last executing test programs: 30m7.146757157s ago: executing program 3 (id=2200): socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket(0x28, 0x1, 0x0) unshare(0x6a040000) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xffffffffffffff46) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x80000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socket(0xb, 0x4, 0x7) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYBLOB="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", @ANYBLOB="c20e7f42a208b7f8010000000000a21355400000", @ANYRESDEC, @ANYRESDEC=r2], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f01a, 0x5}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x20, '\x00', @p_u8=&(0x7f0000000040)=0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x28, 0x6, 0x0, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="707e726d70726f66696c65203a000002"], 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) 30m5.173135634s ago: executing program 3 (id=2204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="814f04000000000020001280080001006873720014000280080002", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x80c0) 30m4.712929993s ago: executing program 3 (id=2205): socket(0x200000000000011, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=r4, @ANYRESOCT=r5], 0x40}}, 0x20004001) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x290, 0x0, 0xcd}]}) socket(0x400000000010, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r12, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 30m2.52167234s ago: executing program 3 (id=2214): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c75ec216eded100"], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x28880, 0x0, 0x12}, 0x18) r3 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xfff, 0x20000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4725245a08524f1b, 0x200000005c031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ddb000/0x4000)=nil, 0x800000, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 30m2.092099892s ago: executing program 3 (id=2216): socket(0x200000000000011, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=r4, @ANYRESOCT=r5], 0x40}}, 0x20004001) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x290, 0x0, 0xcd}]}) socket(0x400000000010, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r12, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 30m1.527517376s ago: executing program 3 (id=2219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x0) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 30m0.931174208s ago: executing program 32 (id=2219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x0) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 20m36.775016251s ago: executing program 5 (id=4426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, &(0x7f0000000380), 0x1}, 0xfc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r8 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000180)={0x0, "8ebd01b3292084cff57a96a55557e37c122c5fa914737fd4dd21cf71c4870784"}) sendto$inet6(r7, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r7, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000001b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd66f87a1d001811ff00000000000000000000000000000001fc0000000000000000000000000000014e204e21001890780400ff3a020000000100000001000000"], 0x0) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 20m34.993306178s ago: executing program 5 (id=4434): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ecdeb73a", 0x4}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018918ed7ce20702500000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076001f4ca3bd7000fbdbdf250800000000000000080001"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="44cc811cc28c6182980e8af67a6eb2487f2d326e24f72c526224818c7e3c8c7adbf80cebd20a4119cf1116e75a2f0940167ac0bb3d4bc9bc", 0x38}, {&(0x7f00000002c0)="c5c7cb3ec2506522a78dc6784a04", 0xe}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f0000000800)="ee2fbe331deec522803fc0a8e188274a4b49fc7cceab94c689598dbebc6c3775ccea3d4edb33f0fcd7d993266b6333911882893f47f3c97fe6474c2e73148d8061efd75ac4c1b56e5fed0604ac78daeb3df90934d1963c8ead771aaa7f927e9d33c6c0f205fc616e5816e3fa8fa5", 0x6e}, {&(0x7f0000000880)="4ac5023825d79accc58c0aadf1661491d3cf8e1ff076ad282ea5420ed1936b33b1ef42e6c5758fcb06376c4b609a45477ed27a9feb6d4899367ef32daefb34637cb5c0fe7a6cd6c56db1a0d7142c025c1cc61d8d663b0cf2a3c2b8e8476d2b53539daeebdd38a4cad9273f0f5748c55de9feaf0c7ab74ee57e920f4e76e80a0156e9881d2cfd299d53f5b6d5972d1382cf2429924a95b4664b89", 0x9a}, {&(0x7f0000000580)="feedcf27748bb43ab0518403d7cf33d80296fc93c829ae3dd08cf3dcbbb14049ea740247c6355ac706fb3ef0a8a43c52bd639a5899030003301548a385", 0x3d}, {&(0x7f0000000940)="db59be233f3d7d6c4f7be6a9f18b40ab692a198074cff8fa72b8603c9cdbb9a8c80f6ee3a307e5b3f8bfb57818098350efeb67c45ef77a19", 0x38}], 0x7, &(0x7f00000009c0)=[@mark={{0x10}}, @txtime={{0x14}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}], 0x5c}}, {{&(0x7f0000000a80)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0xfc, 0x3, "d723209fff37e8fe92aefd306354b4fb262b0d0ea2912abf884345a7996d7d791259a46bb04ce2f466cbadaadfe0aa91013992731da5bcae8c70f7e1f3e050", 0x3b}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)="804af1c472fd96ca225a210231d3d2690dd77de7a1a894c9fd7d6e8f06c1bd5b852ab75f049877391f10392b14eea729ec7dcc6964a915ba94e8700eae64b153a6ca887d575d2c438fcfbaa652d31368f6b47316fc437a8dc1fb11ee", 0x5c}, {&(0x7f0000000b80)="f11d95faab317f3bd6afcf99489e836cb6e1076df004a5ea4498135f0b2191ca7be56316efc6631f14ff465f2328a081517618a0d0fb4973fc1d4c6243a351834c4b4c84252b79", 0x47}, {&(0x7f0000000c00)="3f83674ce9447aa90a7e596649ab73943437651bc41bd78792e8e3005cf54ed148cea57af7d0251a30e153969bc1", 0x2e}, {&(0x7f0000000c40)="15dafd762023898c256be81c6480a13da12e4010a262ff112694a1a80c6d0f58e0cf4693c2b87353fdbafddd633e05c9eac38aba42e088d39d8e735edacf6eed344841412a1b2f6bc07c96ae224c17e3fc009f5537a5658680a0e821c47463bc642ee2e986d53d6e4df192f7f4ab6ffa34fa0ad0a1b04076f1fc090b98dd9513d3927685ac16fef2483b40ab814b19b4d8cd9f3ba232651fdcc0e18c4741d1eec041eddbd52a197c5f07f404a91b5ae1b6e5775ecaa6d4a487562d43d06e8fe5f051af694beb7b8f98159ff343e5b57e89fe1f5cf94b5bb9", 0xd8}, {&(0x7f0000000d40)="112df99ae3b89b71cf3a346510cfdc50e162d88b5327561b09291dfe9efd874160eddcc0ed6dc1aef182abcde1", 0x2d}], 0x5, &(0x7f0000000dc0)=[@txtime={{0x14, 0x1, 0x3d, 0xa}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x80000001}}, @mark={{0x10, 0x1, 0x24, 0x9}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000e40)="a274e0e868f7f8b706c4ce87c63abfd50084de0501d2c21d683f11ec28528a9a89e7dd117e5f08ca8570c2c8d93ef5a907c6b7c72fdff40520e55044672a32ea5b56e8806220dd6f5a7db6304e9dee95f0cbf270cd05f47d2d21fa313b64faa0d5bb37b615056549eebaed7cdae9e3d5747fc98843de8f5d96275c1c7fe15959c666510b1ad5309404c1a7e6e5c4b009bf3d04caf0654929b171705d22deb45987603d498c4324c2d141a0efa594591a8004e0c66c8457674d17e0566561a868e7dcc8332c571fdd861b3bd301d4813b26fbeceb5e48e7e6850e80158ec3eb6074ec231f1195612f42f8c36db2f2a3a35348ace92875374f176f846514f214713c0c8c708ddbe51251ff1d13ecdc7fc6b137a8184d84bb148e8d56b76bc797b424d1cdacaa7cca92438370f33fbeee4b3544c0f2eb7cd528ed0efde834c15b5a29a90459f670f0976820f676d909d33e586baec94fa9b3a027cdd1b4eb4c7b52d3f695dc3357c0365eb5f598c0afc2d46f44a86bff57468f641e25aef8709706218b62c688e233c603fcaedcbd67031dcd2923b53afcbeb66a4230f5d778bba4b42f3838c4fa35ebd9f2e7615a2bea4d361c7411dc02c8d1d9d034e82be53fda659ab8b9940bc0fa99b337bd1746eeefa9b9ca89751a32f408a0989bdaf5d82a5680dca2d0d5a6b18c5ab2076cbb07bcce04d21470c0fead1abe885b8251e5e78909c635e847d2319a7329b48e4103416ad6ef440cfeaa1f46b610edef3cbee29f3d8acf6e688ee4318d2c543fac278490e4bf3a6e586e4c3d1064674d701618abbc2992d9b747fa61cefdc382a42338a716cf9354c34846a9fdb36cadf44776b2385317c04860ba64f55598eeaa217cd7b1fb97aff674287670a11eea4b494bbc4c5627ca0822ccff27e6feecee1a9fcdd85392a67de854ac53411607ef515e74b6aa86d5176b193420737f92c60dac70a79f053eb878630dd42422c554cbbf086ed38a16414cb78bc64c0ed20fbab4592f22fc9723695721f5d0b69e719fb455fac5e45ea5ae37b6b0877d608bff98685a4acc0819fe5822fcb8d4e620158f1c0c4e5e579583d0efbbae2ef0db6b66ec6ad032ba40ae1f487bca8e1636a9eb1e330a1c9b2cdc313a828912c17177e4dd8b28e818564e14f2b1a2bb182a0c9c71b404d0d0d088b145017d1659f014696158a6520711065f69e63411b696155f4533875d6e39d69a46c6119f492dbaf8ad5a50a09c7b5def47bbadc05f855e454ea45ea6147988b7ace663e1ddd9967f907d3f42a3a03110dafd101abf48494349d131490396145074a2ca1a1fdb2daaca237ffa2f89b793e605d55ecb0e18e1a30583d35dfeefd718026ce4d188293a04b1dad3e15dd0b0d5b074457f6915dc3fbbf5abdfcbea6c53d0d28d1ea28e6ddd79b0ffe11c5c1979e6a55ef61b30b3c7a1930fc73e05d84a0a5e1200d06d4cab901d2a6120665ca023a3d91430b6d101a523643e7b3a48d37f38e2d5042553a5e9bc7f36ce20e4d2d21e64079a9cce64b92ef8bebf08da6ea5b90e7620e6daa043c87491cf7da36fcd5c00683fd79d73278e8e99d942a1d3939ac253bad880363478945b19591d5157b301dc070f5a36382abf092a5f8e7d730fec6c870aef290edfccfe82c5c6c7104eb051f3f2423bba0f18f9eb9a92dfd7c192bfe281f05a1965860d4bddbe4e280e770e6651e0e21d3b3f4290431b893b9dc308ec8bef939e9d33c9d1276547ba20572f1bd4e6875ad8a4db0429d0d8bcae61349909e3b4924e9b29c82096bf95e7d97d6f00032487ff85164d36903aec65382403c8a05a66a7d1c83fa112ac6e2d2467cb9076ba7e1a336badd7f222ed3275e8cfe40f0023a1bb87a7d25c3da335d75375b87b4d6ace1a25e505d79459507ef007320529af853712bd172ad7277aa02f8caf03e6eea1200a149f6c5e1dfb4ddbd4a6c307435a48ce48f98a1c9d22b0f8fca6f6b4405113c0384b949fdb69757354ebece55e204315583e523f1f2e281679237ba42ddeb09c86330ac84427a7a1655d539ae20c172aff4b047813e97729d542c624e276d3c0e3e623855fc757a5c95fff3b33bed7bb9f7f8ad736fcfd496732d994f145b1ac5288d34baa9cfe30c69a6463c69c7b450c1403cee8d76ea97ddd53b4e6db51323e18953889af06b4ab1acb27a3812e0fcee01c960f4b31463de56ba6de3a04cfb717ba151953ffac910694279452fc903c5eada29733b1dffeab23cbf6cf81867114252c0f315379e2e395f4fe6aaf3782fe7fbe3ab8469a20bafaa6bcbe4d751895613535397a709cd85a94041802407170409001f70f7d91a5a7692aa799c30891cc0a557ff7b51e4f4bdf71c088e1e11c1d66be3f710f0f2250a61457df021d33adf7f92ea548fd53c3be6da26f7f1a2aa3d825448fe77803d07b2870a6f06ca11e9713d63c31025679fb9c76d2ed1900377b3960a35fb423953766f3c7021a2efdfee722688453575ce773bd4334721950e4995beef12209d61f73df9567df9ff4db8f7b96512a6e376c196de89c10fc67bd4701be6d068bfce862e3c4bf52ea6a5834d2531ed22c780a441103d5f71d5e753670821a80778eefff392d01b90d366a50f9674ae9e15fb61992f849a707d3ba13e9aec37ae5071df48480fd6d12386b2472dd4a63c015614e8e878d162a42cf6259a146001392d9af3784b01863932ec277e0df61a1a6cb0ae52e419664ce70402dd26d6d9a9db6ad8ce56de7b8b177b73d2f7841154c002c4b6a9c19480ad472995d31f8013ab2608dad841f8788c1d47220648d3c0a13d5713fefeaf7bdbbbac4cf39d7f80aba4cb0370a38ada012e4aed3f84ba109f458a9081f406d6e1c2d0f39e1a7cffb8ac6245aca677de1950b41fc544e76a4b82b8a0995b2e41807c406a56b93f09219e2ed2dcc823482c6849fa688cc05c630a73a9f643fddc1a054311cbb50abc1694ff5be565eca69091134a149b4e5db558b7b7e3a16bddb1f41bea2e4273c9646916ac436623c405d6a1a9d59dd460cab9f23934ede8aa947b655b91a2fce67f49b525e3ea4d13f5b226105324d953a262bacc8c00ec6062a617356df8a856c9d9a8c6c9f55bc91dea194a7b450038e9c205dc4676c6676ec2ffed84f333cbc09be79c082327a7d400eed0afa0953953ecb63cd1ff460178ab8e3efb20a35a535ba6f354780b701133bb179ee8923d87c7ad492182755145f5256bde31a9b481d4c37ac2552ee64674bd35837356b8e692d36a374f40b5506da9b2975571ef1cc28d17b7637d07c2cde0138a7c10deb2f90b4da46cdb9afbb2728fe5bab623d2c236e3cba923cdba8c2bdb56f13ac933526922a316fafae0365ff25c4528a044f3421e25eda0a996a9bd70fcd535fa8b0b37a07d533c9f9875f2987a4e4da2e6f8f63e2e53948e3dd1a0a738b47a7d8ab069f28555c024676cca57c86aadb84396059ad82ce45305623c8be3fc0ea3b862f93d513a72976a5c85057229a57208320a15a327aa5d29b5e0d483b10499d0a974506d7ad744ae099af330b0e9c2d44764f13e683878eda0199c35153b100b01ae9b0ccac4f2741410d1ee78827da8508604279d1d9cccb9c81cefff9679b7469b7d3c56e5dc2d701a9055138701deef6dabac3fb7ccc2978faffb7b16132c73e67c0666df58c36f0ae3a0fa0ccc738dfc7bf12f46dcc9469fb2049fdb55795d62c8e7c27005809b8fc9f5d3f0f365a59815d92ae5144ba456154733af6422fda3eb79442f2125e714142a3bee6788a9de0478a09b58f7e2606b154a9ab0bd5a92ec821c2fae8380e36c6c337081128a1c5f5871fc50c58aa6def306b863010b4de94c33fa9647115c6ade57b5730cdf0f4c9374fe787e1c066a93568a703bfa6b3f039bd24ed89f01727780a773e385cf584aaa9edcf6c429fe281a048c359f03e1021ac89b2f04e57784dd7c04e9a3c878905883e2ec8d5e8c26fea17c3fae3cdc8aee048c5fcca75d1023bb5705aed2a3a0640eb9dd1c40ba40fa4ceaee851c4faaf231306850d68ac09ec5797ec3674af411d6f08c7e86a9cc4337848410c71dfe66808cc1eea27df3be545d3a4cc8251e16b8c68a4dc1033d4c8cd786391fdf5529d04581e556ed7ab922bc36b0155b4ee65be1ef05fa9e904b0a915083f78271444b870b7a625615db7e6d82f44e5e85a5d9ea3abf6c4a6d96fcb3e37bbcbf66536cec87157cf3142bb6fd56531973c6ecdd8140048259401442307e448f7c9fd00496fe60a480a8e109716922389992981a001079463a36f1fe32344d7854ae0adef639b12be258c5c258223b29dc0de66dce0d6b90c97393713467e2d129b302fffe4f6182d0a5cc70b9ae49c3dff4253b3e3230912b0e24bd9bf07a0f402e77a8bcb3780f816b2abd112243865aa7d37b1ee081ed0ba00baec08b1d6e6405c9044b049d4065124eb0dfd51a24febb1bf35d469a0b927d8a281b93c5ba048bf3e2e63694de2616c44e6bb6e3e4cc0f1cf692ed1195525890dc5f202d3c2bc22e3f1f50f9e9ab889d077e2f4d0fe8a1c82104cdab2c76e5e120f7baf5bd262105bb6a85ba79521e5e9a62597b8185da5b67b880dd3ab436b39fe9eafa3e82b7f60df3686418bc952e7bdaea5c58f82d2b290c796ecbc9cb33a1b6dbfc1ebab5c236ad9103e5b27da78300bc409cd0c6aa6ba470e0901ef90128d3536014761ff88cb4df59d67f1139068e03773f74aeb18b6e0a45cc2637203cacb41978c77bc66403dd33b318abb5a8a111cfd259eabd44af80dd66379b7fa6e2a036248875707eaa23c60971e92c0098645395fecc89bbe0d863297763c3baf07e11e6afdcbf985319ede71bb638d12dba76695a689abdbff2774f2f1063af3cf0d3338fbe304d6ef3b39c65f11e0a4b128778303d991ecb8dd7a3b5eec0118b9ef66b0e5f3244f2e3602910354a4e5b44831adb4cd9cc35b856cdb6aeab36109b694ae6afba90e9ade7caa57d697fd69a00558d7913d7fd0962f2a8f7afcfdc6ee1deda4c68b23476ebb4e19549a124bb1a4aa4608fac615d0d4e53497a5b668c68f003243396f2b9fdd3b43aaffe8f266ce3eb52fd89ccb961b31683637974d292f3cf44b34879cebed665073091a5deeca31b5f85d6848d237dfa1aa9e7dcee9a148064c9a38e60accfbefd6dc7d91dda12326ed33e7c05b48f7d056a50787b457d48f1bc77fb426b43cf43d47d693a41f1dad517fdca93ab18f54073c4d1a7c9b687d211577127f208ba49cd74d180772deb63295f2de0e0cf4c61afee956880eb7df941d42358de4cc5f4af9ff695b3e5161a528f9b9ceef296aa5d55d220fe97a6df2fbff2ca967ce48afd06ed04703559f3964d7dfb334a233649b89ff3d62c17aba82328e6f30e8b45ff1def296eda80926d6d7fefa362aad2b6416c1a68407baa1bfa222bd65f5cb1d3dcb4e21dfeda5e8bec27dff4b21a77ca89e97964ffabd160e0f220d21e48350f3e63d12b9b10fa7dbfb1d89a7891a8b8f77d91eda768dd9623778862d5fba19dba941d8b6aeb3ac06e246ef0cbb8c026312b392240223afb981dc5ec23a0b60be863efaaca2bfa8d1a82411e817aff80712172b3096d91492bcb0e56c3b4aae914d6917a13a14526b0d84e9e399429f0a02507b50fa35bd1c382e3ea52b868723852e8fe7fa807a522bc967245a089af901e088c63c1d5a2a59989740ab8df7b8b00589a5900418cefa27a19b58d482a29f7c0380fe39a40f5413197a94b414094db2", 0x1000}, {&(0x7f0000001e40)="9a0ba73a1008aa8fd4b678abcd5846d39b2e76050e018c397e5111185ff35338d456641a278e99d0e07e7f4782e2d04ae84ff758a1f9a9a3f83e79123e9cee268bfa95dfa55238b15e804db9d45aff5d779acb236ad9d8c1deb59dda287ec9217e87a078074c", 0x66}, {&(0x7f0000001ec0)="5fd04370d1d9e8f1ec1b3282242b50658bea567982d0da31fb4c8517f78f2a7042f80caf6d37a0edf32f6e931178398bb9126501e25ce68e377cdb8ee8c40de6e82b60370b60a787af8b511850e5d2701f1c9ce0f29e76e768a4dd93773675812c8eab398664771648f907517da419974f708ca5ffa5738d9c37d494492794b3c945d32da0f223b2198fe17a472c40f5acd0bba7efe13631ce97ee62200d40aeb2fd5fd5c12e9ffab84ddcc7f4d409d9cdb5e2070ca9a878c3272fd4fe2bf6df53af3328486ec02bd05691c38f5ce17fb0ed4f8f85376f834d27d60cd59bdd0794c8794fa15e69e10d2d244ed63aec11505e3f50c102", 0xf6}, {&(0x7f0000001fc0)="72ca1da00385ec42cb5e80ad8583c23e2ac2366c423780342b1e654fbf7ed1b0ae9831cd46d2cd0e2a82ecc87c8ef0400b6f9239dc137b6328351e691e4748c8ef4df83b9b92c41b30ec84db58e9", 0x4e}, {&(0x7f0000002040)="f562bc477e27c1926d39edb913538d91d141250c71d5d331d02f05f5c126a1ea803b55b141d640b2cda6e528231fe7f01e18399553119e6288b7d5967f872059e8b9008571424417aeebcedb06751d2714ca5de16ee0ffaf2136f7e916f34d07c62c074b94c8d2372cefbdbcaf1a", 0x6e}, {&(0x7f00000020c0)="44ec4edda4d3ce966acd48c703a31dbfc714a9b8ee97", 0x16}], 0x6, &(0x7f0000002140)=[@txtime={{0x14, 0x1, 0x3d, 0x5}}], 0x14}}, {{&(0x7f0000002180)=@pppoe={0x18, 0x0, {0x4, @random="93a13bef866a", 'geneve1\x00'}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002200)="1008f97488483d2cf8650fa28afc2c9797949d37fa5380cbaad982d7fe5a2a52d4e659d927595151cf3d22b5ff7bad003599a7cec8094f92db703e114721681edbef0788861fb0c1cbeb3a94c81dfd901ec696e213ec5926d0fc794862f5596a4dfdd770606a7541ce1e3edef704033e12d6abff6fbf14f66c7571fcc02aaa5200e026bd72260278cb802184cf4c623add8615174f56842f9073210d2404636a13bc25b604fbe8d07d0e6b5a6ea54eb94b7562b5016f4065af30518efd9c8f13d46ed17f982b9a3d627dcdc0577e71b25434d2f714533594e905e52c156073961041d6633b77b109eea95c81336b3255", 0xf0}, {&(0x7f0000002300)="8c68db45c55e9fdcde34ddf8593446b53fab81045bfdc71802ef70b73c1faf02b1c265103101023fdc586c0338413f0d615e2a277ef7a1b8d686328273c095112930b91de0aeb0bcd3a34f0b3338a51df5f59e15252eb978d3d9c1710a7c44d115b6aa6e87fcb7fc8bf2076ebe93274be454de0af92a56e9bc13c17607efd0c0169a22a0e284059e720915", 0x8b}, {&(0x7f00000023c0)="91a75cae08f1e23c3e428027421673cf8ed067c8e1b93c55dffb85ad056bcb5824cfde079d4ebfcb23383c3d10883ec3fd7c1725f95ea418fb352cecdbde3c735ec9f047d2b06571210625bfcecb95089694726a1966f0eea4530d72242457db7754bae7326c6f293d17848e9d17492c90c9f6bd2330b28e5feba198e2560031b567a9b47da6a2a7cd80dc8d5614ef424b3a024671ae0ba79290eb3a1b6074f8cec94f95d9aafc7fdea612abefd7d1800842b17e1ef13c28af8f50db3aef504d336e0cf4aeeb7cc8df15df240ca21ab7a9b9b197308e9c8f7eaa89b454b1811275b85a5df4d767ec0b5a86871f9f0553305f4637d5a9b4d3ac2de7173e", 0xfd}, {&(0x7f0000000080)="3e888d8d492c1fc0ba09867f6ffa8636acdf39f0ae", 0x15}, {&(0x7f0000002500)="6fec746f1fa7bb9eeeb7169feca55f6f65fe9acd537b508aa18f61f262d616568779a384278f73c4a3aa958991ee07e3ca60c31fbb456b9a32977ad53b9b6ddc819a3b2cc256da2c31ef1af1121f5e39b05bc91ddae31ec64f6921cb752f5307986c9232711028235ad55f02ddf18fa4106b62fce24b4a3b88f1082b065146cdf2a5f4aec0fab95a47e79ca176936b6818f4e256d3f95b7d781d6ae95e13cad22de1af10887552e769abceb4a9cac5dda3cb6d9302650bbc721f85e812566c7d282f28dfe58431c3bb0d909e42d8c0d6e739744a1ca5be4abd1c66d6616ce965329b8c8c63a880", 0xe7}, {&(0x7f0000002600)="91d13115277bbf6d25d8692be7b2f38a57e0456192be705f54a0558b82b3199ab1d4e0ff73daa18ccd2220dc7a5fedf9eb4f450a9a550e7b23c986cb4e294b139ade3634ebcd01f5009f3b231b66cb116928b1ddd35bc1d45aee75a4017e5ba99e6aa5fcb108ff227dc03261", 0x6c}, {&(0x7f0000002680)="9c421783ba7b0d41a23d055c1d64450966dcf05946971be851a8e7116c96d528c5a0b826adcf96415f2a2d201b87884b1030cc2982686cc7504a0caaf527a6352623", 0x42}, {&(0x7f0000002700)="84b23bc9595477d91e1b4b43b3727ff38634eb94d19eb5dc83c50c8d02aa2cfe85ad10103a97d019e99a598a69b278db4d29a159e2b73fd126caa5110dc153a9", 0x40}, {&(0x7f0000002740)="8ddc1b189c814ca0d10ca8219b6f30d6e0a7341ef393bab65ae1899ffb65bd546a6aa5b7103e93a1cb5cd8e9881210dc629b7c50e5db5dee08eafe074e0b68888d09960235bb9e6b8f14a2f9febb31869d17b347", 0x54}], 0x9, &(0x7f0000002840)=[@mark={{0x10, 0x1, 0x24, 0xb24f}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0xfd0}}], 0x34}}, {{&(0x7f0000002880)=@ax25={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002900)="bde329e00bdc6f9181aca706d56a593fc6709d1e948bd5cf7685303980be4f32a72e909af7057ee6728bb5ba1fc5e5", 0x2f}, {&(0x7f0000002940)="5fea07027c0d62842259954f17352e5f79340e04e6343795a06e846c0f28a2d2fa1ea17dc742aedeffdd9a6b8fe09bbba39518720c1de21a54718c62b66f04bfa83fcf9508a2b2f92b6db141b38455be119a6936e4b014741afa6a0abb6abcec6d9d1186f130a970dbfc66850f8b5465d90988c2fd6c0bc2ccb0b227b36e2f55063a400542800181a8976b7ea62dd7c825f3a2fcd826", 0x96}, {&(0x7f0000002a00)="79bbd265750fe263eecd12297b5bc8cb506f0fcdc5c37b6a4eb6e7b0c61892489e2ddd4b5c1decce936a850cdfb91d55a5b26e43d58b272a85adc396b278e24dedb187a881395838385b2fa6f55cd0d6f3196f488f73b23d9e14942a11f392ebfc4be9e7010f7a89516f52f3f38b740a1163bd308b68189f5e0c84c3af6e2b", 0x7f}, {&(0x7f0000002a80)="d8679aefaa6cbbd64c0a43529cdaa9d5615c686f39eee3704964d9af45b428a33a23b68d6b52e4f543a02d386aa39f82bd2edff16d2b709019a1b298d99f6093d551b4c4d9714c64c38b5b8a338f663e1d7d3a5e42215932e224a70c2c35e88a692f3b8ad912e919c35ace86f45d263a1bd92b497c7fa79422bc8151284c4da97840fad65a3d79817f18f0c3bd0c204bc77a87117f123acf7447476fef8382aa51996dc02839bfb8218d68d65625ea6989b634e430fcabf605025cc4957b43ae9d6d4b23968fb312b75998e83481b97cc62aa180f58abfd573e2ed27b2d354efad1d9c7f01fbff767081d5a79e34716762a5401132", 