5abb62a6b27fb574ee81ac8e305f22addf90bbba82a83fd84724cecdaf627c27fc8ed7d2dc47844986"], 0x0) 4.356662857s ago: executing program 4 (id=7872): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000001d00)="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", 0x400}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @local, 0x8}}, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806"], 0x0) stat64(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b24d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x7, 0xfffe}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x4004000) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009640)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/237, 0xed}, {&(0x7f0000000400)=""/28, 0x1c}], 0x7, &(0x7f0000000480)=""/209, 0xd1}, 0x1}, {{&(0x7f0000009880)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/107, 0x6b}, {&(0x7f0000000a80)=""/110, 0x6e}], 0xa, &(0x7f0000000b80)=""/85, 0x55}, 0xfffffffe}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/6, 0x6}], 0x4, &(0x7f00000042c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000ec0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/43, 0x2b}, {&(0x7f0000000f80)=""/130, 0x82}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/77, 0x4d}, {&(0x7f00000052c0)=""/4096, 0x1000}], 0x6, &(0x7f00000062c0)=""/151, 0x97}, 0x8}, {{&(0x7f0000006380)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000006400)=""/182, 0xb6}, {&(0x7f00000064c0)=""/4096, 0x1000}], 0x2, &(0x7f0000007500)=""/11, 0xb}, 0x2}, {{&(0x7f0000007540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007740)=[{&(0x7f00000075c0)=""/237, 0xed}, {&(0x7f00000076c0)=""/84, 0x54}], 0x2, &(0x7f0000007780)=""/250, 0xfa}, 0x1}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000007880)=""/247, 0xf7}, {&(0x7f0000007980)=""/184, 0xb8}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/229, 0xe5}, {&(0x7f0000008b40)=""/40, 0x28}, {&(0x7f0000008b80)=""/84, 0x54}, {&(0x7f0000008c00)=""/168, 0xa8}], 0x7, &(0x7f0000008d00)=""/183, 0xb7}, 0x7fffffff}, {{&(0x7f0000008dc0)=@can, 0x80, &(0x7f00000094c0)=[{&(0x7f0000008e40)=""/162, 0xa2}, {&(0x7f0000008f00)=""/243, 0xf3}, {&(0x7f0000009000)=""/215, 0xd7}, {&(0x7f0000009100)=""/114, 0x72}, {&(0x7f0000009180)=""/98, 0x62}, {&(0x7f0000009200)=""/116, 0x74}, {&(0x7f0000009280)=""/108, 0x6c}, {&(0x7f0000009300)=""/220, 0xdc}, {&(0x7f0000009400)=""/136, 0x88}], 0x9, &(0x7f0000009540)=""/207, 0xcf}, 0x5}], 0x8, 0x40, &(0x7f0000009780)) 4.352819726s ago: executing program 2 (id=7873): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0xffffffff, 0x3ce, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x2bc, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x100, 0x0, r9}, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x777e, 0xef92, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 4.077533369s ago: executing program 4 (id=7875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x4) r2 = io_uring_setup(0x7bc7, &(0x7f0000000080)={0x0, 0x5641, 0x1, 0x0, 0x280, 0x0, r1}) r3 = syz_io_uring_setup(0x58be, &(0x7f0000000380)={0x0, 0xab9e, 0x18, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000300)={0x8, 0x4000000000000000, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000440), 0xa0cc0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) ftruncate(r3, 0x7fff) syz_usb_connect$midi(0x2, 0xb5, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x1, 0x1, 0x4, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x1, 0x3, [{0xd, 0xf}, {0xb, 0x7}, {0x0, 0xbf}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0xfe, 0x8, [{0x7f, 0x2}, {0x0, 0x81}, {0x4}, {0x4, 0x6}, {0x8, 0x3}, {0x81, 0x8}, {0x1e, 0xfc}, {0x2, 0x8}], 0xfe}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x80, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0xbc}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x8}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xf0, 0x9, 0x1, {0x9, 0x25, 0x1, 0x5, "34a148c5c3"}}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x6, 0xc6, 0x5b, {0xa, 0x25, 0x1, 0x6, "8465dc3f36ee"}}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x6, 0x40, 0xd, {0xe, 0x25, 0x1, 0xa, "9e91b861063efc67db76"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0xb7, 0x7, 0x10, 0x5}, 0x113, &(0x7f0000000540)={0x5, 0xf, 0x113, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x0, 0x5}, @generic={0x86, 0x10, 0xb, "91d0d4410f3ca39885d8cb1121bd254e59354ba97b3ecc38e0bb432acb6ec7174fb0cb00469424e08c47bdfc4a89314dc55df46e9267be8c38468885c01c4243bea4437fc6eab73d2b0bc5d8b009fac57c63b2357c29bd60fb5418992851387c4ce3f7d6ff50775afd754b3fd98fb1f20c5f07c13adbd2ee1c564022c23041b56c9b12"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x5, 0x3}, @generic={0x70, 0x10, 0x3, "b5edaf7294ee5b1f2069c0f4a6aed029423b60b4828f9fe47bdcc609fcb74085603356feba422c1e8b8d13627105837cb42228433b5789063f40ac0e7561789259a1de304a6b444d01e31f5e5cb703719364b434d18664d517002b01786330383761daced17b4d268e1c44351a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x8, 0x4}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x180a}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "1b495d7f094968"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x420}}]}) 3.790043765s ago: executing program 1 (id=7876): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$null(0xffffff9c, &(0x7f00000002c0), 0x40, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) move_pages(0x0, 0xffffffffffffffc0, 0x0, &(0x7f0000000300), 0x0, 0x0) r12 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r12, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 3.509400939s ago: executing program 3 (id=7877): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0xa4ff) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r9, 0x80045104, &(0x7f0000001180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.835211679s ago: executing program 1 (id=7878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8, 0x700, 0x8, 0x7, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x9e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x20040000) 2.821481077s ago: executing program 1 (id=7879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b7030000010000"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9400000000010104000000000000000002000000240000001400018008000100e0000037110a8ca61d1d4d192972232e50730108000200ac1414000c0002800500010001000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x94}}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000020101010000000000000600000000000000188008000140000004"], 0x38}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x83d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x40044582, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)='wlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x6, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 2.702220805s ago: executing program 3 (id=7880): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) r0 = socket$inet(0x2, 0x5, 0xce1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) 2.316238334s ago: executing program 3 (id=7881): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000240), 0x0, 0x101040) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xa) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='\b') 2.128221214s ago: executing program 4 (id=7882): write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.061875424s ago: executing program 4 (id=7883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44004) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x3e6d983475ceba1b, 0x0, 0x0, {0x7}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x40000) (fail_nth: 9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 1.966592851s ago: executing program 1 (id=7884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5936aa661a580fdc65800294cf158be59c14e7ab86e388fced39ba13ea637e44063e", @ANYRESOCT=r1], 0x2a, 0xfffffffffffffff9) (async) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5936aa661a580fdc65800294cf158be59c14e7ab86e388fced39ba13ea637e44063e", @ANYRESOCT=r1], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffa) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x5a, 0x5, 0x8, 0x8001, 0x6, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e240000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000400000000000034000000000000000a0000000000000000000000804000000000000000000800000000000000000000000014000d006401010100"/128], 0xcc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000210001000000000004000000ac1e00010000000000000000000000006401010100000000000000000000000001000000000000060a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000002000000e8001100fe8000000000000000000000000000bbac1e0001000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000002b020000013520000200020000000000000000000000000000000001ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000007c6d0133040000ff34000002000a00ac1e0001000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000ff02000000000000000000000000000133040000043500000a00"], 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000210001000000000004000000ac1e00010000000000000000000000006401010100000000000000000000000001000000000000060a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000002000000e8001100fe8000000000000000000000000000bbac1e0001000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000002b020000013520000200020000000000000000000000000000000001ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000007c6d0133040000ff34000002000a00ac1e0001000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000ff02000000000000000000000000000133040000043500000a00"], 0x138}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$xdp(r4, 0x0, 0x5880) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESDEC=r1], 0x20}}, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) 1.55493979s ago: executing program 4 (id=7885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @private2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x700, 0xa8, 0x7, 0x7f, {{0x46, 0x4, 0x0, 0x8, 0x118, 0x65, 0x0, 0x40, 0x4, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x20, 0x61, 0x0, 0xd, [0x81, 0x7476, 0x0, 0x1ff, 0x90, 0x4, 0x7]}, @cipso={0x86, 0x31, 0x2, [{0x1, 0xb, "244ca52f84e93ccf82"}, {0x6, 0x5, "ad2533"}, {0x5, 0x7, "402ad83813"}, {0x5, 0x7, "2e5def7253"}, {0x0, 0x3, "be"}, {0x0, 0xa, "0f7567dac1447465"}]}, @ssrr={0x89, 0x13, 0x17, [@broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}, @rr={0x7, 0x17, 0xda, [@multicast2, @multicast1, @remote, @loopback, @broadcast]}, @generic={0x86, 0xd, "b090752261a8288ccfbc49"}, @rr={0x7, 0x27, 0xb3, [@multicast2, @local, @broadcast, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback]}, @cipso={0x86, 0x53, 0x3, [{0x7, 0xc, "b55b7bbb4b9b66206499"}, {0x1, 0xe, "6e5ca5c3b09444bb73328700"}, {0x6, 0xe, "ba53f83df5c2055f5dffdc52"}, {0x0, 0x8, "df4f0ffa1185"}, {0x1, 0xd, "0cf7cd75d18c4381ec78c4"}, {0x3, 0x4, 'o9'}, {0x0, 0xc, "7b79a1b933658bda2093"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@dellink={0x54, 0x11, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x40000, 0x1820}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0xbdc}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x4}]}, @IFLA_PHYS_PORT_ID={0x17, 0x22, "4f21d0e4439ba419b6db97dd58210c6a18e17c"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x20000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc25c4111, &(0x7f00000003c0)={0x7, [[0x0, 0x1, 0x7fff, 0x5261, 0x3ff, 0x5, 0x7fffffff, 0x2], [0x2, 0x80, 0x3, 0xfff, 0x8001, 0x2c760a4f, 0xded80000, 0x3], [0x6, 0x7, 0x6, 0x8, 0x0, 0xc5, 0xb4b6]], '\x00', [{0x6, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x409, 0x1ff, 0x1, 0x1, 0x1}, {0xa334, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x9, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x1b, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1}, {0xfffffff9, 0x75, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x5}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b986dd604dd708001c060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700240d5fb78000003033502040000004ffaa922257e774ee62253f047b9f47e9299a954d8a4bd0d843cb248de0479023bd83b0164bbd472c6551bf7336a44016ab710ba50b2d65767d125e27f729d619c77a8c90300d931e470e1ce60fcff2f000000000000102c219ca0ea0008e7ea3ab9b7c095000000000000"], 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000a000700726f75746500000050000000060a010400000000000000000100000008000b4000000000280007405f0fc28124788efdf5956d49237ad4aff239a925a1602b818b5f64ff8d8b59efda6ef9810900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) 1.43727119s ago: executing program 1 (id=7886): socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x680, 0x1c80}, [@IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x28}}, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x104, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x24}}]}, 0x104}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}]}, 0x24}}, 0x40) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.375591319s ago: executing program 5 (id=7887): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300180004000000040000000a10000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) 1.235121647s ago: executing program 5 (id=7888): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f", 0x82}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000600)=""/193, 0xc1}], 0x2}, 0x80) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x80800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x4, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$FUSE_NOTIFY_STORE(r8, 0x0, 0x32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, r9}}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.233747812s ago: executing program 2 (id=7889): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) sendmmsg$unix(r0, &(0x7f000000f700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18}}], 0x28, 0x8000010}}], 0x1, 0x0) (fail_nth: 5) 543.30214ms ago: executing program 1 (id=7890): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x8000000, 0x81, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r4, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r5, 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200000a0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8009, 0x2) read(r6, &(0x7f00000006c0)=""/101, 0x65) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='permprofile && \r:', @ANYRES64], 0xff) 98.165592ms ago: executing program 4 (id=7891): r0 = socket$inet(0x2, 0x5, 0xce1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) 0s ago: executing program 2 (id=7892): r0 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x9) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x101) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x101) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x0, 'netdevsim0\x00', {0x4}, 0x9}) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) kernel console output (not intermixed with test programs): T8177] [ 1626.653907][ T8177] dump_stack_lvl+0xe8/0x150 [ 1626.653938][ T8177] should_fail_ex+0x412/0x560 [ 1626.653969][ T8177] should_failslab+0xa8/0x100 [ 1626.653993][ T8177] __kmalloc_noprof+0xe8/0x760 [ 1626.654013][ T8177] ? __keyctl_dh_compute+0x6b4/0xd10 [ 1626.654030][ T8177] ? sg_init_one+0xf5/0x1c0 [ 1626.654056][ T8177] __keyctl_dh_compute+0x6b4/0xd10 [ 1626.654076][ T8177] ? __lock_acquire+0x6b5/0x2cf0 [ 1626.654102][ T8177] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1626.654143][ T8177] ? compat_keyctl_dh_compute+0x186/0x220 [ 1626.654172][ T8177] compat_keyctl_dh_compute+0x19d/0x220 [ 1626.654211][ T8177] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 1626.654245][ T8177] ? fput+0xa0/0xd0 [ 1626.654278][ T8177] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 1626.654306][ T8177] __do_fast_syscall_32+0x20d/0x640 [ 1626.654331][ T8177] ? do_fast_syscall_32+0x33/0x70 [ 1626.654351][ T8177] ? asm_int80_emulation+0x1a/0x20 [ 1626.654369][ T8177] ? do_int80_emulation+0x274/0x4d0 [ 1626.654389][ T8177] ? trace_irq_disable+0x3b/0x150 [ 1626.654419][ T8177] do_fast_syscall_32+0x33/0x70 [ 1626.654442][ T8177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1626.654464][ T8177] RIP: 0023:0xf7fa4f6c [ 1626.654480][ T8177] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1626.654496][ T8177] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1626.654516][ T8177] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000800 [ 1626.654530][ T8177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000280 [ 1626.654541][ T8177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1626.654551][ T8177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1626.654562][ T8177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1626.654589][ T8177] [ 1626.696436][ T8179] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7383'. [ 1626.812126][ T29] audit: type=1326 audit(1774085352.816:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1626.832100][ T8148] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1626.910426][ T29] audit: type=1326 audit(1774085352.816:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1626.940438][ T29] audit: type=1326 audit(1774085352.816:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1626.986945][ T29] audit: type=1326 audit(1774085352.816:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1627.011864][ T8148] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1627.068678][ T29] audit: type=1326 audit(1774085352.816:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1627.148465][ T29] audit: type=1326 audit(1774085352.816:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.7379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1627.696494][ T8192] syzkaller1: entered promiscuous mode [ 1627.706637][ T8192] syzkaller1: entered allmulticast mode [ 1628.155805][ T8218] FAULT_INJECTION: forcing a failure. [ 1628.155805][ T8218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.249407][ T8218] CPU: 0 UID: 0 PID: 8218 Comm: syz.1.7395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1628.249438][ T8218] Tainted: [L]=SOFTLOCKUP [ 1628.249444][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1628.249456][ T8218] Call Trace: [ 1628.249464][ T8218] [ 1628.249473][ T8218] dump_stack_lvl+0xe8/0x150 [ 1628.249504][ T8218] should_fail_ex+0x412/0x560 [ 1628.249537][ T8218] _copy_from_user+0x2d/0xb0 [ 1628.249567][ T8218] get_compat_msghdr+0xb3/0x4c0 [ 1628.249587][ T8218] ? __lock_acquire+0x6b5/0x2cf0 [ 1628.249616][ T8218] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1628.249638][ T8218] ? kstrtoull+0x12f/0x1d0 [ 1628.249668][ T8218] ___sys_sendmsg+0x201/0x360 [ 1628.249695][ T8218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.249717][ T8218] ? get_pid_task+0x20/0x1f0 [ 1628.249735][ T8218] ? get_pid_task+0x20/0x1f0 [ 1628.249750][ T8218] ? get_pid_task+0x20/0x1f0 [ 1628.249791][ T8218] ? __fget_files+0x2a/0x420 [ 1628.249817][ T8218] ? __fget_files+0x3a0/0x420 [ 1628.249853][ T8218] __sys_sendmsg+0x183/0x260 [ 1628.249876][ T8218] ? __pfx___sys_sendmsg+0x10/0x10 [ 1628.249916][ T8218] __do_fast_syscall_32+0x20d/0x640 [ 1628.249941][ T8218] ? do_fast_syscall_32+0x33/0x70 [ 1628.249961][ T8218] ? asm_int80_emulation+0x1a/0x20 [ 1628.249979][ T8218] ? do_int80_emulation+0x274/0x4d0 [ 1628.250001][ T8218] ? trace_irq_disable+0x3b/0x150 [ 1628.250031][ T8218] do_fast_syscall_32+0x33/0x70 [ 1628.250054][ T8218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1628.250075][ T8218] RIP: 0023:0xf709ef6c [ 1628.250093][ T8218] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1628.250111][ T8218] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1628.250129][ T8218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 1628.250142][ T8218] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1628.250153][ T8218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1628.250164][ T8218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1628.250176][ T8218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1628.250200][ T8218] [ 1628.940195][ T8232] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7399'. [ 1629.732320][ T8247] syzkaller1: entered promiscuous mode [ 1629.739182][ T8247] syzkaller1: entered allmulticast mode [ 1630.291335][ T8266] netlink: 122 bytes leftover after parsing attributes in process `syz.2.7408'. [ 1630.363797][ T8282] FAULT_INJECTION: forcing a failure. [ 1630.363797][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.379328][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.2.7412 Tainted: G L syzkaller #0 PREEMPT(full) [ 1630.379359][ T8282] Tainted: [L]=SOFTLOCKUP [ 1630.379367][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1630.379385][ T8282] Call Trace: [ 1630.379394][ T8282] [ 1630.379403][ T8282] dump_stack_lvl+0xe8/0x150 [ 1630.379437][ T8282] should_fail_ex+0x412/0x560 [ 1630.379470][ T8282] should_failslab+0xa8/0x100 [ 1630.379497][ T8282] __kmalloc_cache_noprof+0x88/0x660 [ 1630.379520][ T8282] ? nft_netdev_hook_alloc+0x5a/0x570 [ 1630.379552][ T8282] nft_netdev_hook_alloc+0x5a/0x570 [ 1630.379579][ T8282] ? __nla_parse+0x40/0x60 [ 1630.379603][ T8282] nft_chain_parse_hook+0x98a/0x13f0 [ 1630.379641][ T8282] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 1630.379671][ T8282] ? nft_pernet+0x23/0x240 [ 1630.379703][ T8282] nf_tables_newchain+0x102e/0x2890 [ 1630.379744][ T8282] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1630.379789][ T8282] ? nft_trans_table_add+0x230/0x430 [ 1630.379819][ T8282] ? nfnl_pernet+0x23/0x240 [ 1630.379858][ T8282] ? __nla_parse+0x40/0x60 [ 1630.379881][ T8282] nfnetlink_rcv+0x1240/0x27b0 [ 1630.379938][ T8282] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1630.379977][ T8282] ? ref_tracker_free+0x693/0x840 [ 1630.380028][ T8282] ? __netlink_deliver_tap+0x807/0x850 [ 1630.380057][ T8282] ? netlink_deliver_tap+0x2e/0x1b0 [ 1630.380104][ T8282] netlink_unicast+0x80f/0x9b0 [ 1630.380134][ T8282] ? __pfx_netlink_unicast+0x10/0x10 [ 1630.380159][ T8282] ? netlink_sendmsg+0x650/0xb40 [ 1630.380182][ T8282] ? skb_put+0x11b/0x210 [ 1630.380206][ T8282] netlink_sendmsg+0x813/0xb40 [ 1630.380243][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1630.380275][ T8282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1630.380305][ T8282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1630.380330][ T8282] ____sys_sendmsg+0x972/0x9f0 [ 1630.380361][ T8282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1630.380395][ T8282] ? kstrtoull+0x12f/0x1d0 [ 1630.380429][ T8282] ___sys_sendmsg+0x2a5/0x360 [ 1630.380455][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 1630.380479][ T8282] ? get_pid_task+0x20/0x1f0 [ 1630.380497][ T8282] ? get_pid_task+0x20/0x1f0 [ 1630.380512][ T8282] ? get_pid_task+0x20/0x1f0 [ 1630.380555][ T8282] ? __pfx_vfs_write+0x10/0x10 [ 1630.380582][ T8282] __sys_sendmsg+0x183/0x260 [ 1630.380607][ T8282] ? __pfx___sys_sendmsg+0x10/0x10 [ 1630.380649][ T8282] __do_fast_syscall_32+0x20d/0x640 [ 1630.380675][ T8282] ? do_fast_syscall_32+0x33/0x70 [ 1630.380696][ T8282] ? asm_int80_emulation+0x1a/0x20 [ 1630.380714][ T8282] ? do_int80_emulation+0x274/0x4d0 [ 1630.380735][ T8282] ? trace_irq_disable+0x3b/0x150 [ 1630.380766][ T8282] do_fast_syscall_32+0x33/0x70 [ 1630.380789][ T8282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1630.380812][ T8282] RIP: 0023:0xf700ef6c [ 1630.380831][ T8282] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1630.380847][ T8282] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1630.380867][ T8282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 1630.380881][ T8282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1630.380892][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1630.380904][ T8282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1630.380916][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1630.380943][ T8282] [ 1631.107922][ T8287] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1631.346582][ T8296] syzkaller1: entered promiscuous mode [ 1631.365278][ T8296] syzkaller1: entered allmulticast mode [ 1632.220220][T22048] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1632.373923][T22048] usb 3-1: config 0 has no interfaces? [ 1632.381909][T22048] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1632.391274][T22048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.399273][T22048] usb 3-1: Product: syz [ 1632.403905][T22048] usb 3-1: Manufacturer: syz [ 1632.408519][T22048] usb 3-1: SerialNumber: syz [ 1632.416681][T22048] usb 3-1: config 0 descriptor?? [ 1632.639906][T22053] usb 3-1: USB disconnect, device number 127 [ 1633.046905][ T8348] syzkaller0: entered promiscuous mode [ 1633.060237][ T8348] syzkaller0: entered allmulticast mode [ 1633.911018][ T8370] syzkaller1: entered promiscuous mode [ 1633.916775][ T8370] syzkaller1: entered allmulticast mode [ 1634.717086][ T8391] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1635.040507][T22053] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1635.120451][T22054] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1635.170220][T22053] usb 3-1: device descriptor read/64, error -71 [ 1635.272181][T22054] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1635.284473][T22054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1635.295709][T22054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1635.305766][T22054] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1635.318875][T22054] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1635.327999][T22054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.338034][T22054] usb 2-1: config 0 descriptor?? [ 1635.410247][T22053] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1635.540275][T22053] usb 3-1: device descriptor read/64, error -71 [ 1635.650478][T22053] usb usb3-port1: attempt power cycle [ 1635.718555][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1635.731158][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1636.001204][T22053] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1636.031413][T22053] usb 3-1: device descriptor read/8, error -71 [ 1636.100622][ T8429] FAULT_INJECTION: forcing a failure. [ 1636.100622][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.144739][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.0.7442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.144770][ T8429] Tainted: [L]=SOFTLOCKUP [ 1636.144778][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1636.144789][ T8429] Call Trace: [ 1636.144796][ T8429] [ 1636.144805][ T8429] dump_stack_lvl+0xe8/0x150 [ 1636.144839][ T8429] should_fail_ex+0x412/0x560 [ 1636.144872][ T8429] _copy_from_iter+0x1d3/0x1670 [ 1636.144905][ T8429] ? rcu_is_watching+0x15/0xb0 [ 1636.144937][ T8429] ? __pfx__copy_from_iter+0x10/0x10 [ 1636.144972][ T8429] ? netlink_sendmsg+0x650/0xb40 [ 1636.144999][ T8429] ? skb_put+0x11b/0x210 [ 1636.145022][ T8429] netlink_sendmsg+0x6c0/0xb40 [ 1636.145056][ T8429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1636.145087][ T8429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1636.145117][ T8429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1636.145142][ T8429] ____sys_sendmsg+0x972/0x9f0 [ 1636.145171][ T8429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1636.145197][ T8429] ? kstrtoull+0x12f/0x1d0 [ 1636.145229][ T8429] ___sys_sendmsg+0x2a5/0x360 [ 1636.145256][ T8429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1636.145279][ T8429] ? get_pid_task+0x20/0x1f0 [ 1636.145298][ T8429] ? get_pid_task+0x20/0x1f0 [ 1636.145321][ T8429] ? get_pid_task+0x20/0x1f0 [ 1636.145362][ T8429] ? __fget_files+0x2a/0x420 [ 1636.145390][ T8429] ? __fget_files+0x3a0/0x420 [ 1636.145425][ T8429] __sys_sendmsg+0x183/0x260 [ 1636.145448][ T8429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1636.145484][ T8429] __do_fast_syscall_32+0x20d/0x640 [ 1636.145507][ T8429] ? do_fast_syscall_32+0x33/0x70 [ 1636.145526][ T8429] ? asm_int80_emulation+0x1a/0x20 [ 1636.145545][ T8429] ? do_int80_emulation+0x274/0x4d0 [ 1636.145565][ T8429] ? trace_irq_disable+0x3b/0x150 [ 1636.145596][ T8429] do_fast_syscall_32+0x33/0x70 [ 1636.145618][ T8429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1636.145640][ T8429] RIP: 0023:0xf7f65f6c [ 1636.145658][ T8429] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1636.145675][ T8429] RSP: 002b:00000000f52ff50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1636.145695][ T8429] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 1636.145709][ T8429] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 1636.145721][ T8429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1636.145732][ T8429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1636.145743][ T8429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1636.145768][ T8429] [ 1636.300290][T22053] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1636.541716][T22053] usb 3-1: device descriptor read/8, error -71 [ 1636.664514][T22053] usb usb3-port1: unable to enumerate USB device [ 1637.026886][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7447'. [ 1637.180226][T22053] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1637.332074][T22053] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1637.342931][T22053] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1637.359409][T22053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1637.383170][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.397540][T22053] usb 4-1: Product: syz [ 1637.405260][T22053] usb 4-1: Manufacturer: syz [ 1637.417836][T22053] usb 4-1: SerialNumber: syz [ 1637.651000][T22053] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1637.673340][T22053] usb 4-1: USB disconnect, device number 2 [ 1637.798259][ C1] blk_print_req_error: 131 callbacks suppressed [ 1637.798278][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.814298][ C1] buffer_io_error: 130 callbacks suppressed [ 1637.814316][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1637.828450][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.838054][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 1637.845963][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.855531][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 1637.863425][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.872993][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 1637.880866][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.890430][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 1637.898288][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.907838][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 1637.915717][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.925285][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 1637.939717][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.949341][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1637.957257][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.966866][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 1637.974840][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.984429][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 1638.010792][ T5194] ldm_validate_partition_table(): Disk read failed. [ 1638.025360][ T8473] netlink: 'syz.4.7449': attribute type 1 has an invalid length. [ 1638.053585][ T8475] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1638.095600][ T5194] Dev loop6: unable to read RDB block 0 [ 1638.135052][T22054] usbhid 2-1:0.0: can't add hid device: -71 [ 1638.137504][ T8508] netlink: 'syz.4.7449': attribute type 1 has an invalid length. [ 1638.142952][T22054] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1638.161974][T22054] usb 2-1: USB disconnect, device number 11 [ 1638.176628][ T5194] loop6: unable to read partition table [ 1638.207440][ T5194] loop6: partition table beyond EOD, truncated [ 1638.215054][ T8473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1638.230372][T22053] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1638.238048][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1638.281920][ T8473] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1638.366231][ T8473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1638.376359][ T8473] bond1: (slave bond2): Enslaving as an active interface with a down link [ 1638.385679][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1638.394975][ T8508] bond1: entered promiscuous mode [ 1638.400026][ T8508] bond1: entered allmulticast mode [ 1638.427106][T22053] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1638.437419][T22053] usb 4-1: config 16 has an invalid descriptor of length 114, skipping remainder of the config [ 1638.464798][T22053] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1638.475405][T22053] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1638.486668][T22053] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24939, setting to 64 [ 1638.498074][T22053] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1638.538471][T22053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.579169][ T8467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1638.796316][T22053] usb 4-1: usb_control_msg returned -71 [ 1638.805926][T22053] usbtmc 4-1:16.0: can't read capabilities [ 1638.840272][T22053] usb 4-1: USB disconnect, device number 3 [ 1639.490358][T22054] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1639.590432][T22048] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1639.650192][T22054] usb 5-1: Using ep0 maxpacket: 32 [ 1639.677679][T22054] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.699495][T22054] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1639.742063][T22048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.743189][T22054] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1639.764685][T22054] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1639.781240][T22048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.781510][T22054] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1639.800699][T22054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.808706][T22054] usb 