last executing test programs: 14.369102554s ago: executing program 2 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000007380)=0x1417, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r2, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) statx(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x10, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000000c0)={0x1c, r4, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008040) 13.253827453s ago: executing program 2 (id=2900): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pause() r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 11.524805015s ago: executing program 2 (id=2912): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000007380)=0x1417, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r2, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) statx(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x10, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000000c0)={0x1c, r4, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008040) 10.376825919s ago: executing program 2 (id=2918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x4e24, 0x30, @dev={0xfe, 0x80, '\x00', 0xb}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641676f56c7556fd3713097bd007f481bc00226100c9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddf208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a4000600000000001c00127d0cf85b006d6163766c616e010c00028008000900ffffffff140035006d6163766c616e300000000000000000", @ANYRES16=0x0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x50}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020603000000000000000000050000000c0f8cc3c18ec600078008000800000000404aff020073793c1736568614879d0400000000000000010007000000050001000600000010000300000000683a69"], 0x54}}, 0x80) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000010a01040000000000000000050000080900010073797a300000000008000240000000010c00044000000000000000044a000600cc40e806db1a02da1ac1bf4b12b6a57411c563ddb780fff0bab19c8c3e394d59d186313cbc9841d913f631044576138b3d7807064cf1e39269e901996d44dadaa63e0e560b10d16808000240000000020c0004400000000000000003"], 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x44040) accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x800) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\xf4\x934\xf7\xbfy\x8cF8ORE/P\xa50\xcf?\xf2\xfd&J\xa3\xdf\xa7\xa0\x88\xc2v8P2\xef\x02\x8b\x97\xd6\x86\xc0\xfa\xf2\xf4k\x01:K\x8e\xe6\x86\xdf\xe7m)', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x5, 0x8000, 0x80}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 10.040919881s ago: executing program 2 (id=2921): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000f40)=0x80000000, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800900010002000000000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB="0a000200aaaaaaaaaa150000"], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$key(0xf, 0x3, 0x2) read$FUSE(r6, &(0x7f0000000f80)={0x2020}, 0xc50) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000506050000c0e1788ba9b2940f00000a050001000700000005000100070000000900030073797a300000000005000100070000000900030073797a30000000000900030073797a310000000077235a81eb233dae0d9c2c32"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r8) read$snddsp(r6, &(0x7f00000005c0)=""/146, 0x92) socket$packet(0x11, 0x4, 0x300) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000003c0)={0x18, @tick=0x7, 0x7, {0x6, 0x2}, 0x40, 0x2, 0x1}) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x31) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000180)={{0x0, 0x1}, {0xfa, 0x2f}, 0x40}) 9.016957556s ago: executing program 4 (id=2926): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r0, 0x47ba, 0xfffffffe, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x7, [@empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) socket$inet6_sctp(0xa, 0x5, 0x84) 8.979250673s ago: executing program 2 (id=2927): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x9) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 6.726660162s ago: executing program 0 (id=2930): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000000c0)=0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffef, 0xfff2}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x410c2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000000001010400000000000000000a000000300001802c09018014000300fe8000000000000000000000000000aa14000400ff010000000000000000000000000009440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000600010c00028005000100000000000600034000010000080007400000000004000680"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}}, @CTA_NAT_PROTO={0x4}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x8, 0xf1a]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xfb3}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x829}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3e1}]}]}, 0x90}}, 0x0) close(r11) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 6.45015233s ago: executing program 3 (id=2934): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0xc30000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r1], &(0x7f00000000c0)=[0x81, 0x40, 0x4, 0xfffffffffffffff8, 0xaf, 0x9], 0x2}) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x75, &(0x7f0000000140)=@string={0x75, 0x3, "4a1be38632d542ce52bf5839b2bb172be312bfbb905fcb3aa2197b675581d58e45c54dda292c9eafa7a380a250535672d2a82f52c8f11f4bb3dec927f5b1cc0c50ace85eb7d9017fad97a172fa9dcce35458697bc4e7e59306c6726698ba69824ccaff908ced6dc0d31a1a02658dd558942815"}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000380)=0x1f40) r4 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x3, 0x3, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x5, 0x1, 0x5, 0x0, r5}) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 6.276169627s ago: executing program 0 (id=2936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x200, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/hardlockup_count', 0x800, 0x40) pidfd_send_signal(r2, 0x10, &(0x7f0000000300)={0x1, 0x4, 0xa}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x9, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x80, 0x6, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3], [0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) r7 = socket(0x3, 0x80008, 0x1000) getsockopt$packet_buf(r7, 0x107, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44acd0e00008eda86923c31d4b8affbf514fd00", r8, 0xffffffffffffffff}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r14, 0x4138ae84, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) close_range(r0, r11, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 5.897565029s ago: executing program 4 (id=2937): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000020001d000000001a00000000000000000d00000000000000"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r8, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004980) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="b74500000000000400084a0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x20044041}, 0x4000040) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) 5.657167837s ago: executing program 3 (id=2938): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000000c0)=0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffef, 0xfff2}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x410c2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000000001010400000000000000000a000000300001802c09018014000300fe8000000000000000000000000000aa14000400ff010000000000000000000000000009440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000600010c00028005000100000000000600034000010000080007400000000004000680"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}}, @CTA_NAT_PROTO={0x4}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x8, 0xf1a]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xfb3}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x829}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3e1}]}]}, 0x90}}, 0x0) close(r11) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 5.214151193s ago: executing program 3 (id=2939): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x10201, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r7], 0x20}}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000009f461200"], 0x64}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 4.257738138s ago: executing program 4 (id=2941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1a5c, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r4 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r4, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0xfffffffc, 0xffffffff, 0x806, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$PPPOEIOCSFWD(r5, 0x4004b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'pim6reg\x00'}}) ioctl$UI_DEV_CREATE(r6, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.255123171s ago: executing program 0 (id=2950): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) accept4$unix(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x800) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x28}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) 3.60833012s ago: executing program 3 (id=2943): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x241) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x4010744d, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x100) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 3.272771727s ago: executing program 1 (id=2944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x2, 0x4, 0x0, "36e6e56ea27156a3570361811f2789bcea41ccd5a752f287f84bef456999539f295747bf668a270d091a9cb4c9c11f86f40d91c08e7b77588cfc620ac2a08282", "99190353f77436f19bc1dddf360b1fd2196fd6884e81721195bc29dd3b706a1b0551814f05fe51ad551fe52062f039e6823ef32b909342a9104facb3e1825055", "11c215585e4aef97380fe337eaaf8acc5cf33c51fbbe371be886dcccaf5e892a", [0x1, 0x8]}) syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.613381566s ago: executing program 1 (id=2945): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x80fe, 0x4) 2.543534229s ago: executing program 4 (id=2946): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r0, 0x47ba, 0xfffffffe, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x7, [@empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) socket$inet6_sctp(0xa, 0x5, 0x84) 2.441705815s ago: executing program 0 (id=2947): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r4, 0x402, 0x8000001f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8021d08000b000000e8fe55a1180015000600142603640e1209000d000104", 0x1f}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0xc92, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f00000001c0)=0x3) syz_io_uring_submit(r2, r3, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) io_uring_enter(r1, 0x1733, 0x6323, 0x20, 0x0, 0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x224}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r0, @ANYBLOB="01002abd7000fcdbdf2512000000080006000200000018000180140002006261746164765f736c6176655f3000000800070001000000"], 0x3c}}, 0x8004) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r12, &(0x7f0000000400)='./file0\x00', 0x89901) ioctl$TUNSETVNETLE(r12, 0x400454dc, &(0x7f0000000000)=0x1) 2.381597826s ago: executing program 1 (id=2948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000000c0)=0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffef, 0xfff2}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x410c2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000000001010400000000000000000a000000300001802c09018014000300fe8000000000000000000000000000aa14000400ff010000000000000000000000000009440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000600010c00028005000100000000000600034000010000080007400000000004000680"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}}, @CTA_NAT_PROTO={0x4}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x8, 0xf1a]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xfb3}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x829}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3e1}]}]}, 0x90}}, 0x0) close(r11) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 1.318841543s ago: executing program 4 (id=2949): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (fail_nth: 1) 975.647313ms ago: executing program 4 (id=2951): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$peek(0x19, 0x0, 0xfffffffffffffffe) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0x10, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @local, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x82}}]}, 0x80}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r6 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000002c0)=@overlay={0xfffffffa, 0x4, 0x4, 0x8, 0x1, {}, {0xcad72c80fdf3f3e7, 0xc, 0x3, 0x9, 0x7, 0x78, "1a2805b1"}, 0x4, 0x3, {}, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 521.426591ms ago: executing program 0 (id=2952): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 466.393146ms ago: executing program 1 (id=2953): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000004000)="00ee", 0x2}], 0x1, 0x0, 0x0, 0x20040014}, 0x4000000) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, &(0x7f0000000440)=""/7, 0x7}, 0xaee02048}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) 464.515328ms ago: executing program 3 (id=2954): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40045304, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xde23, 0x1, 0x0, 0x1a9}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "9231"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x13}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) recvmmsg(r5, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0xb393}, {{&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/186, 0xba}], 0x5, &(0x7f0000000280)=""/66, 0x42}, 0x8}, {{&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)=""/113, 0x71}, {&(0x7f0000000800)=""/4090, 0xffa}, {&(0x7f0000001800)=""/185, 0xb9}], 0x3}, 0xb7}], 0x3, 0x10041, 0x0) 369.362295ms ago: executing program 0 (id=2955): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x2, 0x4, 0x0, "36e6e56ea27156a3570361811f2789bcea41ccd5a752f287f84bef456999539f295747bf668a270d091a9cb4c9c11f86f40d91c08e7b77588cfc620ac2a08282", "99190353f77436f19bc1dddf360b1fd2196fd6884e81721195bc29dd3b706a1b0551814f05fe51ad551fe52062f039e6823ef32b909342a9104facb3e1825055", "11c215585e4aef97380fe337eaaf8acc5cf33c51fbbe371be886dcccaf5e892a", [0x1, 0x8]}) syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 294.467813ms ago: executing program 1 (id=2956): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 30.020479ms ago: executing program 1 (id=2957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1a5c, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r4 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r4, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0xfffffffc, 0xffffffff, 0x806, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$PPPOEIOCSFWD(r5, 0x4004b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'pim6reg\x00'}}) ioctl$UI_DEV_CREATE(r6, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2958): madvise(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000008c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)={0x20, 0x0, 0x4, {0x5, 0x0, 0x9, 0x3}}, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000002400)={0x1, 0x0, 0x1000, 0x2, &(0x7f0000002280)="8666", 0x1, 0x0, &(0x7f0000002300)="06"}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) kernel console output (not intermixed with test programs): 1f0 [ 501.971158][T13725] ? __fget_files+0x2a/0x420 [ 501.971182][T13725] ? __fget_files+0x3a0/0x420 [ 501.971215][T13725] __sys_sendmsg+0x164/0x220 [ 501.971238][T13725] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.971269][T13725] ? __pfx_ksys_write+0x10/0x10 [ 501.971298][T13725] __do_fast_syscall_32+0x1dc/0x560 [ 501.971321][T13725] ? lockdep_hardirqs_on+0x7b/0x110 [ 501.971340][T13725] ? do_fast_syscall_32+0x34/0x80 [ 501.971361][T13725] ? irqentry_exit+0x10f/0x660 [ 501.971383][T13725] do_fast_syscall_32+0x34/0x80 [ 501.971405][T13725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.971430][T13725] RIP: 0023:0xf7fb4539 [ 