0xf5}, {&(0x7f0000002b80)="f8808e95178dc77f5849e3db4c3995d29e202a9d6ee304bd3107257e198a779845dd8beffaa2af142ea023d80c58836f4619db5ee07e34e6f26ccae41e064aea732a13b8ee25c265682a9576505732730d260336ba3335b0ab0a80143e0e7f504af7c3f02aa214d34d461f0d5861c2d6f925d3850c0ad0531a49cbf72d6f2b5c26e03de9da66e989f18adeeaf2bc4e3c9cc56e7b7c95fd8f5dfc95b8e8f4a6b0652f2d64ddb7762a063237747e1c23c0c0a4f1b84bece907badcedd299", 0xbd}, {&(0x7f0000002c40)="b68e982ba307d7111cf7e68aea6a3cb0388603de6c2ce6c255cb4513488931b0eadd955968ae3c8be23b3983e4e357d2ffef3eb6f2024364bd73e018ea50b2e627", 0x41}], 0x6}}, {{&(0x7f0000002d40)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002dc0)="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", 0x1000}], 0x1, &(0x7f0000003e00)=[@txtime={{0x14, 0x1, 0x3d, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0xe}}], 0x24}}, {{&(0x7f0000003e80)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xe3, 0xc, "62845b4a9c5a3d1d2ff444c46eaf6ed80576d09b6e14e2c8a38ee57e6666ebfe270484fa9d56a62111f625c548a45497a74ef3d32cf6a3933a6ab4b958ca6b", 0x30}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f00)="bf24a4bbb9638bd7a28b96fdd069f2e5471f9e9790b6d30bc413d0cc0e0cf70f3238191e6c2571ebf637e00b8115162dfdacdadb1fc23b012f961b8587ed26392f1063267c9fad0ddd2197b1", 0x4c}, {&(0x7f0000003f80)="d0d0767eafbc8440460ef2e23da1c7931feffd6ad4a83417c35ac3768023efb33b4c5a3f9d3f2bf8ab0d665e2da5075f03c6c11b567f04cc1ca43be6c484529bfe1fe6f7179f13fe5172e0364b88cc0c1c645d189872c9f8af479105498a238de675bc549dc4484648c6318b54bf4b1d7438480248a0c90ba974ae2413cd7031bf62b6e1c9fd35adcf", 0x89}], 0x2, &(0x7f0000004080)=[@timestamping={{0x10, 0x1, 0x25, 0x200}}], 0x10}}, {{&(0x7f00000040c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e24, 0x6, @remote, 0x80}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004140)="7c190da4dbc080afe9c3024f1bb1a774272fb25d18b92957b00ebd36893dfac06a77d726b09ccc6eaa9131819379455874b1e2d89581035d7fc5a1924b6bce1fa108c7754ee257ee6bceb8950b3bb33dccd840dc5cf2f68111a79cb6b76d60ef2b48b3e11a6de0816d2b298c5c2d08c38ec5546e9a96e7812701f61ea2ba5d8d8abaf6b843629308fd2f4f9ee5dc8801184eb75a52d6035cd1ad405bb79cec423f4d959e5616aba8e658244bd49cd4ac0cbcdbb5d179db3a2e94d0d07f7ea6dc515b477c4e8010c99f28f217b08cab8501f5f6fc9bdf0144176bd5c616ed47f28048966c8fd493cb17cf80973317851eaf457dfb46b370f2f3e9848c96df9ced360d68aa1c4c8d0f7f4b4266150ef92f1e1a70b4c5ecb7a575316857e7c2ff9b47532656f15323dd1109d9291ea87e9adc3a5f324907e88b924e4debe51f51e8e30bafb34287674a7c1e5c32491e77923271d4d68246f18a2685ed24bb7c26a974ade3c1f1731ff32dec82bb78f36e908646ce3ace41a60f92d151a62c093ae5e42677d4192367b7f8a5b0b2a2e2016b806cf7977fd68183066803f7d3fda0e3c58ecfda4a05114fb6104a7f86af48faa99d7b3aa5b619726901afa450a1b878e7f2805f076d77fa2026ab6fe37ed018bd88a7cf495b9d7426b7c065e0a83cf217063e801f29c676006b09990e5d360e240c9c56b8ad48cc13191720603fc1facdd3594b6c7872d2a9d5b281c243ae91c62ad8a7e766d88a93a668326ddb9d03be519d40cbb2ae356366d1147969b646312f342082011ce76841c38e2ae10d28bd9a64e2aef7366460b00c261102baf03bab5f57b26c894c26f7354427f443f4ac4015b09603f6da4d29d408d662f14dd9270bfc7b1bcbd002eb230cf873b3d9075e6c7fd79bb051a1c353e5207261af97c7fe0d561d81e67c9a38fc1d7001a27348e24679d6c5ed51befe0e32863a6cbb056a2ccc408723f652c601ede79f73435d7f96a88537879d938e0bd15864473e3c611bf6efef9efc16444e2a400c5ad3b440ea32dd639aa37656a64169aa5441ce6190572285972340c7c035fba0755bb9aaf36d63562e243865ecbc35ebcdb7a8892bc447b2a16679a532ff681f00ed0ea72628f82f77b286bd19bf19619ef8b44d3920ccf6c6a1382ce802c15b378ec89cc4f415cc34b6e8d9f7a6b000bd6d3b95ab951eea2a4de43da205aeeff1fda3557ca43f7b0998685e4a532023610e1cf5db9d4da96b0cb580bbcbd6fd39a1ff7dfc509ef8dcd9db1441b4770e90146690b686c02742a0eeae3805715a45ba467a4194be68fd05d9cc811b94033414481e648c6b60eb723ee3b98b5830af1a9fc75ca0ec33b410790d3ff45c7726ba11974ed74f95c958ef39ba140c3d496db6117b3f5da6e744acc9e6312bac8dc6cb4cbfc1b4606a03a76e29a3e14c70e210a9ab9668713ba86dc04e707df54a13d7f44fa986d5c030d3dcb58d75aed2c0380891983c42d3c712e989b0d081dd8894ddf182c56c562f73eb9ec2fb0b79a537356c62e643f732aad23b4538cf7f442b1e54723de1df4dce09393667abcd91c786022308f093ffff65ffe5b440b61bd64a3de27cca0faf019bcb26f024e1b3ab5cc08d4c830cd1decaf925811c2f68d620fffd6d85611d9d6a3f23c29fcb2a79493eadbd2487f3ac15c03bc06195f01a9e2cae1e0b8ef53a1df4765e88af752af9b4678246ae144746b91b7ca609d6259c42776bbc35a0338506b3a8357f8427916fe988a0378dabd5592d76bbd5106cc36798c04323827ca9e65733ce20d5a811c69586a1b22901b6a1b0de4e08764d3c76ec1d8c688e6f6fae350ff139a7926d9cd5e10e7353bedfad0ef2bced0f2153fe8087db3ee90c6013c9bd2a5491c87f10cee56010cd861a2d076d4f4c4806c88c8ee77e6638f96a0736e6ad2b39ee1f8cb8c86c0618b2bac66f213562761af24b4ad6a9570da531656705b52dc4c3fd723511f47d956d1a5ae4888f1d9600e47d8d84122445fec6ccbb80b9abf7059a1515caa13c49f79410ef247f0d07c024de5c97e7716c314f1a6e2ab15f384596426c2927a3f75385701599c097cb6a05960211ee52639503118f19b547095322ece170489611b4753a7ec1394ae614dd183010ca41253be4dacb87bb761b8aad582601be49fc4ffec47b5a68e268f30d9e31f57213f00cba41fae18d69a73daadc621fd29ce19cae630aad36ac4a3fe045ec6bab66628d79f4ba4c3b2aa3209c925b266f1febb3f2923f764af120dd8840c42f4f63b83bb0bd0f54dd325df1b25ff4002326d4f847da852c30c1022d3ec9138e889cdaf468483c1df4f59a7eac8b878da97169f62ee235e9e23ec2a1b57f37a26823f1810bdc56f0013454cb6c4663d07b44ce183a0c048a00fdd616590c52f6aaee0a5330cb789af211d58ec248e74d2be771d23135cfafe0cd35838278bf3638d6a4931fac61397a7342282b93e3851ec0302e8f2893ab481e1d2953205967d165347bf498fc1e8d63c32f538bd55498beee3afc1f9a2d1cab90b9b65b76318fb383194374220409dd0c62a8752177a4875b37c5d6bea0eb638e438022481f5573d066a2620c402dbad3dcafcacd8ca2381238e6a76a75214b96678835529f49f19c959a4ac50d96209932a31dc665e279646edd609b5d5d53809a689e7d8168b19543a67dea7665d85370ca14aa2101db5bb9a2773af90a0317ee7c2c1262cb937dca0af89f603e740741b1836497b235a90bae134aa53d4a3b1d57fa2ee137b33d381f71f3b2b539ecf6a211d5bffdc2a1c519a0edaefd682bc8d90c1e90a4398ca337983b84dca49032f6b88ab4b3ce44bfed0435f056107327a5b818f5a964bff7fa4aa94d564023b83f68eafaa31b5dc88ce3bd7c2c9524e70eb023bdc604ef3e556a4a4c8c55f126fc23859ed48706098a590de39cd54712f9aa8610ca081c5e4955f074e8f4b7b130629290b6662846a02124458a13cfb1f4dfda98cec774f612b22e25eb3dd543c0ae3611e846419a5916a42defff14a7d0d5133979d2851fb0d74228c605912a77cbbe4f1e494d44a7b12b2023b01834b5b67f56876469d5ad5cc37523ae24b480d8538282b746705c4a6eea515e518f8276b3b4fa6a715ac8bd6827d89b3cee7c4cfb52080cac8512a59e2473b8672bbfb59f5d5bd7b60a0d55bde1a498e7d853619ac7010e30ba856d821ec29f4645b12d5af2d8a54f4f9c44f43725abdce06e09899339777cf903ffd4a94b2d567dc5915f95e9ae6e8e94057eaf8d0123e62ff5fd4fa438d6207324192a19c2d9739fbc59be75791a26b6eb928856defe73a6dc30a4d0fa36ac86dc003992061e0ad18ac964f6eae11cdf9d3fb2a94e42223dc9347356bc027016addf4bd17cf68c9f37dfc6c46c5f850f7c1bae0bfc61bc1cf24cb7c0d40a4bf66e782d8c5549124dbfeb14c2efb0f0a6b4f258daf68cc7fe8243218e9a9c507c18d1e4c0b915acead3789d731e4de0ba2257040aeb90f5ad49db952d5fd84eba641bc57a5835a48df9cd63039d505303fc1c04fcc728313f69d6a139b7915981484fc7e5bb86640465c4655a7fd93ab225cec092c9e1f8c916c50c2882b0fe63e6e9328161c933db9debc14777af9c6af6b18ae33723f98e9a505c578a74882e81b37c17b9c9fdf34e86a28830db0eb9aea8f6cfa9f4cf2b2a700d8cb939082aebdce999ca06a42bbed1d90890f230f62f2a5779b6bf5e72bc846d7f53b36e009c196b47cd3650d36187fb7846fa57db60f96ca1c2a2f3af24d5b44ecb76eade1c60b783520f5a67a20217bfdd3353a0e6e3612243067974df4fa17aea355011cafa7c6caaa881a6d91b11e90390af02ab3ebd2195fdd55b21e460e3b5b9a6f65e4f47041e9261cac1825568b37e8925fd8de1ca0b83ac6f4b49ecac51e1f8052f1d3fb414fbdde7bebf5e05a28c3fb544bd7276096f073c58e7461da0ef3584200f1f1ee458636e7dcbc07799dc79bbcb0dc2cdbd4f4580d6eff3cdf3fdc241091a24424a62e2ae2ef7ac330e9582deeb635715ff911c5e8d1588b1b8eb607c3ccc6a9616efa6fd861d48b2dc09d54c1f22019475aa74adb5510b508489f52fcbd97585cf3484efd1516e1ceee147737e4ba76d6bb46645d0b02b334e676e7bf58b132e7a3642b009e34a2e69f12cd670a5b69582c6b5379747d312f689b930a01f7668414ed8033e43468b5c0714ee517da3cbaecde54adb4d72ceec74a75ce2f60f3918229d0c3be7a9cd433ac823110c5a4365dbae531779422a73fe74f79e2a1a37131dd06b5a5f0cdb5d4188acf787f73641dbfa602ae04ef8a1f2095787297d2b8cb65adbb4f55b656a81a958dc251a0aaed905ad4a13f91f50e797ddd791881a0261dc3f4e39f2911e4701bf5d0d17ec6a7ba24c85d03163c46716ca2db349139b63968222f36f078af39d864afc5e34770fb9bcc29345ca63da6cbc3651a3625da98611987699830020f4ece155bcaca8c9c31e402ea9f990760fc926fb63613768a7b4cc73395c0e5d211c24eb5abd234a616c20166f0468711c17b25a3f819b26f17308714f6304267fe95af8982c279fc19588acc3993fca07b008bdc47001ffa046d2d6c5b8c9434f07564e97d1dc0cd1c1e2f03675432e18e583c890ad53c04351562e391f5dc69e5bdbff4d5e3e8d92b0bbfcdaf710ae5353a673f4a2dec282d47b3cca528951f5b495454a132961117bc015d9111e117808a72329399d0fa4c72fa07cac9ed90d946bb85b939eafd128893ae64473164c30dc9dc22be74762610ce3d5d3f0031d5a879f295383a3a0ee6a691110f6c078be966a1a438cdb7e3787830adea7dc9638c9f81f61b2a3295c008c448d81c262fd070698070f8b77f115ed61b88e1355fb2c7e1062f354c735c95425f2476fd95de98f8271acc947e78969c94c0d3dbe3b3ab4efb42c10d4a7c514c1d4edfa564bc2cf7d6860ac8f93e7f7c9b17a863d85fbaf2b2f25674571f7fd0a132037bf4492697d12071fbcdaa42d1e9f677004898a3a5e127308f7db9829402fa917f73f7a51688eac1691d0f3018836fe249ca5d04a3fa26fc40d5e21ed0ab6c630aed7aaa47e6336c66e4c6269e31c4be635891402678f144c63bb4072caefaa13d1acbe85f06fb16e1a2c8795154386fbc343b8d4d30307e1a88d415bdb77c6fa5ba48405cbb509dd7e55e4c6ce7c919f1854e3b074c91c9288c84a80a35bc63eba6dc9511322c38ee37895f31d62d48282c00b1ef20282b1d8fcc146512620a4dd83ae7591acc689d6e929395bb0e6e5f6245a48c3f98066860a7acf342c267af9f48dde174d5eb2216d1d5e98c2f4e1e637a17f7c263123cad0c190f059288a5064815f116298cd1b11e5315a19714254e330ed26a05c698cdcf1143186118388b6e4cabcfa39657b004ce88d445629005137137d902d6dac1a7db79ac70105d5a46295bb40a10f0adf34e6a6d3fa1537042542765b6f0788513c99df264b64ccb952a5b0ba4f579db9ea799228b6486facac0be32efd431fd628628d26f1da4f69b7ac76b1c68ab523c90cad64c8bbaef0e9cf19f4171b583e6abdd7ec8e09a7c0770de912d9c159b769c62d4235d3d2252625e5b1d194b66cb27c37907820b25e5dcd4ad94ae512e4e0971a422a3dff6522d8c9144f667741533a4a51705ea38c8e748b50d4fe9d0d8d85addb08bdb2c3edac3fc9f0880e21f961eb198557dfee3d39868bb1a915e0bd22497f6d7e857ce391c204b6", 0x1000}, {&(0x7f0000005140)="650a23a1884ba03d72b25ed36aa3511546ba603fc4cfbfc26ad37ee80a0d0c41140ebc7a3fac74c321b47cde3cbc0093124669154e3f8bd0548dc4e0a8e68002dd3ffac70bb95ac96ea2547e7a2ce22d7e5b3847964fee57f3b1b824c2473336e22aa83b3fad87e9fd149a90458f1413d7b0988b4b8e7f1fb4f64ee575d4e8d710d3c373947692599568324fba8667bba84dda23d3c393bcc3df9cfe5e3c7c9a2a33b6d755078091ab16959720ecc13e02c8c0be8c3c646b3231d152bbf2735440bc0fe03c85e1836bee8ed2f1cebb5b0721b7dbf189b2873d033ea8e35cc7e78e30e17419", 0xe5}], 0x2}}], 0x8, 0x2004002) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340", 0x9}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000400)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0xa2d0}, &(0x7f0000000100)=0x90) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 20m34.361998445s ago: executing program 5 (id=4436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xffffffffffff0000}}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x807, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x101001a, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}}, 0xfa, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32314247, 0x8, 0x0, 0xfffefff3, 0x1, 0xfeedcafe, 0x2, 0x1, 0x2, 0x1}}) 20m20.418004492s ago: executing program 5 (id=4467): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') getdents(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$usbfs(&(0x7f0000000140), 0x57b, 0x200100) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02e79ec96d00"/16], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) 20m18.002774393s ago: executing program 5 (id=4475): unshare(0x24020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4500442f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200080100200000000000008000100000800655800000000056f3c056c180486acb6055e48ad5742dcfe9448548393f2c29edeff06b1d26a00210ff23b723e5c1371b2de0b75aff941f46f19b1afc56dd0ffc1e14a3515eb2fa7a90c3b4a0df5b1a1c0a91279"], 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000000c0)) socket(0xa, 0x6, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000140)={0x80fd, 0x1}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x15c, 0x11, 0x148, 0x15c, 0x10, 0x22c, 0x2a8, 0x2a8, 0x22c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x15c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0xcd, 0x9, 0x8, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x31c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x50}, 0x1, 0x7}, 0x0) fcntl$getflags(r1, 0x408) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x2c060000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) inotify_init1(0x0) 20m16.771081162s ago: executing program 5 (id=4477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xffffffffffff0000}}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x807, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x101001a, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}}, 0xfa, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32314247, 0x8, 0x0, 0xfffefff3, 0x1, 0xfeedcafe, 0x2, 0x1, 0x2, 0x1}}) 20m1.145116128s ago: executing program 33 (id=4477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xffffffffffff0000}}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x807, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x101001a, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}}, 0xfa, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32314247, 0x8, 0x0, 0xfffefff3, 0x1, 0xfeedcafe, 0x2, 0x1, 0x2, 0x1}}) 10.598175197s ago: executing program 6 (id=8980): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r0, 0x0) unshare(0x2040400) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r6, {0x5, 0x1}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) socket(0xa, 0xa, 0x20004003) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000680)=0xa, 0x4) 9.323289133s ago: executing program 6 (id=8985): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$dsp(r0, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0/../file0/file0\x00'}, 0x14) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0xeeee0000}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x3000c041}, 0x24044094) 9.021119382s ago: executing program 0 (id=8987): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_format(r0, 0x0, 0x2b) 8.958367884s ago: executing program 6 (id=8988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 8.935468155s ago: executing program 4 (id=8989): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000013c0)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/185, 0xb9}, 0xfffffffe}], 0x1, 0x12021, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x122e) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904"], 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 8.664251675s ago: executing program 0 (id=8990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000043c0)={0x30, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x1c, 0x0, 0x1, [@nested={0x10, 0xaf, 0x0, 0x1, [@generic="000800be93fb383cbda11000"]}]}]}]}, 0x30}}, 0xc000) 8.400418263s ago: executing program 0 (id=8992): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x94000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @win={{0x6, 0x1593, 0xa, 0x1}, 0x3, 0x0, 0x0, 0x2, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x7fffffff, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90ffffd99cff0000000000000000001000000000000400000000000100", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) r5 = socket(0x400000000010, 0x2, 0x20000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x2b0, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x27c, 0x2, [@TCA_MATCHALL_ACT={0x278, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xeb, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x130, 0xc, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x20000000, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0xa5, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0xf0, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x101) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000200)="58842596b312", 0x0, 0x0, 0x30, 0x0, 0x0}) 7.380927962s ago: executing program 2 (id=8997): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x1}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}}, 0x0) 7.244353221s ago: executing program 6 (id=8998): socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) 7.080377921s ago: executing program 2 (id=9000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x5a) shutdown(r0, 0x1) 6.888231987s ago: executing program 2 (id=9001): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) syz_pidfd_open(r7, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x1797, 0x15c, 0x9fc, 0x0, 0x1, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x20000, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x5, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000080, 0x8000006}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) sendfile(r6, r6, 0x0, 0x200020) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200002016910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 6.265856982s ago: executing program 0 (id=9003): socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) (fail_nth: 2) 5.552899099s ago: executing program 4 (id=9004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x7, 0x100010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000100)=0x1ff, 0x0, 0x4) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12"], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xffff}, &(0x7f0000000280)=0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000050601080000000000000000070000080900030073797a320010000005000100070000000900030073797a310000000005000100070000000900020073797a320000000005000100070000000900020073797a310000"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETSF2(r11, 0x402c542d, 0x0) ioctl$UI_BEGIN_FF_ERASE(r10, 0xc00c55ca, &(0x7f0000000040)={0x3, 0xeee, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x61}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000000c82e88600feffe3ff05000000180001801400020073797a5f74756e0000000000000000000c00038004000380"], 0x38}}, 0x0) 5.44703344s ago: executing program 1 (id=9005): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) (fail_nth: 4) 5.262484006s ago: executing program 2 (id=9006): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000000240), 0x80000dd, 0x10003, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0xb}, {0x8, 0x1d, 0x0, 0x0, 0x2}]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x4000) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f00000000c0)) 4.892534473s ago: executing program 6 (id=9007): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000002200)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x3}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'netdevsim0\x00', 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001e0001030200a88e0ae37ef22b"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x6dc183) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)={0xca, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xee}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdab}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x80000007}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x80000001, 0x1}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4ba74dda}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="570000000b06010800000000000000000600000205000100070000002c000780180001841400024020010000000000000000000000000000060004404e21000005000700080000000900020073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 4.846973553s ago: executing program 4 (id=9008): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d56210fffd16150aedaa3efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f663330d726bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78e2234cf265d6d9827390e75267181becaff1a6b0ed0eb8dbb90d8f4e1b1fb7af7247e2115758c3a7eb32db3b09f6e1ef87eece9f742262f91a389fa54f81dfa7b80f595d047c27e797cb8d0fdf6e512e174b852e2ebe8453d96bf25f04a9bbca787d0debcf066a9f30c252b6e97aa33174759bf9ffffff9ae737b82c0379bce7238b81260c999cbcfbeafa779096b726accc492ca963dee2b946096895ca7b2962e258a805178fedad65edf926f4db13502151bb59a67ac827565bb1be671f692b", 0x39f}, {&(0x7f0000000340)="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", 0x1d9}], 0x2, 0x0, 