5-1: Product: syz [ 1639.813683][T22054] usb 5-1: Manufacturer: syz [ 1639.818288][T22054] usb 5-1: SerialNumber: syz [ 1639.823223][T22048] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1639.848318][T22048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.856668][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1639.872908][T22054] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input132 [ 1639.874768][T22048] usb 3-1: config 0 descriptor?? [ 1639.942279][ T8622] FAULT_INJECTION: forcing a failure. [ 1639.942279][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.970304][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.1.7464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.970334][ T8622] Tainted: [L]=SOFTLOCKUP [ 1639.970342][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1639.970354][ T8622] Call Trace: [ 1639.970362][ T8622] [ 1639.970374][ T8622] dump_stack_lvl+0xe8/0x150 [ 1639.970406][ T8622] should_fail_ex+0x412/0x560 [ 1639.970437][ T8622] should_failslab+0xa8/0x100 [ 1639.970463][ T8622] __kmalloc_noprof+0xe8/0x760 [ 1639.970486][ T8622] ? raw_ioctl+0x210e/0x41c0 [ 1639.970597][ T8622] raw_ioctl+0x210e/0x41c0 [ 1639.970622][ T8622] ? tomoyo_path_number_perm+0x219/0x630 [ 1639.970648][ T8622] ? tomoyo_path_number_perm+0x219/0x630 [ 1639.970676][ T8622] ? do_vfs_ioctl+0x1166/0x1530 [ 1639.970701][ T8622] ? __pfx_raw_ioctl+0x10/0x10 [ 1639.970754][ T8622] ? __fget_files+0x2a/0x420 [ 1639.970785][ T8622] ? __fget_files+0x3a0/0x420 [ 1639.970811][ T8622] ? __fget_files+0x2a/0x420 [ 1639.970840][ T8622] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1639.970867][ T8622] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1639.970893][ T8622] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1639.970918][ T8622] ? __fget_files+0x3a0/0x420 [ 1639.970958][ T8622] ? fput+0xa0/0xd0 [ 1639.970983][ T8622] ? ksys_write+0x242/0x270 [ 1639.971015][ T8622] __do_fast_syscall_32+0x20d/0x640 [ 1639.971039][ T8622] ? do_fast_syscall_32+0x33/0x70 [ 1639.971060][ T8622] ? asm_int80_emulation+0x1a/0x20 [ 1639.971078][ T8622] ? do_int80_emulation+0x274/0x4d0 [ 1639.971098][ T8622] ? trace_irq_disable+0x3b/0x150 [ 1639.971129][ T8622] do_fast_syscall_32+0x33/0x70 [ 1639.971151][ T8622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1639.971173][ T8622] RIP: 0023:0xf709ef6c [ 1639.971191][ T8622] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1639.971207][ T8622] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1639.971228][ T8622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085508 [ 1639.971241][ T8622] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1639.971253][ T8622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1639.971264][ T8622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1639.971276][ T8622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1639.971302][ T8622] [ 1640.250370][T22054] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1640.258725][T22054] (id 0x00) [ 1640.320218][T22054] rc_core: IR keymap rc-imon-pad not found [ 1640.326072][T22054] Registered IR keymap rc-empty [ 1640.331489][T22054] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1640.341815][T22054] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1640.401007][ T8638] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7465'. [ 1640.449222][T22048] sony 0003:1345:3008.0053: unbalanced collection at end of report description [ 1640.460399][T22048] sony 0003:1345:3008.0053: parse failed [ 1640.461764][T22054] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1640.473985][T22048] sony 0003:1345:3008.0053: probe with driver sony failed with error -22 [ 1640.479571][T22054] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input133 [ 1640.500631][T22054] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:33> initialized [ 1640.701036][T22054] usb 3-1: USB disconnect, device number 6 [ 1641.325973][ T8669] syzkaller1: entered promiscuous mode [ 1641.333552][ T8669] syzkaller1: entered allmulticast mode [ 1641.740241][T22048] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1641.750308][T22054] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1641.806390][ T8690] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1641.873543][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7474'. [ 1641.892225][T22048] usb 3-1: Using ep0 maxpacket: 8 [ 1641.895084][ T8694] futex_wake_op: syz.1.7474 tries to shift op by 36; fix this program [ 1641.906937][ T8693] futex_wake_op: syz.1.7474 tries to shift op by 36; fix this program [ 1641.910072][T22048] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1641.916675][T22054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.925689][T22048] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1641.938968][T22054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.952989][T22048] usb 3-1: Product: syz [ 1641.954646][T22054] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1641.962526][T22048] usb 3-1: Manufacturer: syz [ 1641.967794][T22054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.972329][T22048] usb 3-1: SerialNumber: syz [ 1641.984288][T22054] usb 4-1: config 0 descriptor?? [ 1641.994162][T22048] usb 3-1: config 0 descriptor?? [ 1642.109544][ T8691] imon:send_packet: packet tx failed (-71) [ 1642.109853][T22053] usb 5-1: USB disconnect, device number 33 [ 1642.132810][ T8691] imon:vfd_write: send packet #4 failed [ 1642.408653][T22054] hid_parser_main: 3 callbacks suppressed [ 1642.408675][T22054] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x2 [ 1642.409463][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.425058][T22054] cp2112 0003:10C4:EA90.0054: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1642.435642][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.590287][T22053] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1642.620086][T22054] cp2112 0003:10C4:EA90.0054: error requesting version [ 1642.632422][T22054] cp2112 0003:10C4:EA90.0054: probe with driver cp2112 failed with error -71 [ 1642.647596][T22054] usb 4-1: USB disconnect, device number 4 [ 1643.023284][ T8757] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1643.674397][ T8775] syzkaller1: entered promiscuous mode [ 1643.694644][ T8775] syzkaller1: entered allmulticast mode [ 1644.323804][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1644.674825][T22048] usb 3-1: USB disconnect, device number 7 [ 1644.722054][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.967158][ T8828] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7493'. [ 1645.602133][T22053] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1645.772275][T22053] usb 4-1: Using ep0 maxpacket: 8 [ 1645.779649][T22053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.790439][T22053] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1645.805950][T22053] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1645.815886][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.824256][T22053] usb 4-1: Product: syz [ 1645.828658][T22053] usb 4-1: Manufacturer: syz [ 1645.833943][T22053] usb 4-1: SerialNumber: syz [ 1645.844689][T22053] usb 4-1: config 0 descriptor?? [ 1646.212119][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.249406][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.616454][ T8877] FAULT_INJECTION: forcing a failure. [ 1646.616454][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.654724][ T8877] CPU: 1 UID: 0 PID: 8877 Comm: syz.4.7503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.654755][ T8877] Tainted: [L]=SOFTLOCKUP [ 1646.654763][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1646.654775][ T8877] Call Trace: [ 1646.654783][ T8877] [ 1646.654792][ T8877] dump_stack_lvl+0xe8/0x150 [ 1646.654833][ T8877] should_fail_ex+0x412/0x560 [ 1646.654865][ T8877] should_failslab+0xa8/0x100 [ 1646.654891][ T8877] __kmalloc_noprof+0xe8/0x760 [ 1646.654914][ T8877] ? kernfs_fop_write_iter+0x158/0x540 [ 1646.654942][ T8877] kernfs_fop_write_iter+0x158/0x540 [ 1646.654971][ T8877] vfs_write+0x61d/0xb90 [ 1646.655000][ T8877] ? __pfx_vfs_write+0x10/0x10 [ 1646.655031][ T8877] ? __fget_files+0x2a/0x420 [ 1646.655067][ T8877] ksys_write+0x150/0x270 [ 1646.655091][ T8877] ? __pfx_ksys_write+0x10/0x10 [ 1646.655122][ T8877] __do_fast_syscall_32+0x20d/0x640 [ 1646.655147][ T8877] ? do_fast_syscall_32+0x33/0x70 [ 1646.655168][ T8877] ? asm_int80_emulation+0x1a/0x20 [ 1646.655186][ T8877] ? do_int80_emulation+0x274/0x4d0 [ 1646.655207][ T8877] ? trace_irq_disable+0x3b/0x150 [ 1646.655239][ T8877] do_fast_syscall_32+0x33/0x70 [ 1646.655261][ T8877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1646.655284][ T8877] RIP: 0023:0xf7fa4f6c [ 1646.655302][ T8877] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1646.655319][ T8877] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1646.655340][ T8877] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000080 [ 1646.655354][ T8877] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 1646.655366][ T8877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1646.655377][ T8877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1646.655389][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1646.655418][ T8877] [ 1646.995497][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1647.032480][ T8890] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7507'. [ 1647.170379][T22048] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1647.320224][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1647.327210][T22048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.339541][T22048] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1647.348679][T22048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.357237][T22048] usb 2-1: Product: syz [ 1647.361477][T22048] usb 2-1: Manufacturer: syz [ 1647.366061][T22048] usb 2-1: SerialNumber: syz [ 1647.373672][T22048] usb 2-1: config 0 descriptor?? [ 1647.381377][T22048] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1647.540245][T22048] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1647.647869][T22053] usb 2-1: USB disconnect, device number 12 [ 1647.711940][T22048] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1647.733013][T22048] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 1647.746027][T22048] usb 5-1: config 3 has no interface number 0 [ 1647.753707][T22048] usb 5-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1647.771177][T22048] usb 5-1: config 3 interface 4 has no altsetting 0 [ 1647.784738][T22048] usb 5-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 1647.798373][T22048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.815617][T22048] usb 5-1: Product: syz [ 1647.822123][T22048] usb 5-1: Manufacturer: syz [ 1647.830057][T22048] usb 5-1: SerialNumber: syz [ 1648.050550][T22048] radio-si470x 5-1:3.4: could not find interrupt in endpoint [ 1648.058165][T22048] radio-si470x 5-1:3.4: probe with driver radio-si470x failed with error -5 [ 1648.068338][T22048] usbhid 5-1:3.4: couldn't find an input interrupt endpoint [ 1648.084746][T22048] usb 5-1: USB disconnect, device number 35 [ 1648.100729][T22054] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1648.385251][T22530] usb 4-1: USB disconnect, device number 5 [ 1648.421800][T22054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 771, setting to 64 [ 1648.445569][T22054] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1648.483056][T22054] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1648.681867][T22054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.715007][T22054] usb 3-1: config 0 descriptor?? [ 1649.792136][ T8979] fuse: Bad value for 'rootmode' [ 1649.870825][ T8981] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1650.270334][T22530] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1650.424848][T22530] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.444543][T22530] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1650.463932][T22530] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1650.476111][T22530] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1650.485762][T22530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.504991][ T8991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1650.525426][ T9008] IPVS: length: 4096 != 8 [ 1650.770345][T22048] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1650.920315][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1650.928016][T22048] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1650.938254][T22054] usbhid 3-1:0.0: can't add hid device: -71 [ 1650.944391][T22054] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1650.956349][T22048] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1650.958727][T22054] usb 3-1: USB disconnect, device number 8 [ 1650.979756][T22048] usb 2-1: can't read configurations, error -61 [ 1651.121540][T22048] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1651.280212][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1651.285866][T22048] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1651.295014][T22048] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1651.302669][T22048] usb 2-1: can't read configurations, error -61 [ 1651.309353][T22048] usb usb2-port1: attempt power cycle [ 1651.433440][T22054] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1651.600380][T22054] usb 3-1: Using ep0 maxpacket: 8 [ 1651.608233][T22054] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1651.617637][T22054] usb 3-1: config 6 has an invalid interface number: 236 but max is 0 [ 1651.626164][T22054] usb 3-1: config 6 has no interface number 0 [ 1651.632620][T22054] usb 3-1: config 6 interface 236 has no altsetting 0 [ 1651.642563][T22054] usb 3-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 1651.650260][T22048] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1651.659270][T22054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.668251][T22054] usb 3-1: Product: syz [ 1651.674279][T22054] usb 3-1: Manufacturer: syz [ 1651.679175][T22054] usb 3-1: SerialNumber: syz [ 1651.680859][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1651.698180][T22048] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1651.721654][T22048] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1651.729257][T22048] usb 2-1: can't read configurations, error -61 [ 1651.870546][T22048] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1651.893412][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1651.914501][T22048] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1651.929986][T22054] usb 3-1: USB disconnect, device number 9 [ 1651.964529][T22048] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1651.977553][T22048] usb 2-1: can't read configurations, error -61 [ 1652.033697][T22048] usb usb2-port1: unable to enumerate USB device [ 1652.648291][T22530] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1652.685457][T22530] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input134 [ 1652.773828][T22530] usb 5-1: USB disconnect, device number 36 [ 1652.779821][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1652.986033][ T9090] erspan0: left allmulticast mode [ 1652.993799][ T9090] bridge3: port 1(erspan0) entered disabled state [ 1653.020524][ T9090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1653.411740][ T9104] syz.0.7539 (9104): drop_caches: 2 [ 1653.440010][T22054] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1653.479348][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7541'. [ 1653.643365][T22054] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1653.669056][T22054] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1653.708086][T22054] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1653.733323][T22054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.755627][T22054] usb 5-1: Product: syz [ 1653.765526][T22054] usb 5-1: Manufacturer: syz [ 1653.781882][T22054] usb 5-1: SerialNumber: syz [ 1653.812115][T22054] rtl8150 5-1:1.0: couldn't find required endpoints [ 1653.830450][T22054] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1653.895337][ T9121] netlink: 'syz.1.7542': attribute type 13 has an invalid length. [ 1654.058289][T22054] usb 5-1: USB disconnect, device number 37 [ 1654.723329][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7547'. [ 1654.828985][ T9151] kernel read not supported for file /sg0 (pid: 9151 comm: syz.4.7548) [ 1655.340667][T22059] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1655.531708][T22059] usb 4-1: Using ep0 maxpacket: 32 [ 1655.539015][T22059] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1655.548125][T22059] usb 4-1: config 2 has an invalid interface number: 147 but max is 0 [ 1655.556461][T22059] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.567074][T22059] usb 4-1: config 2 has no interface number 0 [ 1655.574214][T22059] usb 4-1: config 2 interface 147 has no altsetting 0 [ 1655.583894][T22059] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 1655.593946][T22059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.602073][T22059] usb 