501.971446][T13725] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.971464][T13725] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 501.971485][T13725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 501.971499][T13725] RDX: 0000000004000855 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.971512][T13725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.971523][T13725] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.971535][T13725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.971563][T13725] [ 502.310205][T12656] usb 1-1: USB disconnect, device number 86 [ 502.394039][T13731] loop6: detected capacity change from 0 to 2640 [ 502.401672][T13731] buffer_io_error: 64 callbacks suppressed [ 502.401691][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.416078][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.424277][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.437605][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.445826][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.454025][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.462274][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.470778][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.484177][T13731] ldm_validate_partition_table(): Disk read failed. [ 502.491420][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.500101][T13731] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.519003][T13731] Dev loop6: unable to read RDB block 0 [ 502.538014][T13731] loop6: unable to read partition table [ 502.603582][T13731] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 502.632906][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 502.884775][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'. [ 503.149721][T13745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2560'. [ 503.430698][ T30] audit: type=1326 audit(1767247154.592:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.455779][T13757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2563'. [ 503.483390][ T30] audit: type=1326 audit(1767247154.612:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.549248][ T30] audit: type=1326 audit(1767247154.612:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.583173][ T30] audit: type=1326 audit(1767247154.612:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.608733][ T30] audit: type=1326 audit(1767247154.612:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.620157][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 503.655563][ T30] audit: type=1326 audit(1767247154.612:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.680109][ T30] audit: type=1326 audit(1767247154.612:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.704056][ T30] audit: type=1326 audit(1767247154.612:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.727353][ T30] audit: type=1326 audit(1767247154.612:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.741697][T13765] loop6: detected capacity change from 0 to 2640 [ 503.758916][ T30] audit: type=1326 audit(1767247154.612:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 503.782015][T13765] ldm_validate_partition_table(): Disk read failed. [ 503.783185][ T5959] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 503.800184][T13765] Dev loop6: unable to read RDB block 0 [ 503.801832][ T5959] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 503.806083][T13765] loop6: unable to read partition table [ 503.845099][T13765] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 503.887877][T12668] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 504.037932][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 504.046221][T12668] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 504.055912][T12668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.064038][T12668] usb 2-1: Product: syz [ 504.068312][T12668] usb 2-1: Manufacturer: syz [ 504.072908][T12668] usb 2-1: SerialNumber: syz [ 504.080762][T12668] usb 2-1: config 0 descriptor?? [ 504.237940][T12656] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 504.295658][T12668] usb 2-1: can't set first interface for hiFace device. [ 504.323658][T12668] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 504.360895][T12668] usb 2-1: USB disconnect, device number 78 [ 504.401828][T12656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.418716][T12656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.438246][T12656] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 504.448665][T12656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.459538][T12656] usb 1-1: config 0 descriptor?? [ 504.536333][T13778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2574'. [ 504.838008][T12673] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 505.009736][T12673] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 505.019785][T12673] usb 3-1: New USB device found, idVendor=00ed, idProduct=0000, bcdDevice= 0.00 [ 505.029090][T12673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 505.037115][T12673] usb 3-1: SerialNumber: syz [ 505.044413][T12673] usb 3-1: config 0 descriptor?? [ 505.071584][T12656] usb 1-1: language id specifier not provided by device, defaulting to English [ 505.272964][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.281866][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.318132][T12668] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 505.344189][T12656] uclogic 0003:256C:006D.0040: failed retrieving Huion firmware version: -71 [ 505.357373][T12656] uclogic 0003:256C:006D.0040: failed probing parameters: -71 [ 505.365129][T12656] uclogic 0003:256C:006D.0040: probe with driver uclogic failed with error -71 [ 505.379796][T12656] usb 1-1: USB disconnect, device number 87 [ 505.467968][T12668] usb 2-1: Using ep0 maxpacket: 32 [ 505.475970][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.485073][T12668] usb 2-1: config 0 has no interface number 0 [ 505.492348][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.500709][T12668] usb 2-1: config 0 has no interface number 0 [ 505.507629][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.527843][T12668] usb 2-1: config 0 has no interface number 0 [ 505.535191][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.543678][T12668] usb 2-1: config 0 has no interface number 0 [ 505.545704][T12673] usb 4-1: USB disconnect, device number 77 [ 505.551140][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.568118][T12668] usb 2-1: config 0 has no interface number 0 [ 505.576633][T12668] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 505.585319][T12668] usb 2-1: config 0 has no interface number 0 [ 505.599337][T12668] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 505.608844][T12668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.616849][T12668] usb 2-1: Product: syz [ 505.623820][T12668] usb 2-1: Manufacturer: syz [ 505.630282][T12668] usb 2-1: SerialNumber: syz [ 505.637499][T12668] usb 2-1: config 0 descriptor?? [ 505.908195][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 505.928075][T12673] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 506.078759][T12673] usb 4-1: Using ep0 maxpacket: 32 [ 506.089367][T12673] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 506.099859][T12673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.118414][T12673] usb 4-1: config 0 descriptor?? [ 506.124846][T13802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2581'. [ 506.206599][T13804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2582'. [ 506.334553][T12673] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 506.344418][T12673] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 506.355437][T12673] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 506.364774][T12673] usb 4-1: media controller created [ 506.394810][T12673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.514993][T13814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2585'. [ 506.544312][T13792] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 506.600603][T12673] az6027: usb out operation failed. (-71) [ 506.612940][T12673] az6027: usb out operation failed. (-71) [ 506.622558][T12673] stb0899_attach: Driver disabled by Kconfig [ 506.630536][T12673] az6027: no front-end attached [ 506.630536][T12673] [ 506.645082][T12673] az6027: usb out operation failed. (-71) [ 506.654127][T12673] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 506.665777][T12673] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 506.681207][T12673] dvb-usb: schedule remote query interval to 400 msecs. [ 506.690354][T12673] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 506.707429][T12673] usb 4-1: USB disconnect, device number 78 [ 506.775008][T12673] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 507.537861][T12673] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 508.157516][T12668] mdc800 2-1:0.109: probe fails -> wrong Number of Configuration [ 508.186424][ T5896] usb 3-1: USB disconnect, device number 82 [ 508.200121][T12668] usb 2-1: USB disconnect, device number 79 [ 508.236119][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 508.259431][T12673] usb 4-1: Using ep0 maxpacket: 8 [ 508.268243][T12673] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 508.283855][T12673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.295752][T12673] pvrusb2: Hardware description: Terratec Grabster AV400 [ 508.307821][T12673] pvrusb2: ********** [ 508.314394][T12673] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 508.330944][T12673] pvrusb2: Important functionality might not be entirely working. [ 508.346786][T12673] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 508.436345][T12673] pvrusb2: ********** [ 508.507157][ T2344] pvrusb2: Invalid write control endpoint [ 508.666445][ T2344] pvrusb2: Invalid write control endpoint [ 508.683585][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 508.716866][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 508.737875][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 508.766083][T13842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.777322][T13842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.782055][ T2344] pvrusb2: Device being rendered inoperable [ 508.805935][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 508.815330][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 508.831546][T13841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2593'. [ 508.855623][ T2344] pvrusb2: Attached sub-driver cx25840 [ 508.861606][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 508.872977][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 508.877864][ T5959] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 508.971518][T13850] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2596'. [ 509.089379][ T5959] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 509.100441][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.112712][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.124466][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 509.139201][ T5959] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 509.148799][ T5959] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 509.157712][ T5959] usb 2-1: Manufacturer: syz [ 509.164713][ T5959] usb 2-1: config 0 descriptor?? [ 509.188129][T12673] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 509.287880][T12668] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 509.347897][T12673] usb 3-1: Using ep0 maxpacket: 16 [ 509.358114][T12673] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8 [ 509.367987][T12673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.376970][T12673] usb 3-1: Product: syz [ 509.381545][T12673] usb 3-1: Manufacturer: syz [ 509.386198][T12673] usb 3-1: SerialNumber: syz [ 509.394479][T12673] usb 3-1: config 0 descriptor?? [ 509.450386][T12668] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.460926][T12668] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 509.470781][T12668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.482694][T12668] usb 1-1: config 0 descriptor?? [ 509.492695][T12668] pwc: Askey VC010 type 2 USB webcam detected. [ 509.582265][ T5959] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 509.594091][ T5959] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 509.606732][T12673] usb 3-1: USB disconnect, device number 83 [ 509.949287][T13861] loop6: detected capacity change from 0 to 524287999 [ 509.989139][ T5960] buffer_io_error: 32 callbacks suppressed [ 509.989178][ T5960] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 510.351079][ T5959] usb 4-1: USB disconnect, device number 79 [ 510.579783][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'. [ 510.738631][T13876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2605'. [ 510.837873][T13880] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2607'. [ 510.899497][ T5959] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 510.971191][T13885] loop6: detected capacity change from 0 to 524287999 [ 510.984236][T13885] FAULT_INJECTION: forcing a failure. [ 510.984236][T13885] name failslab, interval 1, probability 0, space 0, times 0 [ 511.006854][T13885] CPU: 0 UID: 0 PID: 13885 Comm: syz.2.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.006887][T13885] Tainted: [L]=SOFTLOCKUP [ 511.006895][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.006908][T13885] Call Trace: [ 511.006917][T13885] [ 511.006927][T13885] dump_stack_lvl+0xe8/0x150 [ 511.006958][T13885] should_fail_ex+0x414/0x560 [ 511.006993][T13885] should_failslab+0xa8/0x100 [ 511.007018][T13885] __kmalloc_noprof+0xdf/0x800 [ 511.007039][T13885] ? tomoyo_encode+0x28b/0x550 [ 511.007070][T13885] tomoyo_encode+0x28b/0x550 [ 511.007100][T13885] tomoyo_realpath_from_path+0x58d/0x5d0 [ 511.007140][T13885] tomoyo_check_open_permission+0x1c1/0x3b0 [ 511.007178][T13885] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 511.007201][T13885] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 511.007263][T13885] security_file_open+0xb1/0x270 [ 511.007285][T13885] do_dentry_open+0x34e/0x1420 [ 511.007323][T13885] vfs_open+0x3b/0x340 [ 511.007346][T13885] ? path_openat+0x33f3/0x3dd0 [ 511.007368][T13885] path_openat+0x340e/0x3dd0 [ 511.007397][T13885] ? __pfx_stack_trace_save+0x10/0x10 [ 511.007439][T13885] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 511.007467][T13885] ? getname_flags+0xb8/0x540 [ 511.007492][T13885] ? __pfx_path_openat+0x10/0x10 [ 511.007512][T13885] ? __lock_acquire+0x6b6/0x2cf0 [ 511.007546][T13885] do_filp_open+0x1fa/0x410 [ 511.007567][T13885] ? __pfx_do_filp_open+0x10/0x10 [ 511.007606][T13885] ? _raw_spin_unlock+0x28/0x50 [ 511.007634][T13885] ? alloc_fd+0x64c/0x6c0 [ 511.007667][T13885] do_sys_openat2+0x121/0x200 [ 511.007696][T13885] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.007726][T13885] ? ksys_write+0x22a/0x250 [ 511.007743][T13885] ? __pfx_ksys_write+0x10/0x10 [ 511.007764][T13885] __ia32_compat_sys_openat+0x131/0x160 [ 511.007797][T13885] __do_fast_syscall_32+0x1dc/0x560 [ 511.007825][T13885] ? lockdep_hardirqs_on+0x7b/0x110 [ 511.007843][T13885] ? do_fast_syscall_32+0x34/0x80 [ 511.007864][T13885] ? irqentry_exit+0x10f/0x660 [ 511.007887][T13885] do_fast_syscall_32+0x34/0x80 [ 511.007910][T13885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.007933][T13885] RIP: 0023:0xf700d539 [ 511.007952][T13885] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 511.007968][T13885] RSP: 002b:00000000f53fd100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 511.007990][T13885] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fd150 [ 511.008004][T13885] RDX: 0000000000122c02 RSI: 0000000000000000 RDI: 00000000f73a6ff4 [ 511.008018][T13885] RBP: 0000000000122c02 R08: 0000000000000000 R09: 0000000000000000 [ 511.008030][T13885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.008042][T13885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.008071][T13885] [ 511.302173][ T5960] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 511.308949][T13885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.361508][ T5896] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 511.369654][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 511.380390][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 511.395527][ T5959] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 511.426453][ T5959] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 511.454952][ T5959] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 511.465802][ T5959] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 511.531313][ T5959] usb 4-1: config 1 interface 0 has no altsetting 0 [ 511.545441][ T5959] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 511.568504][ T5896] usb 2-1: device descriptor read/64, error -32 [ 511.578798][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.611189][ T5959] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 511.872724][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 512.047919][ T5904] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 512.146768][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 512.160748][T12668] pwc: send_video_command error -71 [ 512.166013][T12668] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 512.199471][T12668] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 512.259983][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 512.266212][ T5904] usb 3-1: no configurations [ 512.288277][T12668] usb 1-1: USB disconnect, device number 88 [ 512.296622][ T5904] usb 3-1: can't read configurations, error -22 [ 512.347942][ T5959] scsi host1: usb-storage 4-1:1.0 [ 512.457898][ T5904] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 512.467323][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'. [ 512.509544][ T5896] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 512.527117][ T5896] usb 2-1: device reset changed ep0 maxpacket size! [ 512.562669][ T24] usb 2-1: USB disconnect, device number 80 [ 512.629061][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 512.636430][ T5904] usb 3-1: no configurations [ 512.648242][ T5904] usb 3-1: can't read configurations, error -22 [ 512.655290][ T5904] usb usb3-port1: attempt power cycle [ 512.655850][ T10] usb 4-1: USB disconnect, device number 80 [ 512.718420][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 512.867902][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 512.874952][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 512.892004][ T24] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 512.913048][ T24] usb 2-1: config 0 has no interface number 0 [ 512.924333][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 512.924367][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.924388][ T24] usb 2-1: Product: syz [ 512.924404][ T24] usb 2-1: Manufacturer: syz [ 512.924419][ T24] usb 2-1: SerialNumber: syz [ 512.929722][ T24] usb 2-1: config 0 descriptor?? [ 512.935831][ T24] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 512.998300][ T5904] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 513.022497][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 513.042381][ T5904] usb 3-1: no configurations [ 513.042397][ T5904] usb 3-1: can't read configurations, error -22 [ 513.135098][ T24] usb 2-1: USB disconnect, device number 81 [ 513.167977][ T5904] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 513.190389][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 513.196562][ T5904] usb 3-1: no configurations [ 513.201904][ T5904] usb 3-1: can't read configurations, error -22 [ 513.209215][ T5904] usb usb3-port1: unable to enumerate USB device [ 513.719952][T13921] binder: BINDER_SET_CONTEXT_MGR already set [ 513.725981][T13921] binder: 13920:13921 ioctl 4018620d 80000100 returned -16 [ 513.751145][T13921] binder: BINDER_SET_CONTEXT_MGR already set [ 513.757440][T13921] binder: 13920:13921 ioctl 4018620d 800002c0 returned -16 [ 514.314373][T13928] FAULT_INJECTION: forcing a failure. [ 514.314373][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.328082][T13928] CPU: 0 UID: 0 PID: 13928 Comm: syz.3.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.328113][T13928] Tainted: [L]=SOFTLOCKUP [ 514.328121][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.328133][T13928] Call Trace: [ 514.328142][T13928] [ 514.328150][T13928] dump_stack_lvl+0xe8/0x150 [ 514.328188][T13928] should_fail_ex+0x414/0x560 [ 514.328223][T13928] _copy_to_user+0x31/0xb0 [ 514.328249][T13928] simple_read_from_buffer+0xe1/0x170 [ 514.328278][T13928] proc_fail_nth_read+0x1b3/0x220 [ 514.328303][T13928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.328327][T13928] ? rw_verify_area+0x2a6/0x4d0 [ 514.328346][T13928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.328367][T13928] vfs_read+0x200/0xa30 [ 514.328386][T13928] ? fdget_pos+0x247/0x320 [ 514.328413][T13928] ? __pfx___mutex_lock+0x10/0x10 [ 514.328436][T13928] ? __pfx_vfs_read+0x10/0x10 [ 514.328456][T13928] ? __fget_files+0x2a/0x420 [ 514.328485][T13928] ? __fget_files+0x3a0/0x420 [ 514.328508][T13928] ? __fget_files+0x2a/0x420 [ 514.328540][T13928] ksys_read+0x145/0x250 [ 514.328561][T13928] ? __pfx_ksys_read+0x10/0x10 [ 514.328591][T13928] __do_fast_syscall_32+0x1dc/0x560 [ 514.328613][T13928] ? lockdep_hardirqs_on+0x7b/0x110 [ 514.328631][T13928] ? do_fast_syscall_32+0x34/0x80 [ 514.328653][T13928] ? irqentry_exit+0x10f/0x660 [ 514.328676][T13928] do_fast_syscall_32+0x34/0x80 [ 514.328698][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.328722][T13928] RIP: 0023:0xf70bd539 [ 514.328738][T13928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 514.328757][T13928] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 514.328778][T13928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad620 [ 514.328793][T13928] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000 [ 514.328806][T13928] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 514.328818][T13928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.328829][T13928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.328857][T13928] [ 514.724086][T13932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 514.874564][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 515.388204][T12668] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 515.557949][T12668] usb 1-1: Using ep0 maxpacket: 16 [ 515.568343][T12668] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 515.601389][T12668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.621012][T12668] usb 1-1: Product: syz [ 515.625344][T12668] usb 1-1: Manufacturer: syz [ 515.647995][T12668] usb 1-1: SerialNumber: syz [ 515.691975][T12668] usb 1-1: config 0 descriptor?? [ 516.146340][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 516.171198][T12668] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 516.189712][T12668] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.210562][T12668] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 516.219184][T12668] usb 1-1: media controller created [ 516.242534][T12668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.379863][T12668] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 516.391777][T12668] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 516.825659][T13971] binder: 13969:13971 ioctl c1105517 80000280 returned -22 [ 516.845736][T12668] usb 1-1: USB disconnect, device number 89 [ 516.914321][T12668] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 517.103347][T13977] binder: transaction release 232 bad handle 1, ret = -22 [ 517.234578][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2640'. [ 517.268838][T12668] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 517.340401][T13982] FAULT_INJECTION: forcing a failure. [ 517.340401][T13982] name failslab, interval 1, probability 0, space 0, times 0 [ 517.388794][T13982] CPU: 0 UID: 0 PID: 13982 Comm: syz.2.2641 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.388834][T13982] Tainted: [L]=SOFTLOCKUP [ 517.388843][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.388855][T13982] Call Trace: [ 517.388863][T13982] [ 517.388872][T13982] dump_stack_lvl+0xe8/0x150 [ 517.388902][T13982] should_fail_ex+0x414/0x560 [ 517.388938][T13982] should_failslab+0xa8/0x100 [ 517.388964][T13982] __kmalloc_cache_noprof+0x84/0x700 [ 517.388986][T13982] ? subflow_ulp_init+0xd0/0x620 [ 517.389017][T13982] subflow_ulp_init+0xd0/0x620 [ 517.389040][T13982] ? tcp_set_ulp+0xb1/0x5f0 [ 517.389063][T13982] tcp_set_ulp+0x53c/0x5f0 [ 517.389084][T13982] mptcp_subflow_create_socket+0x34b/0x800 [ 517.389115][T13982] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 517.389142][T13982] ? tomoyo_check_inet_address+0x275/0x8c0 [ 517.389167][T13982] ? look_up_lock_class+0x57/0x110 [ 517.389191][T13982] __mptcp_nmpc_sk+0x148/0x760 [ 517.389217][T13982] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 517.389243][T13982] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 517.389273][T13982] mptcp_connect+0x71/0x830 [ 517.389297][T13982] __inet_stream_connect+0x2ae/0xe70 [ 517.389329][T13982] ? do_raw_spin_lock+0x121/0x290 [ 517.389354][T13982] ? lock_sock_nested+0x6a/0x100 [ 517.389384][T13982] ? __pfx___inet_stream_connect+0x10/0x10 [ 517.389421][T13982] ? __local_bh_enable_ip+0xd0/0x130 [ 517.389446][T13982] inet_stream_connect+0x66/0xa0 [ 517.389475][T13982] __sys_connect+0x316/0x440 [ 517.389495][T13982] ? __fget_files+0x3a0/0x420 [ 517.389520][T13982] ? __pfx___sys_connect+0x10/0x10 [ 517.389551][T13982] ? __pfx_ksys_write+0x10/0x10 [ 517.389578][T13982] __ia32_sys_connect+0x7a/0x90 [ 517.389600][T13982] __do_fast_syscall_32+0x1dc/0x560 [ 517.389620][T13982] ? lockdep_hardirqs_on+0x7b/0x110 [ 517.389638][T13982] ? do_fast_syscall_32+0x34/0x80 [ 517.389660][T13982] ? irqentry_exit+0x10f/0x660 [ 517.389684][T13982] do_fast_syscall_32+0x34/0x80 [ 517.389706][T13982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.389730][T13982] RIP: 0023:0xf700d539 [ 517.389747][T13982] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.389765][T13982] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 517.389787][T13982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 517.389802][T13982] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.389815][T13982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.389833][T13982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.389844][T13982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.389873][T13982] [ 517.698099][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 517.704460][T12668] usb 2-1: no configurations [ 517.750777][T12668] usb 2-1: can't read configurations, error -22 [ 517.800084][T13984] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2642'. [ 517.837718][T13988] binder: BINDER_SET_CONTEXT_MGR already set [ 517.844558][T13988] binder: 13987:13988 ioctl 4018620d 80002540 returned -16 [ 517.928093][T12668] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 518.097827][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 518.103813][T12668] usb 2-1: no configurations [ 518.121875][T12668] usb 2-1: can't read configurations, error -22 [ 518.138266][T12668] usb usb2-port1: attempt power cycle [ 518.647945][T12668] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 518.688532][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 518.694369][T12668] usb 2-1: no configurations [ 518.700826][T12668] usb 2-1: can't read configurations, error -22 [ 518.874248][T12668] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 518.909577][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 518.924976][T12668] usb 2-1: no configurations [ 518.937016][T12668] usb 2-1: can't read configurations, error -22 [ 518.960852][T12668] usb usb2-port1: unable to enumerate USB device [ 519.273489][T14015] binder: transaction release 239 bad handle 1, ret = -22 [ 519.366069][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 519.567212][T14025] FAULT_INJECTION: forcing a failure. [ 519.567212][T14025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.631926][T14025] CPU: 0 UID: 0 PID: 14025 Comm: syz.0.2654 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.631953][T14025] Tainted: [L]=SOFTLOCKUP [ 519.631961][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.631971][T14025] Call Trace: [ 519.631979][T14025] [ 519.631987][T14025] dump_stack_lvl+0xe8/0x150 [ 519.632017][T14025] should_fail_ex+0x414/0x560 [ 519.632050][T14025] _copy_from_user+0x2d/0xb0 [ 519.632073][T14025] ucma_write+0x158/0x2e0 [ 519.632095][T14025] ? __pfx_ucma_write+0x10/0x10 [ 519.632115][T14025] ? security_file_permission+0x75/0x290 [ 519.632138][T14025] ? rw_verify_area+0x255/0x4d0 [ 519.632161][T14025] vfs_writev+0x4b6/0x960 [ 519.632188][T14025] ? __pfx_ucma_write+0x10/0x10 [ 519.632210][T14025] ? __pfx_vfs_writev+0x10/0x10 [ 519.632245][T14025] ? __fget_files+0x2a/0x420 [ 519.632272][T14025] ? __fget_files+0x3a0/0x420 [ 519.632293][T14025] ? __fget_files+0x2a/0x420 [ 519.632322][T14025] do_writev+0x14d/0x2d0 [ 519.632346][T14025] ? __pfx_do_writev+0x10/0x10 [ 519.632377][T14025] __do_fast_syscall_32+0x1dc/0x560 [ 519.632399][T14025] ? lockdep_hardirqs_on+0x7b/0x110 [ 519.632416][T14025] ? do_fast_syscall_32+0x34/0x80 [ 519.632433][T14025] ? irqentry_exit+0x10f/0x660 [ 519.632454][T14025] do_fast_syscall_32+0x34/0x80 [ 519.632485][T14025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.632507][T14025] RIP: 0023:0xf704d539 [ 519.632523][T14025] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 519.632541][T14025] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 519.632559][T14025] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 519.632573][T14025] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.632584][T14025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.632595][T14025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.632607][T14025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.632633][T14025] [ 519.635800][T14030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2656'. [ 519.872513][T14029] geneve2: entered promiscuous mode [ 519.877835][T14029] geneve2: entered allmulticast mode [ 520.136133][T14037] xt_socket: unknown flags 0x20 [ 520.237859][ T5904] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 520.348214][T14049] binder: BINDER_SET_CONTEXT_MGR already set [ 520.354300][T14049] binder: 14046:14049 ioctl 4018620d 80000100 returned -16 [ 520.368559][T14049] binder: BINDER_SET_CONTEXT_MGR already set [ 520.375719][T14049] binder: 14046:14049 ioctl 4018620d 800002c0 returned -16 [ 520.417834][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 520.425985][ T5904] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 520.438266][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.452642][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 520.463833][ T5904] usb 1-1: config 0 descriptor?? [ 520.480018][ T5904] as10x_usb: device has been detected [ 520.492828][ T5904] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 520.517128][ T5904] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 520.551707][ T5904] as10x_usb: error during firmware upload part1 [ 520.559889][ T5904] Registered device nBox DVB-T Dongle [ 520.590374][T14057] FAULT_INJECTION: forcing a failure. [ 520.590374][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.609285][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.2.2667 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.609305][T14057] Tainted: [L]=SOFTLOCKUP [ 520.609312][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.609323][T14057] Call Trace: [ 520.609331][T14057] [ 520.609339][T14057] dump_stack_lvl+0xe8/0x150 [ 520.609368][T14057] should_fail_ex+0x414/0x560 [ 520.609398][T14057] _copy_to_user+0x31/0xb0 [ 520.609413][T14057] simple_read_from_buffer+0xe1/0x170 [ 520.609429][T14057] proc_fail_nth_read+0x1b3/0x220 [ 520.609442][T14057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.609455][T14057] ? rw_verify_area+0x2a6/0x4d0 [ 520.609464][T14057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.609476][T14057] vfs_read+0x200/0xa30 [ 520.609485][T14057] ? fdget_pos+0x247/0x320 [ 520.609500][T14057] ? __pfx___mutex_lock+0x10/0x10 [ 520.609512][T14057] ? __pfx_vfs_read+0x10/0x10 [ 520.609522][T14057] ? __fget_files+0x2a/0x420 [ 520.609537][T14057] ? __fget_files+0x3a0/0x420 [ 520.609549][T14057] ? __fget_files+0x2a/0x420 [ 520.609565][T14057] ksys_read+0x145/0x250 [ 520.609576][T14057] ? __pfx_ksys_read+0x10/0x10 [ 520.609591][T14057] __do_fast_syscall_32+0x1dc/0x560 [ 520.609610][T14057] ? lockdep_hardirqs_on+0x7b/0x110 [ 520.609619][T14057] ? do_fast_syscall_32+0x34/0x80 [ 520.609630][T14057] ? irqentry_exit+0x10f/0x660 [ 520.609642][T14057] do_fast_syscall_32+0x34/0x80 [ 520.609653][T14057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.609666][T14057] RIP: 0023:0xf700d539 [ 520.609677][T14057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 520.609686][T14057] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 520.609698][T14057] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620 [ 520.609706][T14057] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 520.609712][T14057] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 520.609717][T14057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 520.609724][T14057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.609739][T14057] [ 520.852580][ T5904] usb 1-1: USB disconnect, device number 90 [ 520.900081][ T5904] Unregistered device nBox DVB-T Dongle [ 520.902656][ T5904] as10x_usb: device has been disconnected [ 521.299130][T14069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2670'. [ 521.391547][T14066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 521.392776][T14059] FAULT_INJECTION: forcing a failure. [ 521.392776][T14059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.420171][T14059] CPU: 0 UID: 0 PID: 14059 Comm: syz.2.