0x0, 0x900}}, {{&(0x7f0000000e80)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0d00000000000000010000000000000034000000000000000700000000440cbe03ac1e01010000000094040000071731000000000a010102e0000002ac1414bbe00000011000000000000000"], 0x6c}}], 0x2, 0x0) 4.779806741s ago: executing program 1 (id=9009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 4.451447197s ago: executing program 4 (id=9010): socket$kcm(0x11, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x7, @output={0x0, 0x0, {0x97, 0x9}, 0x4f2, 0x5}}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) mmap(&(0x7f000037a000/0x3000)=nil, 0x3000, 0x1ede8e627471f6fe, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a6080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.276812303s ago: executing program 0 (id=9011): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0xfffffef0) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 4.112154785s ago: executing program 2 (id=9012): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$dsp(r0, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0/../file0/file0\x00'}, 0x14) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0xeeee0000}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="48c7eaf1af46cd69c6ff", @TCF_META_TYPE_VAR="8c862d274530a00f"]}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x3000c041}, 0x24044094) 4.063524203s ago: executing program 4 (id=9013): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000300)=@multiplanar_fd={0x9, 0x6, 0x4, 0x20, 0x5, {0x77359400}, {0x5, 0xe, 0x3c, 0x2, 0x84, 0x11, "92bf360d"}, 0xfffffffc, 0x4, {0x0}, 0x3}) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x16, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x1, 0x0, 0x12d5c, 0x7}}, 0x44) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x201, 0x0, 0x1, {0xffff}}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000003c0)=""/4096) syz_pidfd_open(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000200)='[\'.:\x00'}, 0x30) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.635005474s ago: executing program 2 (id=9014): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 3.240075903s ago: executing program 1 (id=9015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="142400001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3.188380489s ago: executing program 0 (id=9016): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/60, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 3.038755368s ago: executing program 6 (id=9017): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) fstat(r3, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c00028006000100"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.450304214s ago: executing program 1 (id=9018): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) fstat(r3, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c00028006000100"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 831.338428ms ago: executing program 4 (id=9019): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000180)=[{0x1900, 0x800, 0x0, 0x0}, {0x7, 0xc800, 0x0, 0x0}], 0x2}) 402.304565ms ago: executing program 1 (id=9020): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="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", 0x39f}, {&(0x7f0000000340)="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", 0x1d9}], 0x2, 0x0, 0x0, 0x900}}, {{&(0x7f0000000e80)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0d00000000000000010000000000000034000000000000000700000000440cbe03ac1e01010000000094040000071731000000000a010102e0000002ac1414bbe00000011000000000000000"], 0x6c}}], 0x2, 0x0) 0s ago: executing program 1 (id=9021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2c020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x25, 0x6c, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = dup(r0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)='veth0_vlan\x00', 0x8, 0x7, 0x2}) socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x130, r4, 0xb12, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @private1, 0xf7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @empty, 0x72e}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="d365e3e48c6edb64d87a9a9164933405e44f447e02d8716e3e37dae69681bcf65de3ee1de0ee71c28919072f1836ec2939a0072d00b0a94a67afc1c453048b88f4337ae89b473c90fa085d7add5ba746f1903c3dc76e095716b3", @ANYRES16=r4, @ANYBLOB="010000000000000000001100000004000980"], 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b4, r4, 0xd32, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7f, @private1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbf9a}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40}, 0x4000d) kernel console output (not intermixed with test programs): 95.207065][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2295.213649][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2295.220100][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2295.325042][ T3830] CPU: 1 UID: 0 PID: 3830 Comm: syz.1.8689 Tainted: G L syzkaller #0 PREEMPT(full) [ 2295.325075][ T3830] Tainted: [L]=SOFTLOCKUP [ 2295.325082][ T3830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2295.325094][ T3830] Call Trace: [ 2295.325104][ T3830] [ 2295.325113][ T3830] dump_stack_lvl+0xe8/0x150 [ 2295.325143][ T3830] should_fail_ex+0x414/0x560 [ 2295.325186][ T3830] _copy_from_iter+0x1cd/0x1630 [ 2295.325218][ T3830] ? __pfx__copy_from_iter+0x10/0x10 [ 2295.325232][ T3830] ? __build_skb_around+0x22d/0x3c0 [ 2295.325246][ T3830] ? __alloc_skb+0x198/0x3a0 [ 2295.325258][ T3830] ? netlink_sendmsg+0x642/0xb30 [ 2295.325275][ T3830] ? skb_put+0x11b/0x210 [ 2295.325299][ T3830] netlink_sendmsg+0x6b2/0xb30 [ 2295.325334][ T3830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2295.325361][ T3830] ? __import_iovec+0x5d4/0x7f0 [ 2295.325380][ T3830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2295.325404][ T3830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2295.325421][ T3830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2295.325438][ T3830] __sock_sendmsg+0x21c/0x270 [ 2295.325456][ T3830] ____sys_sendmsg+0x505/0x820 [ 2295.325472][ T3830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2295.325498][ T3830] ? kstrtouint+0x6e/0xe0 [ 2295.325533][ T3830] ___sys_sendmsg+0x21f/0x2a0 [ 2295.325559][ T3830] ? __pfx____sys_sendmsg+0x10/0x10 [ 2295.325581][ T3830] ? get_pid_task+0x20/0x1f0 [ 2295.325603][ T3830] ? get_pid_task+0x20/0x1f0 [ 2295.325622][ T3830] ? get_pid_task+0x20/0x1f0 [ 2295.325653][ T3830] ? __fget_files+0x2a/0x420 [ 2295.325666][ T3830] ? __fget_files+0x3a0/0x420 [ 2295.325690][ T3830] __sys_sendmsg+0x164/0x220 [ 2295.325714][ T3830] ? __pfx___sys_sendmsg+0x10/0x10 [ 2295.325747][ T3830] ? __pfx_ksys_write+0x10/0x10 [ 2295.325777][ T3830] __do_fast_syscall_32+0x1dc/0x570 [ 2295.325798][ T3830] ? lockdep_hardirqs_on+0x7b/0x110 [ 2295.325815][ T3830] ? do_fast_syscall_32+0x34/0x80 [ 2295.325834][ T3830] ? irqentry_exit+0x10f/0x670 [ 2295.325847][ T3830] do_fast_syscall_32+0x34/0x80 [ 2295.325860][ T3830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2295.325873][ T3830] RIP: 0023:0xf7f05539 [ 2295.325885][ T3830] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2295.325901][ T3830] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2295.325924][ T3830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 2295.325939][ T3830] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2295.325952][ T3830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2295.325963][ T3830] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2295.325975][ T3830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2295.326003][ T3830] [ 2296.021813][ T3839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8691'. [ 2296.502599][T13270] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 2296.669628][T13270] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 2296.678155][T13270] usb 2-1: config 0 has no interface number 0 [ 2296.770424][T13270] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=c3.54 [ 2296.785527][T13270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.794122][T13270] usb 2-1: Product: syz [ 2296.812037][T13270] usb 2-1: Manufacturer: syz [ 2296.820426][T13270] usb 2-1: SerialNumber: syz [ 2296.843644][T13270] usb 2-1: config 0 descriptor?? [ 2297.155523][T13270] gspca_main: kinect-2.14.0 probing 045e:02bf [ 2297.270365][ T2361] usb 5-1: USB disconnect, device number 116 [ 2297.323114][ T3842] FAULT_INJECTION: forcing a failure. [ 2297.323114][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.374523][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.1.8694 Tainted: G L syzkaller #0 PREEMPT(full) [ 2297.374547][ T3842] Tainted: [L]=SOFTLOCKUP [ 2297.374553][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2297.374562][ T3842] Call Trace: [ 2297.374569][ T3842] [ 2297.374576][ T3842] dump_stack_lvl+0xe8/0x150 [ 2297.374597][ T3842] should_fail_ex+0x414/0x560 [ 2297.374625][ T3842] _copy_from_iter+0x1cd/0x1630 [ 2297.374653][ T3842] ? __pfx__copy_from_iter+0x10/0x10 [ 2297.374671][ T3842] ? rcu_is_watching+0x15/0xb0 [ 2297.374689][ T3842] ? trace_kmalloc+0x1f/0xb0 [ 2297.374701][ T3842] ? __kmalloc_noprof+0x43e/0x800 [ 2297.374716][ T3842] ? kernfs_fop_write_iter+0x158/0x540 [ 2297.374741][ T3842] kernfs_fop_write_iter+0x19b/0x540 [ 2297.374767][ T3842] vfs_write+0x5c9/0xb30 [ 2297.374787][ T3842] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2297.374808][ T3842] ? __pfx_vfs_write+0x10/0x10 [ 2297.374833][ T3842] ? __fget_files+0x2a/0x420 [ 2297.374870][ T3842] ksys_write+0x145/0x250 [ 2297.374892][ T3842] ? __pfx_ksys_write+0x10/0x10 [ 2297.374921][ T3842] __do_fast_syscall_32+0x1dc/0x570 [ 2297.374941][ T3842] ? lockdep_hardirqs_on+0x7b/0x110 [ 2297.374999][ T3842] ? do_fast_syscall_32+0x34/0x80 [ 2297.375020][ T3842] ? irqentry_exit+0x10f/0x670 [ 2297.375045][ T3842] do_fast_syscall_32+0x34/0x80 [ 2297.375066][ T3842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2297.375089][ T3842] RIP: 0023:0xf7f05539 [ 2297.375106][ T3842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2297.375124][ T3842] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2297.375153][ T3842] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800002c0 [ 2297.375167][ T3842] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 2297.375178][ T3842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2297.375189][ T3842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2297.375201][ T3842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2297.375231][ T3842] [ 2297.692579][T32432] usb 2-1: USB disconnect, device number 16 [ 2298.296828][ T3871] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2299.377557][ T3890] FAULT_INJECTION: forcing a failure. [ 2299.377557][ T3890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.422810][ T3890] CPU: 0 UID: 0 PID: 3890 Comm: syz.6.8708 Tainted: G L syzkaller #0 PREEMPT(full) [ 2299.422844][ T3890] Tainted: [L]=SOFTLOCKUP [ 2299.422851][ T3890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2299.422863][ T3890] Call Trace: [ 2299.422869][ T3890] [ 2299.422875][ T3890] dump_stack_lvl+0xe8/0x150 [ 2299.422895][ T3890] should_fail_ex+0x414/0x560 [ 2299.422914][ T3890] _copy_from_iter+0x1cd/0x1630 [ 2299.422933][ T3890] ? __pfx__copy_from_iter+0x10/0x10 [ 2299.422946][ T3890] ? __build_skb_around+0x22d/0x3c0 [ 2299.422965][ T3890] ? __alloc_skb+0x198/0x3a0 [ 2299.422977][ T3890] ? netlink_sendmsg+0x642/0xb30 [ 2299.422991][ T3890] ? skb_put+0x11b/0x210 [ 2299.423006][ T3890] netlink_sendmsg+0x6b2/0xb30 [ 2299.423025][ T3890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2299.423041][ T3890] ? __import_iovec+0x5d4/0x7f0 [ 2299.423052][ T3890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2299.423068][ T3890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2299.423079][ T3890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2299.423093][ T3890] __sock_sendmsg+0x21c/0x270 [ 2299.423112][ T3890] ____sys_sendmsg+0x505/0x820 [ 2299.423127][ T3890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2299.423140][ T3890] ? kstrtouint+0x6e/0xe0 [ 2299.423155][ T3890] ___sys_sendmsg+0x21f/0x2a0 [ 2299.423167][ T3890] ? __pfx____sys_sendmsg+0x10/0x10 [ 2299.423177][ T3890] ? get_pid_task+0x20/0x1f0 [ 2299.423188][ T3890] ? get_pid_task+0x20/0x1f0 [ 2299.423197][ T3890] ? get_pid_task+0x20/0x1f0 [ 2299.423222][ T3890] ? __fget_files+0x2a/0x420 [ 2299.423232][ T3890] ? __fget_files+0x3a0/0x420 [ 2299.423247][ T3890] __sys_sendmsg+0x164/0x220 [ 2299.423258][ T3890] ? __pfx___sys_sendmsg+0x10/0x10 [ 2299.423272][ T3890] ? __pfx_ksys_write+0x10/0x10 [ 2299.423286][ T3890] __do_fast_syscall_32+0x1dc/0x570 [ 2299.423297][ T3890] ? lockdep_hardirqs_on+0x7b/0x110 [ 2299.423306][ T3890] ? do_fast_syscall_32+0x34/0x80 [ 2299.423315][ T3890] ? irqentry_exit+0x10f/0x670 [ 2299.423325][ T3890] do_fast_syscall_32+0x34/0x80 [ 2299.423335][ T3890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2299.423346][ T3890] RIP: 0023:0xf70cd539 [ 2299.423355][ T3890] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2299.423363][ T3890] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2299.423374][ T3890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2299.423381][ T3890] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2299.423386][ T3890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2299.423391][ T3890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2299.423397][ T3890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2299.423409][ T3890] [ 2300.695478][T13270] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2301.117473][T13270] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2301.157914][T13270] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2301.189220][T13270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2301.253988][T13270] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2301.276688][T13270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2301.288532][T13270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2301.351983][ T3918] block device autoloading is deprecated and will be removed. [ 2301.428715][ T3920] fuse: Bad value for 'fd' [ 2301.481138][T13270] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2301.490931][T13270] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2301.502055][T13270] usb 5-1: Product: syz [ 2301.509625][T13270] usb 5-1: Manufacturer: syz [ 2301.552245][ T3902] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2301.956449][T13270] cdc_wdm 5-1:1.0: skipping garbage [ 2301.961725][T13270] cdc_wdm 5-1:1.0: skipping garbage [ 2302.002463][T13270] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2302.012062][T13270] cdc_wdm 5-1:1.0: Unknown control protocol [ 2302.226348][ C1] wdm_int_callback: 8053 callbacks suppressed [ 2302.226374][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.239087][ C1] wdm_int_callback: 8052 callbacks suppressed [ 2302.239109][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.252366][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.259002][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.265281][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.271858][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.278961][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.285589][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.291933][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.298527][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.305787][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.312383][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.319102][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.325689][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.332012][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.338820][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.345730][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.352366][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2302.358804][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2302.365459][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2303.428753][ T3931] syzkaller0: entered promiscuous mode [ 2303.440126][ T3931] syzkaller0: entered allmulticast mode [ 2303.527428][T13270] usb 5-1: USB disconnect, device number 117 [ 2303.544232][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8720'. [ 2303.975091][T13270] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 2304.004671][ T3950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2304.176679][T13270] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2304.224296][T13270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.296076][T13270] usb 5-1: config 0 descriptor?? [ 2304.326959][ T3958] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 0, 0, 3) RGB/YUV Capture:snk:16x16 (0x32314142, 8, 0, 0, 0) [ 2304.409871][T13270] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 2304.689545][ T2361] usb 5-1: USB disconnect, device number 118 [ 2306.234738][ T3986] syzkaller1: entered promiscuous mode [ 2306.248545][ T3986] syzkaller1: entered allmulticast mode [ 2306.676123][ T4000] bond0: (slave bond_slave_0): Releasing backup interface [ 2306.705225][ T4000] bond0: (slave bond_slave_1): Releasing backup interface [ 2306.763582][ T4000] team0: Port device team_slave_0 removed [ 2306.885855][ T4000] team0: Port device team_slave_1 removed [ 2306.893385][ T4000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2306.904413][ T4000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2307.100479][ T4000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2307.130571][ T4000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2307.191141][ T4000] net_ratelimit: 782 callbacks suppressed [ 2307.191157][ T4000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2307.366776][ T4019] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2308.045126][ T4023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2308.614663][ T4029] support for the xor transformation has been removed. [ 2308.631049][ T4032] æÿîÿ: entered promiscuous mode [ 2308.765946][ T4033] FAULT_INJECTION: forcing a failure. [ 2308.765946][ T4033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.791149][ T4033] CPU: 0 UID: 0 PID: 4033 Comm: syz.1.8753 Tainted: G L syzkaller #0 PREEMPT(full) [ 2308.791182][ T4033] Tainted: [L]=SOFTLOCKUP [ 2308.791190][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2308.791202][ T4033] Call Trace: [ 2308.791211][ T4033] [ 2308.791221][ T4033] dump_stack_lvl+0xe8/0x150 [ 2308.791252][ T4033] should_fail_ex+0x414/0x560 [ 2308.791286][ T4033] _copy_to_user+0x31/0xb0 [ 2308.791312][ T4033] simple_read_from_buffer+0xe1/0x170 [ 2308.791341][ T4033] proc_fail_nth_read+0x1b3/0x220 [ 2308.791365][ T4033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2308.791399][ T4033] ? rw_verify_area+0x2a6/0x4d0 [ 2308.791426][ T4033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2308.791448][ T4033] vfs_read+0x200/0xa30 [ 2308.791467][ T4033] ? fdget_pos+0x247/0x320 [ 2308.791494][ T4033] ? __pfx___mutex_lock+0x10/0x10 [ 2308.791516][ T4033] ? __pfx_vfs_read+0x10/0x10 [ 2308.791536][ T4033] ? __fget_files+0x2a/0x420 [ 2308.791563][ T4033] ? __fget_files+0x3a0/0x420 [ 2308.791583][ T4033] ? __fget_files+0x2a/0x420 [ 2308.791615][ T4033] ksys_read+0x145/0x250 [ 2308.791638][ T4033] ? __pfx_ksys_read+0x10/0x10 [ 2308.791668][ T4033] __do_fast_syscall_32+0x1dc/0x570 [ 2308.791690][ T4033] ? lockdep_hardirqs_on+0x7b/0x110 [ 2308.791707][ T4033] ? do_fast_syscall_32+0x34/0x80 [ 2308.791727][ T4033] ? irqentry_exit+0x10f/0x670 [ 2308.791751][ T4033] do_fast_syscall_32+0x34/0x80 [ 2308.791773][ T4033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2308.791796][ T4033] RIP: 0023:0xf7f05539 [ 2308.791814][ T4033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2308.791830][ T4033] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2308.791852][ T4033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f6620 [ 2308.791866][ T4033] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 2308.791878][ T4033] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2308.791890][ T4033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2308.791902][ T4033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.791933][ T4033] [ 