4-1: Product: syz [ 1655.606447][T22059] usb 4-1: Manufacturer: syz [ 1655.612136][T22059] usb 4-1: SerialNumber: syz [ 1655.723869][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7553'. [ 1655.732985][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7553'. [ 1655.825600][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.835882][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.866069][T22059] ims_pcu 4-1:2.147: Missing CDC union descriptor [ 1655.893136][T22059] ims_pcu 4-1:2.147: probe with driver ims_pcu failed with error -22 [ 1655.923513][T22059] usb 4-1: USB disconnect, device number 6 [ 1656.333152][ T9208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7558'. [ 1657.075799][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.143117][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.215661][ T9227] FAULT_INJECTION: forcing a failure. [ 1657.215661][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.259220][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.1.7562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.259252][ T9227] Tainted: [L]=SOFTLOCKUP [ 1657.259260][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1657.259271][ T9227] Call Trace: [ 1657.259280][ T9227] [ 1657.259289][ T9227] dump_stack_lvl+0xe8/0x150 [ 1657.259323][ T9227] should_fail_ex+0x412/0x560 [ 1657.259355][ T9227] should_failslab+0xa8/0x100 [ 1657.259381][ T9227] ? dst_alloc+0x105/0x170 [ 1657.259406][ T9227] kmem_cache_alloc_noprof+0x87/0x650 [ 1657.259429][ T9227] ? __pfx_find_exception+0x10/0x10 [ 1657.259455][ T9227] dst_alloc+0x105/0x170 [ 1657.259483][ T9227] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1657.259514][ T9227] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1657.259536][ T9227] ip_route_output_key_hash+0x18d/0x2a0 [ 1657.259568][ T9227] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1657.259588][ T9227] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1657.259619][ T9227] ? __lock_acquire+0x6b5/0x2cf0 [ 1657.259651][ T9227] tcp_v4_connect+0x74e/0x19b0 [ 1657.259805][ T9227] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1657.259830][ T9227] ? __lock_acquire+0x6b5/0x2cf0 [ 1657.259853][ T9227] ? tcp_v6_connect+0x62d/0x1b10 [ 1657.259940][ T9227] tcp_v6_connect+0xbbb/0x1b10 [ 1657.259976][ T9227] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1657.260004][ T9227] ? aa_file_perm+0x192/0x15e0 [ 1657.260024][ T9227] __inet_stream_connect+0x25a/0xdd0 [ 1657.260052][ T9227] ? do_raw_spin_lock+0x12b/0x2f0 [ 1657.260075][ T9227] ? __pfx___inet_stream_connect+0x10/0x10 [ 1657.260098][ T9227] ? inet_stream_connect+0x51/0xa0 [ 1657.260118][ T9227] ? __local_bh_enable_ip+0xd0/0x130 [ 1657.260153][ T9227] inet_stream_connect+0x66/0xa0 [ 1657.260175][ T9227] kernel_connect+0x141/0x1c0 [ 1657.260201][ T9227] ? __pfx_kernel_connect+0x10/0x10 [ 1657.260221][ T9227] ? do_raw_spin_lock+0x12b/0x2f0 [ 1657.260248][ T9227] ? smc_connect+0xbd/0xd90 [ 1657.260279][ T9227] ? __local_bh_enable_ip+0xd0/0x130 [ 1657.260307][ T9227] smc_connect+0x7a5/0xd90 [ 1657.260345][ T9227] __sys_connect+0x312/0x450 [ 1657.260365][ T9227] ? __pfx___sys_connect+0x10/0x10 [ 1657.260402][ T9227] __ia32_sys_connect+0x7a/0x90 [ 1657.260422][ T9227] __do_fast_syscall_32+0x20d/0x640 [ 1657.260446][ T9227] ? do_fast_syscall_32+0x33/0x70 [ 1657.260466][ T9227] ? asm_int80_emulation+0x1a/0x20 [ 1657.260484][ T9227] ? do_int80_emulation+0x274/0x4d0 [ 1657.260501][ T9227] ? trace_irq_disable+0x3b/0x150 [ 1657.260529][ T9227] do_fast_syscall_32+0x33/0x70 [ 1657.260550][ T9227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.260572][ T9227] RIP: 0023:0xf709ef6c [ 1657.260589][ T9227] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1657.260604][ T9227] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 1657.260624][ T9227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1657.260636][ T9227] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 1657.260647][ T9227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1657.260658][ T9227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1657.260668][ T9227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.260695][ T9227] [ 1657.670231][T22059] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1657.918315][T22059] usb 4-1: Using ep0 maxpacket: 16 [ 1657.948316][T22059] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 1657.964243][T22059] usb 4-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40 [ 1657.973572][T22059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.982016][T22059] usb 4-1: Product: Т [ 1657.986896][T22059] usb 4-1: SerialNumber: â° [ 1658.142963][T22530] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1658.231428][T22059] usb 4-1: found format II with max.bitrate = 4, frame size=1 [ 1658.238929][T22059] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1658.261160][T22059] usb 4-1: 2:1 : sample bitwidth 252 in over sample bytes 1 [ 1658.268534][T22059] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1658.302225][T22530] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.313830][T22530] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1658.325079][T22530] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1658.335742][T22530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1658.344171][T22530] usb 2-1: SerialNumber: syz [ 1658.363865][T22059] usb 4-1: USB disconnect, device number 7 [ 1658.421537][T19596] udevd[19596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1658.581867][T22530] usb 2-1: 0:2 : does not exist [ 1658.624342][T22530] usb 2-1: USB disconnect, device number 17 [ 1658.665816][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1658.967946][ T9306] CUSE: unknown device info "€" [ 1658.986149][ T9306] CUSE: unknown device info "" [ 1658.995726][ T9306] CUSE: unknown device info "" [ 1659.001175][ T9306] CUSE: unknown device info "" [ 1659.006278][ T9306] CUSE: zero length info key specified [ 1659.190300][T22530] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1659.342417][T22530] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.365582][T22530] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1659.387612][T22530] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1659.402496][T22530] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 1659.447229][T22530] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1659.468928][T22530] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1659.499043][ T9331] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1659.506500][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7575'. [ 1659.549118][T22530] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1659.563713][T22530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.583114][T22530] usb 5-1: Product: syz [ 1659.587403][T22530] usb 5-1: Manufacturer: syz [ 1659.592705][T22530] usb 5-1: SerialNumber: syz [ 1659.614703][T22530] usb 5-1: ucan: probing device on interface #0 [ 1659.621654][T22530] usb 5-1: ucan: invalid endpoint configuration [ 1659.647362][T22530] usb 5-1: ucan: probe failed; try to update the device firmware [ 1659.890270][T22059] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1660.156574][T22059] usb 4-1: Using ep0 maxpacket: 8 [ 1660.432031][T22059] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 1660.464738][T22059] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1660.474097][T22059] usb 4-1: config 0 has no interface number 1 [ 1660.481965][T22059] usb 4-1: config 0 has no interface number 2 [ 1660.488249][T22059] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1660.499675][T22059] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1660.521732][T22059] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1660.528744][T22059] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1660.546747][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7580'. [ 1660.556530][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7580'. [ 1660.595740][T22059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.660020][T22059] usb 4-1: config 0 descriptor?? [ 1661.164392][T22059] usb 4-1: Could not set interface, error -71 [ 1661.187757][T22059] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1661.209245][T22059] usb 4-1: USB disconnect, device number 8 [ 1661.971257][T22059] usb 5-1: USB disconnect, device number 38 [ 1662.339241][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7593'. [ 1662.494132][ T9409] syz.3.7583 (9409): drop_caches: 2 [ 1664.228983][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1664.380604][T22059] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1665.661866][ T9503] syz.4.7603 (9503): drop_caches: 2 [ 1665.776886][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1667.457505][ T9531] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7607'. [ 1668.124599][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7615'. [ 1668.149213][ T9554] openvswitch: netlink: Flow actions attr not present in new flow. [ 1668.418546][ T9565] CUSE: unknown device info "€" [ 1668.436455][ T9565] CUSE: unknown device info "" [ 1668.456459][ T9565] CUSE: unknown device info "" [ 1668.474148][ T9565] CUSE: unknown device info "" [ 1668.486688][ T9565] CUSE: zero length info key specified [ 1668.506704][ T9572] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1668.507638][ T9573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1668.780420][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1668.828305][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.844457][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.285114][ T9641] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7628'. [ 1670.579952][ T9682] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7631'. [ 1671.415412][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1672.134855][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7640'. [ 1672.390727][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1672.390746][ T29] audit: type=1326 audit(1774085398.926:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.7643" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x0 [ 1672.467357][ T29] audit: type=1326 audit(1774085398.976:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.4.7641" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4f6c code=0x0 [ 1672.971199][ T9744] FAULT_INJECTION: forcing a failure. [ 1672.971199][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.985121][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.2.7644 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.985140][ T9744] Tainted: [L]=SOFTLOCKUP [ 1672.985144][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1672.985151][ T9744] Call Trace: [ 1672.985156][ T9744] [ 1672.985160][ T9744] dump_stack_lvl+0xe8/0x150 [ 1672.985181][ T9744] should_fail_ex+0x412/0x560 [ 1672.985199][ T9744] should_failslab+0xa8/0x100 [ 1672.985215][ T9744] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1672.985227][ T9744] ? alloc_io_context+0x27/0x290 [ 1672.985317][ T9744] alloc_io_context+0x27/0x290 [ 1672.985330][ T9744] set_task_ioprio+0x461/0x5e0 [ 1672.985342][ T9744] ? set_task_ioprio+0x5f/0x5e0 [ 1672.985354][ T9744] __se_sys_ioprio_set+0x80d/0xa30 [ 1672.985399][ T9744] ? __se_sys_ioprio_set+0xd0/0xa30 [ 1672.985421][ T9744] __do_fast_syscall_32+0x20d/0x640 [ 1672.985445][ T9744] ? do_fast_syscall_32+0x33/0x70 [ 1672.985463][ T9744] ? asm_int80_emulation+0x1a/0x20 [ 1672.985474][ T9744] ? do_int80_emulation+0x274/0x4d0 [ 1672.985488][ T9744] do_fast_syscall_32+0x33/0x70 [ 1672.985501][ T9744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1672.985513][ T9744] RIP: 0023:0xf700ef6c [ 1672.985524][ T9744] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1672.985533][ T9744] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000121 [ 1672.985545][ T9744] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 1672.985553][ T9744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1672.985558][ T9744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1672.985565][ T9744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1672.985571][ T9744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.985585][ T9744] [ 1673.060440][ T29] audit: type=1326 audit(1774085399.536:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.2.7644" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700ef6c code=0x0 [ 1673.459492][ T9756] fuse: Bad value for 'user_id' [ 1673.464595][ T9756] fuse: Bad value for 'user_id' [ 1673.486120][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1673.671495][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7650'. [ 1673.840547][T22059] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1673.881504][ T9781] syzkaller1: entered promiscuous mode [ 1673.887072][ T9781] syzkaller1: entered allmulticast mode [ 1673.990384][T22059] usb 2-1: device descriptor read/64, error -71 [ 1674.460787][T22059] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1674.590273][T22059] usb 2-1: device descriptor read/64, error -71 [ 1674.704821][T22059] usb usb2-port1: attempt power cycle [ 1674.938292][T22530] IPVS: starting estimator thread 0... [ 1674.950690][ T9809] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1675.060224][ T9810] IPVS: using max 54 ests per chain, 129600 per kthread [ 1675.080404][T22054] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1675.108922][ T9816] fuse: Invalid uid '0x0000000000000004' [ 1675.120309][T22059] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1675.141051][T22059] usb 2-1: device descriptor read/8, error -71 [ 1675.230520][T22054] usb 5-1: device descriptor read/64, error -71 [ 1675.420244][T22059] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1675.480404][T22054] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1675.489735][T22059] usb 2-1: device descriptor read/8, error -71 [ 1675.600598][T22059] usb usb2-port1: unable to enumerate USB device [ 1675.620615][T22054] usb 5-1: device descriptor read/64, error -71 [ 1675.722219][ T9839] syzkaller1: entered promiscuous mode [ 1675.729169][ T9839] syzkaller1: entered allmulticast mode [ 1675.735593][T22054] usb usb5-port1: attempt power cycle [ 1675.937754][ T9854] FAULT_INJECTION: forcing a failure. [ 1675.937754][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.950681][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.3.7666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1675.950708][ T9854] Tainted: [L]=SOFTLOCKUP [ 1675.950715][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.950728][ T9854] Call Trace: [ 1675.950739][ T9854] [ 1675.950748][ T9854] dump_stack_lvl+0xe8/0x150 [ 1675.950781][ T9854] should_fail_ex+0x412/0x560 [ 1675.950812][ T9854] should_failslab+0xa8/0x100 [ 1675.950836][ T9854] __kmalloc_noprof+0xe8/0x760 [ 1675.950855][ T9854] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1675.950885][ T9854] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1675.950918][ T9854] ? tomoyo_path_number_perm+0x219/0x630 [ 1675.950938][ T9854] tomoyo_path_number_perm+0x246/0x630 [ 1675.950960][ T9854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1675.950982][ T9854] ? __lock_acquire+0x6b5/0x2cf0 [ 1675.951027][ T9854] ? __fget_files+0x2a/0x420 [ 1675.951060][ T9854] ? __fget_files+0x3a0/0x420 [ 1675.951080][ T9854] ? __fget_files+0x2a/0x420 [ 1675.951104][ T9854] security_file_ioctl_compat+0xc3/0x2a0 [ 1675.951126][ T9854] __ia32_compat_sys_ioctl+0x139/0x950 [ 1675.951148][ T9854] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1675.951170][ T9854] ? __fget_files+0x3a0/0x420 [ 1675.951196][ T9854] ? fput+0xa0/0xd0 [ 1675.951218][ T9854] ? ksys_write+0x242/0x270 [ 1675.951244][ T9854] __do_fast_syscall_32+0x20d/0x640 [ 1675.951265][ T9854] ? do_fast_syscall_32+0x33/0x70 [ 1675.951282][ T9854] ? asm_int80_emulation+0x1a/0x20 [ 1675.951297][ T9854] ? do_int80_emulation+0x274/0x4d0 [ 1675.951314][ T9854] ? trace_irq_disable+0x3b/0x150 [ 1675.951339][ T9854] do_fast_syscall_32+0x33/0x70 [ 1675.951357][ T9854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1675.951376][ T9854] RIP: 0023:0xf705ef6c [ 1675.951391][ T9854] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1675.951404][ T9854] RSP: 002b:00000000f540b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1675.951422][ T9854] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040086409 [ 1675.951433][ T9854] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1675.951443][ T9854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1675.951453][ T9854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1675.951463][ T9854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1675.951485][ T9854] [ 1675.952690][ T9854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1676.270316][T22054] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1676.351387][T22054] usb 5-1: device descriptor read/8, error -71 [ 1676.690563][T22059] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1676.698693][T22054] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1676.730474][T22054] usb 5-1: device descriptor