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.420190][T14059] Tainted: [L]=SOFTLOCKUP [ 521.420194][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.420201][T14059] Call Trace: [ 521.420206][T14059] [ 521.420212][T14059] dump_stack_lvl+0xe8/0x150 [ 521.420230][T14059] should_fail_ex+0x414/0x560 [ 521.420251][T14059] prepare_alloc_pages+0x22b/0x650 [ 521.420269][T14059] __alloc_frozen_pages_noprof+0x123/0x370 [ 521.420283][T14059] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 521.420300][T14059] ? policy_nodemask+0x27c/0x720 [ 521.420312][T14059] ? count_memcg_event_mm+0x21/0x260 [ 521.420329][T14059] alloc_pages_mpol+0x232/0x4a0 [ 521.420344][T14059] vma_alloc_folio_noprof+0xe4/0x200 [ 521.420358][T14059] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 521.420376][T14059] folio_prealloc+0x30/0x180 [ 521.420387][T14059] do_wp_page+0x1231/0x5810 [ 521.420412][T14059] ? __pfx_do_wp_page+0x10/0x10 [ 521.420424][T14059] ? do_raw_spin_lock+0x121/0x290 [ 521.420440][T14059] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 521.420459][T14059] handle_mm_fault+0x14c5/0x32b0 [ 521.420481][T14059] ? handle_mm_fault+0xdb/0x32b0 [ 521.420506][T14059] ? __pfx_handle_mm_fault+0x10/0x10 [ 521.420531][T14059] ? lock_mm_and_find_vma+0x9c/0x300 [ 521.420543][T14059] do_user_addr_fault+0x764/0x1380 [ 521.420561][T14059] exc_page_fault+0x71/0xd0 [ 521.420574][T14059] asm_exc_page_fault+0x26/0x30 [ 521.420584][T14059] RIP: 0010:ia32_setup_frame+0x25a/0x940 [ 521.420596][T14059] Code: 24 18 4c 8d 70 50 4c 89 f0 48 c1 e8 03 48 89 84 24 98 00 00 00 42 0f b6 04 28 84 c0 0f 85 a7 04 00 00 4c 89 74 24 28 41 8b 06 <41> 89 44 24 04 4d 89 e6 49 83 c6 08 48 8b 84 24 c0 00 00 00 48 89 [ 521.420606][T14059] RSP: 0018:ffffc9000cbdfc20 EFLAGS: 00050246 [ 521.420617][T14059] RAX: 0000000000000011 RBX: ffffc9000cbdff48 RCX: ffff88801db3bd00 [ 521.420625][T14059] RDX: 0000000000000000 RSI: 00000000f53fceac RDI: 00007ffffffff000 [ 521.420633][T14059] RBP: ffffc9000cbdfd50 R08: ffffc9000cbdfa0f R09: 1ffff9200197bf41 [ 521.420641][T14059] R10: dffffc0000000000 R11: fffff5200197bf42 R12: 00000000f53fceac [ 521.420648][T14059] R13: dffffc0000000000 R14: ffffc9000cbdfdf0 R15: dffffc0000000000 [ 521.420665][T14059] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.420681][T14059] ? lockdep_hardirqs_on+0x7b/0x110 [ 521.420692][T14059] ? get_signal+0x1150/0x1340 [ 521.420706][T14059] ? __pfx_ia32_setup_frame+0x10/0x10 [ 521.420721][T14059] arch_do_signal_or_restart+0x3f7/0x7a0 [ 521.420739][T14059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 521.420758][T14059] ? ksys_write+0x22a/0x250 [ 521.420772][T14059] exit_to_user_mode_loop+0x87/0x4e0 [ 521.420784][T14059] ? rcu_is_watching+0x15/0xb0 [ 521.420798][T14059] __do_fast_syscall_32+0x38e/0x560 [ 521.420810][T14059] ? lockdep_hardirqs_on+0x7b/0x110 [ 521.420820][T14059] ? do_fast_syscall_32+0x34/0x80 [ 521.420831][T14059] ? irqentry_exit+0x10f/0x660 [ 521.420843][T14059] do_fast_syscall_32+0x34/0x80 [ 521.420854][T14059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.420867][T14059] RIP: 0023:0xf700d539 [ 521.420876][T14059] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 521.420885][T14059] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 521.420896][T14059] RAX: 0000000000000001 RBX: 00000000f7f0f000 RCX: 0000000000000002 [ 521.420902][T14059] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.420909][T14059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.420915][T14059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 521.420921][T14059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.420936][T14059] [ 521.937271][T14079] input: syz1 as /devices/virtual/input/input30 [ 522.046646][T14081] FAULT_INJECTION: forcing a failure. [ 522.046646][T14081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.103285][T14081] CPU: 1 UID: 0 PID: 14081 Comm: syz.2.2674 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.103319][T14081] Tainted: [L]=SOFTLOCKUP [ 522.103327][T14081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.103340][T14081] Call Trace: [ 522.103348][T14081] [ 522.103357][T14081] dump_stack_lvl+0xe8/0x150 [ 522.103387][T14081] should_fail_ex+0x414/0x560 [ 522.103421][T14081] _copy_from_user+0x2d/0xb0 [ 522.103445][T14081] move_addr_to_kernel+0x7e/0x160 [ 522.103476][T14081] get_compat_msghdr+0x3bd/0x4a0 [ 522.103503][T14081] ? __pfx_get_compat_msghdr+0x10/0x10 [ 522.103530][T14081] ? kstrtouint+0x6e/0xe0 [ 522.103565][T14081] ___sys_sendmsg+0x193/0x2a0 [ 522.103666][T14081] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.103690][T14081] ? get_pid_task+0x20/0x1f0 [ 522.103716][T14081] ? get_pid_task+0x20/0x1f0 [ 522.103737][T14081] ? get_pid_task+0x20/0x1f0 [ 522.103788][T14081] ? __fget_files+0x2a/0x420 [ 522.103811][T14081] ? __fget_files+0x3a0/0x420 [ 522.103845][T14081] __sys_sendmsg+0x164/0x220 [ 522.103870][T14081] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.103902][T14081] ? __pfx_ksys_write+0x10/0x10 [ 522.103932][T14081] __do_fast_syscall_32+0x1dc/0x560 [ 522.103955][T14081] ? lockdep_hardirqs_on+0x7b/0x110 [ 522.103973][T14081] ? do_fast_syscall_32+0x34/0x80 [ 522.103994][T14081] ? irqentry_exit+0x10f/0x660 [ 522.104016][T14081] do_fast_syscall_32+0x34/0x80 [ 522.104039][T14081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.104063][T14081] RIP: 0023:0xf700d539 [ 522.104081][T14081] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 522.104097][T14081] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 522.104117][T14081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 522.104154][T14081] RDX: 0000000004000855 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.104166][T14081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.104178][T14081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 522.104190][T14081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.104218][T14081] [ 522.628893][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 523.018104][T14088] input: syz0 as /devices/virtual/input/input31 [ 523.114703][T14091] fuse: Unknown parameter 'QU NM|&Qyc}C?'4eRtj;DVG1V@yyޟ3\nPumWY02ӒtNo1CI' [ 523.224520][T14095] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2679'. [ 523.254841][T14096] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2679'. [ 523.478882][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 523.503750][T14102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2681'. [ 523.638063][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 523.654089][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 523.673334][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 523.819647][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.847350][ T10] usb 3-1: Product: syz [ 523.855110][ T10] usb 3-1: Manufacturer: syz [ 523.862965][ T10] usb 3-1: SerialNumber: syz [ 523.888731][T14084] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2675'. [ 524.117347][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 524.123873][T12656] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 524.131924][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 524.157418][ T10] usb 3-1: USB disconnect, device number 88 [ 524.312214][T12656] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 524.321384][T12656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.339527][T12656] usb 1-1: Product: syz [ 524.343719][T12656] usb 1-1: Manufacturer: syz [ 524.367807][T12656] usb 1-1: SerialNumber: syz [ 524.380632][T12656] usb 1-1: config 0 descriptor?? [ 524.672644][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 524.672662][ T30] audit: type=1326 audit(1767247175.832:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 524.700668][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'. [ 524.767827][ T30] audit: type=1326 audit(1767247175.832:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 524.777832][T12656] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 524.810097][ T30] audit: type=1326 audit(1767247175.842:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 524.869286][ T30] audit: type=1326 audit(1767247175.842:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 524.903268][T12656] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 524.928874][T12668] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 524.947706][ T30] audit: type=1326 audit(1767247175.842:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 524.986090][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2688'. [ 524.995775][ T30] audit: type=1326 audit(1767247175.842:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 525.002426][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2687'. [ 525.052800][ T30] audit: type=1326 audit(1767247175.842:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 525.080537][T12656] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 525.096138][T12656] usb 1-1: USB disconnect, device number 91 [ 525.098634][T12668] usb 2-1: Using ep0 maxpacket: 16 [ 525.105246][ T30] audit: type=1326 audit(1767247175.842:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 525.128387][T12668] usb 2-1: config 16 has an invalid interface number: 30 but max is 3 [ 525.157891][T12668] usb 2-1: config 16 has an invalid interface number: 254 but max is 3 [ 525.176283][ T30] audit: type=1326 audit(1767247175.842:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 525.196817][T12668] usb 2-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 525.200023][ T30] audit: type=1326 audit(1767247175.842:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 525.257893][T12668] usb 2-1: config 16 has an invalid descriptor of length 185, skipping remainder of the config [ 525.269581][T12668] usb 2-1: config 16 has 2 interfaces, different from the descriptor's value: 4 [ 525.289890][T12668] usb 2-1: config 16 has no interface number 0 [ 525.298822][T12668] usb 2-1: config 16 has no interface number 1 [ 525.305112][T12668] usb 2-1: config 16 interface 30 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 8 [ 525.315487][T12668] usb 2-1: config 16 interface 30 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 525.328020][T12668] usb 2-1: config 16 interface 30 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 525.459834][T12668] usb 2-1: config 16 interface 30 altsetting 3 has an endpoint descriptor with address 0x2B, changing to 0xB [ 525.487829][T12668] usb 2-1: config 16 interface 30 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 525.509203][T12668] usb 2-1: config 16 interface 30 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 525.527036][T12668] usb 2-1: config 16 interface 254 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 525.541520][T12668] usb 2-1: config 16 interface 254 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 525.556186][T12668] usb 2-1: config 16 interface 30 has no altsetting 0 [ 525.566907][T12668] usb 2-1: config 16 interface 254 has no altsetting 0 [ 525.576262][T14141] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2693'. [ 525.583869][T14143] FAULT_INJECTION: forcing a failure. [ 525.583869][T14143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.587546][T12668] usb 2-1: New USB device found, idVendor=2001, idProduct=3a03, bcdDevice=aa.b8 [ 525.608163][T14143] CPU: 0 UID: 0 PID: 14143 Comm: syz.2.2694 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.608193][T14143] Tainted: [L]=SOFTLOCKUP [ 525.608199][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.608210][T14143] Call Trace: [ 525.608218][T14143] [ 525.608226][T14143] dump_stack_lvl+0xe8/0x150 [ 525.608254][T14143] should_fail_ex+0x414/0x560 [ 525.608285][T14143] _copy_from_user+0x2d/0xb0 [ 525.608314][T14143] kstrtouint_from_user+0xc4/0x170 [ 525.608337][T14143] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 525.608369][T14143] proc_fail_nth_write+0x88/0x200 [ 525.608392][T14143] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 525.608419][T14143] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 525.608443][T14143] vfs_write+0x27e/0xb30 [ 525.608472][T14143] ? __pfx_vfs_write+0x10/0x10 [ 525.608493][T14143] ? __fget_files+0x2a/0x420 [ 525.608521][T14143] ? __fget_files+0x3a0/0x420 [ 525.608544][T14143] ? __fget_files+0x2a/0x420 [ 525.608575][T14143] ksys_write+0x145/0x250 [ 525.608597][T14143] ? __pfx_ksys_write+0x10/0x10 [ 525.608626][T14143] __do_fast_syscall_32+0x1dc/0x560 [ 525.608648][T14143] ? lockdep_hardirqs_on+0x7b/0x110 [ 525.608666][T14143] ? do_fast_syscall_32+0x34/0x80 [ 525.608686][T14143] ? irqentry_exit+0x10f/0x660 [ 525.608709][T14143] do_fast_syscall_32+0x34/0x80 [ 525.608730][T14143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.608754][T14143] RIP: 0023:0xf700d539 [ 525.608771][T14143] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 525.608788][T14143] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 525.608813][T14143] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620 [ 525.608827][T14143] RDX: 0000000000000001 RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 525.608839][T14143] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 525.608851][T14143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 525.608863][T14143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.608891][T14143] [ 525.610768][T12668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.842237][T12668] usb 2-1: Product: 䂚폡⊆臬吮㩘ᵴᥓᳵ靦챨ᨌ꣟삨騴심粵햼ắ䒷Ȿᴛ풴죷䡛ꍩ㕙잫롔狍譸ҕ೑䒯퓣냳떈ᒃ졉숅Ԏ﨔ⱐ猭︻❠昜浀죚㸹쓣ྵ䣋풋韎贸ꉍ龠ੇ⭍椊퇞⍌╽ᜯ뤪긽 [ 525.879904][T12668] usb 2-1: Manufacturer: ꓠ珢㛛龛挨쏓㪛锽竝稁ᓖ隶ꍮ鄒ꄭﶜ险묣鑴ヂ哵ຟ法즌칉蔡恭䟮ᶛℝ㺔ꓤ䈺଻綍捵縷룣㴄돞혟䜵깬⍌複ꐾ⟞叭㷮䯯␆ﳈ酹頛늰洚磐̲ꮽ驼췁੗쫗ⱡ翛⛪㧩ﯣ䭦셢ῖ໲콶圼ィ錀䷮蓁뺚⵲፨橬听骗鰗⽖ጜᔒ縑㙒笒빬㑺뷙헛万ⶌ꾦ﻲ￤큓䭞೯㓻 [ 525.923429][T12668] usb 2-1: SerialNumber: ఁ [ 525.953817][T14119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.961786][T14119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 526.175964][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.195556][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.227207][T12668] usb 2-1: Could not find all expected endpoints [ 526.251764][T12668] usb 2-1: Could not find all expected endpoints [ 526.270829][T12668] usb 2-1: USB disconnect, device number 86 [ 526.359605][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 526.517889][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 526.565588][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 526.609409][ T24] usb 1-1: can't read configurations, error -61 [ 526.807862][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 526.882924][T14149] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2695'. [ 526.968066][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 527.048061][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 527.055764][ T24] usb 1-1: can't read configurations, error -61 [ 527.073580][ T24] usb usb1-port1: attempt power cycle [ 527.430541][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 527.461705][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 527.470293][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 527.485632][ T24] usb 1-1: can't read configurations, error -61 [ 527.624654][T14172] FAULT_INJECTION: forcing a failure. [ 527.624654][T14172] name failslab, interval 1, probability 0, space 0, times 0 [ 527.648075][ T24] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 