2309.600641][ T4047] netlink: 'syz.0.8759': attribute type 39 has an invalid length. [ 2309.634170][ T4048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8756'. [ 2309.652987][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8759'. [ 2309.669128][ T4048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8756'. [ 2309.709404][ T4048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8756'. [ 2309.743340][ T4048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8756'. [ 2310.107441][ T4059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8761'. [ 2310.307006][ T4064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8763'. [ 2310.684978][ T2361] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2310.883393][ T2361] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2310.893271][ T2361] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2310.916484][ T2361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2310.945563][ T2361] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2310.984959][ T2361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2311.018700][ T2361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2311.083900][ T2361] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2311.127676][ T2361] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2311.164099][ T4076] netlink: 'syz.4.8767': attribute type 21 has an invalid length. [ 2311.267599][ T2361] usb 1-1: Product: syz [ 2311.289944][ T2361] usb 1-1: Manufacturer: syz [ 2311.297230][ T4076] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8767'. [ 2311.331621][ T4065] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2311.343465][ T2361] cdc_wdm 1-1:1.0: skipping garbage [ 2311.392392][ T2361] cdc_wdm 1-1:1.0: skipping garbage [ 2311.405718][ T4076] netlink: 'syz.4.8767': attribute type 5 has an invalid length. [ 2311.419744][ T4076] netlink: 'syz.4.8767': attribute type 6 has an invalid length. [ 2311.494788][ T2361] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2311.510685][ T2361] cdc_wdm 1-1:1.0: Unknown control protocol [ 2311.547546][ T4076] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8767'. [ 2311.577217][ C1] wdm_int_callback: 5806 callbacks suppressed [ 2311.577243][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.590039][ C1] wdm_int_callback: 5806 callbacks suppressed [ 2311.590054][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.602926][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.609547][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.616468][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.623105][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.632503][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.639153][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.646050][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.652771][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.659125][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.665839][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.672758][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.679395][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.686849][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.693482][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.699923][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.706551][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.712942][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2311.719578][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2311.970568][ T4085] FAULT_INJECTION: forcing a failure. [ 2311.970568][ T4085] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.025655][ T4085] CPU: 0 UID: 0 PID: 4085 Comm: syz.4.8769 Tainted: G L syzkaller #0 PREEMPT(full) [ 2312.025688][ T4085] Tainted: [L]=SOFTLOCKUP [ 2312.025695][ T4085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2312.025708][ T4085] Call Trace: [ 2312.025717][ T4085] [ 2312.025754][ T4085] dump_stack_lvl+0xe8/0x150 [ 2312.025783][ T4085] should_fail_ex+0x414/0x560 [ 2312.025817][ T4085] should_failslab+0xa8/0x100 [ 2312.025842][ T4085] kmem_cache_alloc_noprof+0x88/0x710 [ 2312.025878][ T4085] ? __netlink_lookup+0xbd/0x8a0 [ 2312.025904][ T4085] ? skb_clone+0x212/0x3a0 [ 2312.025935][ T4085] skb_clone+0x212/0x3a0 [ 2312.025967][ T4085] __netlink_deliver_tap+0x404/0x850 [ 2312.026003][ T4085] ? netlink_deliver_tap+0x2e/0x1b0 [ 2312.026027][ T4085] netlink_deliver_tap+0x19c/0x1b0 [ 2312.026050][ T4085] netlink_unicast+0x7fa/0x9e0 [ 2312.026080][ T4085] ? __pfx_netlink_unicast+0x10/0x10 [ 2312.026101][ T4085] ? __alloc_skb+0x198/0x3a0 [ 2312.026122][ T4085] ? netlink_sendmsg+0x642/0xb30 [ 2312.026144][ T4085] ? skb_put+0x11b/0x210 [ 2312.026169][ T4085] netlink_sendmsg+0x805/0xb30 [ 2312.026205][ T4085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.026233][ T4085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2312.026260][ T4085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2312.026294][ T4085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.026321][ T4085] __sock_sendmsg+0x21c/0x270 [ 2312.026352][ T4085] __sys_sendto+0x3bd/0x520 [ 2312.026377][ T4085] ? __pfx___sys_sendto+0x10/0x10 [ 2312.026397][ T4085] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2312.026430][ T4085] ? __fget_files+0x3a0/0x420 [ 2312.026462][ T4085] ? ksys_write+0x22a/0x250 [ 2312.026483][ T4085] ? __pfx_ksys_write+0x10/0x10 [ 2312.026509][ T4085] __ia32_sys_sendto+0xdd/0x100 [ 2312.026536][ T4085] __do_fast_syscall_32+0x1dc/0x570 [ 2312.026557][ T4085] ? lockdep_hardirqs_on+0x7b/0x110 [ 2312.026574][ T4085] ? do_fast_syscall_32+0x34/0x80 [ 2312.026595][ T4085] ? irqentry_exit+0x10f/0x670 [ 2312.026619][ T4085] do_fast_syscall_32+0x34/0x80 [ 2312.026639][ T4085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2312.026661][ T4085] RIP: 0023:0xf709d539 [ 2312.026679][ T4085] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2312.026696][ T4085] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2312.026718][ T4085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2312.026732][ T4085] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2312.026744][ T4085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.026755][ T4085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2312.026767][ T4085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.026797][ T4085] [ 2312.816287][ T4094] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8771'. [ 2312.842401][ T4100] FAULT_INJECTION: forcing a failure. [ 2312.842401][ T4100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2312.980058][ T4100] CPU: 0 UID: 0 PID: 4100 Comm: syz.4.8772 Tainted: G L syzkaller #0 PREEMPT(full) [ 2312.980087][ T4100] Tainted: [L]=SOFTLOCKUP [ 2312.980094][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2312.980106][ T4100] Call Trace: [ 2312.980115][ T4100] [ 2312.980124][ T4100] dump_stack_lvl+0xe8/0x150 [ 2312.980154][ T4100] should_fail_ex+0x414/0x560 [ 2312.980187][ T4100] _copy_from_iter+0x1cd/0x1630 [ 2312.980218][ T4100] ? __pfx__copy_from_iter+0x10/0x10 [ 2312.980233][ T4100] ? __build_skb_around+0x22d/0x3c0 [ 2312.980247][ T4100] ? __alloc_skb+0x198/0x3a0 [ 2312.980259][ T4100] ? netlink_sendmsg+0x642/0xb30 [ 2312.980274][ T4100] ? skb_put+0x11b/0x210 [ 2312.980297][ T4100] netlink_sendmsg+0x6b2/0xb30 [ 2312.980341][ T4100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.980368][ T4100] ? __import_iovec+0x5d4/0x7f0 [ 2312.980387][ T4100] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2312.980412][ T4100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2312.980425][ T4100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.980439][ T4100] __sock_sendmsg+0x21c/0x270 [ 2312.980456][ T4100] ____sys_sendmsg+0x505/0x820 [ 2312.980479][ T4100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2312.980507][ T4100] ? kstrtouint+0x6e/0xe0 [ 2312.980542][ T4100] ___sys_sendmsg+0x21f/0x2a0 [ 2312.980566][ T4100] ? __pfx____sys_sendmsg+0x10/0x10 [ 2312.980587][ T4100] ? get_pid_task+0x20/0x1f0 [ 2312.980608][ T4100] ? get_pid_task+0x20/0x1f0 [ 2312.980621][ T4100] ? get_pid_task+0x20/0x1f0 [ 2312.980649][ T4100] ? __fget_files+0x2a/0x420 [ 2312.980664][ T4100] ? __fget_files+0x3a0/0x420 [ 2312.980695][ T4100] __sys_sendmsg+0x164/0x220 [ 2312.980721][ T4100] ? __pfx___sys_sendmsg+0x10/0x10 [ 2312.980753][ T4100] ? __pfx_ksys_write+0x10/0x10 [ 2312.980791][ T4100] __do_fast_syscall_32+0x1dc/0x570 [ 2312.980809][ T4100] ? lockdep_hardirqs_on+0x7b/0x110 [ 2312.980820][ T4100] ? do_fast_syscall_32+0x34/0x80 [ 2312.980832][ T4100] ? irqentry_exit+0x10f/0x670 [ 2312.980845][ T4100] do_fast_syscall_32+0x34/0x80 [ 2312.980860][ T4100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2312.980881][ T4100] RIP: 0023:0xf709d539 [ 2312.980899][ T4100] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2312.980915][ T4100] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2312.980936][ T4100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 2312.980949][ T4100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2312.980960][ T4100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.980970][ T4100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2312.980982][ T4100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.981002][ T4100] [ 2313.487862][ T4106] FAULT_INJECTION: forcing a failure. [ 2313.487862][ T4106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2313.545368][ T4104] netlink: 'syz.4.8775': attribute type 39 has an invalid length. [ 2313.586637][ T4106] CPU: 1 UID: 0 PID: 4106 Comm: syz.2.8774 Tainted: G L syzkaller #0 PREEMPT(full) [ 2313.586661][ T4106] Tainted: [L]=SOFTLOCKUP [ 2313.586665][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2313.586673][ T4106] Call Trace: [ 2313.586678][ T4106] [ 2313.586687][ T4106] dump_stack_lvl+0xe8/0x150 [ 2313.586708][ T4106] should_fail_ex+0x414/0x560 [ 2313.586728][ T4106] _copy_from_iter+0x1cd/0x1630 [ 2313.586748][ T4106] ? __pfx__copy_from_iter+0x10/0x10 [ 2313.586761][ T4106] ? __build_skb_around+0x22d/0x3c0 [ 2313.586775][ T4106] ? __alloc_skb+0x198/0x3a0 [ 2313.586787][ T4106] ? netlink_sendmsg+0x642/0xb30 [ 2313.586800][ T4106] ? skb_put+0x11b/0x210 [ 2313.586815][ T4106] netlink_sendmsg+0x6b2/0xb30 [ 2313.586834][ T4106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2313.586851][ T4106] ? __import_iovec+0x5d4/0x7f0 [ 2313.586862][ T4106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2313.586879][ T4106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2313.586890][ T4106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2313.586904][ T4106] __sock_sendmsg+0x21c/0x270 [ 2313.586923][ T4106] ____sys_sendmsg+0x505/0x820 [ 2313.586940][ T4106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2313.586956][ T4106] ? kstrtouint+0x6e/0xe0 [ 2313.586976][ T4106] ___sys_sendmsg+0x21f/0x2a0 [ 2313.586991][ T4106] ? __pfx____sys_sendmsg+0x10/0x10 [ 2313.587004][ T4106] ? get_pid_task+0x20/0x1f0 [ 2313.587018][ T4106] ? get_pid_task+0x20/0x1f0 [ 2313.587030][ T4106] ? get_pid_task+0x20/0x1f0 [ 2313.587059][ T4106] ? __fget_files+0x2a/0x420 [ 2313.587072][ T4106] ? __fget_files+0x3a0/0x420 [ 2313.587099][ T4106] __sys_sendmsg+0x164/0x220 [ 2313.587114][ T4106] ? __pfx___sys_sendmsg+0x10/0x10 [ 2313.587132][ T4106] ? __pfx_ksys_write+0x10/0x10 [ 2313.587142][ T4106] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 2313.587164][ T4106] __do_fast_syscall_32+0x1dc/0x570 [ 2313.587178][ T4106] ? lockdep_hardirqs_on+0x7b/0x110 [ 2313.587188][ T4106] ? do_fast_syscall_32+0x34/0x80 [ 2313.587200][ T4106] ? irqentry_exit+0x10f/0x670 [ 2313.587214][ T4106] do_fast_syscall_32+0x34/0x80 [ 2313.587227][ T4106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2313.587240][ T4106] RIP: 0023:0xf70dd539 [ 2313.587251][ T4106] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2313.587261][ T4106] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2313.587275][ T4106] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2313.587285][ T4106] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2313.587296][ T4106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2313.587307][ T4106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2313.587317][ T4106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2313.587338][ T4106] [ 2313.877113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc1400: rx timeout, send abort [ 2314.156744][ T2361] usb 1-1: USB disconnect, device number 58 [ 2314.232226][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc0000: rx timeout, send abort [ 2314.300919][ T4113] kvm: kvm [4110]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x7fffffff [ 2314.385371][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc1400: abort rx timeout. Force session deactivation [ 2314.740579][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc0000: abort rx timeout. Force session deactivation [ 2315.018630][ T4128] tun0: tun_chr_ioctl cmd 1074025675 [ 2315.024084][ T4128] tun0: persist enabled [ 2315.031656][ T4128] tun0: tun_chr_ioctl cmd 1074025675 [ 2315.037147][ T4128] tun0: persist disabled [ 2315.425111][ T5941] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2315.609472][ T5941] usb 1-1: device descriptor read/64, error -71 [ 2315.945070][ T5941] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2316.295010][ T5941] usb 1-1: device descriptor read/64, error -71 [ 2316.736892][ T5941] usb usb1-port1: attempt power cycle [ 2317.094995][ T5941] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2317.425028][T13270] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2317.837646][T13270] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2317.861417][ T5941] usb 1-1: device descriptor read/8, error -71 [ 2317.956829][ T4166] FAULT_INJECTION: forcing a failure. [ 2317.956829][ T4166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.994561][ T4166] CPU: 1 UID: 0 PID: 4166 Comm: syz.6.8794 Tainted: G L syzkaller #0 PREEMPT(full) [ 2317.994584][ T4166] Tainted: [L]=SOFTLOCKUP [ 2317.994588][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2317.994596][ T4166] Call Trace: [ 2317.994601][ T4166] [ 2317.994607][ T4166] dump_stack_lvl+0xe8/0x150 [ 2317.994626][ T4166] should_fail_ex+0x414/0x560 [ 2317.994646][ T4166] _copy_from_iter+0x1cd/0x1630 [ 2317.994664][ T4166] ? __pfx__copy_from_iter+0x10/0x10 [ 2317.994677][ T4166] ? __build_skb_around+0x22d/0x3c0 [ 2317.994692][ T4166] ? __alloc_skb+0x198/0x3a0 [ 2317.994703][ T4166] ? netlink_sendmsg+0x642/0xb30 [ 2317.994717][ T4166] ? skb_put+0x11b/0x210 [ 2317.994731][ T4166] netlink_sendmsg+0x6b2/0xb30 [ 2317.994750][ T4166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2317.994766][ T4166] ? __import_iovec+0x5d4/0x7f0 [ 2317.994778][ T4166] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2317.994793][ T4166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2317.994804][ T4166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2317.994818][ T4166] __sock_sendmsg+0x21c/0x270 [ 2317.994836][ T4166] ____sys_sendmsg+0x505/0x820 [ 2317.994869][ T4166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2317.994897][ T4166] ? kstrtouint+0x6e/0xe0 [ 2317.994922][ T4166] ___sys_sendmsg+0x21f/0x2a0 [ 2317.994938][ T4166] ? __pfx____sys_sendmsg+0x10/0x10 [ 2317.994951][ T4166] ? get_pid_task+0x20/0x1f0 [ 2317.994964][ T4166] ? get_pid_task+0x20/0x1f0 [ 2317.994976][ T4166] ? get_pid_task+0x20/0x1f0 [ 2317.995012][ T4166] ? __fget_files+0x2a/0x420 [ 2317.995026][ T4166] ? __fget_files+0x3a0/0x420 [ 2317.995045][ T4166] __sys_sendmsg+0x164/0x220 [ 2317.995059][ T4166] ? __pfx___sys_sendmsg+0x10/0x10 [ 2317.995078][ T4166] ? __pfx_ksys_write+0x10/0x10 [ 2317.995096][ T4166] __do_fast_syscall_32+0x1dc/0x570 [ 2317.995109][ T4166] ? lockdep_hardirqs_on+0x7b/0x110 [ 2317.995120][ T4166] ? do_fast_syscall_32+0x34/0x80 [ 2317.995132][ T4166] ? irqentry_exit+0x10f/0x670 [ 2317.995146][ T4166] do_fast_syscall_32+0x34/0x80 [ 2317.995159][ T4166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2317.995173][ T4166] RIP: 0023:0xf70cd539 [ 2317.995184][ T4166] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.995194][ T4166] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2317.995208][ T4166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2317.995217][ T4166] RDX: 00000000040000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.995225][ T4166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.995232][ T4166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2317.995239][ T4166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.995259][ T4166] [ 2318.294989][T13270] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2318.311961][T13270] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2318.322652][T13270] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2318.334587][T13270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2318.466049][ T4169] veth1_to_batadv: mtu less than device minimum [ 2318.537756][T13270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2318.589234][T13270] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2318.783000][T13270] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2318.814914][T13270] usb 3-1: Product: syz [ 2318.819124][T13270] usb 3-1: Manufacturer: syz [ 2318.844399][ T4153] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2318.860882][T13270] cdc_wdm 3-1:1.0: skipping garbage [ 2318.866321][T13270] cdc_wdm 3-1:1.0: skipping garbage [ 2318.877903][T13270] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2318.883863][T13270] cdc_wdm 3-1:1.0: Unknown control protocol [ 2319.177480][ C0] wdm_int_callback: 10361 callbacks suppressed [ 2319.177507][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.190298][ C0] wdm_int_callback: 10361 callbacks suppressed [ 2319.190313][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.203514][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.210166][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.216901][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.223546][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.235196][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.241819][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.248332][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.254954][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.261522][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.268109][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.274425][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.281009][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.287651][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.294447][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.305175][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.312863][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.319272][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2319.325868][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2319.415134][ T5941] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2319.531667][ T5941] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2319.563144][ T5941] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2319.599190][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2319.626113][ T5941] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2319.859885][ T5941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2319.908162][ T4182] FAULT_INJECTION: forcing a failure. [ 2319.908162][ T4182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2319.933256][ T5941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2319.956026][T16384] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2319.968638][ T4182] CPU: 1 UID: 0 PID: 4182 Comm: syz.4.8797 Tainted: G L syzkaller #0 PREEMPT(full) [ 2319.968672][ T4182] Tainted: [L]=SOFTLOCKUP [ 2319.968679][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2319.968692][ T4182] Call Trace: [ 2319.968701][ T4182] [ 2319.968710][ T4182] dump_stack_lvl+0xe8/0x150 [ 2319.968742][ T4182] should_fail_ex+0x414/0x560 [ 2319.968773][ T4182] _copy_from_iter+0x1cd/0x1630 [ 2319.968805][ T4182] ? __pfx__copy_from_iter+0x10/0x10 [ 2319.968819][ T4182] ? __build_skb_around+0x22d/0x3c0 [ 2319.968833][ T4182] ? __alloc_skb+0x198/0x3a0 [ 2319.968845][ T4182] ? netlink_sendmsg+0x642/0xb30 [ 2319.968863][ T4182] ? skb_put+0x11b/0x210 [ 2319.968888][ T4182] netlink_sendmsg+0x6b2/0xb30 [ 2319.968945][ T4182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2319.968973][ T4182] ? __import_iovec+0x5d4/0x7f0 [ 2319.968992][ T4182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2319.969017][ T4182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2319.969030][ T4182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2319.969044][ T4182] __sock_sendmsg+0x21c/0x270 [ 2319.969062][ T4182] ____sys_sendmsg+0x505/0x820 [ 2319.969085][ T4182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2319.969114][ T4182] ? kstrtouint+0x6e/0xe0 [ 2319.969150][ T4182] ___sys_sendmsg+0x21f/0x2a0 [ 2319.969175][ T4182] ? __pfx____sys_sendmsg+0x10/0x10 [ 2319.969197][ T4182] ? get_pid_task+0x20/0x1f0 [ 2319.969219][ T4182] ? get_pid_task+0x20/0x1f0 [ 2319.969233][ T4182] ? get_pid_task+0x20/0x1f0 [ 2319.969261][ T4182] ? __fget_files+0x2a/0x420 [ 2319.969276][ T4182] ? __fget_files+0x3a0/0x420 [ 2319.969308][ T4182] __sys_sendmsg+0x164/0x220 [ 2319.969334][ T4182] ? __pfx___sys_sendmsg+0x10/0x10 [ 2319.969366][ T4182] ? __pfx_ksys_write+0x10/0x10 [ 2319.969395][ T4182] __do_fast_syscall_32+0x1dc/0x570 [ 2319.969417][ T4182] ? lockdep_hardirqs_on+0x7b/0x110 [ 2319.969431][ T4182] ? do_fast_syscall_32+0x34/0x80 [ 2319.969443][ T4182] ? irqentry_exit+0x10f/0x670 [ 2319.969457][ T4182] do_fast_syscall_32+0x34/0x80 [ 2319.969469][ T4182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2319.969488][ T4182] RIP: 0023:0xf709d539 [ 2319.969505][ T4182] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2319.969522][ T4182] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2319.969545][ T4182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 2319.969560][ T4182] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2319.969577][ T4182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2319.969588][ T4182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2319.969599][ T4182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2319.969627][ T4182] [ 2320.795800][ T5941] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2320.815151][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2320.824816][ T5941] usb 1-1: Product: syz [ 2320.830626][ T5941] usb 1-1: Manufacturer: syz [ 2320.886336][T16384] usb 2-1: device descriptor read/64, error -71 [ 2321.047546][T26682] usb 3-1: USB disconnect, device number 30 [ 2321.309781][ T5941] usb 1-1: can't set config #1, error -71 [ 2321.337419][ T5941] usb 1-1: USB disconnect, device number 62 [ 2321.387741][ T4189] FAULT_INJECTION: forcing a failure. [ 2321.387741][ T4189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2321.437200][ T4189] CPU: 1 UID: 0 PID: 4189 Comm: syz.6.8800 Tainted: G L syzkaller #0 PREEMPT(full) [ 2321.437235][ T4189] Tainted: [L]=SOFTLOCKUP [ 2321.437243][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2321.437255][ T4189] Call Trace: [ 2321.437264][ T4189] [ 2321.437274][ T4189] dump_stack_lvl+0xe8/0x150 [ 2321.437305][ T4189] should_fail_ex+0x414/0x560 [ 2321.437340][ T4189] _copy_from_iter+0x1cd/0x1630 [ 2321.437381][ T4189] ? __pfx__copy_from_iter+0x10/0x10 [ 2321.437403][ T4189] ? __build_skb_around+0x22d/0x3c0 [ 2321.437427][ T4189] ? __alloc_skb+0x198/0x3a0 [ 2321.437449][ T4189] ? netlink_sendmsg+0x642/0xb30 [ 2321.437473][ T4189] ? skb_put+0x11b/0x210 [ 2321.437499][ T4189] netlink_sendmsg+0x6b2/0xb30 [ 2321.437534][ T4189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2321.437562][ T4189] ? __import_iovec+0x5d4/0x7f0 [ 2321.437583][ T4189] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2321.437610][ T4189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2321.437629][ T4189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2321.437656][ T4189] __sock_sendmsg+0x21c/0x270 [ 2321.437688][ T4189] ____sys_sendmsg+0x505/0x820 [ 2321.437718][ T4189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2321.437747][ T4189] ? kstrtouint+0x6e/0xe0 [ 2321.437793][ T4189] ___sys_sendmsg+0x21f/0x2a0 [ 2321.437820][ T4189] ? __pfx____sys_sendmsg+0x10/0x10 [ 2321.437851][ T4189] ? get_pid_task+0x20/0x1f0 [ 2321.437875][ T4189] ? get_pid_task+0x20/0x1f0 [ 2321.437896][ T4189] ? get_pid_task+0x20/0x1f0 [ 2321.437959][ T4189] ? __fget_files+0x2a/0x420 [ 2321.437983][ T4189] ? __fget_files+0x3a0/0x420 [ 2321.438017][ T4189] __sys_sendmsg+0x164/0x220 [ 2321.438043][ T4189] ? __pfx___sys_sendmsg+0x10/0x10 [ 2321.438075][ T4189] ? __pfx_ksys_write+0x10/0x10 [ 2321.438107][ T4189] __do_fast_syscall_32+0x1dc/0x570 [ 2321.438129][ T4189] ? lockdep_hardirqs_on+0x7b/0x110 [ 2321.438148][ T4189] ? do_fast_syscall_32+0x34/0x80 [ 2321.438169][ T4189] ? irqentry_exit+0x10f/0x670 [ 2321.438190][ T4189] do_fast_syscall_32+0x34/0x80 [ 2321.438208][ T4189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2321.438232][ T4189] RIP: 0023:0xf70cd539 [ 2321.438250][ T4189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2321.438267][ T4189] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2321.438290][ T4189] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 2321.438304][ T4189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2321.438316][ T4189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2321.438328][ T4189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2321.438340][ T4189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2321.438370][ T4189] [ 2321.511091][ T4196] fuse: Bad value for 'fd' [ 2321.928558][ T4205] fuse: Unknown parameter '000000000000000000000x0000000000000003' [ 2322.076129][ T4210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2322.087608][ T4210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2322.096402][ T4210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2322.105504][ T4210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2322.113431][ T4210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2322.412317][ T4220] FAULT_INJECTION: forcing a failure. [ 2322.412317][ T4220] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.506057][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.1.8810 Tainted: G L syzkaller #0 PREEMPT(full) [ 2322.506092][ T4220] Tainted: [L]=SOFTLOCKUP [ 2322.506099][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2322.506111][ T4220] Call Trace: [ 2322.506118][ T4220] [ 2322.506127][ T4220] dump_stack_lvl+0xe8/0x150 [ 2322.506158][ T4220] should_fail_ex+0x414/0x560 [ 2322.506191][ T4220] should_failslab+0xa8/0x100 [ 2322.506217][ T4220] __kmalloc_cache_noprof+0x84/0x700 [ 2322.506239][ T4220] ? snd_ctl_ioctl_compat+0x400/0xe00 [ 2322.506269][ T4220] snd_ctl_ioctl_compat+0x400/0xe00 [ 2322.506300][ T4220] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 2322.506325][ T4220] ? __fget_files+0x2a/0x420 [ 2322.506353][ T4220] ? __fget_files+0x3a0/0x420 [ 2322.506376][ T4220] ? __fget_files+0x2a/0x420 [ 2322.506403][ T4220] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2322.506428][ T4220] __ia32_compat_sys_ioctl+0x543/0x840 [ 2322.506450][ T4220] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2322.506470][ T4220] ? __fget_files+0x3a0/0x420 [ 2322.506499][ T4220] ? fput+0xa0/0xd0 [ 2322.506524][ T4220] ? ksys_write+0x22a/0x250 [ 2322.506545][ T4220] ? __pfx_ksys_write+0x10/0x10 [ 2322.506575][ T4220] __do_fast_syscall_32+0x1dc/0x570 [ 2322.506597][ T4220] ? lockdep_hardirqs_on+0x7b/0x110 [ 2322.506615][ T4220] ? do_fast_syscall_32+0x34/0x80 [ 2322.506636][ T4220] ? irqentry_exit+0x10f/0x670 [ 2322.506658][ T4220] do_fast_syscall_32+0x34/0x80 [ 2322.506691][ T4220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2322.506713][ T4220] RIP: 0023:0xf7f05539 [ 2322.506729][ T4220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2322.506746][ T4220] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2322.506767][ T4220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105511 [ 2322.506781][ T4220] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2322.506794][ T4220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2322.506805][ T4220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2322.506817][ T4220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2322.506847][ T4220] [ 2322.925104][ T5941] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2323.177723][ T5941] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2323.205075][ T5941] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2323.229802][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2323.250924][ T5941] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2323.314902][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2323.335510][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2323.369270][ T5941] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2323.379437][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2323.398936][ T5941] usb 3-1: Product: syz [ 2323.484893][ T5941] usb 3-1: Manufacturer: syz [ 2323.507143][ T4212] chnl_net:caif_netlink_parms(): no params data found [ 2323.545172][ T4221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2323.850125][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 2323.889174][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 2323.901220][ T5941] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2323.914917][ T5941] cdc_wdm 3-1:1.0: Unknown control protocol [ 2324.027806][ T4231] __nla_validate_parse: 3 callbacks suppressed [ 2324.027829][ T4231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8813'. [ 2324.135061][ T4237] tun0: tun_chr_ioctl cmd 1074025675 [ 2324.170076][T31771] Bluetooth: hci4: command tx timeout [ 2324.224238][ C0] wdm_int_callback: 8275 callbacks suppressed [ 2324.224263][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.237506][ C0] wdm_int_callback: 8275 callbacks suppressed [ 2324.237521][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.250703][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.257497][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.263803][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.270409][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.276725][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.283394][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.289658][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.296250][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.302733][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.309363][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.317524][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.324169][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.330795][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.337389][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.343835][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.350555][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.357149][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2324.363758][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2324.468461][ T4237] tun0: persist enabled [ 2324.870891][ T4241] tun0: tun_chr_ioctl cmd 1074025675 [ 2324.876775][ T4241] tun0: persist disabled [ 2325.319029][T27322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.996576][T27322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.060494][T16384] usb 3-1: USB disconnect, device number 31 [ 2326.224119][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.235076][T31771] Bluetooth: hci4: command tx timeout [ 2326.250390][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.267229][ T4212] bridge_slave_0: entered allmulticast mode [ 2326.280357][ T4212] bridge_slave_0: entered promiscuous mode [ 2326.388349][T27322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.478113][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 2326.478135][ T30] audit: type=1800 audit(1768025516.336:4875): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8822" name="nullb0" dev="devtmpfs" ino=5705 res=0 errno=0 [ 2326.519805][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.529369][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.539471][ T4212] bridge_slave_1: entered allmulticast mode [ 2326.548366][ T4212] bridge_slave_1: entered promiscuous mode [ 2326.621337][ T4275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8823'. [ 2326.742286][T27322] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.861464][ T4212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2327.009364][ T4283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8825'. [ 2327.535514][ T4212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2328.047201][ T4212] team0: Port device team_slave_0 added [ 2328.183042][ T4212] team0: Port device team_slave_1 added [ 2328.292880][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.311783][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.338294][T31771] Bluetooth: hci4: command tx timeout [ 2328.374254][ T4212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.421137][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2328.428396][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.454997][ T4212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.473835][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8827'. [ 2328.505197][T16384] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2328.656011][T16384] usb 2-1: Using ep0 maxpacket: 32 [ 2328.666995][T16384] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 2328.688534][T16384] usb 2-1: config 0 has no interface number 0 [ 2328.696124][T16384] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2328.713385][T16384] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2328.768070][T16384] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 2328.785348][T26744] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2328.804445][T16384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.825694][T16384] usb 2-1: Product: syz [ 2328.829906][T16384] usb 2-1: Manufacturer: syz [ 2328.834485][T16384] usb 2-1: SerialNumber: syz [ 2328.866225][T16384] usb 2-1: config 0 descriptor?? [ 2328.873944][ T4287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2328.885194][ T4287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2328.912110][T16384] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2328.946555][T26744] usb 3-1: Using ep0 maxpacket: 8 [ 2328.953527][T26744] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 2328.969683][T26744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 2328.982019][T26744] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2328.998979][T26744] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2329.008472][T26744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.018842][T26744] usb 3-1: Product: syz [ 2329.025488][T26744] usb 3-1: Manufacturer: syz [ 2329.030073][T26744] usb 3-1: SerialNumber: syz [ 2329.052039][T26744] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2329.063365][T26744] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 2329.088299][T26744] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 2329.282048][T13270] usb 3-1: USB disconnect, device number 32 [ 2330.172226][T27322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2330.184017][T27322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2330.195688][T27322] bond0 (unregistering): Released all slaves [ 2330.451447][T31771] Bluetooth: hci4: command tx timeout [ 2330.833947][T27322] bond1 (unregistering): Released all slaves [ 2331.251581][T27322] bond2 (unregistering): Released all slaves [ 2331.331441][ T4212] hsr_slave_0: entered promiscuous mode [ 2331.339763][ T4212] hsr_slave_1: entered promiscuous mode [ 2331.364029][ T4212] debugfs: 'hsr0' already exists in 'hsr' [ 2331.371252][ T4212] Cannot create hsr debugfs directory [ 2331.503831][ T5941] usb 2-1: USB disconnect, device number 20 [ 2331.885598][T26744] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2332.075135][T26744] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2332.090264][T26744] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2332.106571][T26744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2332.165191][T26744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2332.263117][T26744] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2332.291638][T26744] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2332.307092][T26744] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2332.316801][T26744] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2332.325531][T26744] usb 5-1: Product: syz [ 2332.329740][T26744] usb 5-1: Manufacturer: syz [ 2332.340382][T27322] hsr_slave_0: left promiscuous mode [ 2332.350495][T27322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2332.406168][ T4326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2332.419472][T27322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2332.437357][T27322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2332.504786][T26744] cdc_wdm 5-1:1.0: skipping garbage [ 2332.532445][T26744] cdc_wdm 5-1:1.0: skipping garbage [ 2332.562455][T26744] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2332.618675][T26744] cdc_wdm 5-1:1.0: Unknown control protocol [ 2332.630771][T27322] veth1_macvtap: left promiscuous mode [ 2332.665549][T27322] veth0_macvtap: left promiscuous mode [ 2332.778412][T13270] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2332.913293][ C0] wdm_int_callback: 8427 callbacks suppressed [ 2332.913319][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2332.926117][ C0] wdm_int_callback: 8427 callbacks suppressed [ 2332.926134][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2332.939051][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2332.946200][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2332.953157][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2332.960226][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2332.975324][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2332.981948][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2332.988208][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2332.994800][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.001116][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2333.007841][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.015098][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2333.021743][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.029352][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2333.036160][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.042692][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2333.049329][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.055834][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2333.062456][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2333.102988][T13270] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 2333.111554][T13270] usb 2-1: config 0 has no interface number 0 [ 2333.128952][T13270] usb 2-1: too many endpoints for config 0 interface 58 altsetting 77: 134, using maximum allowed: 30 [ 2333.140511][T13270] usb 2-1: config 0 interface 58 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 2333.288567][T13270] usb 2-1: config 0 interface 58 has no altsetting 0 [ 2333.305342][T13270] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2333.317839][T13270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.339448][T13270] usb 2-1: config 0 descriptor?? [ 2334.158277][ T5941] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2334.380400][ T5941] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2334.494162][ T5941] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2334.523433][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2334.538777][ T5941] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2334.612468][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2334.932736][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2335.133580][T13270] usb 2-1: string descriptor 0 read error: -71 [ 2335.177646][T13270] cp210x 2-1:0.58: cp210x converter detected [ 2335.205310][T13270] cp210x 2-1:0.58: failed to get vendor val 0x370b size 1: -71 [ 2335.295423][T13270] cp210x 2-1:0.58: querying part number failed [ 2335.371639][T16384] usb 5-1: USB disconnect, device number 119 [ 2335.375088][T13270] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2335.429120][ T5941] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2335.456386][T13270] usb 