read/8, error -71 [ 1676.802313][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7668'. [ 1676.840802][T22054] usb usb5-port1: unable to enumerate USB device [ 1676.870336][T22059] usb 3-1: Using ep0 maxpacket: 16 [ 1676.881561][T22059] usb 3-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 1676.892696][T22059] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1676.904987][T22059] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1676.917352][T22059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.925710][T22059] usb 3-1: Product: syz [ 1676.930077][T22059] usb 3-1: Manufacturer: syz [ 1676.939928][T22059] usb 3-1: SerialNumber: syz [ 1677.221945][ T9913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7669'. [ 1677.242862][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.256304][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.613343][ T9925] FAULT_INJECTION: forcing a failure. [ 1677.613343][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.646308][ T9925] CPU: 1 UID: 0 PID: 9925 Comm: syz.4.7673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.646341][ T9925] Tainted: [L]=SOFTLOCKUP [ 1677.646349][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1677.646361][ T9925] Call Trace: [ 1677.646369][ T9925] [ 1677.646377][ T9925] dump_stack_lvl+0xe8/0x150 [ 1677.646410][ T9925] should_fail_ex+0x412/0x560 [ 1677.646448][ T9925] should_failslab+0xa8/0x100 [ 1677.646475][ T9925] __kmalloc_node_noprof+0xf0/0x7c0 [ 1677.646498][ T9925] ? crypto_create_tfm_node+0x83/0x3f0 [ 1677.646529][ T9925] crypto_create_tfm_node+0x83/0x3f0 [ 1677.646558][ T9925] crypto_alloc_tfm_node+0x172/0x3f0 [ 1677.646591][ T9925] kdf_alloc+0x21/0x100 [ 1677.646612][ T9925] __keyctl_dh_compute+0x4f9/0xd10 [ 1677.646632][ T9925] ? __lock_acquire+0x6b5/0x2cf0 [ 1677.646664][ T9925] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1677.646710][ T9925] ? compat_keyctl_dh_compute+0x186/0x220 [ 1677.646744][ T9925] compat_keyctl_dh_compute+0x19d/0x220 [ 1677.646775][ T9925] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 1677.646810][ T9925] ? fput+0xa0/0xd0 [ 1677.646845][ T9925] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 1677.646875][ T9925] __do_fast_syscall_32+0x20d/0x640 [ 1677.646901][ T9925] ? do_fast_syscall_32+0x33/0x70 [ 1677.646921][ T9925] ? asm_int80_emulation+0x1a/0x20 [ 1677.646937][ T9925] ? do_int80_emulation+0x274/0x4d0 [ 1677.646956][ T9925] ? trace_irq_disable+0x3b/0x150 [ 1677.646985][ T9925] do_fast_syscall_32+0x33/0x70 [ 1677.647007][ T9925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1677.647029][ T9925] RIP: 0023:0xf7fa4f6c [ 1677.647048][ T9925] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1677.647062][ T9925] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1677.647080][ T9925] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000800 [ 1677.647093][ T9925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000280 [ 1677.647105][ T9925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1677.647116][ T9925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1677.647127][ T9925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.647152][ T9925] [ 1677.647162][ T9925] could not allocate digest TFM handle sha384 [ 1678.395319][ T9944] syzkaller1: entered promiscuous mode [ 1678.408447][ T9944] syzkaller1: entered allmulticast mode [ 1678.603645][ T9954] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7679'. [ 1678.711625][ T9959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1678.893507][ T9953] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1678.988974][ T9953] bond3 (unregistering): Released all slaves [ 1679.487355][T22059] usb 3-1: USB disconnect, device number 10 [ 1679.528476][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1679.558339][T22530] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1679.740542][T22530] usb 5-1: Using ep0 maxpacket: 8 [ 1679.752106][T22530] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1679.768624][T22530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.792110][T22530] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1679.806470][T22530] pvrusb2: ********** [ 1679.814759][T22530] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1679.847758][T22530] pvrusb2: Important functionality might not be entirely working. [ 1679.864474][T22530] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1679.893629][T22530] pvrusb2: ********** [ 1679.993280][ T2346] pvrusb2: Invalid write control endpoint [ 1680.058793][ T2346] pvrusb2: Invalid write control endpoint [ 1680.065558][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1680.136598][T10090] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1680.151909][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1680.160798][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1680.175010][ T2346] pvrusb2: Device being rendered inoperable [ 1680.182625][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1680.191493][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1680.200329][T22530] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1680.212149][ T2346] pvrusb2: Attached sub-driver cx25840 [ 1680.220758][T10036] pvrusb2: Attempted to execute control transfer when device not ok [ 1680.233798][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1680.278486][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1680.339630][T22048] usb 5-1: USB disconnect, device number 44 [ 1680.394440][T22530] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.422311][T22530] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1680.436844][T22530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.586044][T10099] syzkaller0: entered promiscuous mode [ 1680.602669][T22530] usb 4-1: config 0 descriptor?? [ 1680.613063][T10099] syzkaller0: entered allmulticast mode [ 1680.827832][T22530] usb 4-1: string descriptor 0 read error: -71 [ 1681.158189][T22048] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1681.319893][T22048] usb 2-1: device descriptor read/64, error -71 [ 1681.490640][ T5924] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1681.531861][T22530] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 1681.560585][T22048] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1681.640911][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 1681.654301][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.675804][ T5924] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1681.700777][T22048] usb 2-1: device descriptor read/64, error -71 [ 1681.717815][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.756150][ T5924] usb 3-1: config 0 descriptor?? [ 1681.769006][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1681.820589][T22048] usb usb2-port1: attempt power cycle [ 1681.953402][ T5924] usb 4-1: USB disconnect, device number 9 [ 1682.032053][T10130] netlink: 'syz.4.7695': attribute type 21 has an invalid length. [ 1682.039991][T10130] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7695'. [ 1682.190956][T22048] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1682.228995][T22048] usb 2-1: device descriptor read/8, error -71 [ 1682.470420][T22048] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1682.518685][T22048] usb 2-1: device descriptor read/8, error -71 [ 1682.642080][T22048] usb usb2-port1: unable to enumerate USB device [ 1682.685737][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.720451][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.280621][T10227] syzkaller1: entered promiscuous mode [ 1683.286203][T10227] syzkaller1: entered allmulticast mode [ 1683.328129][T10231] syzkaller0: entered promiscuous mode [ 1683.333899][T10231] syzkaller0: entered allmulticast mode [ 1683.415417][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7707'. [ 1683.580225][ T5924] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1683.750250][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 1683.764804][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.797569][ T5924] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.40 [ 1683.826093][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.854907][ T5924] usb 5-1: Product: syz [ 1683.870361][ T5924] usb 5-1: SerialNumber: syz [ 1683.964488][T22530] usb 3-1: USB disconnect, device number 11 [ 1684.048783][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7710'. [ 1684.159059][ T5924] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1684.185384][ T5924] usb 5-1: USB disconnect, device number 45 [ 1684.423035][T22530] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1684.690365][T22530] usb 3-1: Using ep0 maxpacket: 8 [ 1684.793664][T22530] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1684.805290][T22530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1684.826485][T22530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1684.929789][T22530] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1684.949250][T22530] usb 3-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1684.974590][T22530] usb 3-1: Product: syz [ 1684.981604][T22530] usb 3-1: Manufacturer: syz [ 1684.986470][T22530] usb 3-1: SerialNumber: syz [ 1685.000819][T22530] usb 3-1: config 0 descriptor?? [ 1685.012114][T22530] smsusb:smsusb_probe: board id=2, interface number 0 [ 1685.019940][T22530] smsusb:smsusb_probe: Device initialized with return code -19 [ 1685.176786][T10316] FAULT_INJECTION: forcing a failure. [ 1685.176786][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.189671][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.1.7719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1685.189700][T10316] Tainted: [L]=SOFTLOCKUP [ 1685.189708][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.189720][T10316] Call Trace: [ 1685.189728][T10316] [ 1685.189736][T10316] dump_stack_lvl+0xe8/0x150 [ 1685.189770][T10316] should_fail_ex+0x412/0x560 [ 1685.189803][T10316] should_failslab+0xa8/0x100 [ 1685.189827][T10316] ? security_inode_alloc+0x39/0x310 [ 1685.189856][T10316] kmem_cache_alloc_noprof+0x87/0x650 [ 1685.189886][T10316] security_inode_alloc+0x39/0x310 [ 1685.189916][T10316] inode_init_always_gfp+0x9ed/0xdc0 [ 1685.189950][T10316] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1685.189972][T10316] alloc_inode+0x82/0x1b0 [ 1685.189999][T10316] new_inode+0x22/0x170 [ 1685.190031][T10316] __debugfs_create_file+0xb8/0x400 [ 1685.190055][T10316] debugfs_create_file_full+0x3f/0x60 [ 1685.190080][T10316] ref_tracker_dir_debugfs+0x197/0x360 [ 1685.190112][T10316] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1685.190160][T10316] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1685.190181][T10316] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1685.190210][T10316] ? __raw_spin_lock_init+0x45/0x100 [ 1685.190234][T10316] alloc_netdev_mqs+0x272/0x11b0 [ 1685.190257][T10316] ? __pfx_wg_setup+0x10/0x10 [ 1685.190285][T10316] rtnl_create_link+0x31f/0xd70 [ 1685.190315][T10316] rtnl_newlink_create+0x277/0xb70 [ 1685.190336][T10316] ? __pfx___nla_validate_parse+0x10/0x10 [ 1685.190365][T10316] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1685.190388][T10316] ? __pfx___mutex_lock+0x10/0x10 [ 1685.190424][T10316] ? ns_capable+0x89/0xe0 [ 1685.190451][T10316] rtnl_newlink+0x1666/0x1be0 [ 1685.190494][T10316] ? __pfx_rtnl_newlink+0x10/0x10 [ 1685.190530][T10316] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.190560][T10316] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.190587][T10316] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.190620][T10316] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1685.190647][T10316] ? unwind_next_frame+0xa5/0x23c0 [ 1685.190697][T10316] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.190724][T10316] ? is_bpf_text_address+0x26/0x2b0 [ 1685.190749][T10316] ? kernel_text_address+0xa5/0xe0 [ 1685.190798][T10316] ? __pfx_rtnl_newlink+0x10/0x10 [ 1685.190825][T10316] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1685.190857][T10316] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1685.190884][T10316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1685.190916][T10316] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.190950][T10316] netlink_rcv_skb+0x232/0x4b0 [ 1685.190981][T10316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1685.191011][T10316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1685.191050][T10316] ? netlink_deliver_tap+0x2e/0x1b0 [ 1685.191086][T10316] netlink_unicast+0x80f/0x9b0 [ 1685.191118][T10316] ? __pfx_netlink_unicast+0x10/0x10 [ 1685.191146][T10316] ? netlink_sendmsg+0x650/0xb40 [ 1685.191172][T10316] ? skb_put+0x11b/0x210 [ 1685.191195][T10316] netlink_sendmsg+0x813/0xb40 [ 1685.191232][T10316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1685.191263][T10316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1685.191292][T10316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1685.191318][T10316] ____sys_sendmsg+0x972/0x9f0 [ 1685.191349][T10316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1685.191376][T10316] ? kstrtoull+0x12f/0x1d0 [ 1685.191411][T10316] ___sys_sendmsg+0x2a5/0x360 [ 1685.191437][T10316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1685.191461][T10316] ? get_pid_task+0x20/0x1f0 [ 1685.191479][T10316] ? get_pid_task+0x20/0x1f0 [ 1685.191495][T10316] ? get_pid_task+0x20/0x1f0 [ 1685.191540][T10316] ? __fget_files+0x2a/0x420 [ 1685.191567][T10316] ? __fget_files+0x3a0/0x420 [ 1685.191605][T10316] __sys_sendmsg+0x183/0x260 [ 1685.191636][T10316] ? __pfx___sys_sendmsg+0x10/0x10 [ 1685.191681][T10316] __do_fast_syscall_32+0x20d/0x640 [ 1685.191706][T10316] ? do_fast_syscall_32+0x33/0x70 [ 1685.191727][T10316] ? asm_int80_emulation+0x1a/0x20 [ 1685.191745][T10316] ? do_int80_emulation+0x274/0x4d0 [ 1685.191767][T10316] ? trace_irq_disable+0x3b/0x150 [ 1685.191798][T10316] do_fast_syscall_32+0x33/0x70 [ 1685.191821][T10316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1685.191843][T10316] RIP: 0023:0xf709ef6c [ 1685.191861][T10316] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1685.191879][T10316] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1685.191899][T10316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1685.191914][T10316] RDX: 0000000004044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1685.191926][T10316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1685.191937][T10316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1685.191949][T10316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.191979][T10316] [ 1685.713426][T10316] debugfs: out of free dentries, can not create file 'netdev@ffff8880afcc0620' [ 1686.140225][T22530] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1686.270264][T22530] usb 4-1: device descriptor read/64, error -71 [ 1686.300257][T22048] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1686.451933][T22048] usb 2-1: Using ep0 maxpacket: 8 [ 1686.471371][T22048] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1686.489855][T22048] usb 2-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config [ 1686.503059][T22048] usb 2-1: config 0 has no interface number 0 [ 1686.509598][T22048] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1686.522167][T22530] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1686.531152][T22048] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid maxpacket 5068, setting to 1024 [ 1686.542950][T22048] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1686.554602][T22048] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.572059][T22048] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1686.581584][T22048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1686.589611][T22048] usb 2-1: SerialNumber: syz [ 1686.596926][T22048] usb 2-1: config 0 descriptor?? [ 1686.603565][T10341] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1686.617162][T22048] hso 2-1:0.1: Failed to find BULK OUT ep [ 1686.660246][T22530] usb 4-1: device descriptor read/64, error -71 [ 1686.770649][T22530] usb usb4-port1: attempt power cycle [ 1687.110330][T22530] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1687.131354][T22530] usb 4-1: device descriptor read/8, error -71 [ 1687.165415][T22048] usb 3-1: USB disconnect, device number 12 [ 1687.370631][T22530] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1687.391340][T22530] usb 4-1: device descriptor read/8, error -71 [ 1687.500517][T22530] usb usb4-port1: unable to enumerate USB device [ 1687.580275][T22048] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1687.730303][T22048] usb 3-1: Using ep0 maxpacket: 32 [ 1687.737413][T22048] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.747922][T22048] usb 3-1: config 0 has no interfaces? [ 1687.755512][T22048] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1687.764896][T22048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.773752][T22048] usb 3-1: Product: syz [ 1687.777917][T22048] usb 3-1: Manufacturer: syz [ 1687.782604][T22048] usb 3-1: SerialNumber: syz [ 1687.789301][T22048] usb 3-1: config 0 descriptor?? [ 1689.011563][T22048] usb 2-1: USB disconnect, device number 26 [ 1689.378449][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7726'. [ 1690.517220][T22059] usb 3-1: USB disconnect, device number 13 [ 1691.120445][T22059] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1691.250537][T22059] usb 4-1: device descriptor read/64, error -71 [ 1691.490255][T22059] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1691.620261][T22059] usb 4-1: device descriptor read/64, error -71 [ 1691.741366][T22059] usb usb4-port1: attempt power cycle [ 1691.798704][T10439] syzkaller1: entered promiscuous mode [ 1691.815108][T10439] syzkaller1: entered allmulticast mode [ 1692.023422][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7737'. [ 1692.057093][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7737'. [ 1692.100328][T22059] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1692.133239][T22059] usb 4-1: device descriptor read/8, error -71 [ 1692.390516][T22059] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1692.411750][T22059] usb 4-1: device descriptor read/8, error -71 [ 1692.520488][T22059] usb usb4-port1: unable to enumerate USB device [ 1692.780300][T22059] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1692.931871][T22059] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.942357][T22059] usb 2-1: too many endpoints for config 2 interface 0 altsetting 1: 51, using maximum allowed: 30 [ 1692.953266][T22059] usb 2-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 1692.967184][T22059] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1692.976496][T22059] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1692.985969][T22059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.994085][T22059] usb 2-1: Product: syz [ 1692.998262][T22059] usb 2-1: Manufacturer: syz [ 1693.003110][T22059] usb 2-1: SerialNumber: syz [ 1693.228129][T22059] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1693.241497][T22059] usb 2-1: selecting invalid altsetting 0 [ 1693.262042][T22059] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1693.283984][T22059] usb 2-1: USB disconnect, device number 27 [ 1695.714755][T10557] syzkaller1: entered promiscuous mode [ 1695.720932][T10557] syzkaller1: entered allmulticast mode [ 1695.848872][T10564] syzkaller0: entered promiscuous mode [ 1695.855649][T10564] syzkaller0: entered allmulticast mode [ 1696.060442][T10581] program syz.2.7753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.330825][T22053] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1696.520726][T22053] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1696.539815][T22053] usb 3-1: config 0 has no interface number 0 [ 1696.559072][T22053] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1696.572916][T22053] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1696.596344][T10592] pim6reg: entered allmulticast mode [ 1696.605893][T10592] team0: entered allmulticast mode [ 1696.617057][T22053] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1696.628106][T10592] team0: left allmulticast mode [ 1696.633444][T22053] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1696.640922][T10592] pim6reg: left allmulticast mode [ 1696.646063][T22053] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1696.657432][T22053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.697322][T22053] usb 3-1: config 0 descriptor?? [ 1696.704199][T10581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1696.734280][T22053] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1696.765025][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1696.779188][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1696.788352][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1696.820524][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1696.828278][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1696.845193][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1696.876513][T22053] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1696.887912][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1696.898773][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1696.907388][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1696.925681][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1696.950496][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1696.965343][T22053] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1696.990761][T22053] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1697.029684][T22053] usb 3-1: USB disconnect, device number 14 [ 1697.064162][T22053] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1697.086224][T22053] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1697.103737][T22053] keyspan 3-1:0.11: device disconnected [ 1697.254420][T10635] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1697.313740][T10637] syzkaller1: entered promiscuous mode [ 1697.319222][T10637] syzkaller1: entered allmulticast mode [ 1698.469668][T10678] syzkaller1: entered promiscuous mode [ 1698.478161][T10678] syzkaller1: entered allmulticast mode [ 1698.535179][T10684] binder: 10674:10684 ioctl 89f1 80000380 returned -22 [ 1698.875283][T10687] FAULT_INJECTION: forcing a failure. [ 1698.875283][T10687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1698.893421][T10687] CPU: 1 UID: 0 PID: 10687 Comm: syz.1.7772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.893455][T10687] Tainted: [L]=SOFTLOCKUP [ 1698.893462][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1698.893473][T10687] Call Trace: [ 1698.893481][T10687] [ 1698.893489][T10687] dump_stack_lvl+0xe8/0x150 [ 1698.893520][T10687] should_fail_ex+0x412/0x560 [ 1698.893550][T10687] prepare_alloc_pages+0x22a/0x650 [ 1698.893578][T10687] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1698.893606][T10687] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1698.893630][T10687] ? __pfx_policy_nodemask+0x10/0x10 [ 1698.893652][T10687] ? lock_vma_under_rcu+0x45a/0x500 [ 1698.893679][T10687] alloc_pages_mpol+0x232/0x4a0 [ 1698.893706][T10687] folio_alloc_mpol_noprof+0x39/0x70 [ 1698.893729][T10687] shmem_mfill_atomic_pte+0x527/0x9c0 [ 1698.893769][T10687] mfill_atomic_zeropage+0x4c0/0xb70 [ 1698.893804][T10687] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 1698.893833][T10687] userfaultfd_ioctl+0x28fc/0x5130 [ 1698.893860][T10687] ? kasan_save_track+0x4f/0x80 [ 1698.893878][T10687] ? kasan_save_track+0x3e/0x80 [ 1698.893898][T10687] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1698.893928][T10687] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1698.893979][T10687] ? kasan_quarantine_put+0xbb/0x1f0 [ 1698.894004][T10687] ? tomoyo_path_number_perm+0x219/0x630 [ 1698.894033][T10687] ? do_vfs_ioctl+0x1166/0x1530 [ 1698.894056][T10687] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1698.894107][T10687] ? __fget_files+0x2a/0x420 [ 1698.894136][T10687] ? __fget_files+0x3a0/0x420 [ 1698.894159][T10687] ? __fget_files+0x2a/0x420 [ 1698.894185][T10687] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1698.894212][T10687] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1698.894234][T10687] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1698.894259][T10687] ? __fget_files+0x3a0/0x420 [ 1698.894290][T10687] ? fput+0xa0/0xd0 [ 1698.894315][T10687] ? ksys_write+0x242/0x270 [ 1698.894347][T10687] __do_fast_syscall_32+0x20d/0x640 [ 1698.894372][T10687] ? do_fast_syscall_32+0x33/0x70 [ 1698.894391][T10687] ? asm_int80_emulation+0x1a/0x20 [ 1698.894408][T10687] ? do_int80_emulation+0x274/0x4d0 [ 1698.894427][T10687] ? trace_irq_disable+0x3b/0x150 [ 1698.894462][T10687] do_fast_syscall_32+0x33/0x70 [ 1698.894482][T10687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1698.894502][T10687] RIP: 0023:0xf709ef6c [ 1698.894519][T10687] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1698.894535][T10687] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1698.894555][T10687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 1698.894564][T10687] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1698.894571][T10687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1698.894577][T10687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1698.894583][T10687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.894598][T10687] [ 1699.362293][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7774'. [ 1699.785799][T10708] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1699.940357][T22053] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1700.153620][T22053] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1700.181769][T22053] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1700.203152][T22053] usb 5-1: string descriptor 0 read error: -22 [ 1700.209437][T22053] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1700.219044][T22053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.265537][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1700.275310][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1700.284855][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1700.293126][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1700.302873][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1700.329556][T15565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1700.337219][T15565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1700.346457][T15565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1700.357098][T15565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1700.374994][T15565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1700.654483][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7781'. [ 1700.675451][T22053] kone 0003:1E7D:2CED.0055: invalid report_count 1804850557 [ 1700.722686][T22053] kone 0003:1E7D:2CED.0055: item 0 4 1 9 parsing failed [ 1700.730078][T22053] kone 0003:1E7D:2CED.0055: parse failed [ 1700.764477][T22053] kone 0003:1E7D:2CED.0055: probe with driver kone failed with error -22 [ 1700.863272][T10816] syzkaller1: entered promiscuous mode [ 1700.868841][T10816] syzkaller1: entered allmulticast mode [ 1700.886291][T22059] usb 5-1: USB disconnect, device number 46 [ 1700.960658][T22053] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1700.982787][T10753] chnl_net:caif_netlink_parms(): no params data found [ 1701.126025][T22053] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1701.148839][T22053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1701.162071][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.171511][T22053] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 1701.180989][T22053] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1701.187933][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.189073][T22053] usb 3-1: Product: syz [ 1701.204812][T22053] usb 3-1: config 0 descriptor?? [ 1701.221058][T10753] bridge_slave_0: entered allmulticast mode [ 1701.252770][T10753] bridge_slave_0: entered promiscuous mode [ 1701.272088][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.291253][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.298596][T10753] bridge_slave_1: entered allmulticast mode [ 1701.317755][T10753] bridge_slave_1: entered promiscuous mode [ 1701.387723][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.449863][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.596961][T10942] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7788'. [ 1701.644671][T10939] syzkaller0: entered promiscuous mode [ 1701.662237][T10939] syzkaller0: entered allmulticast mode [ 1701.674832][T22048] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1701.713344][T10753] team0: Port device team_slave_0 added [ 1701.722857][T10753] team0: Port device team_slave_1 added [ 1701.848737][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.857698][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.884498][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.895820][T22048] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.907425][T22048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.920096][T22048] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.929590][T22048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.937951][T22048] usb 2-1: Product: syz [ 1701.942733][T22048] usb 2-1: Manufacturer: syz [ 1701.947373][T22048] usb 2-1: SerialNumber: syz [ 1702.030515][T22059] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1702.173141][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.184174][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.218285][T22059] usb 5-1: Using ep0 maxpacket: 16 [ 1702.226055][T22059] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1702.235661][T22059] usb 5-1: config 7 has an invalid interface number: 192 but max is 0 [ 1702.244377][T22059] usb 5-1: config 7 has no interface number 0 [ 1702.250852][T22053] ath6kl: Failed to submit usb control message: -110 [ 1702.257607][T22053] ath6kl: unable to send the bmi data to the device: -110 [ 1702.264876][T22059] usb 5-1: config 7 interface 192 has no altsetting 0 [ 1702.271896][T22053] ath6kl: Unable to send get target info: -110 [ 1702.289186][T22059] usb 5-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 1702.298594][T22053] ath6kl: Failed to init ath6kl core: -110 [ 1702.326754][T22059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.339168][T22053] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1702.347892][T22059] usb 5-1: Product: syz [ 1702.352250][T22059] usb 5-1: Manufacturer: syz [ 1702.356869][T22059] usb 5-1: SerialNumber: syz [ 1702.413879][T22048] usb 2-1: skipping empty audio interface (v1) [ 1702.417074][ T5819] Bluetooth: hci4: command tx timeout [ 1702.527288][T22048] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1702.592359][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.632003][T22059] usb 5-1: bad CDC descriptors [ 1702.676286][T22059] usb 5-1: USB disconnect, device number 47 [ 1704.376556][T22530] usb 2-1: USB disconnect, device number 28 [ 1704.497715][ T5819] Bluetooth: hci4: command tx timeout [ 1704.694563][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.701833][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.728280][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.751603][T22048] usb 3-1: USB disconnect, device number 15 [ 1704.861361][T22530] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 1704.885783][T10753] hsr_slave_0: entered promiscuous mode [ 1704.903763][T10753] hsr_slave_1: entered promiscuous mode [ 1704.922928][T10753] debugfs: 'hsr0' already exists in 'hsr' [ 1704.931765][T10753] Cannot create hsr debugfs directory [ 1705.013480][T11096] kAFS: unable to lookup cell 'ŒÉúZ°ÿ-ñn$vï(,bÅÌñ©ih¾Ì' [ 1705.042881][T22530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1705.062089][T22530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1705.089247][T22530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1705.110920][T22530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1705.135213][T22530] usb 2-1: string descriptor 0 read error: -22 [ 1705.150400][T22530] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1705.169725][T22530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.200812][T22530] cdc_ether 2-1:1.0: skipping garbage [ 1705.206647][T22530] usb 2-1: bad CDC descriptors [ 1705.378304][T10753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1705.392374][T10753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1705.414653][T22530] usb 2-1: USB disconnect, device number 29 [ 1705.435587][T10753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1705.455646][T10753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1705.547526][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.573838][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1705.585284][T22603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.592481][T22603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1705.606431][T22604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.613550][T22604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.679541][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.722813][T10753] veth0_vlan: entered promiscuous mode [ 1705.734497][T10753] veth1_vlan: entered promiscuous mode [ 1705.795700][T10753] veth0_macvtap: entered promiscuous mode [ 1705.817055][T10753] veth1_macvtap: entered promiscuous mode [ 1705.842410][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1705.857960][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.894745][T22604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.910594][T22604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.921652][T22604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.943197][T22604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.089914][T22605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.119921][T22605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.171828][T22603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.179874][T22603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.543668][T11219] syzkaller1: entered promiscuous mode [ 1706.565168][T11219] syzkaller1: entered allmulticast