527.663317][T14172] CPU: 1 UID: 0 PID: 14172 Comm: syz.3.2703 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.663349][T14172] Tainted: [L]=SOFTLOCKUP [ 527.663357][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.663373][T14172] Call Trace: [ 527.663382][T14172] [ 527.663391][T14172] dump_stack_lvl+0xe8/0x150 [ 527.663418][T14172] should_fail_ex+0x414/0x560 [ 527.663449][T14172] should_failslab+0xa8/0x100 [ 527.663474][T14172] kmem_cache_alloc_noprof+0x88/0x710 [ 527.663501][T14172] ? skb_clone+0x212/0x3a0 [ 527.663526][T14172] skb_clone+0x212/0x3a0 [ 527.663553][T14172] __netlink_deliver_tap+0x404/0x850 [ 527.663585][T14172] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.663609][T14172] netlink_deliver_tap+0x19c/0x1b0 [ 527.663630][T14172] netlink_sendskb+0x68/0x140 [ 527.663649][T14172] netlink_unicast+0x397/0x9e0 [ 527.663665][T14172] ? __asan_memcpy+0x40/0x70 [ 527.663687][T14172] ? __pfx_netlink_unicast+0x10/0x10 [ 527.663717][T14172] netlink_rcv_skb+0x28c/0x470 [ 527.663739][T14172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.663755][T14172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.663774][T14172] ? genl_rcv+0x19/0x40 [ 527.663817][T14172] ? down_read+0x274/0x2e0 [ 527.663836][T14172] ? genl_rcv+0xd/0x40 [ 527.663876][T14172] genl_rcv+0x28/0x40 [ 527.663901][T14172] netlink_unicast+0x82f/0x9e0 [ 527.663928][T14172] ? __pfx_netlink_unicast+0x10/0x10 [ 527.663950][T14172] ? netlink_sendmsg+0x642/0xb30 [ 527.663972][T14172] ? skb_put+0x11b/0x210 [ 527.663995][T14172] netlink_sendmsg+0x805/0xb30 [ 527.664024][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.664050][T14172] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.664078][T14172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.664096][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.664122][T14172] __sock_sendmsg+0x21c/0x270 [ 527.664153][T14172] sock_sendmsg+0x158/0x230 [ 527.664181][T14172] ? __pfx_sock_sendmsg+0x10/0x10 [ 527.664221][T14172] ? __asan_memset+0x22/0x50 [ 527.664239][T14172] ? iov_iter_bvec+0xb8/0x180 [ 527.664264][T14172] splice_to_socket+0x8f5/0xf00 [ 527.664307][T14172] ? __pfx_splice_to_socket+0x10/0x10 [ 527.664351][T14172] ? get_pid_task+0x20/0x1f0 [ 527.664387][T14172] ? bpf_lsm_file_permission+0x9/0x20 [ 527.664406][T14172] ? security_file_permission+0x75/0x290 [ 527.664426][T14172] ? rw_verify_area+0x255/0x4d0 [ 527.664445][T14172] ? __pfx_splice_to_socket+0x10/0x10 [ 527.664469][T14172] do_splice+0xc79/0x1660 [ 527.664499][T14172] ? __fget_files+0x2a/0x420 [ 527.664541][T14172] ? __pfx_do_splice+0x10/0x10 [ 527.664576][T14172] __se_sys_splice+0x2e1/0x460 [ 527.664608][T14172] ? __pfx___se_sys_splice+0x10/0x10 [ 527.664638][T14172] ? __ia32_sys_splice+0x21/0xf0 [ 527.664667][T14172] __do_fast_syscall_32+0x1dc/0x560 [ 527.664689][T14172] ? lockdep_hardirqs_on+0x7b/0x110 [ 527.664708][T14172] ? do_fast_syscall_32+0x34/0x80 [ 527.664728][T14172] ? irqentry_exit+0x10f/0x660 [ 527.664753][T14172] do_fast_syscall_32+0x34/0x80 [ 527.664775][T14172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.664799][T14172] RIP: 0023:0xf70bd539 [ 527.664817][T14172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.664835][T14172] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 527.664856][T14172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 527.664878][T14172] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000000000000fffd [ 527.664890][T14172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.664902][T14172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.664915][T14172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.664945][T14172] [ 528.041976][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 528.065435][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 528.074539][ T24] usb 1-1: can't read configurations, error -61 [ 528.081433][ T24] usb usb1-port1: unable to enumerate USB device [ 528.136119][T14180] binder: 14179:14180 ioctl c0306201 0 returned -14 [ 528.312096][ T6980] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.827867][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 528.978057][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 528.990824][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 529.010323][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 529.058222][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 529.075983][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.097390][ T24] usb 3-1: Product: syz [ 529.105750][ T24] usb 3-1: Manufacturer: syz [ 529.120985][ T24] usb 3-1: SerialNumber: syz [ 529.179549][T14199] ip6gre1: entered promiscuous mode [ 529.202604][T14199] ip6gre1: entered allmulticast mode [ 529.352405][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 529.378419][T14204] __nla_validate_parse: 2 callbacks suppressed [ 529.378438][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 529.461305][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2712'. [ 529.653237][T14213] tipc: Enabled bearer , priority 0 [ 529.661301][T14213] syzkaller0: entered promiscuous mode [ 529.668731][T14213] syzkaller0: entered allmulticast mode [ 529.696090][T14213] tipc: Resetting bearer [ 529.723769][T14212] tipc: Resetting bearer [ 529.740167][T14212] tipc: Disabling bearer [ 529.881617][T14217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2715'. [ 530.273921][T14211] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2713'. [ 530.342497][T14232] FAULT_INJECTION: forcing a failure. [ 530.342497][T14232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.377275][T14232] CPU: 0 UID: 0 PID: 14232 Comm: syz.1.2720 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.377303][T14232] Tainted: [L]=SOFTLOCKUP [ 530.377308][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.377315][T14232] Call Trace: [ 530.377320][T14232] [ 530.377326][T14232] dump_stack_lvl+0xe8/0x150 [ 530.377345][T14232] should_fail_ex+0x414/0x560 [ 530.377378][T14232] _copy_from_user+0x2d/0xb0 [ 530.377392][T14232] kstrtouint_from_user+0xc4/0x170 [ 530.377407][T14232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 530.377438][T14232] proc_fail_nth_write+0x88/0x200 [ 530.377458][T14232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 530.377483][T14232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 530.377505][T14232] vfs_write+0x27e/0xb30 [ 530.377522][T14232] ? __pfx_vfs_write+0x10/0x10 [ 530.377533][T14232] ? __fget_files+0x2a/0x420 [ 530.377548][T14232] ? __fget_files+0x3a0/0x420 [ 530.377560][T14232] ? __fget_files+0x2a/0x420 [ 530.377577][T14232] ksys_write+0x145/0x250 [ 530.377588][T14232] ? __pfx_ksys_write+0x10/0x10 [ 530.377606][T14232] __do_fast_syscall_32+0x1dc/0x560 [ 530.377623][T14232] ? lockdep_hardirqs_on+0x7b/0x110 [ 530.377634][T14232] ? do_fast_syscall_32+0x34/0x80 [ 530.377646][T14232] ? irqentry_exit+0x10f/0x660 [ 530.377657][T14232] do_fast_syscall_32+0x34/0x80 [ 530.377669][T14232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.377682][T14232] RIP: 0023:0xf708d539 [ 530.377692][T14232] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 530.377701][T14232] RSP: 002b:00000000f545c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 530.377713][T14232] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545c620 [ 530.377720][T14232] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 530.377728][T14232] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 530.377739][T14232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 530.377748][T14232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.377773][T14232] [ 530.757828][T12656] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 530.808985][T14233] ALSA: mixer_oss: invalid OSS volume '' [ 530.977830][T12656] usb 1-1: Using ep0 maxpacket: 16 [ 530.986129][T12656] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 530.996624][T12656] usb 1-1: can't read configurations, error -61 [ 531.076326][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 531.167998][T12656] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 531.349367][T12656] usb 1-1: Using ep0 maxpacket: 16 [ 531.388890][T14247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2726'. [ 531.390862][T12656] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 531.406318][T12656] usb 1-1: can't read configurations, error -61 [ 531.413190][T12656] usb usb1-port1: attempt power cycle [ 531.498071][ T5974] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 531.593835][ T10] usb 3-1: USB disconnect, device number 89 [ 531.602160][ T10] usblp0: removed [ 531.678738][ T5974] usb 2-1: Using ep0 maxpacket: 16 [ 531.692233][ T5974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.701913][ T5974] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 531.714934][ T5974] usb 2-1: config 1 has no interface number 0 [ 531.724363][ T5974] usb 2-1: config 1 interface 160 has no altsetting 0 [ 531.740046][T14252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2729'. [ 531.766723][ T5974] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 531.778962][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.788103][T12656] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 531.820959][ T5974] usb 2-1: Product: syz [ 531.825663][ T5974] usb 2-1: Manufacturer: syz [ 531.831811][T12656] usb 1-1: Using ep0 maxpacket: 16 [ 531.838042][ T5974] usb 2-1: SerialNumber: syz [ 531.845612][T12656] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 531.856430][T12656] usb 1-1: can't read configurations, error -61 [ 532.022492][T12656] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 532.056605][T12656] usb 1-1: Using ep0 maxpacket: 16 [ 532.090244][T12656] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 532.110959][T12656] usb 1-1: can't read configurations, error -61 [ 532.120997][T12656] usb usb1-port1: unable to enumerate USB device [ 532.607425][T14267] fuse: Unknown parameter 'gid' [ 532.765964][T14260] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 532.807029][ T6980] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.830799][ T6980] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.846568][ T6980] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.858603][ T6980] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.875287][ T6980] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.884956][ T6980] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.894633][ T6980] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.907926][ T6980] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.109217][T14276] dvmrp6: entered allmulticast mode [ 533.168572][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 533.260276][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2738'. [ 533.499998][ T5974] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 533.512734][ T5974] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 533.537564][ T5974] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 533.559710][ T5974] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 533.574246][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2742'. [ 533.592584][ T5974] usb 2-1: USB disconnect, device number 87 [ 533.651524][ T5974] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 533.684923][ T5974] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 533.717419][ T5974] visor 2-1:1.160: device disconnected [ 533.890011][T14299] binder: BINDER_SET_CONTEXT_MGR already set [ 533.909516][T14299] binder: 14295:14299 ioctl 4018620d 800000c0 returned -16 [ 534.199472][T14303] binder: BINDER_SET_CONTEXT_MGR already set [ 534.205700][T14303] binder: 14295:14303 ioctl 4018620d 80000040 returned -16 [ 534.809500][T14313] __nla_validate_parse: 1 callbacks suppressed [ 534.809513][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 534.825907][T14314] xt_l2tp: wrong L2TP version: 1 [ 534.922485][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2751'. [ 535.111078][T14324] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2754'. [ 535.337042][T14333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2756'. [ 535.537986][T12656] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 535.697873][T12656] usb 3-1: Using ep0 maxpacket: 32 [ 535.706084][T12656] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 535.715406][T12656] usb 3-1: config 0 has no interface number 0 [ 535.725998][T12656] usb 3-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=36.b5 [ 535.735423][T12656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.744309][T12656] usb 3-1: Product: syz [ 535.750733][T12656] usb 3-1: Manufacturer: syz [ 535.756254][T12656] usb 3-1: SerialNumber: syz [ 535.763630][T12656] usb 3-1: config 0 descriptor?? [ 536.395849][T14345] usb usb8: usbfs: process 14345 (syz.1.2762) did not claim interface 0 before use [ 536.499567][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2764'. [ 536.565864][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 536.715664][T14355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2766'. [ 536.773881][T14357] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2767'. [ 537.612761][T14369] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2770'. [ 537.710864][T14375] ipvlan2: entered promiscuous mode [ 537.719646][T14375] bridge0: port 1(ipvlan2) entered blocking state [ 537.726569][T14375] bridge0: port 1(ipvlan2) entered disabled state [ 537.733341][T14375] ipvlan2: entered allmulticast mode [ 537.738786][T14375] bridge0: entered allmulticast mode [ 537.745393][T14375] ipvlan2: left allmulticast mode [ 537.750873][T14375] bridge0: left allmulticast mode [ 537.957421][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2775'. [ 538.322166][T12656] usb 3-1: USB disconnect, device number 90 [ 538.560350][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 538.828147][ T5959] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 538.846325][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 538.866291][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.880533][ T24] usb 1-1: config 0 descriptor?? [ 538.899690][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 539.007877][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 539.016367][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.048463][ T5959] usb 3-1: config 0 has no interfaces? [ 539.067700][ T5959] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 539.101982][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.140497][ T5959] usb 3-1: config 0 descriptor?? [ 539.428722][ T24] gspca_spca508: reg_read err -110 [ 539.434288][ T24] gspca_spca508: reg_read err -32 [ 539.443976][ T24] gspca_spca508: reg_read err -32 [ 539.459692][ T24] gspca_spca508: reg_read err -32 [ 539.484409][ T24] gspca_spca508: reg_read err -32 [ 539.515303][ T24] gspca_spca508: reg write: error -32 [ 539.531203][ T24] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 540.425262][ T24] usb 3-1: USB disconnect, device number 91 [ 540.790066][T12656] usb 1-1: USB disconnect, device number 100 [ 541.056310][T14430] __nla_validate_parse: 4 callbacks suppressed [ 541.056331][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 541.106294][T14428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2786'. [ 541.310427][T14433] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 541.503074][T14435] pim6reg: entered allmulticast mode [ 541.552283][T14440] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2790'. [ 542.068263][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 542.217853][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 542.231344][ T24] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 542.232786][T14453] netlink: 'syz.0.2787': attribute type 10 has an invalid length. [ 542.242691][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 542.254378][T14453] team0: Port device netdevsim0 added [ 542.270234][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 542.284495][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.284563][T14453] netlink: 'syz.0.2787': attribute type 10 has an invalid length. [ 542.302726][ T24] usb 3-1: Product: syz [ 542.306926][ T24] usb 3-1: Manufacturer: syz [ 542.317819][ T24] usb 3-1: SerialNumber: syz [ 542.324877][T14453] team0: Port device netdevsim0 removed [ 542.358537][T14453] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 542.596119][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input32 [ 542.630991][ T24] usb 3-1: USB disconnect, device number 92 [ 542.730151][ T24] appletouch 3-1:1.0: input: appletouch disconnected [ 542.753092][T14457] FAULT_INJECTION: forcing a failure. [ 542.753092][T14457] name failslab, interval 1, probability 0, space 0, times 0 [ 542.766527][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.3.2795 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.766558][T14457] Tainted: [L]=SOFTLOCKUP [ 542.766566][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.766579][T14457] Call Trace: [ 542.766588][T14457] [ 542.766597][T14457] dump_stack_lvl+0xe8/0x150 [ 542.766625][T14457] should_fail_ex+0x414/0x560 [ 542.766658][T14457] should_failslab+0xa8/0x100 [ 542.766684][T14457] __kmalloc_cache_noprof+0x84/0x700 [ 542.766706][T14457] ? fw_change+0x5df/0xd00 [ 542.766731][T14457] fw_change+0x5df/0xd00 [ 542.766760][T14457] ? __pfx_fw_change+0x10/0x10 [ 542.766796][T14457] tc_new_tfilter+0xdca/0x15b0 [ 542.766847][T14457] ? __pfx_tc_new_tfilter+0x10/0x10 [ 542.766887][T14457] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 542.766923][T14457] ? __pfx_tc_new_tfilter+0x10/0x10 [ 542.766947][T14457] rtnetlink_rcv_msg+0x7cf/0xb70 [ 542.766971][T14457] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 542.766992][T14457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 542.767011][T14457] ? ref_tracker_free+0x63a/0x7d0 [ 542.767031][T14457] ? __asan_memcpy+0x40/0x70 [ 542.767048][T14457] ? __pfx_ref_tracker_free+0x10/0x10 [ 542.767076][T14457] netlink_rcv_skb+0x208/0x470 [ 542.767099][T14457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 542.767120][T14457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.767152][T14457] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.767183][T14457] netlink_unicast+0x82f/0x9e0 [ 542.767213][T14457] ? __pfx_netlink_unicast+0x10/0x10 [ 542.767235][T14457] ? __alloc_skb+0x198/0x3a0 [ 542.767255][T14457] ? netlink_sendmsg+0x642/0xb30 [ 542.767278][T14457] ? skb_put+0x11b/0x210 [ 542.767316][T14457] netlink_sendmsg+0x805/0xb30 [ 542.767349][T14457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.767377][T14457] ? __import_iovec+0x5d4/0x7f0 [ 542.767408][T14457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 542.767435][T14457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.767460][T14457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.767487][T14457] __sock_sendmsg+0x21c/0x270 [ 542.767517][T14457] ____sys_sendmsg+0x505/0x820 [ 542.767546][T14457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.767574][T14457] ? kstrtouint+0x6e/0xe0 [ 542.767609][T14457] ___sys_sendmsg+0x21f/0x2a0 [ 542.767634][T14457] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.767656][T14457] ? get_pid_task+0x20/0x1f0 [ 542.767681][T14457] ? get_pid_task+0x20/0x1f0 [ 542.767701][T14457] ? get_pid_task+0x20/0x1f0 [ 542.767750][T14457] ? __fget_files+0x2a/0x420 [ 542.767772][T14457] ? __fget_files+0x3a0/0x420 [ 542.767803][T14457] __sys_sendmsg+0x164/0x220 [ 542.767825][T14457] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.767854][T14457] ? __pfx_ksys_write+0x10/0x10 [ 542.767881][T14457] __do_fast_syscall_32+0x1dc/0x560 [ 542.767896][T14457] ? lockdep_hardirqs_on+0x7b/0x110 [ 542.767906][T14457] ? do_fast_syscall_32+0x34/0x80 [ 542.767917][T14457] ? irqentry_exit+0x10f/0x660 [ 542.767929][T14457] do_fast_syscall_32+0x34/0x80 [ 542.767941][T14457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.767954][T14457] RIP: 0023:0xf70bd539 [ 542.767965][T14457] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.767974][T14457] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 542.767987][T14457] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000900 [ 542.767994][T14457] RDX: 00000000200c8080 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.768001][T14457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.768007][T14457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 542.768013][T14457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.768029][T14457] [ 543.426109][T14463] Invalid logical block size (151) [ 543.430963][T14465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'. [ 543.518412][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'. [ 543.704256][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2803'. [ 543.713445][T14481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2804'. [ 543.739039][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 543.767865][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2803'. [ 543.776898][T14475] batman_adv: batadv0: Removing interface: ip6gretap1 [ 543.897978][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 543.906581][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 543.917798][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.929520][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.939664][T12656] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 543.948434][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.960761][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.976011][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.986293][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.110471][T12656] usb 1-1: not running at top speed; connect to a high speed hub [ 544.123636][T12656] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.138613][T12656] usb 1-1: config 1 interface 0 has no altsetting 0 [ 544.149366][T12656] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.40 [ 544.162128][T12656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.171819][T12656] usb 1-1: Product: ␁ [ 544.176512][T12656] usb 1-1: SerialNumber: ƫᴐℸ㯻䣃褏쓪礠⋚⛔硽‛ᔜ汍쮘簷頣ㅂ釸液쾚諁⻠乧蛄ळ츩褗숲ʑ栖暁崫Ỷ剕멠畭쾻朷႗皇⤟볥┌뀷᭱젡㕵敇쑹ᗖ⎺巻쉊縄㯦䯪戎理拁겸䯟Ⰶ귦Ꞿ瘑끙Ⴛ︼혌Ꭰ㨟⦆❸轚쮓읍灏ൎ逻㻄덱樁죃뷊辞历匼 [ 544.209834][ T10] usb 4-1: usb_control_msg returned -32 [ 544.218333][ T10] usbtmc 4-1:16.0: can't read capabilities [ 544.431482][T14435] pim6reg: left allmulticast mode [ 544.534812][T14492] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.2809'. [ 544.680068][T14478] fuse: Bad value for 'user_id' [ 544.685081][T14478] fuse: Bad value for 'user_id' [ 544.707270][T12656] usbhid 1-1:1.0: can't add hid device: -71 [ 544.781403][T12656] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 544.828168][T12656] usb 1-1: USB disconnect, device number 101 [ 544.932371][T14499] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 544.958577][T14499] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 545.127996][T14501] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2812'. [ 545.494477][T14508] random: crng reseeded on system resumption [ 546.487420][ T5959] usb 4-1: USB disconnect, device number 81 [ 547.015571][T14534] loop5: detected capacity change from 0 to 7 [ 547.022913][T14534] Dev loop5: unable to read RDB block 7 [ 547.119152][T14534] loop5: AHDI p1 p2 p3 [ 547.134049][T14534] loop5: partition table partially beyond EOD, truncated [ 547.144290][T14534] loop5: p1 start 1601398130 is beyond EOD, truncated [ 547.174517][T14534] loop5: p2 start 1702059890 is beyond EOD, truncated [ 547.425337][T14540] __nla_validate_parse: 2 callbacks suppressed [ 547.425366][T14540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2821'. [ 547.627313][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 547.798712][ T24] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 547.808953][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 547.822319][ T24] usb 2-1: can't read configurations, error -61 [ 548.089908][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 548.268851][ T24] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 548.279595][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 548.287276][ T24] usb 2-1: can't read configurations, error -61 [ 548.294336][ T24] usb usb2-port1: attempt power cycle [ 548.377605][T14540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.401836][T14540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.422626][T14540] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 548.456943][T14540] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 548.469537][T14540] bond0 (unregistering): Released all slaves [ 548.628532][T14549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2825'. [ 548.668064][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 548.708178][ T24] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 548.717677][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 548.725738][ T24] usb 2-1: can't read configurations, error -61 [ 548.769193][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 548.804246][T14556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2828'. [ 548.878262][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 548.919167][ T24] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 548.952513][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 548.971787][ T24] usb 2-1: can't read configurations, error -61 [ 548.988334][ T24] usb usb2-port1: unable to enumerate USB device [ 549.107497][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 549.143166][T14569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2834'. [ 549.240235][T14570] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 549.290425][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 549.411426][ T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 549.738126][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 549.746342][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.759922][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.772434][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 549.873928][T14570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.891160][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 549.952985][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.981865][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 550.004338][ T24] usb 1-1: SerialNumber: syz [ 550.027440][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 550.041345][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 550.059818][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 550.434616][T14560] raw-gadget.0 gadget.0: fail, usb_ep_set_wedge returned -11 [ 550.588211][ T10] usb 1-1: USB disconnect, device number 102 [ 550.594738][T14588] loop2: detected capacity change from 0 to 7 [ 550.604987][ T5960] Dev loop2: unable to read RDB block 7 [ 550.617268][ T5960] loop2: AHDI p1 p2 p3 [ 550.625367][ T5960] loop2: partition table partially beyond EOD, truncated [ 550.636340][ T5960] loop2: p1 start 1601398130 is beyond EOD, truncated [ 550.643738][ T5960] loop2: p2 start 1702059890 is beyond EOD, truncated [ 550.645684][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 550.646043][T14594] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2839'. [ 550.681793][T14593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2841'. [ 550.695616][T14588] Dev loop2: unable to read RDB block 7 [ 550.710632][T14588] loop2: AHDI p1 p2 p3 [ 550.715932][T14588] loop2: partition table partially beyond EOD, truncated [ 550.723745][T14588] loop2: p1 start 1601398130 is beyond EOD, truncated [ 550.732225][T14588] loop2: p2 start 1702059890 is beyond EOD, truncated [ 551.152676][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 551.357839][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 551.365501][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.385820][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.516233][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.568104][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.606533][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.707961][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.970638][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 551.976223][ T10] usbtmc 3-1:16.0: can't read capabilities [ 552.148289][ T66] tipc: Subscription rejected, illegal request [ 552.226346][ T24] usb 3-1: USB disconnect, device number 93 [ 552.554721][T14630] __nla_validate_parse: 2 callbacks suppressed [ 552.554741][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 552.588929][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 552.809788][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.820483][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 552.833444][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.887959][ T24] usb 2-1: config 0 descriptor?? [ 552.971511][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 553.476666][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 553.646639][T14645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2860'. [ 553.720245][T14648] bridge_slave_0: default FDB implementation only supports local addresses [ 553.762217][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2862'. [ 554.297895][ T5959] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 554.450492][ T5959] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 554.461931][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.473401][ T5959] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 554.485913][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.513018][ T5959] usb 4-1: config 0 descriptor?? [ 554.521920][T14656] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 554.761327][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.773860][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.864507][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.881968][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.933336][ T5959] usbhid 4-1:0.0: can't add hid device: -71 [ 554.947953][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.974592][ T5959] usb 4-1: USB disconnect, device number 82 [ 555.056953][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 555.125398][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 555.136973][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 555.144630][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 555.156515][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 555.198529][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 555.215616][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 555.226253][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2868'. [ 555.233309][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 555.254069][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 555.285848][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 555.302995][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 555.319987][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 555.418308][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 555.619743][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 555.632798][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 555.695059][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 555.794466][ T24] pwc: Registered as video103. [ 555.867424][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 555.885714][T14686] SET target dimension over the limit! [ 555.972603][ T24] usb 2-1: USB disconnect, device number 92 [ 555.997229][T14685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2873'. [ 556.022973][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 556.197901][ T5959] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 556.469309][ T5959] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 556.491200][ T5959] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 556.507352][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 556.520229][T14694] fuse: Bad value for 'fd' [ 556.556773][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.577804][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.638345][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.660828][ T5959] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 556.672564][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 556.702505][ T5959] usb 4-1: Product: syz [ 556.716922][ T5959] usb 4-1: Manufacturer: syz [ 556.732484][T14686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.741984][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 556.747212][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 556.769649][ T5959] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 556.781661][ T5959] cdc_wdm 4-1:1.0: Unknown control protocol [ 556.968496][ C1] wdm_int_callback: 174 callbacks suppressed [ 556.968512][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 556.981087][ C1] wdm_int_callback: 174 callbacks suppressed [ 556.981102][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 556.993354][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 556.999938][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.006153][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.012726][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.018947][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.025516][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.031823][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.038426][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.044727][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.051335][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.057744][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.064348][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.070655][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.077254][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.087967][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.094589][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.100903][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 557.107511][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 557.630666][T14708] FAULT_INJECTION: forcing a failure. [ 557.630666][T14708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.754864][T14708] CPU: 0 UID: 0 PID: 14708 Comm: syz.2.