2-1: USB disconnect, device number 21 [ 2335.504129][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2335.530412][T13270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2335.553630][ T5941] usb 3-1: Product: syz [ 2335.564239][ T5941] usb 3-1: Manufacturer: syz [ 2335.577456][T13270] cp210x 2-1:0.58: device disconnected [ 2335.639610][ T4363] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2335.650750][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 2335.656976][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 2335.718931][ T5941] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2335.735116][ T5941] cdc_wdm 3-1:1.0: Unknown control protocol [ 2335.955247][T16384] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2336.195939][T16384] usb 5-1: Using ep0 maxpacket: 32 [ 2336.212979][ T4378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8845'. [ 2336.238232][T16384] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.257123][T16384] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 2336.266916][T16384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.279765][T16384] usb 5-1: Product: syz [ 2336.336803][T16384] usb 5-1: Manufacturer: syz [ 2336.351496][T16384] usb 5-1: SerialNumber: syz [ 2336.394459][T16384] pwc: Askey VC010 type 1 USB webcam detected. [ 2336.440616][T27322] team0 (unregistering): Port device team_slave_1 removed [ 2336.658267][T27322] team0 (unregistering): Port device team_slave_0 removed [ 2337.541451][ T2361] usb 3-1: USB disconnect, device number 33 [ 2338.441286][ T4376] tun0: tun_chr_ioctl cmd 1074025675 [ 2338.450683][ T4376] tun0: persist enabled [ 2338.459104][ T4377] tun0: tun_chr_ioctl cmd 1074025675 [ 2338.469163][ T4377] tun0: persist disabled [ 2338.478941][T16384] pwc: send_video_command error -71 [ 2338.517397][T16384] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2338.528899][T16384] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 2338.568099][T16384] usb 5-1: USB disconnect, device number 120 [ 2339.127847][T27322] IPVS: stop unused estimator thread 0... [ 2339.523649][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8855'. [ 2339.540164][ T4409] FAULT_INJECTION: forcing a failure. [ 2339.540164][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.582409][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.4.8855 Tainted: G L syzkaller #0 PREEMPT(full) [ 2339.582444][ T4409] Tainted: [L]=SOFTLOCKUP [ 2339.582452][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2339.582464][ T4409] Call Trace: [ 2339.582473][ T4409] [ 2339.582482][ T4409] dump_stack_lvl+0xe8/0x150 [ 2339.582515][ T4409] should_fail_ex+0x414/0x560 [ 2339.582551][ T4409] should_failslab+0xa8/0x100 [ 2339.582577][ T4409] __kvmalloc_node_noprof+0x175/0x920 [ 2339.582601][ T4409] ? xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 2339.582624][ T4409] ? __nla_parse+0x40/0x60 [ 2339.582651][ T4409] xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 2339.582688][ T4409] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 2339.582751][ T4409] ? xfrm_get_translator+0x1b/0x240 [ 2339.582772][ T4409] ? xfrm_get_translator+0x1b/0x240 [ 2339.582797][ T4409] xfrm_user_rcv_msg+0x285/0xab0 [ 2339.582824][ T4409] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2339.582888][ T4409] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2339.582919][ T4409] ? rcu_is_watching+0x15/0xb0 [ 2339.582945][ T4409] ? trace_contention_end+0x39/0x100 [ 2339.582970][ T4409] ? __mutex_lock+0x335/0x1350 [ 2339.583026][ T4409] netlink_rcv_skb+0x208/0x470 [ 2339.583053][ T4409] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2339.583076][ T4409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2339.583117][ T4409] ? netlink_deliver_tap+0x2e/0x1b0 [ 2339.583142][ T4409] ? netlink_deliver_tap+0x2e/0x1b0 [ 2339.583170][ T4409] xfrm_netlink_rcv+0x79/0x90 [ 2339.583191][ T4409] netlink_unicast+0x82f/0x9e0 [ 2339.583223][ T4409] ? __pfx_netlink_unicast+0x10/0x10 [ 2339.583245][ T4409] ? __alloc_skb+0x198/0x3a0 [ 2339.583268][ T4409] ? netlink_sendmsg+0x642/0xb30 [ 2339.583292][ T4409] ? skb_put+0x11b/0x210 [ 2339.583318][ T4409] netlink_sendmsg+0x805/0xb30 [ 2339.583355][ T4409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2339.583385][ T4409] ? __import_iovec+0x5d4/0x7f0 [ 2339.583407][ T4409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2339.583435][ T4409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2339.583453][ T4409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2339.583481][ T4409] __sock_sendmsg+0x21c/0x270 [ 2339.583514][ T4409] ____sys_sendmsg+0x505/0x820 [ 2339.583545][ T4409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2339.583575][ T4409] ? kstrtouint+0x6e/0xe0 [ 2339.583613][ T4409] ___sys_sendmsg+0x21f/0x2a0 [ 2339.583640][ T4409] ? __pfx____sys_sendmsg+0x10/0x10 [ 2339.583663][ T4409] ? get_pid_task+0x20/0x1f0 [ 2339.583685][ T4409] ? get_pid_task+0x20/0x1f0 [ 2339.583707][ T4409] ? get_pid_task+0x20/0x1f0 [ 2339.583759][ T4409] ? __fget_files+0x2a/0x420 [ 2339.583778][ T4409] ? __fget_files+0x3a0/0x420 [ 2339.583806][ T4409] __sys_sendmsg+0x164/0x220 [ 2339.583827][ T4409] ? __pfx___sys_sendmsg+0x10/0x10 [ 2339.583861][ T4409] ? __pfx_ksys_write+0x10/0x10 [ 2339.583893][ T4409] __do_fast_syscall_32+0x1dc/0x570 [ 2339.583917][ T4409] ? lockdep_hardirqs_on+0x7b/0x110 [ 2339.583937][ T4409] ? do_fast_syscall_32+0x34/0x80 [ 2339.583958][ T4409] ? irqentry_exit+0x10f/0x670 [ 2339.583993][ T4409] do_fast_syscall_32+0x34/0x80 [ 2339.584017][ T4409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2339.584042][ T4409] RIP: 0023:0xf709d539 [ 2339.584061][ T4409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2339.584078][ T4409] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2339.584101][ T4409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2339.584116][ T4409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2339.584128][ T4409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.584140][ T4409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2339.584152][ T4409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.584184][ T4409] [ 2340.481641][ T4212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2340.520690][ T4212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2340.550019][ T4423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8857'. [ 2340.573207][ T4212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2340.632879][ T4212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2340.951570][ T30] audit: type=1326 audit(1768025530.816:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2340.999426][ T30] audit: type=1326 audit(1768025530.846:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.090631][ T30] audit: type=1326 audit(1768025530.846:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.139715][ T30] audit: type=1326 audit(1768025530.846:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.210463][ T30] audit: type=1326 audit(1768025530.846:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.312951][ T30] audit: type=1326 audit(1768025530.846:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.495636][ T30] audit: type=1326 audit(1768025530.846:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.572094][ T30] audit: type=1326 audit(1768025530.846:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.575001][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2341.596137][ T30] audit: type=1326 audit(1768025530.846:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2341.625419][ T30] audit: type=1326 audit(1768025530.846:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2342.154385][ T4212] 8021q: adding VLAN 0 to HW filter on device team0 [ 2342.206634][T27114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2342.213878][T27114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2342.273120][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2342.280373][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2342.920676][ T4212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2343.157978][ T4466] fuse: Bad value for 'fd' [ 2343.164104][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2343.377142][ T4212] veth0_vlan: entered promiscuous mode [ 2343.398080][ T4212] veth1_vlan: entered promiscuous mode [ 2343.619186][ T4212] veth0_macvtap: entered promiscuous mode [ 2344.108358][ T4212] veth1_macvtap: entered promiscuous mode [ 2344.126439][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2344.554673][ T5941] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2344.618825][ T5941] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2344.731245][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2344.738899][ T5941] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2344.752858][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.759378][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.869373][ T4500] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8872'. [ 2344.930081][ T4493] tun0: tun_chr_ioctl cmd 1074025675 [ 2344.935849][ T4493] tun0: persist enabled [ 2344.946343][ T4496] tun0: tun_chr_ioctl cmd 1074025675 [ 2344.965039][ T5941] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2344.979016][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.997341][ T4480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2345.066500][ T4496] tun0: persist disabled [ 2345.229331][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2345.306689][ T2361] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2345.483606][ T192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.525754][ T2361] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2345.537498][ T192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.550774][ T2361] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2345.603544][ T192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.613523][ T2361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2345.630863][ T192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.640042][ T2361] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2345.671476][ T2361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2345.704802][ T2361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2345.796130][ T2361] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2345.821835][ T2361] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2345.840381][ T2361] usb 3-1: Product: syz [ 2345.856002][ T2361] usb 3-1: Manufacturer: syz [ 2346.019780][ T4499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2346.092405][ T2361] cdc_wdm 3-1:1.0: skipping garbage [ 2346.101211][ T2361] cdc_wdm 3-1:1.0: skipping garbage [ 2346.139369][ T2361] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2346.148809][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2346.174955][ T2361] cdc_wdm 3-1:1.0: Unknown control protocol [ 2346.192212][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2346.206396][T27322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2346.239249][T27322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.361475][ C0] wdm_int_callback: 15569 callbacks suppressed [ 2346.361500][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.361520][ C0] wdm_int_callback: 15569 callbacks suppressed [ 2346.361534][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.361741][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.361762][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.361955][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.361973][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.362170][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.362189][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.362383][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.362402][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.362594][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.362612][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.362804][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.362823][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.363018][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.363038][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.363231][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.363250][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.363439][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2346.363457][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2346.539887][T22368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2346.539906][T22368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2347.881526][ T4534] use of bytesused == 0 is deprecated and will be removed in the future, [ 2347.881599][ T4534] use the actual size instead. [ 2348.177230][ T5941] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 2348.210927][ T5941] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input202 [ 2348.297899][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2348.309430][T26744] usb 3-1: USB disconnect, device number 34 [ 2348.358382][ T5941] usb 2-1: USB disconnect, device number 22 [ 2348.364423][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2348.416774][ T4210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2348.429566][ T4210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2348.438609][ T4210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2348.448544][ T4210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2348.475268][ T4210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2349.106422][ T4556] FAULT_INJECTION: forcing a failure. [ 2349.106422][ T4556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2349.120602][ T4556] CPU: 1 UID: 0 PID: 4556 Comm: syz.2.8883 Tainted: G L syzkaller #0 PREEMPT(full) [ 2349.120634][ T4556] Tainted: [L]=SOFTLOCKUP [ 2349.120641][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2349.120652][ T4556] Call Trace: [ 2349.120660][ T4556] [ 2349.120669][ T4556] dump_stack_lvl+0xe8/0x150 [ 2349.120700][ T4556] should_fail_ex+0x414/0x560 [ 2349.120736][ T4556] _copy_from_iter+0x1cd/0x1630 [ 2349.120770][ T4556] ? __pfx__copy_from_iter+0x10/0x10 [ 2349.120792][ T4556] ? __build_skb_around+0x22d/0x3c0 [ 2349.120817][ T4556] ? __alloc_skb+0x198/0x3a0 [ 2349.120838][ T4556] ? netlink_sendmsg+0x642/0xb30 [ 2349.120862][ T4556] ? skb_put+0x11b/0x210 [ 2349.120887][ T4556] netlink_sendmsg+0x6b2/0xb30 [ 2349.120931][ T4556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2349.120959][ T4556] ? __import_iovec+0x5d4/0x7f0 [ 2349.120980][ T4556] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2349.121007][ T4556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2349.121025][ T4556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2349.121051][ T4556] __sock_sendmsg+0x21c/0x270 [ 2349.121082][ T4556] ____sys_sendmsg+0x505/0x820 [ 2349.121111][ T4556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2349.121141][ T4556] ? kstrtouint+0x6e/0xe0 [ 2349.121177][ T4556] ___sys_sendmsg+0x21f/0x2a0 [ 2349.121204][ T4556] ? __pfx____sys_sendmsg+0x10/0x10 [ 2349.121228][ T4556] ? get_pid_task+0x20/0x1f0 [ 2349.121253][ T4556] ? get_pid_task+0x20/0x1f0 [ 2349.121274][ T4556] ? get_pid_task+0x20/0x1f0 [ 2349.121329][ T4556] ? __fget_files+0x2a/0x420 [ 2349.121352][ T4556] ? __fget_files+0x3a0/0x420 [ 2349.121387][ T4556] __sys_sendmsg+0x164/0x220 [ 2349.121413][ T4556] ? __pfx___sys_sendmsg+0x10/0x10 [ 2349.121446][ T4556] ? __pfx_ksys_write+0x10/0x10 [ 2349.121478][ T4556] __do_fast_syscall_32+0x1dc/0x570 [ 2349.121501][ T4556] ? lockdep_hardirqs_on+0x7b/0x110 [ 2349.121520][ T4556] ? do_fast_syscall_32+0x34/0x80 [ 2349.121541][ T4556] ? irqentry_exit+0x10f/0x670 [ 2349.121565][ T4556] do_fast_syscall_32+0x34/0x80 [ 2349.121588][ T4556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2349.121612][ T4556] RIP: 0023:0xf70dd539 [ 2349.121629][ T4556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2349.121646][ T4556] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2349.121668][ T4556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 2349.121682][ T4556] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2349.121694][ T4556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2349.121707][ T4556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2349.121719][ T4556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2349.121749][ T4556] [ 2349.577871][ T4544] chnl_net:caif_netlink_parms(): no params data found [ 2350.335175][ T4577] netlink: 'syz.6.8889': attribute type 5 has an invalid length. [ 2350.555604][T31771] Bluetooth: hci5: command tx timeout [ 2350.574022][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2350.587840][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 2350.624315][ T4544] bridge_slave_0: entered allmulticast mode [ 2350.635712][ T4544] bridge_slave_0: entered promiscuous mode [ 2350.689884][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2350.793913][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 2350.816786][ T4544] bridge_slave_1: entered allmulticast mode [ 2350.851253][ T4544] bridge_slave_1: entered promiscuous mode [ 2351.301642][ T4544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2351.386225][ T4544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2351.843578][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.032945][ T4544] team0: Port device team_slave_0 added [ 2352.107271][ T4544] team0: Port device team_slave_1 added [ 2352.390335][ T4544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2352.416413][ T4544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2352.475347][ T4544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2352.520675][ T4544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2352.544990][ T4544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2352.601293][ T4544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2352.635166][T31771] Bluetooth: hci5: command tx timeout [ 2352.679750][ T192] bridge_slave_1: left allmulticast mode [ 2352.686485][ T192] bridge_slave_1: left promiscuous mode [ 2352.693530][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.705411][ T192] bridge_slave_0: left allmulticast mode [ 2352.712116][ T192] bridge_slave_0: left promiscuous mode [ 2352.719000][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2352.727232][ T4583] xt_hashlimit: size too large, truncated to 1048576 [ 2352.736820][ T4583] xt_hashlimit: Unknown mode mask FFFFFFE, kernel too old? [ 2354.145852][T26682] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2354.335086][T26682] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2354.437519][T26682] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2354.465464][T26682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2354.486281][T26682] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2354.530484][T26682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2354.556557][T26682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2354.616979][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2354.639454][T26682] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2354.650561][T26682] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2354.651213][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2354.669565][T26682] usb 3-1: Product: syz [ 2354.673762][T26682] usb 3-1: Manufacturer: syz [ 2354.691576][ T4609] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2354.701523][T26682] cdc_wdm 3-1:1.0: skipping garbage [ 2354.707215][T26682] cdc_wdm 3-1:1.0: skipping garbage [ 2354.714666][ T192] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2354.724427][T26682] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2354.730843][T26682] cdc_wdm 3-1:1.0: Unknown control protocol [ 2354.734006][T31771] Bluetooth: hci5: command tx timeout [ 2354.739060][ T192] bond0 (unregistering): Released all slaves [ 2354.948930][ C0] wdm_int_callback: 8239 callbacks suppressed [ 2354.948955][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2354.961851][ C0] wdm_int_callback: 8239 callbacks suppressed [ 