mode [ 1706.572257][ T5819] Bluetooth: hci4: command tx timeout [ 1706.597850][T11224] netlink: 666 bytes leftover after parsing attributes in process `syz.5.7808'. [ 1707.011012][T22059] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1707.030567][T22055] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1707.170429][T22059] usb 6-1: device descriptor read/64, error -71 [ 1707.181092][T22055] usb 5-1: device descriptor read/64, error -71 [ 1707.413461][T22059] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1707.430350][T22055] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1707.560359][T22059] usb 6-1: device descriptor read/64, error -71 [ 1707.566811][T22055] usb 5-1: device descriptor read/64, error -71 [ 1707.680538][T22059] usb usb6-port1: attempt power cycle [ 1707.686508][T22055] usb usb5-port1: attempt power cycle [ 1708.042679][T22059] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1708.050882][T22055] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1708.069547][T11270] bond4 (unregistering): Released all slaves [ 1708.082961][T22055] usb 5-1: device descriptor read/8, error -71 [ 1708.089610][T22059] usb 6-1: device descriptor read/8, error -71 [ 1708.288776][T11343] syzkaller1: entered promiscuous mode [ 1708.294580][T11343] syzkaller1: entered allmulticast mode [ 1708.340382][T22059] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1708.348003][T22055] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1708.371820][T22059] usb 6-1: device descriptor read/8, error -71 [ 1708.379760][T22055] usb 5-1: device descriptor read/8, error -71 [ 1708.440277][T22048] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1708.490694][T22059] usb usb6-port1: unable to enumerate USB device [ 1708.499690][T22055] usb usb5-port1: unable to enumerate USB device [ 1708.593138][T22048] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1708.612039][T22048] usb 2-1: config 1 has no interface number 0 [ 1708.628128][T22048] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1708.653764][T11356] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1708.661646][T22048] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1708.663553][ T5819] Bluetooth: hci4: command tx timeout [ 1708.687964][T22048] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.728578][T22048] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1708.738529][T22048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.748989][T22048] usb 2-1: Product: syz [ 1708.757162][T22048] usb 2-1: Manufacturer: syz [ 1708.766347][T22048] usb 2-1: SerialNumber: syz [ 1708.780832][T11338] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1709.017092][T22048] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1709.039891][T22048] usb 2-1: USB disconnect, device number 30 [ 1709.423808][T11382] input: syz0 as /devices/virtual/input/input135 [ 1709.767064][T11402] tipc: Started in network mode [ 1709.777810][T11402] tipc: Node identity 4e18c54b1679, cluster identity 4711 [ 1709.815992][T11402] tipc: Enabled bearer , priority 0 [ 1709.846596][T11402] syzkaller0: entered promiscuous mode [ 1709.882848][T11402] syzkaller0: entered allmulticast mode [ 1709.932162][T11402] FAULT_INJECTION: forcing a failure. [ 1709.932162][T11402] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.944977][T11402] CPU: 1 UID: 0 PID: 11402 Comm: syz.4.7831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.945007][T11402] Tainted: [L]=SOFTLOCKUP [ 1709.945015][T11402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1709.945027][T11402] Call Trace: [ 1709.945035][T11402] [ 1709.945044][T11402] dump_stack_lvl+0xe8/0x150 [ 1709.945076][T11402] should_fail_ex+0x412/0x560 [ 1709.945109][T11402] should_failslab+0xa8/0x100 [ 1709.945136][T11402] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1709.945159][T11402] ? __alloc_skb+0x1d0/0x7d0 [ 1709.945178][T11402] ? __local_bh_enable_ip+0xd0/0x130 [ 1709.945208][T11402] __alloc_skb+0x1d0/0x7d0 [ 1709.945231][T11402] ? inet6_rt_notify+0xaf/0x470 [ 1709.945251][T11402] inet6_rt_notify+0x170/0x470 [ 1709.945281][T11402] fib6_del+0x10af/0x15a0 [ 1709.945329][T11402] ? __pfx_fib6_del+0x10/0x10 [ 1709.945367][T11402] ? is_bpf_text_address+0x292/0x2b0 [ 1709.945388][T11402] ? is_bpf_text_address+0x26/0x2b0 [ 1709.945421][T11402] fib6_clean_node+0x29c/0x580 [ 1709.945447][T11402] ? __pfx_fib6_clean_node+0x10/0x10 [ 1709.945467][T11402] ? stack_trace_save+0xa9/0x100 [ 1709.945487][T11402] ? __pfx_stack_trace_save+0x10/0x10 [ 1709.945505][T11402] ? kfree+0x1c1/0x630 [ 1709.945529][T11402] fib6_walk_continue+0x67b/0x910 [ 1709.945562][T11402] __fib6_clean_all+0x35b/0x5a0 [ 1709.945594][T11402] ? __fib6_clean_all+0xbd/0x5a0 [ 1709.945623][T11402] ? __lock_acquire+0x6b5/0x2cf0 [ 1709.945647][T11402] ? __pfx_fib6_ifdown+0x10/0x10 [ 1709.945667][T11402] ? __pfx___fib6_clean_all+0x10/0x10 [ 1709.945700][T11402] ? __pfx_fib6_clean_node+0x10/0x10 [ 1709.945719][T11402] ? __pfx_fib6_ifdown+0x10/0x10 [ 1709.945740][T11402] ? do_raw_spin_lock+0x12b/0x2f0 [ 1709.945764][T11402] ? __mutex_trylock_common+0x158/0x260 [ 1709.945796][T11402] rt6_disable_ip+0x128/0x730 [ 1709.945818][T11402] ? rcu_is_watching+0x15/0xb0 [ 1709.945844][T11402] ? trace_contention_end+0x3d/0x150 [ 1709.945872][T11402] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1709.945900][T11402] addrconf_ifdown+0x161/0x1a40 [ 1709.945927][T11402] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1709.945958][T11402] ? tls_dev_event+0x745/0xf00 [ 1709.945979][T11402] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1709.946022][T11402] addrconf_notify+0x1bc/0x1050 [ 1709.946049][T11402] notifier_call_chain+0x1be/0x400 [ 1709.946087][T11402] netif_set_mtu_ext+0x5aa/0x800 [ 1709.946108][T11402] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 1709.946130][T11402] ? __do_fast_syscall_32+0x20d/0x640 [ 1709.946159][T11402] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1709.946181][T11402] ? __mutex_trylock_common+0x158/0x260 [ 1709.946228][T11402] netif_set_mtu+0xd7/0x1b0 [ 1709.946251][T11402] ? __pfx_netif_set_mtu+0x10/0x10 [ 1709.946292][T11402] ? __dev_get_by_name+0xe5/0x140 [ 1709.946323][T11402] dev_set_mtu+0x126/0x260 [ 1709.946353][T11402] dev_ioctl+0x7b4/0x1150 [ 1709.946387][T11402] sock_do_ioctl+0x23e/0x320 [ 1709.946416][T11402] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1709.946451][T11402] ? unix_ioctl+0x203/0x720 [ 1709.946473][T11402] ? unix_compat_ioctl+0x15/0x30 [ 1709.946505][T11402] compat_sock_ioctl+0xba6/0xcb0 [ 1709.946536][T11402] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1709.946564][T11402] ? __fget_files+0x3a0/0x420 [ 1709.946591][T11402] ? __fget_files+0x2a/0x420 [ 1709.946621][T11402] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1709.946649][T11402] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1709.946677][T11402] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1709.946704][T11402] ? __fget_files+0x3a0/0x420 [ 1709.946737][T11402] ? fput+0xa0/0xd0 [ 1709.946764][T11402] ? ksys_write+0x242/0x270 [ 1709.946797][T11402] __do_fast_syscall_32+0x20d/0x640 [ 1709.946821][T11402] ? do_fast_syscall_32+0x33/0x70 [ 1709.946841][T11402] ? asm_int80_emulation+0x1a/0x20 [ 1709.946860][T11402] ? do_int80_emulation+0x274/0x4d0 [ 1709.946881][T11402] ? trace_irq_disable+0x3b/0x150 [ 1709.946912][T11402] do_fast_syscall_32+0x33/0x70 [ 1709.946936][T11402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1709.946957][T11402] RIP: 0023:0xf7fa4f6c [ 1709.946976][T11402] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1709.946992][T11402] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1709.947012][T11402] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 1709.947026][T11402] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1709.947038][T11402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1709.947049][T11402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1709.947061][T11402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.947089][T11402] [ 1710.410907][T11402] tipc: Resetting bearer [ 1710.418509][T11413] syzkaller1: entered promiscuous mode [ 1710.424103][T11413] syzkaller1: entered allmulticast mode [ 1710.460094][T11401] tipc: Resetting bearer [ 1710.553734][T11423] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1710.553901][T11401] tipc: Disabling bearer [ 1711.020759][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1711.139101][T11450] fuse: Bad value for 'group_id' [ 1711.148654][T11450] fuse: Bad value for 'group_id' [ 1711.161985][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7840'. [ 1711.171396][T22055] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1711.406300][T22055] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.421633][T22055] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1711.455778][T22055] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1711.467706][T22055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.479041][T22055] usb 4-1: Product: syz [ 1711.487396][T22055] usb 4-1: Manufacturer: syz [ 1711.494891][T22055] usb 4-1: SerialNumber: syz [ 1712.709821][T11502] syzkaller1: entered promiscuous mode [ 1712.726364][T11502] syzkaller1: entered allmulticast mode [ 1713.174376][T11512] FAULT_INJECTION: forcing a failure. [ 1713.174376][T11512] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.215385][T11512] CPU: 1 UID: 0 PID: 11512 Comm: syz.2.7851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.215417][T11512] Tainted: [L]=SOFTLOCKUP [ 1713.215424][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1713.215436][T11512] Call Trace: [ 1713.215444][T11512] [ 1713.215454][T11512] dump_stack_lvl+0xe8/0x150 [ 1713.215486][T11512] should_fail_ex+0x412/0x560 [ 1713.215519][T11512] should_failslab+0xa8/0x100 [ 1713.215544][T11512] ? security_inode_alloc+0x39/0x310 [ 1713.215577][T11512] kmem_cache_alloc_noprof+0x87/0x650 [ 1713.215607][T11512] security_inode_alloc+0x39/0x310 [ 1713.215638][T11512] inode_init_always_gfp+0x9ed/0xdc0 [ 1713.215671][T11512] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1713.215692][T11512] alloc_inode+0x82/0x1b0 [ 1713.215720][T11512] new_inode+0x22/0x170 [ 1713.215753][T11512] debugfs_create_dir+0x68/0x350 [ 1713.215777][T11512] ieee80211_debugfs_recreate_netdev+0x1b4/0x1460 [ 1713.215807][T11512] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1713.215834][T11512] ? ieee80211_setup_sdata+0x8cd/0xb50 [ 1713.215871][T11512] ieee80211_if_add+0xc3d/0x13a0 [ 1713.215911][T11512] ieee80211_add_iface+0xbb/0x5e0 [ 1713.215939][T11512] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 1713.215967][T11512] ? __alloc_skb+0x4e5/0x7d0 [ 1713.215993][T11512] nl80211_new_interface+0x80a/0x11f0 [ 1713.216035][T11512] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1713.216064][T11512] ? nl80211_pre_doit+0x4fb/0x930 [ 1713.216093][T11512] genl_family_rcv_msg_doit+0x22a/0x330 [ 1713.216125][T11512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1713.216161][T11512] ? bpf_lsm_capable+0x9/0x20 [ 1713.216187][T11512] ? security_capable+0x7e/0x2c0 [ 1713.216219][T11512] genl_rcv_msg+0x61c/0x7a0 [ 1713.216249][T11512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1713.216270][T11512] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1713.216291][T11512] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1713.216314][T11512] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1713.216336][T11512] ? __lock_acquire+0x6b5/0x2cf0 [ 1713.216373][T11512] netlink_rcv_skb+0x232/0x4b0 [ 1713.216401][T11512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1713.216425][T11512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1713.216471][T11512] ? down_read+0x272/0x2e0 [ 1713.216492][T11512] ? genl_rcv+0xd/0x40 [ 1713.216515][T11512] genl_rcv+0x28/0x40 [ 1713.216533][T11512] netlink_unicast+0x80f/0x9b0 [ 1713.216567][T11512] ? __pfx_netlink_unicast+0x10/0x10 [ 1713.216595][T11512] ? netlink_sendmsg+0x650/0xb40 [ 1713.216622][T11512] ? skb_put+0x11b/0x210 [ 1713.216645][T11512] netlink_sendmsg+0x813/0xb40 [ 1713.216684][T11512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1713.216716][T11512] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1713.216745][T11512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1713.216770][T11512] ____sys_sendmsg+0x972/0x9f0 [ 1713.216802][T11512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1713.216829][T11512] ? kstrtoull+0x12f/0x1d0 [ 1713.216864][T11512] ___sys_sendmsg+0x2a5/0x360 [ 1713.216893][T11512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1713.216917][T11512] ? get_pid_task+0x20/0x1f0 [ 1713.216936][T11512] ? get_pid_task+0x20/0x1f0 [ 1713.216952][T11512] ? get_pid_task+0x20/0x1f0 [ 1713.217006][T11512] ? __fget_files+0x2a/0x420 [ 1713.217033][T11512] ? __fget_files+0x3a0/0x420 [ 1713.217072][T11512] __sys_sendmsg+0x183/0x260 [ 1713.217097][T11512] ? __pfx___sys_sendmsg+0x10/0x10 [ 1713.217143][T11512] __do_fast_syscall_32+0x20d/0x640 [ 1713.217169][T11512] ? do_fast_syscall_32+0x33/0x70 [ 1713.217190][T11512] ? asm_int80_emulation+0x1a/0x20 [ 1713.217208][T11512] ? do_int80_emulation+0x274/0x4d0 [ 1713.217228][T11512] ? trace_irq_disable+0x3b/0x150 [ 1713.217260][T11512] do_fast_syscall_32+0x33/0x70 [ 1713.217283][T11512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1713.217307][T11512] RIP: 0023:0xf700ef6c [ 1713.217325][T11512] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1713.217342][T11512] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1713.217363][T11512] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 1713.217377][T11512] RDX: 000000002400c890 RSI: 0000000000000000 RDI: 0000000000000000 [ 1713.217389][T11512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1713.217401][T11512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1713.217413][T11512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.217444][T11512] [ 1713.219748][T11512] debugfs: out of free dentries, can not create directory 'netdev:nicvf0' [ 1714.030029][T22055] usb 4-1: 0:1 : does not exist [ 1714.042370][T22055] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1714.100564][T11523] tipc: Cannot configure node identity twice [ 1714.229271][T22055] usb 4-1: unit 183 not found! [ 1714.262083][T11534] fuse: Unknown parameter 'group_id00000000000000000000' [ 1714.296762][T22055] usb 4-1: USB disconnect, device number 18 [ 1714.307873][T11534] fuse: Unknown parameter 'fÄ‚ ëÒÚ¨…!)‹d' [ 1714.445826][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.650567][T22055] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1714.851076][T22055] usb 4-1: Using ep0 maxpacket: 8 [ 1714.867549][T22055] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1714.879464][T22055] usb 4-1: config 7 has an invalid interface number: 115 but max is 0 [ 1714.888584][T22055] usb 4-1: config 7 has no interface number 0 [ 1714.909354][T22055] usb 4-1: config 7 interface 115 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1714.942667][T22055] usb 4-1: config 7 interface 115 has no altsetting 0 [ 1714.977872][T22055] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3 [ 1714.992364][T22055] usb 4-1: New USB device strings: Mfr=1, Product=242, SerialNumber=2 [ 1715.028009][T22055] usb 4-1: Product: syz [ 1715.043805][T22055] usb 4-1: Manufacturer: syz [ 1715.059438][T22055] usb 4-1: SerialNumber: syz [ 1715.081109][T11569] syzkaller1: entered promiscuous mode [ 1715.095706][T11569] syzkaller1: entered allmulticast mode [ 1715.357059][T11580] program syz.3.7858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1715.383895][T22055] cxacru 4-1:7.115: cxacru_bind: interface has incorrect endpoints [ 1715.405921][T22055] cxacru 4-1:7.115: usbatm_usb_probe: bind failed: -19! [ 1715.467488][T22055] usb 4-1: USB disconnect, device number 19 [ 1715.863118][T11599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1715.869686][T11599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1715.909347][T11599] vhci_hcd vhci_hcd.0: Device attached [ 1715.982429][T11603] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 1715.988982][T11603] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1716.065205][T11603] vhci_hcd vhci_hcd.0: Device attached [ 1716.250635][T22055] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1717.130347][ T5924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1717.299744][T11670] syzkaller1: entered promiscuous mode [ 1717.305775][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 1717.321167][T11670] syzkaller1: entered allmulticast mode [ 1717.340552][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.361864][ T5924] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1717.375256][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.407296][ T5924] usb 6-1: config 0 descriptor?? [ 1717.433118][ T5924] usb 6-1: bad CDC descriptors [ 1717.657388][T11686] lo: Caught tx_queue_len zero misconfig [ 1717.680299][ T5924] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1717.830248][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 