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.754897][T14708] Tainted: [L]=SOFTLOCKUP [ 557.754905][T14708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.754917][T14708] Call Trace: [ 557.754925][T14708] [ 557.754934][T14708] dump_stack_lvl+0xe8/0x150 [ 557.754966][T14708] should_fail_ex+0x414/0x560 [ 557.755001][T14708] _copy_to_user+0x31/0xb0 [ 557.755022][T14708] simple_read_from_buffer+0xe1/0x170 [ 557.755038][T14708] proc_fail_nth_read+0x1b3/0x220 [ 557.755051][T14708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.755064][T14708] ? rw_verify_area+0x2a6/0x4d0 [ 557.755078][T14708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.755099][T14708] vfs_read+0x200/0xa30 [ 557.755117][T14708] ? fdget_pos+0x247/0x320 [ 557.755145][T14708] ? __pfx___mutex_lock+0x10/0x10 [ 557.755168][T14708] ? __pfx_vfs_read+0x10/0x10 [ 557.755188][T14708] ? __fget_files+0x2a/0x420 [ 557.755211][T14708] ? __fget_files+0x3a0/0x420 [ 557.755223][T14708] ? __fget_files+0x2a/0x420 [ 557.755240][T14708] ksys_read+0x145/0x250 [ 557.755252][T14708] ? __pfx_ksys_read+0x10/0x10 [ 557.755272][T14708] __do_fast_syscall_32+0x1dc/0x560 [ 557.755294][T14708] ? lockdep_hardirqs_on+0x7b/0x110 [ 557.755312][T14708] ? do_fast_syscall_32+0x34/0x80 [ 557.755333][T14708] ? irqentry_exit+0x10f/0x660 [ 557.755357][T14708] do_fast_syscall_32+0x34/0x80 [ 557.755380][T14708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.755395][T14708] RIP: 0023:0xf700d539 [ 557.755406][T14708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.755415][T14708] RSP: 002b:00000000f53dc590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 557.755427][T14708] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dc620 [ 557.755434][T14708] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 557.755440][T14708] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 557.755450][T14708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.755462][T14708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.755491][T14708] [ 558.310603][T12656] usb 4-1: USB disconnect, device number 83 [ 558.393891][T14712] binder: BINDER_SET_CONTEXT_MGR already set [ 558.425197][T14712] binder: 14711:14712 ioctl 4018620d 80000100 returned -16 [ 558.447425][T14713] binder: BINDER_SET_CONTEXT_MGR already set [ 558.453600][T14713] binder: 14711:14713 ioctl 4018620d 800002c0 returned -16 [ 558.569800][T14717] binder: BINDER_SET_CONTEXT_MGR already set [ 558.575933][T14717] binder: 14715:14717 ioctl 4018620d 80000100 returned -16 [ 558.589045][T14717] binder: BINDER_SET_CONTEXT_MGR already set [ 558.595284][T14717] binder: 14715:14717 ioctl 4018620d 800002c0 returned -16 [ 559.091808][T14722] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2884'. [ 559.359451][T14737] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 559.374896][T14737] bond0: (slave netdevsim0): Releasing backup interface [ 559.421100][T14738] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 559.809688][T14738] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 559.824520][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2889'. [ 560.032863][T14749] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2891'. [ 560.113240][T14750] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2888'. [ 560.313330][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.371579][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 560.382728][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 560.422314][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 560.433595][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 561.479929][ T5959] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 561.517648][T14750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.545517][T14750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.600664][T14750] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 561.718470][ T5959] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 561.729368][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.735981][ T5959] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 561.757828][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.767336][ T5959] usb 2-1: config 0 descriptor?? [ 561.828055][T14763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.840173][T14750] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 561.903851][T14750] bond0 (unregistering): Released all slaves [ 562.093301][T14769] fuse: Bad value for 'fd' [ 562.122841][T14763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.145722][T14763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.201465][T14763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.222210][T14763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.350584][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 562.363501][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.597209][ T5959] usb 2-1: USB disconnect, device number 93 [ 562.830955][T14774] SET target dimension over the limit! [ 562.888171][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.894631][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.021973][T14780] binder: 14777:14780 ioctl c0306201 80000680 returned -14 [ 563.042159][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'. [ 563.097903][ T5959] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 563.142768][T14786] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2904'. [ 563.259681][ T5959] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.277861][ T5959] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 563.306704][ T5959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.336722][ T5959] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 563.382364][ T5959] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 563.417429][ T5959] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 563.452542][ T5959] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 563.472110][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 563.517831][ T5959] usb 1-1: Product: syz [ 563.529093][ T5959] usb 1-1: Manufacturer: syz [ 563.568006][T14774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.579641][ T5959] cdc_wdm 1-1:1.0: skipping garbage [ 563.584882][ T5959] cdc_wdm 1-1:1.0: skipping garbage [ 563.620054][ T5959] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 563.626000][ T5959] cdc_wdm 1-1:1.0: Unknown control protocol [ 563.800965][T14804] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 563.828383][ C1] wdm_int_callback: 6370 callbacks suppressed [ 563.828406][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.841090][ C1] wdm_int_callback: 6370 callbacks suppressed [ 563.841112][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.853555][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.860178][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.866505][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.873126][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.879563][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.886175][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.892542][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.899214][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.905905][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.912525][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.919062][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.925687][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.932015][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.938639][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.945177][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.951791][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 563.958155][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 563.964784][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 564.018156][T14806] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 564.063466][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.457553][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.578086][ T5959] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 564.793074][T14815] fuse: Bad value for 'fd' [ 564.832664][T14810] __nla_validate_parse: 5 callbacks suppressed [ 564.832686][T14810] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2906'. [ 564.950654][T14804] team0: Port device netdevsim0 added [ 564.967449][T14806] team0: Port device netdevsim0 removed [ 565.041837][T14806] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 565.095221][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 565.104925][T12656] usb 1-1: USB disconnect, device number 103 [ 565.377609][T14819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2914'. [ 565.449412][T14823] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 565.497642][T14823] netdevsim netdevsim3: Direct firmware load for / [ 565.497642][T14823] failed with error -2 [ 565.508871][T14825] binder: BINDER_SET_CONTEXT_MGR already set [ 565.508889][T14825] binder: 14824:14825 ioctl 4018620d 800002c0 returned -16 [ 565.662489][T14823] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 565.662489][T14823] [ 565.772302][T14828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2916'. [ 565.847420][T14830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 565.975596][T14833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2918'. [ 566.200214][T14838] binder: BINDER_SET_CONTEXT_MGR already set [ 566.206312][T14838] binder: 14837:14838 ioctl 4018620d 80000100 returned -16 [ 566.350483][T14838] binder: BINDER_SET_CONTEXT_MGR already set [ 566.351690][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2921'. [ 566.356498][T14838] binder: 14837:14838 ioctl 4018620d 800002c0 returned -16 [ 566.556667][T14843] FAULT_INJECTION: forcing a failure. [ 566.556667][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 566.575862][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.4.2922 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.575895][T14843] Tainted: [L]=SOFTLOCKUP [ 566.575903][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.575916][T14843] Call Trace: [ 566.575925][T14843] [ 566.575934][T14843] dump_stack_lvl+0xe8/0x150 [ 566.575965][T14843] should_fail_ex+0x414/0x560 [ 566.576001][T14843] should_failslab+0xa8/0x100 [ 566.576027][T14843] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 566.576051][T14843] ? __kthread_create_on_node+0x1c6/0x3e0 [ 566.576079][T14843] kvasprintf+0xdc/0x190 [ 566.576107][T14843] ? __pfx_kvasprintf+0x10/0x10 [ 566.576135][T14843] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 566.576156][T14843] ? __kthread_create_on_node+0xef/0x3e0 [ 566.576177][T14843] ? __init_swait_queue_head+0xa9/0x150 [ 566.576208][T14843] __kthread_create_on_node+0x1c6/0x3e0 [ 566.576235][T14843] ? __pfx___kthread_create_on_node+0x10/0x10 [ 566.576273][T14843] ? __pfx_napi_threaded_poll+0x10/0x10 [ 566.576294][T14843] ? __pfx_napi_threaded_poll+0x10/0x10 [ 566.576315][T14843] kthread_create_on_node+0xdd/0x130 [ 566.576351][T14843] ? __pfx_kthread_create_on_node+0x10/0x10 [ 566.576381][T14843] ? __local_bh_enable_ip+0xd0/0x130 [ 566.576402][T14843] ? netif_napi_add_weight_locked+0x530/0x940 [ 566.576422][T14843] netif_napi_add_weight_locked+0x68f/0x940 [ 566.576451][T14843] wg_peer_create+0x549/0x8c0 [ 566.576488][T14843] wg_set_device_doit+0x109a/0x1f70 [ 566.576528][T14843] ? __pfx_wg_set_device_doit+0x10/0x10 [ 566.576574][T14843] ? rcu_is_watching+0x15/0xb0 [ 566.576604][T14843] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 566.576632][T14843] genl_family_rcv_msg_doit+0x215/0x300 [ 566.576659][T14843] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 566.576691][T14843] ? bpf_lsm_capable+0x9/0x20 [ 566.576714][T14843] ? security_capable+0x7e/0x2e0 [ 566.576744][T14843] genl_rcv_msg+0x60e/0x790 [ 566.576770][T14843] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.576788][T14843] ? __pfx_wg_set_device_doit+0x10/0x10 [ 566.576816][T14843] ? __asan_memcpy+0x40/0x70 [ 566.576833][T14843] ? __pfx_ref_tracker_free+0x10/0x10 [ 566.576862][T14843] netlink_rcv_skb+0x208/0x470 [ 566.576888][T14843] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.576908][T14843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.576930][T14843] ? genl_rcv+0x19/0x40 [ 566.576976][T14843] ? down_read+0x274/0x2e0 [ 566.576997][T14843] ? genl_rcv+0xd/0x40 [ 566.577027][T14843] genl_rcv+0x28/0x40 [ 566.577054][T14843] netlink_unicast+0x82f/0x9e0 [ 566.577085][T14843] ? __pfx_netlink_unicast+0x10/0x10 [ 566.577106][T14843] ? __alloc_skb+0x198/0x3a0 [ 566.577127][T14843] ? netlink_sendmsg+0x642/0xb30 [ 566.577150][T14843] ? skb_put+0x11b/0x210 [ 566.577176][T14843] netlink_sendmsg+0x805/0xb30 [ 566.577210][T14843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.577238][T14843] ? __import_iovec+0x5d4/0x7f0 [ 566.577260][T14843] ? aa_sock_msg_perm+0xf1/0x1b0 [ 566.577287][T14843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.577306][T14843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.577339][T14843] __sock_sendmsg+0x21c/0x270 [ 566.577371][T14843] ____sys_sendmsg+0x505/0x820 [ 566.577400][T14843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.577429][T14843] ? kstrtouint+0x6e/0xe0 [ 566.577464][T14843] ___sys_sendmsg+0x21f/0x2a0 [ 566.577489][T14843] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.577511][T14843] ? get_pid_task+0x20/0x1f0 [ 566.577535][T14843] ? get_pid_task+0x20/0x1f0 [ 566.577558][T14843] ? get_pid_task+0x20/0x1f0 [ 566.577617][T14843] ? __fget_files+0x2a/0x420 [ 566.577641][T14843] ? __fget_files+0x3a0/0x420 [ 566.577677][T14843] __sys_sendmsg+0x164/0x220 [ 566.577704][T14843] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.577738][T14843] ? __pfx_ksys_write+0x10/0x10 [ 566.577767][T14843] __do_fast_syscall_32+0x1dc/0x560 [ 566.577788][T14843] ? lockdep_hardirqs_on+0x7b/0x110 [ 566.577805][T14843] ? do_fast_syscall_32+0x34/0x80 [ 566.577826][T14843] ? irqentry_exit+0x10f/0x660 [ 566.577850][T14843] do_fast_syscall_32+0x34/0x80 [ 566.577872][T14843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.577896][T14843] RIP: 0023:0xf7fb4539 [ 566.577914][T14843] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 566.577931][T14843] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 566.577950][T14843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 566.577965][T14843] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.577976][T14843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.577988][T14843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.578000][T14843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.578031][T14843] [ 567.063983][T14843] kthread_run failed with err -12 [ 567.162491][T14849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2925'. [ 567.569338][T14861] input: syz0 as /devices/virtual/input/input35 [ 568.233622][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 568.233634][ T30] audit: type=1326 