2354.961870][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2354.974655][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2354.981322][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2354.987701][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2354.994316][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.000778][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.007395][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.013745][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.020343][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.026744][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.033348][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.039687][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.046272][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.052576][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.059163][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.065456][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.072061][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.078397][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2355.085017][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2355.383939][ T4613] bond1: (slave bond_slave_1): Device is not our slave [ 2355.417909][ T4613] bond1: option active_slave: invalid value (bond_slave_1) [ 2355.446541][ T4613] bond1 (unregistering): Released all slaves [ 2355.611057][ T192] hmac(sha224): left promiscuous mode [ 2355.673444][ T4544] hsr_slave_0: entered promiscuous mode [ 2355.682590][ T4544] hsr_slave_1: entered promiscuous mode [ 2355.697831][ T4544] debugfs: 'hsr0' already exists in 'hsr' [ 2355.743997][ T4544] Cannot create hsr debugfs directory [ 2355.784749][ T192] tipc: Left network mode [ 2356.559647][ T4634] FAULT_INJECTION: forcing a failure. [ 2356.559647][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2356.619041][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.6.8909 Tainted: G L syzkaller #0 PREEMPT(full) [ 2356.619076][ T4634] Tainted: [L]=SOFTLOCKUP [ 2356.619084][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2356.619096][ T4634] Call Trace: [ 2356.619105][ T4634] [ 2356.619114][ T4634] dump_stack_lvl+0xe8/0x150 [ 2356.619145][ T4634] should_fail_ex+0x414/0x560 [ 2356.619179][ T4634] _copy_from_iter+0x1cd/0x1630 [ 2356.619205][ T4634] ? sock_alloc_send_pskb+0x86b/0x980 [ 2356.619237][ T4634] ? __pfx__copy_from_iter+0x10/0x10 [ 2356.619267][ T4634] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2356.619298][ T4634] skb_copy_datagram_from_iter+0xf5/0x720 [ 2356.619326][ T4634] ? __asan_memcpy+0x40/0x70 [ 2356.619354][ T4634] ? eth_header+0x11b/0x200 [ 2356.619382][ T4634] packet_sendmsg+0x3797/0x5080 [ 2356.619425][ T4634] ? aa_update_label_name+0xb1/0x3d0 [ 2356.619476][ T4634] ? aa_sk_perm+0x15f/0x920 [ 2356.619500][ T4634] ? __pfx_packet_sendmsg+0x10/0x10 [ 2356.619523][ T4634] ? aa_sk_perm+0x7ee/0x920 [ 2356.619550][ T4634] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2356.619582][ T4634] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2356.619618][ T4634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2356.619636][ T4634] ? __pfx_packet_sendmsg+0x10/0x10 [ 2356.619662][ T4634] __sock_sendmsg+0x21c/0x270 [ 2356.619695][ T4634] __sys_sendto+0x3bd/0x520 [ 2356.619718][ T4634] ? __pfx___sys_sendto+0x10/0x10 [ 2356.619736][ T4634] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2356.619772][ T4634] ? __fget_files+0x3a0/0x420 [ 2356.619806][ T4634] ? ksys_write+0x22a/0x250 [ 2356.619826][ T4634] ? __pfx_ksys_write+0x10/0x10 [ 2356.619844][ T4634] ? rcu_is_watching+0x15/0xb0 [ 2356.619870][ T4634] __ia32_sys_sendto+0xdd/0x100 [ 2356.619896][ T4634] __do_fast_syscall_32+0x1dc/0x570 [ 2356.619916][ T4634] ? lockdep_hardirqs_on+0x7b/0x110 [ 2356.619933][ T4634] ? do_fast_syscall_32+0x34/0x80 [ 2356.619954][ T4634] ? irqentry_exit+0x10f/0x670 [ 2356.619978][ T4634] do_fast_syscall_32+0x34/0x80 [ 2356.619999][ T4634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2356.620022][ T4634] RIP: 0023:0xf70cd539 [ 2356.620040][ T4634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2356.620057][ T4634] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2356.620079][ T4634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 2356.620093][ T4634] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000080000340 [ 2356.620106][ T4634] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2356.620118][ T4634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2356.620128][ T4634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2356.620158][ T4634] [ 2356.964346][T31771] Bluetooth: hci5: command tx timeout [ 2357.158955][T26682] usb 3-1: USB disconnect, device number 35 [ 2358.031706][ T192] hsr_slave_0: left promiscuous mode [ 2358.046894][ T192] hsr_slave_1: left promiscuous mode [ 2358.056287][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2358.139499][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2359.665443][ T2361] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2359.846002][ T2361] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2359.937134][ T2361] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2359.995916][ T2361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2360.038232][ T2361] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2360.068480][ T2361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2360.139761][ T2361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2360.276787][ T2361] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2360.406476][ T2361] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2360.447991][ T2361] usb 3-1: Product: syz [ 2360.452365][ T2361] usb 3-1: Manufacturer: syz [ 2360.496067][ T4687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2360.636852][ T2361] cdc_wdm 3-1:1.0: skipping garbage [ 2360.642248][ T2361] cdc_wdm 3-1:1.0: skipping garbage [ 2360.763882][ T2361] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2360.844217][ T2361] cdc_wdm 3-1:1.0: Unknown control protocol [ 2361.237664][ C1] wdm_int_callback: 9844 callbacks suppressed [ 2361.237690][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.250403][ C1] wdm_int_callback: 9844 callbacks suppressed [ 2361.250422][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.263890][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.270613][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.278016][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.284651][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.291819][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.298461][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.305557][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.312145][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.318479][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.325188][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.331852][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.338446][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.345299][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.351892][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.358919][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.365549][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2361.371953][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2361.378975][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2362.330660][ T192] team0 (unregistering): Port device team_slave_1 removed [ 2362.959376][ T192] team0 (unregistering): Port device team_slave_0 removed [ 2363.275778][T13270] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2363.455816][T13270] usb 2-1: Using ep0 maxpacket: 32 [ 2363.477657][T13270] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2363.487428][T13270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.513766][T13270] usb 2-1: Product: syz [ 2363.519915][T13270] usb 2-1: Manufacturer: syz [ 2363.524553][T13270] usb 2-1: SerialNumber: syz [ 2363.549092][T13270] usb 2-1: config 0 descriptor?? [ 2363.560936][T13270] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2363.718226][ T2361] usb 3-1: USB disconnect, device number 36 [ 2364.144721][ T4739] fuse: Bad value for 'fd' [ 2364.410076][ T4743] netlink: zone id is out of range [ 2364.415935][ T4743] netlink: zone id is out of range [ 2364.421159][ T4743] netlink: zone id is out of range [ 2364.458947][ T4743] netlink: zone id is out of range [ 2364.464184][ T4743] netlink: zone id is out of range [ 2364.476250][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.486871][ T4743] netlink: zone id is out of range [ 2364.492781][ T4743] netlink: zone id is out of range [ 2364.511753][ T4743] netlink: zone id is out of range [ 2364.514770][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.517463][ T4743] netlink: zone id is out of range [ 2364.546998][ T4743] netlink: del zone limit has 4 unknown bytes [ 2364.736360][T13270] gspca_ov534_9: reg_w failed -110 [ 2364.792516][ T4750] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8935'. [ 2364.912684][ T4750] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8935'. [ 2364.950740][ T4544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2365.002024][ T4544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2365.038175][ T4544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2365.046577][T13270] gspca_ov534_9: Unknown sensor 0000 [ 2365.046694][T13270] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 2365.137995][ T4544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2365.451025][T13270] usb 2-1: USB disconnect, device number 23 [ 2365.583740][ T4544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2365.624127][ T4784] FAULT_INJECTION: forcing a failure. [ 2365.624127][ T4784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2365.642377][ T4544] 8021q: adding VLAN 0 to HW filter on device team0 [ 2365.672263][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.679425][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2365.741826][ T4784] CPU: 1 UID: 0 PID: 4784 Comm: syz.6.8942 Tainted: G L syzkaller #0 PREEMPT(full) [ 2365.741859][ T4784] Tainted: [L]=SOFTLOCKUP [ 2365.741868][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2365.741881][ T4784] Call Trace: [ 2365.741890][ T4784] [ 2365.741899][ T4784] dump_stack_lvl+0xe8/0x150 [ 2365.741932][ T4784] should_fail_ex+0x414/0x560 [ 2365.741970][ T4784] _copy_from_iter+0x1cd/0x1630 [ 2365.742006][ T4784] ? __pfx__copy_from_iter+0x10/0x10 [ 2365.742029][ T4784] ? __build_skb_around+0x22d/0x3c0 [ 2365.742054][ T4784] ? __alloc_skb+0x198/0x3a0 [ 2365.742078][ T4784] ? netlink_sendmsg+0x642/0xb30 [ 2365.742104][ T4784] ? skb_put+0x11b/0x210 [ 2365.742129][ T4784] netlink_sendmsg+0x6b2/0xb30 [ 2365.742166][ T4784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2365.742196][ T4784] ? __import_iovec+0x5d4/0x7f0 [ 2365.742219][ T4784] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2365.742247][ T4784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2365.742266][ T4784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2365.742293][ T4784] __sock_sendmsg+0x21c/0x270 [ 2365.742326][ T4784] ____sys_sendmsg+0x52d/0x820 [ 2365.742357][ T4784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2365.742397][ T4784] ___sys_sendmsg+0x21f/0x2a0 [ 2365.742425][ T4784] ? __pfx____sys_sendmsg+0x10/0x10 [ 2365.742448][ T4784] ? kstrtoull+0x12f/0x1d0 [ 2365.742480][ T4784] ? kstrtouint+0x6e/0xe0 [ 2365.742544][ T4784] ? __fget_files+0x2a/0x420 [ 2365.742569][ T4784] ? __fget_files+0x3a0/0x420 [ 2365.742604][ T4784] __sys_sendmmsg+0x28e/0x430 [ 2365.742633][ T4784] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2365.742657][ T4784] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2365.742706][ T4784] ? ksys_write+0x22a/0x250 [ 2365.742727][ T4784] ? __pfx_ksys_write+0x10/0x10 [ 2365.742753][ T4784] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2365.742781][ T4784] __do_fast_syscall_32+0x1dc/0x570 [ 2365.742804][ T4784] ? lockdep_hardirqs_on+0x7b/0x110 [ 2365.742824][ T4784] ? do_fast_syscall_32+0x34/0x80 [ 2365.742852][ T4784] ? irqentry_exit+0x10f/0x670 [ 2365.742876][ T4784] do_fast_syscall_32+0x34/0x80 [ 2365.742898][ T4784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2365.742921][ T4784] RIP: 0023:0xf70cd539 [ 2365.742939][ T4784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2365.742956][ T4784] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2365.742978][ T4784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2365.742993][ T4784] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 2365.743007][ T4784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2365.743019][ T4784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2365.743032][ T4784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2365.743062][ T4784] [ 2366.513147][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 2366.520442][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2366.798438][ T4544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2366.944331][ T4544] veth0_vlan: entered promiscuous mode [ 2366.983258][ T4544] veth1_vlan: entered promiscuous mode [ 2367.092321][ T4544] veth0_macvtap: entered promiscuous mode [ 2367.121558][ T4544] veth1_macvtap: entered promiscuous mode [ 2367.217284][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2367.260576][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2367.306603][T16408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2367.336847][T16408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2367.369020][T16606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2367.384698][T16606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2367.714496][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2367.750538][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.883097][T16606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.904436][T16606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.305042][ T4816] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2369.415839][ T5917] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 2369.580057][ T5917] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2369.601471][ T5917] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2369.627377][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2369.634061][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 2369.672203][ T4816] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2369.693787][ T4816] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2369.714567][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.746654][ T4816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2369.772343][ T5917] usb 2-1: config 0 descriptor?? [ 2369.786853][ T4837] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2369.794309][ T4816] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2369.857912][ T4816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2369.889118][ T4816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2369.928651][ T4816] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2369.945487][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2369.953572][ T4816] usb 1-1: Product: syz [ 2369.979314][ T4816] usb 1-1: Manufacturer: syz [ 2370.002634][ T4833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2370.014054][ T4816] cdc_wdm 1-1:1.0: skipping garbage [ 2370.021005][ T4816] cdc_wdm 1-1:1.0: skipping garbage [ 2370.034030][ T4816] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2370.041374][ T4816] cdc_wdm 1-1:1.0: Unknown control protocol [ 2370.098475][ T4837] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 2370.200830][ T4837] kvm: apic: phys broadcast and lowest prio [ 2370.208018][ T4837] kvm: Disabled LAPIC found during irq injection [ 2370.251360][ C1] wdm_int_callback: 10150 callbacks suppressed [ 2370.251386][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.264172][ C1] wdm_int_callback: 10150 callbacks suppressed [ 2370.264187][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.285794][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.292452][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.299746][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.306376][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.313967][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.320612][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.327658][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.334276][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.340703][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.347326][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.353573][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.360171][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.367182][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.373784][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.380099][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.386686][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.392971][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2370.399585][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2370.682344][ T5917] logitech 0003:046D:C24F.003D: unbalanced collection at end of report description [ 2370.746030][ T5917] logitech 0003:046D:C24F.003D: parse failed [ 2370.801744][ T5917] logitech 0003:046D:C24F.003D: probe with driver logitech failed with error -22 [ 2371.585888][T15904] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2371.792108][T15904] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2371.853049][T15904] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2371.901504][T15904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2371.954963][T15904] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2372.092772][T15904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2372.193465][T15904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2372.369269][T15904] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2372.431342][T15904] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2372.474941][T15904] usb 5-1: Product: syz [ 2372.494959][T15904] usb 5-1: Manufacturer: syz [ 2372.546421][ T4877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2372.616888][ T5941] usb 2-1: USB disconnect, device number 24 [ 2372.640047][T15904] cdc_wdm 5-1:1.0: skipping garbage [ 2372.701820][T23221] usb 1-1: USB disconnect, device number 63 [ 2372.731977][T15904] cdc_wdm 5-1:1.0: skipping garbage [ 2372.738569][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8964'. [ 2372.818279][T15904] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2372.834649][T15904] cdc_wdm 5-1:1.0: Unknown control protocol [ 2373.060158][ T4898] tun0: tun_chr_ioctl cmd 1074025675 [ 2373.065853][ T4898] tun0: persist enabled [ 2373.074319][ T4898] tun0: tun_chr_ioctl cmd 1074025675 [ 2373.079982][ T4898] tun0: persist disabled [ 2373.090016][ T4898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8965'. [ 2373.398748][ T4903] net_ratelimit: 13 callbacks suppressed [ 2373.398770][ T4903] netlink: zone id is out of range [ 2373.435516][ T4903] netlink: del zone limit has 8 unknown bytes [ 2374.290084][ T4912] fuse: Bad value for 'fd' [ 2375.045003][ T4816] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2375.085748][ T5941] usb 5-1: USB disconnect, device number 121 [ 2375.224960][ T4816] usb 2-1: Using ep0 maxpacket: 32 [ 2375.384340][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8976'. [ 2375.401210][ T4929] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8975'. [ 2375.661546][ T4929] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8975'. [ 2375.825119][T23221] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2376.004977][T23221] usb 1-1: Using ep0 maxpacket: 8 [ 2376.038095][T23221] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2376.085572][T23221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.524510][ T4950] netlink: zone id is out of range [ 2376.592253][ T4950] netlink: del zone limit has 8 unknown bytes [ 2376.735471][ T4509] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2376.898558][ T4509] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2376.908266][ T4509] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2376.989089][ T4509] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2377.079176][ T4509] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2377.131303][ T4509] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2377.171032][ T4509] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2377.237877][ T4509] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2377.250046][ T4509] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2377.271942][ T4509] usb 3-1: Product: syz [ 2377.288610][ T4509] usb 3-1: Manufacturer: syz [ 2377.307403][ T4949] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2377.317158][ T4509] cdc_wdm 3-1:1.0: skipping garbage [ 2377.325559][ T4509] cdc_wdm 3-1:1.0: skipping garbage [ 2377.337701][ T4509] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2377.344080][ T4509] cdc_wdm 3-1:1.0: Unknown control protocol [ 2377.693040][ T4816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2377.702594][ T4816] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 2377.713499][ T4816] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2377.778568][ T4816] usb 2-1: can't read configurations, error -71 [ 2377.947573][ C0] wdm_int_callback: 21706 callbacks suppressed [ 2377.947600][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2377.960893][ C0] wdm_int_callback: 21706 callbacks suppressed [ 2377.960908][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2377.973577][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2377.980198][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2377.987073][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2377.993670][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.000200][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.006787][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.013109][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.019813][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.032549][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.039185][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.045609][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.052292][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.058793][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.065378][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.071866][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.078451][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.085519][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2378.092099][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2378.176286][ T4964] vlan2: entered promiscuous mode [ 2378.188758][ T4964] geneve1: entered promiscuous mode [ 2378.199308][ T4964] vlan2: entered allmulticast mode [ 2378.223487][ T4964] geneve1: entered allmulticast mode [ 2378.232592][ T4967] fuse: Bad value for 'fd' [ 2378.329369][T23221] usb 1-1: string descriptor 0 read error: -71 [ 2378.373868][T23221] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2378.417861][T23221] pvrusb2: ********** [ 2378.433182][T23221] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2378.471085][T23221] pvrusb2: Important functionality might not be entirely working. [ 2378.499959][T23221] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2378.533547][T23221] pvrusb2: ********** [ 2378.549650][ T2344] pvrusb2: Invalid write control endpoint [ 2378.592603][T23221] usb 1-1: USB disconnect, device number 64 [ 2378.816579][ T2344] pvrusb2: Invalid write control endpoint [ 2378.822833][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2378.835492][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2378.859837][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2378.889365][ T4980] netlink: zone id is out of range [ 2378.896668][ T2344] pvrusb2: Device being rendered inoperable [ 2378.916202][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2378.925578][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2378.940910][ T4980] netlink: del zone limit has 8 unknown bytes [ 2378.970526][ T2344] pvrusb2: Attached sub-driver cx25840 [ 2378.993381][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2379.024388][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2379.221215][ T4816] usb 3-1: USB disconnect, device number 37 [ 2379.227850][ T2361] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2379.408282][ T2361] usb 5-1: device descriptor read/64, error -71 [ 2379.553875][ T4990] Invalid logical block size (2147483647) [ 2379.804950][ T2361] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2380.136102][ T2361] usb 5-1: device descriptor read/64, error -71 [ 2380.255232][ T2361] usb usb5-port1: attempt power cycle [ 2380.474262][ T5002] fuse: Bad value for 'fd' [ 2380.605392][ T2361] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2380.645272][ T2361] usb 5-1: device descriptor read/8, error -71 [ 2380.915095][ T2361] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2380.946509][ T2361] usb 5-1: device descriptor read/8, error -71 [ 2381.055822][ T2361] usb usb5-port1: unable to enumerate USB device [ 2382.108497][ T5020] FAULT_INJECTION: forcing a failure. [ 2382.108497][ T5020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.165576][ T5020] CPU: 1 UID: 0 PID: 5020 Comm: syz.1.9005 Tainted: G L syzkaller #0 PREEMPT(full) [ 2382.165611][ T5020] Tainted: [L]=SOFTLOCKUP [ 2382.165619][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2382.165631][ T5020] Call Trace: [ 2382.165640][ T5020] [ 2382.165649][ T5020] dump_stack_lvl+0xe8/0x150 [ 2382.165681][ T5020] should_fail_ex+0x414/0x560 [ 2382.165715][ T5020] _copy_from_iter+0x1cd/0x1630 [ 2382.165750][ T5020] ? __pfx__copy_from_iter+0x10/0x10 [ 2382.165771][ T5020] ? __build_skb_around+0x22d/0x3c0 [ 2382.165795][ T5020] ? __alloc_skb+0x198/0x3a0 [ 2382.165815][ T5020] ? netlink_sendmsg+0x642/0xb30 [ 2382.165837][ T5020] ? skb_put+0x11b/0x210 [ 2382.165862][ T5020] netlink_sendmsg+0x6b2/0xb30 [ 2382.165898][ T5020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2382.165926][ T5020] ? __import_iovec+0x5d4/0x7f0 [ 2382.165948][ T5020] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2382.165975][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2382.165994][ T5020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2382.166021][ T5020] __sock_sendmsg+0x21c/0x270 [ 2382.166054][ T5020] ____sys_sendmsg+0x505/0x820 [ 2382.166084][ T5020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2382.166114][ T5020] ? kstrtouint+0x6e/0xe0 [ 2382.166151][ T5020] ___sys_sendmsg+0x21f/0x2a0 [ 2382.166178][ T5020] ? __pfx____sys_sendmsg+0x10/0x10 [ 2382.166201][ T5020] ? get_pid_task+0x20/0x1f0 [ 2382.166225][ T5020] ? get_pid_task+0x20/0x1f0 [ 2382.166247][ T5020] ? get_pid_task+0x20/0x1f0 [ 2382.166302][ T5020] ? __fget_files+0x2a/0x420 [ 2382.166325][ T5020] ? __fget_files+0x3a0/0x420 [ 2382.166367][ T5020] __sys_sendmsg+0x164/0x220 [ 2382.166394][ T5020] ? __pfx___sys_sendmsg+0x10/0x10 [ 2382.166427][ T5020] ? __pfx_ksys_write+0x10/0x10 [ 2382.166458][ T5020] __do_fast_syscall_32+0x1dc/0x570 [ 2382.166482][ T5020] ? lockdep_hardirqs_on+0x7b/0x110 [ 2382.166501][ T5020] ? do_fast_syscall_32+0x34/0x80 [ 2382.166523][ T5020] ? irqentry_exit+0x10f/0x670 [ 2382.166546][ T5020] do_fast_syscall_32+0x34/0x80 [ 2382.166568][ T5020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2382.166596][ T5020] RIP: 0023:0xf7f05539 [ 2382.166611][ T5020] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2382.166627][ T5020] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2382.166649][ T5020] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 2382.166663][ T5020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2382.166675][ T5020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2382.166686][ T5020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2382.166698][ T5020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2382.166727][ T5020] [ 2382.617566][ T5013] FAULT_INJECTION: forcing a failure. [ 2382.617566][ T5013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.631528][ T5013] CPU: 1 UID: 0 PID: 5013 Comm: syz.0.9003 Tainted: G L syzkaller #0 PREEMPT(full) [ 2382.631562][ T5013] Tainted: [L]=SOFTLOCKUP [ 2382.631570][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2382.631583][ T5013] Call Trace: [ 2382.631592][ T5013] [ 2382.631601][ T5013] dump_stack_lvl+0xe8/0x150 [ 2382.631632][ T5013] should_fail_ex+0x414/0x560 [ 2382.631666][ T5013] _copy_to_user+0x31/0xb0 [ 2382.631692][ T5013] simple_read_from_buffer+0xe1/0x170 [ 2382.631722][ T5013] proc_fail_nth_read+0x1b3/0x220 [ 2382.631747][ T5013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2382.631772][ T5013] ? rw_verify_area+0x2a6/0x4d0 [ 2382.631802][ T5013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2382.631825][ T5013] vfs_read+0x200/0xa30 [ 2382.631843][ T5013] ? fdget_pos+0x247/0x320 [ 2382.631873][ T5013] ? __pfx___mutex_lock+0x10/0x10 [ 2382.631897][ T5013] ? __pfx_vfs_read+0x10/0x10 [ 2382.631918][ T5013] ? __fget_files+0x2a/0x420 [ 2382.631947][ T5013] ? __fget_files+0x3a0/0x420 [ 2382.631969][ T5013] ? __fget_files+0x2a/0x420 [ 2382.632003][ T5013] ksys_read+0x145/0x250 [ 2382.632025][ T5013] ? __pfx_ksys_read+0x10/0x10 [ 2382.632057][ T5013] __do_fast_syscall_32+0x1dc/0x570 [ 2382.632080][ T5013] ? lockdep_hardirqs_on+0x7b/0x110 [ 2382.632099][ T5013] ? do_fast_syscall_32+0x34/0x80 [ 2382.632121][ T5013] ? irqentry_exit+0x10f/0x670 [ 2382.632146][ T5013] do_fast_syscall_32+0x34/0x80 [ 2382.632170][ T5013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2382.632194][ T5013] RIP: 0023:0xf70bd539 [ 2382.632212][ T5013] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2382.632229][ T5013] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2382.632253][ T5013] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54ad620 [ 2382.632267][ T5013] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000 [ 2382.632280][ T5013] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2382.632292][ T5013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2382.632304][ T5013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2382.632336][ T5013] [ 2383.573550][ T5044] fuse: Bad value for 'fd' [ 2383.746257][ T4509] IPVS: starting estimator thread 0... [ 2383.859497][ T5049] IPVS: using max 28 ests per chain, 67200 per kthread [ 2383.871712][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2383.871731][ T30] audit: type=1326 audit(1768025573.736:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.9013" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 2384.325160][ T4509] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2384.487947][ T4509] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2384.505228][ T4509] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2384.539046][ T4509] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2384.580898][ T4509] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2384.634070][ T4509] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2384.665044][ T4509] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2384.751080][ T4509] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2384.772192][ T4509] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2384.795282][ T4509] usb 3-1: Product: syz [ 2384.799474][ T4509] usb 3-1: Manufacturer: syz [ 2384.829962][ T5055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2384.843686][ T4509] cdc_wdm 3-1:1.0: skipping garbage [ 2384.865428][ T2361] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2384.901449][ T5065] tun0: tun_chr_ioctl cmd 1074025675 [ 2384.907096][ T5065] tun0: persist enabled [ 2384.912838][ T5065] tun0: tun_chr_ioctl cmd 1074025675 [ 2384.918582][ T5065] tun0: persist disabled [ 2384.925586][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9017'. [ 2384.934639][ T5065] netlink: 'syz.6.9017': attribute type 1 has an invalid length. [ 2384.944067][ T5065] netlink: 'syz.6.9017': attribute type 2 has an invalid length. [ 2384.974474][ T4509] cdc_wdm 3-1:1.0: skipping garbage [ 2385.023648][ T4509] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2385.044270][ T4509] cdc_wdm 3-1:1.0: Unknown control protocol [ 2385.185688][ C0] wdm_int_callback: 4553 callbacks suppressed [ 2385.185715][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.198417][ C0] wdm_int_callback: 4553 callbacks suppressed [ 2385.198432][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.211543][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.218173][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.224891][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.231515][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.238651][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.245281][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.253933][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.260565][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.267289][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.274005][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.280320][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.287031][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.293321][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.299945][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.306242][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.312843][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.319139][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2385.325762][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2385.427436][ T2361] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2385.465252][ T2361] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2385.507566][ T5070] tun0: tun_chr_ioctl cmd 1074025675 [ 2385.512948][ T5070] tun0: persist enabled [ 2385.519579][ T5070] tun0: tun_chr_ioctl cmd 1074025675 [ 2385.525244][ T5070] tun0: persist disabled [ 2385.642262][ T2361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2385.675242][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2385.713831][ T2361] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2385.793380][ T2361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2385.830206][ T2361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2385.912833][ T2361] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2385.923564][ T2361] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2385.939761][ T2361] usb 1-1: Product: syz [ 2385.965308][ T2361] usb 1-1: Manufacturer: syz [ 2385.986839][ T5063] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2385.999152][ T2361] cdc_wdm 1-1:1.0: skipping garbage [ 2386.020462][ T2361] cdc_wdm 1-1:1.0: skipping garbage [ 2386.044488][ T2361] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 2386.053947][ T2361] cdc_wdm 1-1:1.0: Unknown control protocol [ 2387.085069][T15904] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2387.235026][T15904] usb 5-1: Using ep0 maxpacket: 32 [ 2387.242388][T15904] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 2387.257833][T15904] usb 5-1: config 0 has no interface number 0 [ 2387.307642][T15904] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2387.349557][T15904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.389279][T15904] usb 5-1: Product: syz [ 2387.410300][T15904] usb 5-1: Manufacturer: syz [ 2387.447399][T15904] usb 5-1: SerialNumber: syz [ 2387.500792][T15904] usb 5-1: config 0 descriptor?? [ 2387.558751][T15904] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2387.584515][T15904] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2387.619816][T15904] dvb-usb: bulk message failed: -22 (2/0) [ 2387.713398][T15904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2387.732816][T23221] usb 3-1: USB disconnect, device number 38 [ 2387.744769][ T5075] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 2387.756693][ T5075] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2387.765121][ T5075] CPU: 1 UID: 0 PID: 5075 Comm: syz.4.9019 Tainted: G L syzkaller #0 PREEMPT(full) [ 2387.775953][ T5075] Tainted: [L]=SOFTLOCKUP [ 2387.780272][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2387.790448][ T5075] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 2387.796377][ T5075] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 7d ff 6b fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2387.815981][ T5075] RSP: 0018:ffffc900040ff9d0 EFLAGS: 00010202 [ 2387.822047][ T5075] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2387.830009][ T5075] RDX: ffffffff87bb1a55 RSI: ffffffff8eec1730 RDI: 0000000000001900 [ 2387.837972][ T5075] RBP: 0000000000000000 R08: ffff88802a57bd00 R09: 0000000000000002 [ 2387.845929][ T5075] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2387.853885][ T5075] R13: 1ffff11006032848 R14: 0000000000000002 R15: ffff888030194248 [ 2387.861848][ T5075] FS: 0000000000000000(0000) GS:ffff888125f1f000(0063) knlGS:00000000f543db40 [ 2387.870773][ T5075] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2387.877530][ T5075] CR2: 000000002ff1eff8 CR3: 000000007a75a000 CR4: 00000000003526f0 [ 2387.885582][ T5075] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2387.893547][ T5075] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2387.901515][ T5075] Call Trace: [ 2387.904883][ T5075] [ 2387.907815][ T5075] __i2c_transfer+0x79a/0x1f00 [ 2387.912578][ T5075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2387.918500][ T5075] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2387.924584][ T5075] ? i2c_transfer+0xc8/0x2d0 [ 2387.929160][ T5075] i2c_transfer+0x1cc/0x2d0 [ 2387.933739][ T5075] i2cdev_ioctl_rdwr+0x460/0x740 [ 2387.938665][ T5075] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2387.943764][ T5075] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2387.949453][ T5075] ? __fget_files+0x3a0/0x420 [ 2387.954120][ T5075] ? __fget_files+0x2a/0x420 [ 2387.958787][ T5075] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2387.964384][ T5075] __ia32_compat_sys_ioctl+0x543/0x840 [ 2387.969828][ T5075] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2387.975886][ T5075] ? __se_sys_futex_time32+0x360/0x3e0 [ 2387.981340][ T5075] ? __pfx_do_sys_openat2+0x10/0x10 [ 2387.986543][ T5075] ? rcu_is_watching+0x15/0xb0 [ 2387.991298][ T5075] __do_fast_syscall_32+0x1dc/0x570 [ 2387.996484][ T5075] ? lockdep_hardirqs_on+0x7b/0x110 [ 2388.001756][ T5075] ? do_fast_syscall_32+0x34/0x80 [ 2388.006788][ T5075] ? irqentry_exit+0x10f/0x670 [ 2388.011563][ T5075] do_fast_syscall_32+0x34/0x80 [ 2388.016406][ T5075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2388.022729][ T5075] RIP: 0023:0xf704d539 [ 2388.026963][ T5075] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2388.046999][ T5075] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2388.055405][ T5075] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2388.063879][ T5075] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2388.071868][ T5075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2388.079832][ T5075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2388.087793][ T5075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2388.095757][ T5075] [ 2388.098768][ T5075] Modules linked in: [ 2388.104298][ T5075] ---[ end trace 0000000000000000 ]--- [ 2388.165029][ T5075] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 2388.213004][ T5075] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 7d ff 6b fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2388.246177][T15904] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2388.275110][ T5075] RSP: 0018:ffffc900040ff9d0 EFLAGS: 00010202 [ 2388.281322][ T5075] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2388.289695][T15904] usb 5-1: media controller created [ 2388.332170][T23221] usb 1-1: USB disconnect, device number 65 [ 2388.350350][ T5075] RDX: ffffffff87bb1a55 RSI: ffffffff8eec1730 RDI: 0000000000001900 [ 2388.364320][ T5075] RBP: 0000000000000000 R08: ffff88802a57bd00 R09: 0000000000000002 [ 2388.372916][ T5075] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2388.380993][ T5075] R13: 1ffff11006032848 R14: 0000000000000002 R15: ffff888030194248 [ 2388.389366][ T5075] FS: 0000000000000000(0000) GS:ffff888125e1f000(0063) knlGS:00000000f543db40 [ 2388.399015][ T5075] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2388.405996][ T5075] CR2: 0000000080202018 CR3: 000000007a75a000 CR4: 00000000003526f0 [ 2388.414012][ T5075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2388.424730][ T5075] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2388.433242][ T5075] Kernel panic - not syncing: Fatal exception [ 2388.439637][ T5075] Kernel Offset: disabled [ 2388.443948][ T5075] Rebooting in 86400 seconds..