1717.837459][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.891781][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.906810][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1717.926237][T11691] vlan4: entered promiscuous mode [ 1717.935856][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.936008][T11691] vlan4: entered allmulticast mode [ 1717.951344][T11691] hsr_slave_1: entered allmulticast mode [ 1717.979070][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7877'. [ 1717.993580][ T5924] usb 5-1: config 0 descriptor?? [ 1718.422420][ T5924] savu 0003:1E7D:2D5A.0056: unknown main item tag 0x0 [ 1718.429300][ T5924] savu 0003:1E7D:2D5A.0056: unknown main item tag 0x0 [ 1718.436627][ T5924] savu 0003:1E7D:2D5A.0056: unknown main item tag 0x0 [ 1718.444479][ T5924] savu 0003:1E7D:2D5A.0056: unknown main item tag 0x0 [ 1718.451929][ T5924] savu 0003:1E7D:2D5A.0056: unknown main item tag 0x0 [ 1718.458720][ T5924] savu 0003:1E7D:2D5A.0056: unbalanced collection at end of report description [ 1718.469659][ T5924] savu 0003:1E7D:2D5A.0056: parse failed [ 1718.475978][ T5924] savu 0003:1E7D:2D5A.0056: probe with driver savu failed with error -22 [ 1718.614428][T11716] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7879'. [ 1718.635544][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.688046][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.733832][ T5924] usb 5-1: USB disconnect, device number 52 [ 1719.065911][T11734] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1719.310393][T22054] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1719.369497][T11743] FAULT_INJECTION: forcing a failure. [ 1719.369497][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.422083][T11743] CPU: 0 UID: 0 PID: 11743 Comm: syz.4.7883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.422114][T11743] Tainted: [L]=SOFTLOCKUP [ 1719.422120][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1719.422132][T11743] Call Trace: [ 1719.422139][T11743] [ 1719.422147][T11743] dump_stack_lvl+0xe8/0x150 [ 1719.422176][T11743] should_fail_ex+0x412/0x560 [ 1719.422206][T11743] should_failslab+0xa8/0x100 [ 1719.422230][T11743] __kmalloc_cache_noprof+0x88/0x660 [ 1719.422250][T11743] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1719.422280][T11743] nfnetlink_rcv+0xfe1/0x27b0 [ 1719.422331][T11743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1719.422378][T11743] ? ref_tracker_free+0x693/0x840 [ 1719.422427][T11743] ? __netlink_deliver_tap+0x807/0x850 [ 1719.422453][T11743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1719.422491][T11743] netlink_unicast+0x80f/0x9b0 [ 1719.422523][T11743] ? __pfx_netlink_unicast+0x10/0x10 [ 1719.422548][T11743] ? netlink_sendmsg+0x650/0xb40 [ 1719.422571][T11743] ? skb_put+0x11b/0x210 [ 1719.422594][T11743] netlink_sendmsg+0x813/0xb40 [ 1719.422629][T11743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1719.422661][T11743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1719.422688][T11743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1719.422713][T11743] ____sys_sendmsg+0x972/0x9f0 [ 1719.422742][T11743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1719.422766][T11743] ? kstrtoull+0x12f/0x1d0 [ 1719.422796][T11743] ___sys_sendmsg+0x2a5/0x360 [ 1719.422820][T11743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1719.422842][T11743] ? get_pid_task+0x20/0x1f0 [ 1719.422858][T11743] ? get_pid_task+0x20/0x1f0 [ 1719.422872][T11743] ? get_pid_task+0x20/0x1f0 [ 1719.422914][T11743] ? __fget_files+0x2a/0x420 [ 1719.422940][T11743] ? __fget_files+0x3a0/0x420 [ 1719.422975][T11743] __sys_sendmsg+0x183/0x260 [ 1719.422998][T11743] ? __pfx___sys_sendmsg+0x10/0x10 [ 1719.423040][T11743] __do_fast_syscall_32+0x20d/0x640 [ 1719.423063][T11743] ? do_fast_syscall_32+0x33/0x70 [ 1719.423080][T11743] ? asm_int80_emulation+0x1a/0x20 [ 1719.423097][T11743] ? do_int80_emulation+0x274/0x4d0 [ 1719.423116][T11743] ? trace_irq_disable+0x3b/0x150 [ 1719.423143][T11743] do_fast_syscall_32+0x33/0x70 [ 1719.423162][T11743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1719.423183][T11743] RIP: 0023:0xf7fa4f6c [ 1719.423200][T11743] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1719.423215][T11743] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1719.423233][T11743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1719.423245][T11743] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1719.423256][T11743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.423266][T11743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1719.423278][T11743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.423305][T11743] [ 1719.741363][T22054] usb 4-1: Using ep0 maxpacket: 16 [ 1719.748230][T22054] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.759319][T22054] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1719.766070][T22054] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1719.775268][T22054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.786010][T22054] usb 4-1: config 0 descriptor?? [ 1719.803860][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1719.974060][ T5924] usb 6-1: USB disconnect, device number 6 [ 1720.063515][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7886'. [ 1720.255477][T22054] nzxt-smart2 0003:1E71:2009.0057: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1720.287026][T11778] FAULT_INJECTION: forcing a failure. [ 1720.287026][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.319539][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.2.7889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1720.319573][T11778] Tainted: [L]=SOFTLOCKUP [ 1720.319581][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1720.319593][T11778] Call Trace: [ 1720.319601][T11778] [ 1720.319610][T11778] dump_stack_lvl+0xe8/0x150 [ 1720.319641][T11778] should_fail_ex+0x412/0x560 [ 1720.319673][T11778] _copy_from_user+0x2d/0xb0 [ 1720.319695][T11778] cmsghdr_from_user_compat_to_kern+0x3a4/0x810 [ 1720.319729][T11778] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1720.319759][T11778] ____sys_sendmsg+0x220/0x9f0 [ 1720.319788][T11778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1720.319824][T11778] ___sys_sendmsg+0x2a5/0x360 [ 1720.319850][T11778] ? __pfx____sys_sendmsg+0x10/0x10 [ 1720.319876][T11778] ? kstrtoull+0x12f/0x1d0 [ 1720.319925][T11778] ? __fget_files+0x2a/0x420 [ 1720.319952][T11778] ? __fget_files+0x3a0/0x420 [ 1720.319988][T11778] __sys_sendmmsg+0x2e7/0x4e0 [ 1720.320015][T11778] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1720.320061][T11778] ? fput+0xa0/0xd0 [ 1720.320087][T11778] ? ksys_write+0x242/0x270 [ 1720.320113][T11778] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1720.320134][T11778] __do_fast_syscall_32+0x20d/0x640 [ 1720.320158][T11778] ? do_fast_syscall_32+0x33/0x70 [ 1720.320179][T11778] ? asm_int80_emulation+0x1a/0x20 [ 1720.320197][T11778] ? do_int80_emulation+0x274/0x4d0 [ 1720.320217][T11778] ? trace_irq_disable+0x3b/0x150 [ 1720.320248][T11778] do_fast_syscall_32+0x33/0x70 [ 1720.320277][T11778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1720.320300][T11778] RIP: 0023:0xf700ef6c [ 1720.320318][T11778] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1720.320335][T11778] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1720.320356][T11778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f700 [ 1720.320369][T11778] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1720.320380][T11778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.320392][T11778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1720.320403][T11778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.320430][T11778] [ 1721.025257][ T5924] usb 4-1: USB disconnect, device number 20 [ 1725.420152][ C1] sched: DL replenish lagged too much [ 1730.676551][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.696605][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.800372][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.813526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.025684][T29923] Bluetooth: hci4: command 0x0406 tx timeout [ 1853.244605][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.264881][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1868.240138][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1868.247128][ C1] rcu: (detected by 1, t=10502 jiffies, g=245945, q=1901 ncpus=2) [ 1868.255032][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 5528 (4295123944-4295118416), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1868.268329][ C1] rcu: rcu_preempt kthread starved for 5529 jiffies! g245945 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1868.279538][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1868.289526][ C1] rcu: RCU grace-period kthread stack dump: [ 1868.295422][ C1] task:rcu_preempt state:R running task stack:27744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1868.308935][ C1] Call Trace: [ 1868.312224][ C1] [ 1868.315244][ C1] __schedule+0x15dd/0x52d0 [ 1868.319767][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1868.324741][ C1] ? __pfx___schedule+0x10/0x10 [ 1868.329609][ C1] ? schedule+0x90/0x360 [ 1868.333864][ C1] schedule+0x164/0x360 [ 1868.338032][ C1] schedule_timeout+0x158/0x2c0 [ 1868.342910][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1868.348304][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1868.353621][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1868.359441][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1868.365010][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1868.369894][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1868.376066][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1868.381364][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1868.386579][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1868.392401][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1868.397008][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1868.402219][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1868.408035][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1868.413007][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1868.418052][ C1] kthread+0x388/0x470 [ 1868.422133][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1868.427351][ C1] ? __pfx_kthread+0x10/0x10 [ 1868.431964][ C1] ret_from_fork+0x51e/0xb90 [ 1868.436573][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1868.441700][ C1] ? __switch_to+0xc7d/0x1450 [ 1868.446391][ C1] ? __pfx_kthread+0x10/0x10 [ 1868.450989][ C1] ret_from_fork_asm+0x1a/0x30 [ 1868.455786][ C1] [ 1868.458811][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1868.465152][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1868.475661][ C1] Tainted: [L]=SOFTLOCKUP [ 1868.479991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1868.490057][ C1] RIP: 0010:check_preemption_disabled+0x3/0xe0 [ 1868.496264][ C1] Code: 27 8c 48 c7 c6 e0 c1 27 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 65 8b 05 57 a3 6d 07 65 8b 0d 4c a3 6d 07 f7 c1 ff ff ff [ 1868.516162][ C1] RSP: 0018:ffffc90000a07cb8 EFLAGS: 00000283 [ 1868.522249][ C1] RAX: 0000000000000001 RBX: ffffffff90b3e901 RCX: 0000000080000102 [ 1868.530232][ C1] RDX: ffffc90000a07e01 RSI: ffffffff8c27c1e0 RDI: ffffffff8c27c1a0 [ 1868.538215][ C1] RBP: dffffc0000000000 R08: ffffc90000a081a0 R09: 0000000000000000 [ 1868.546195][ C1] R10: ffffc90000a07e78 R11: fffff52000140fd1 R12: ffffc90000a081b0 [ 1868.554186][ C1] R13: ffffffff81767e95 R14: ffffffff8e75e520 R15: ffffffff81767e95 [ 1868.562168][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 1868.571106][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1868.577708][ C1] CR2: 00000000f0817000 CR3: 000000007c156000 CR4: 00000000003526f0 [ 1868.585690][ C1] Call Trace: [ 1868.588978][ C1] [ 1868.591822][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1868.596953][ C1] rcu_is_watching+0x15/0xb0 [ 1868.601569][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1868.606695][ C1] lock_release+0x4b/0x3d0 [ 1868.611130][ C1] ? deref_stack_reg+0x19f/0x230 [ 1868.616093][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1868.621225][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 1868.626359][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1868.631519][ C1] ? kasan_save_track+0x3e/0x80 [ 1868.636382][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1868.642544][ C1] arch_stack_walk+0x11b/0x150 [ 1868.647329][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1868.652375][ C1] stack_trace_save+0xa9/0x100 [ 1868.657145][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1868.662529][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1868.667657][ C1] ? common_startup_64+0x13e/0x147 [ 1868.672785][ C1] kasan_save_track+0x3e/0x80 [ 1868.677470][ C1] ? kasan_save_track+0x3e/0x80 [ 1868.682374][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1868.687248][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1868.693163][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 1868.697759][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1868.703845][ C1] __alloc_skb+0x1d0/0x7d0 [ 1868.708276][ C1] synproxy_send_client_synack_ipv6+0x16f/0xcb0 [ 1868.714541][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1868.721312][ C1] ? nft_jhash_init+0x480/0x670 [ 1868.726221][ C1] ? synproxy_pernet+0x45/0x270 [ 1868.731085][ C1] nft_synproxy_eval_v6+0x34a/0x4e0 [ 1868.736332][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1868.742060][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1868.747099][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1868.751972][ C1] nft_synproxy_do_eval+0x3ce/0x580 [ 1868.757185][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1868.762145][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1868.767883][ C1] ? timerqueue_add+0x1d0/0x200 [ 1868.772758][ C1] nft_do_chain+0x45e/0x1990 [ 1868.777367][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1868.782580][ C1] ? ip6t_do_table+0x137d/0x1560 [ 1868.787617][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1868.792676][ C1] ? nf_nat_ipv6_fn+0x229/0x2f0 [ 1868.797590][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1868.802806][ C1] nft_do_chain_inet+0x29d/0x380 [ 1868.807754][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1868.813234][ C1] ? nf_nat_ipv6_local_in+0x157/0x660 [ 1868.818627][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1868.824372][ C1] ? lock_acquire+0xf0/0x2e0 [ 1868.828975][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1868.834445][ C1] nf_hook_slow+0xc5/0x220 [ 1868.838879][ C1] NF_HOOK+0x21f/0x3c0 [ 1868.842961][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1868.848342][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1868.852505][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1868.857112][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1868.862502][ C1] ip6_input+0x16a/0x270 [ 1868.866752][ C1] ? ip6_input+0x23/0x270 [ 1868.871103][ C1] NF_HOOK+0x336/0x3c0 [ 1868.875182][ C1] ? skb_orphan+0xaf/0xd0 [ 1868.879520][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1868.884725][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1868.888888][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1868.893494][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1868.898706][ C1] ? process_backlog+0x3eb/0x1950 [ 1868.903749][ C1] process_backlog+0x7dd/0x1950 [ 1868.908634][ C1] __napi_poll+0xae/0x340 [ 1868.912974][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1868.918372][ C1] net_rx_action+0x627/0xf70 [ 1868.922996][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1868.928161][ C1] handle_softirqs+0x22a/0x870 [ 1868.932948][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1868.937730][ C1] __irq_exit_rcu+0x5f/0x150 [ 1868.942336][ C1] irq_exit_rcu+0x9/0x30 [ 1868.946595][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1868.952235][ C1] [ 1868.955180][ C1] [ 1868.958111][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1868.964100][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1868.969746][ C1] Code: 8e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1868.989359][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1868.995438][ C1] RAX: 00000000022c3be5 RBX: ffffffff819a900a RCX: 0000000080000001 [ 1869.003417][ C1] RDX: 0000000000000001 RSI: ffffffff8def7890 RDI: ffffffff8c27c200 [ 1869.011394][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1869.019371][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: 0000000000000001 [ 1869.027349][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 1869.035334][ C1] ? do_idle+0x36a/0x5f0 [ 1869.039607][ C1] default_idle+0x9/0x20 [ 1869.043863][ C1] default_idle_call+0x72/0xb0 [ 1869.048669][ C1] do_idle+0x36a/0x5f0 [ 1869.052749][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1869.058918][ C1] ? __pfx_do_idle+0x10/0x10 [ 1869.063529][ C1] cpu_startup_entry+0x43/0x60 [ 1869.068307][ C1] start_secondary+0x101/0x110 [ 1869.073084][ C1] common_startup_64+0x13e/0x147 [ 1869.078049][ C1]