audit(1767247219.392:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 568.638232][ T30] audit: type=1326 audit(1767247219.422:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 568.915583][T14859] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2926'. [ 568.957424][T14870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.964895][ T30] audit: type=1326 audit(1767247219.422:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 568.998781][T14870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.026909][T14870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.048265][T14870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.057437][T14870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.134906][ T30] audit: type=1326 audit(1767247219.422:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.193434][ T30] audit: type=1326 audit(1767247219.432:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.218226][ T30] audit: type=1326 audit(1767247219.432:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.347958][ T30] audit: type=1326 audit(1767247219.452:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.537157][T14877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2931'. [ 569.554859][ T30] audit: type=1326 audit(1767247219.452:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.601893][T14878] binder: 14876:14878 ioctl c0306201 80000680 returned -14 [ 569.651179][ T30] audit: type=1326 audit(1767247219.452:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.758409][T14880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2930'. [ 569.787831][ T30] audit: type=1326 audit(1767247219.452:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 569.831745][T14871] chnl_net:caif_netlink_parms(): no params data found [ 570.182622][T14895] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 570.586488][T14896] netdevsim netdevsim1: Direct firmware load for / [ 570.586488][T14896] failed with error -2 [ 570.602980][T14896] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 570.602980][T14896] [ 570.716667][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.833526][T14901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2938'. [ 570.975317][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.109214][ T5835] Bluetooth: hci5: command tx timeout [ 571.120925][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2937'. [ 571.293684][T14871] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.302217][T14871] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.346965][T14871] bridge_slave_0: entered allmulticast mode [ 571.358088][T14871] bridge_slave_0: entered promiscuous mode [ 571.399337][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2940'. [ 571.550446][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.598124][T14871] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.605677][T14871] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.613139][T14871] bridge_slave_1: entered allmulticast mode [ 571.620648][T14871] bridge_slave_1: entered promiscuous mode [ 571.641431][T14917] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2939'. [ 571.684215][T14871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.712795][ T66] team0: Port device netdevsim0 removed [ 571.763550][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.796372][T14913] loop3: detected capacity change from 0 to 7 [ 571.813157][ T5960] Dev loop3: unable to read RDB block 7 [ 571.821646][ T5960] loop3: AHDI p1 p2 [ 571.826033][ T5960] loop3: partition table partially beyond EOD, truncated [ 571.842430][ T5960] loop3: p1 start 1702000233 is beyond EOD, truncated [ 571.860371][T14913] Dev loop3: unable to read RDB block 7 [ 571.867115][T14913] loop3: AHDI p1 p2 [ 571.877356][T14871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.888129][T14913] loop3: partition table partially beyond EOD, truncated [ 571.897962][T14913] loop3: p1 start 1702000233 is beyond EOD, truncated [ 572.042977][T14871] team0: Port device team_slave_0 added [ 572.051827][T14871] team0: Port device team_slave_1 added [ 572.356968][T14926] input: syz0 as /devices/virtual/input/input36 [ 572.485683][T14925] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 572.538168][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'. [ 572.702156][T14871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.709421][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.759589][T14871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.819786][T14871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.826967][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.828800][T14929] netdevsim netdevsim0: Direct firmware load for / [ 572.828800][T14929] failed with error -2 [ 572.866386][T14929] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 572.866386][T14929] [ 572.886733][T14871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.190597][ T5835] Bluetooth: hci5: command tx timeout [ 573.256977][T14941] binder: BINDER_SET_CONTEXT_MGR already set [ 573.263552][T14941] binder: 14940:14941 ioctl 4018620d 80000100 returned -16 [ 573.398979][T14943] binder: BINDER_SET_CONTEXT_MGR already set [ 573.408554][T14943] binder: 14940:14943 ioctl 4018620d 800002c0 returned -16 [ 573.889922][T14953] netlink: 'syz.0.2947': attribute type 4 has an invalid length. [ 573.897958][T14953] netlink: 14317 bytes leftover after parsing attributes in process `syz.0.2947'. [ 574.000954][T14955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2948'. [ 574.111539][ T66] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 574.229502][ T66] team0: Port device geneve1 removed [ 574.420882][T14956] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2946'. [ 574.908086][ T66] bond1 (unregistering): Released all slaves [ 574.934810][T14959] FAULT_INJECTION: forcing a failure. [ 574.934810][T14959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.951370][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.4.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.951403][T14959] Tainted: [L]=SOFTLOCKUP [ 574.951410][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.951422][T14959] Call Trace: [ 574.951431][T14959] [ 574.951441][T14959] dump_stack_lvl+0xe8/0x150 [ 574.951478][T14959] should_fail_ex+0x414/0x560 [ 574.951514][T14959] _copy_to_user+0x31/0xb0 [ 574.951541][T14959] simple_read_from_buffer+0xe1/0x170 [ 574.951570][T14959] proc_fail_nth_read+0x1b3/0x220 [ 574.951595][T14959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.951619][T14959] ? rw_verify_area+0x2a6/0x4d0 [ 574.951638][T14959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.951661][T14959] vfs_read+0x200/0xa30 [ 574.951679][T14959] ? fdget_pos+0x247/0x320 [ 574.951708][T14959] ? __pfx___mutex_lock+0x10/0x10 [ 574.951731][T14959] ? __pfx_vfs_read+0x10/0x10 [ 574.951752][T14959] ? __fget_files+0x2a/0x420 [ 574.951780][T14959] ? __fget_files+0x3a0/0x420 [ 574.951804][T14959] ? __fget_files+0x2a/0x420 [ 574.951836][T14959] ksys_read+0x145/0x250 [ 574.951857][T14959] ? __pfx_ksys_read+0x10/0x10 [ 574.951874][T14959] ? fput+0xa0/0xd0 [ 574.951908][T14959] __do_fast_syscall_32+0x1dc/0x560 [ 574.951930][T14959] ? lockdep_hardirqs_on+0x7b/0x110 [ 574.951949][T14959] ? do_fast_syscall_32+0x34/0x80 [ 574.951969][T14959] ? irqentry_exit+0x10f/0x660 [ 574.951993][T14959] do_fast_syscall_32+0x34/0x80 [ 574.952016][T14959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.952040][T14959] RIP: 0023:0xf7fb4539 [ 574.952057][T14959] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 574.952076][T14959] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 574.952097][T14959] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620 [ 574.952112][T14959] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 574.952125][T14959] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 574.952137][T14959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.952150][T14959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.952179][T14959] [ 575.267834][ T5835] Bluetooth: hci5: command tx timeout [ 575.369257][ T66] bond2 (unregistering): Released all slaves [ 575.532298][ T66] bond0 (unregistering): Released all slaves [ 575.572381][T14871] hsr_slave_0: entered promiscuous mode [ 575.583294][T14871] hsr_slave_1: entered promiscuous mode [ 575.616230][T14871] debugfs: 'hsr0' already exists in 'hsr' [ 575.634007][T14871] Cannot create hsr debugfs directory [ 575.642095][ T66] : left promiscuous mode [ 575.802276][ T66] tipc: Disabling bearer [ 575.868287][ T66] tipc: Left network mode [ 575.888449][T14973] binder: BINDER_SET_CONTEXT_MGR already set [ 575.912431][T14973] binder: 14972:14973 ioctl 4018620d 80000100 returned -16 [ 575.946134][T14973] binder: BINDER_SET_CONTEXT_MGR already set [ 575.954871][T14973] binder: 14972:14973 ioctl 4018620d 800002c0 returned -16 [ 576.251181][ T66] ------------[ cut here ]------------ [ 576.256708][ T66] Have pending ack frames! [ 576.261273][ T66] WARNING: net/mac80211/main.c:1712 at ieee80211_free_ack_frame+0x14/0x40, CPU#1: kworker/u8:5/66 [ 576.271961][ T66] Modules linked in: [ 576.276365][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.287319][ T66] Tainted: [L]=SOFTLOCKUP [ 576.291742][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.301920][ T66] Workqueue: netns cleanup_net [ 576.306705][ T66] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 576.312944][ T66] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 53 9e fa f6 48 8d 3d 0c 5f cc 04 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 a8 96 69 fe 31 c0 [ 576.332951][ T66] RSP: 0018:ffffc9000217f5d0 EFLAGS: 00010293 [ 576.339092][ T66] RAX: ffffffff8ac6596d RBX: ffff88805b819780 RCX: ffff88801af3db80 [ 576.347109][ T66] RDX: 0000000000000000 RSI: ffff88805b819780 RDI: ffffffff8f92b880 [ 576.355223][ T66] RBP: ffffc9000217f6d8 R08: ffffc9000217f64f R09: 0000000000000000 [ 576.363241][ T66] R10: ffffc9000217f640 R11: ffffffff8ac65960 R12: ffffc9000217f640 [ 576.371260][ T66] R13: ffff8880256ac5b0 R14: ffff888025bd2ff8 R15: 0000000000000001 [ 576.379263][ T66] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 576.388267][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.394848][ T66] CR2: 0000000080148018 CR3: 000000005bace000 CR4: 00000000003526f0 [ 576.402882][ T66] Call Trace: [ 576.406170][ T66] [ 576.409184][ T66] idr_for_each+0x1b5/0x290 [ 576.413709][ T66] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 576.419849][ T66] ? __pfx_idr_for_each+0x10/0x10 [ 576.424872][ T66] ? kfree+0x1c0/0x660 [ 576.429104][ T66] ieee80211_free_hw+0x44/0x3d0 [ 576.434003][ T66] mac80211_hwsim_del_radio+0x2de/0x460 [ 576.439638][ T66] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 576.445713][ T66] ? __local_bh_enable_ip+0xd0/0x130 [ 576.451061][ T66] hwsim_exit_net+0xed3/0xf80 [ 576.455747][ T66] ? hwsim_exit_net+0x32b/0xf80 [ 576.460654][ T66] ? __pfx_hwsim_exit_net+0x10/0x10 [ 576.465853][ T66] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 576.471752][ T66] ops_undo_list+0x49a/0x990 [ 576.476372][ T66] ? __pfx_ops_undo_list+0x10/0x10 [ 576.481621][ T66] ? do_raw_spin_unlock+0x122/0x240 [ 576.486843][ T66] cleanup_net+0x4d8/0x7a0 [ 576.491370][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 576.496580][ T66] ? process_scheduled_works+0x9ef/0x1770 [ 576.502366][ T66] ? process_scheduled_works+0x9ef/0x1770 [ 576.508197][ T66] process_scheduled_works+0xad1/0x1770 [ 576.513778][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.519880][ T66] ? do_raw_spin_lock+0x21f/0x290 [ 576.525473][ T66] worker_thread+0x8a0/0xda0 [ 576.530134][ T66] kthread+0x711/0x8a0 [ 576.534198][ T66] ? __pfx_worker_thread+0x10/0x10 [ 576.539370][ T66] ? __pfx_kthread+0x10/0x10 [ 576.544057][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.549356][ T66] ? __pfx_kthread+0x10/0x10 [ 576.553939][ T66] ret_from_fork+0x510/0xa50 [ 576.558551][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 576.563678][ T66] ? __switch_to+0xc9e/0x1480 [ 576.568480][ T66] ? __pfx_kthread+0x10/0x10 [ 576.573074][ T66] ret_from_fork_asm+0x1a/0x30 [ 576.578077][ T66] [ 576.581090][ T66] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 576.588359][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.599189][ T66] Tainted: [L]=SOFTLOCKUP [ 576.603492][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.613524][ T66] Workqueue: netns cleanup_net [ 576.618274][ T66] Call Trace: [ 576.621536][ T66] [ 576.624447][ T66] vpanic+0x1e0/0x670 [ 576.628418][ T66] panic+0xb9/0xc0 [ 576.632117][ T66] ? __pfx_panic+0x10/0x10 [ 576.636514][ T66] ? ret_from_fork_asm+0x1a/0x30 [ 576.641443][ T66] __warn+0x317/0x4b0 [ 576.645415][ T66] ? ieee80211_free_ack_frame+0x14/0x40 [ 576.650966][ T66] ? ieee80211_free_ack_frame+0x14/0x40 [ 576.656493][ T66] __report_bug+0x288/0x500 [ 576.660977][ T66] ? __pfx_stack_trace_save+0x10/0x10 [ 576.666331][ T66] ? ieee80211_free_ack_frame+0x14/0x40 [ 576.671876][ T66] ? __pfx___report_bug+0x10/0x10 [ 576.676908][ T66] ? mac80211_hwsim_del_radio+0x2c7/0x460 [ 576.682642][ T66] ? hwsim_exit_net+0xed3/0xf80 [ 576.687481][ T66] ? ops_undo_list+0x49a/0x990 [ 576.692664][ T66] ? cleanup_net+0x4d8/0x7a0 [ 576.697251][ T66] ? process_scheduled_works+0xad1/0x1770 [ 576.702967][ T66] ? worker_thread+0x8a0/0xda0 [ 576.707714][ T66] ? kthread+0x711/0x8a0 [ 576.711952][ T66] ? ret_from_fork_asm+0x1a/0x30 [ 576.716873][ T66] report_bug_entry+0x19a/0x290 [ 576.721708][ T66] ? ieee80211_free_ack_frame+0x14/0x40 [ 576.727235][ T66] ? ieee80211_free_ack_frame+0x19/0x40 [ 576.732766][ T66] handle_bug+0xca/0x200 [ 576.737002][ T66] exc_invalid_op+0x1a/0x50 [ 576.741508][ T66] asm_exc_invalid_op+0x1a/0x20 [ 576.746346][ T66] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 576.752495][ T66] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 53 9e fa f6 48 8d 3d 0c 5f cc 04 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 a8 96 69 fe 31 c0 [ 576.772086][ T66] RSP: 0018:ffffc9000217f5d0 EFLAGS: 00010293 [ 576.778161][ T66] RAX: ffffffff8ac6596d RBX: ffff88805b819780 RCX: ffff88801af3db80 [ 576.786118][ T66] RDX: 0000000000000000 RSI: ffff88805b819780 RDI: ffffffff8f92b880 [ 576.794163][ T66] RBP: ffffc9000217f6d8 R08: ffffc9000217f64f R09: 0000000000000000 [ 576.802389][ T66] R10: ffffc9000217f640 R11: ffffffff8ac65960 R12: ffffc9000217f640 [ 576.810344][ T66] R13: ffff8880256ac5b0 R14: ffff888025bd2ff8 R15: 0000000000000001 [ 576.818306][ T66] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 576.824364][ T66] ? ieee80211_free_ack_frame+0xd/0x40 [ 576.829808][ T66] idr_for_each+0x1b5/0x290 [ 576.834290][ T66] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 576.840337][ T66] ? __pfx_idr_for_each+0x10/0x10 [ 576.845363][ T66] ? kfree+0x1c0/0x660 [ 576.849432][ T66] ieee80211_free_hw+0x44/0x3d0 [ 576.854284][ T66] mac80211_hwsim_del_radio+0x2de/0x460 [ 576.859819][ T66] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 576.865876][ T66] ? __local_bh_enable_ip+0xd0/0x130 [ 576.871164][ T66] hwsim_exit_net+0xed3/0xf80 [ 576.875832][ T66] ? hwsim_exit_net+0x32b/0xf80 [ 576.880666][ T66] ? __pfx_hwsim_exit_net+0x10/0x10 [ 576.885846][ T66] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 576.891742][ T66] ops_undo_list+0x49a/0x990 [ 576.896408][ T66] ? __pfx_ops_undo_list+0x10/0x10 [ 576.901500][ T66] ? do_raw_spin_unlock+0x122/0x240 [ 576.906681][ T66] cleanup_net+0x4d8/0x7a0 [ 576.911166][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 576.916117][ T66] ? process_scheduled_works+0x9ef/0x1770 [ 576.921815][ T66] ? process_scheduled_works+0x9ef/0x1770 [ 576.927512][ T66] process_scheduled_works+0xad1/0x1770 [ 576.933324][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.939284][ T66] ? do_raw_spin_lock+0x21f/0x290 [ 576.944315][ T66] worker_thread+0x8a0/0xda0 [ 576.948916][ T66] kthread+0x711/0x8a0 [ 576.952979][ T66] ? __pfx_worker_thread+0x10/0x10 [ 576.958070][ T66] ? __pfx_kthread+0x10/0x10 [ 576.962645][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.967824][ T66] ? __pfx_kthread+0x10/0x10 [ 576.972395][ T66] ret_from_fork+0x510/0xa50 [ 576.976962][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 576.982045][ T66] ? __switch_to+0xc9e/0x1480 [ 576.986705][ T66] ? __pfx_kthread+0x10/0x10 [ 576.991282][ T66] ret_from_fork_asm+0x1a/0x30 [ 576.996064][ T66] [ 576.999516][ T66] Kernel Offset: disabled [ 577.003849][ T66] Rebooting in 86400 seconds..