last executing test programs: 10m22.285689429s ago: executing program 3 (id=4477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2, 0x2000000}) 10m21.934786855s ago: executing program 3 (id=4481): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x80003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a26", 0x1000}], 0x3) 10m21.811713343s ago: executing program 3 (id=4483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) timerfd_create(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r5, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x62) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 10m20.515700886s ago: executing program 3 (id=4491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x10000fff, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) syz_usb_connect(0x2, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa65874452d010203010902310001"], 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd670000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820", 0x34, 0xfffffffffffffffe) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r7, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 10m17.273341398s ago: executing program 3 (id=4504): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x46, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030303030303030303030303430390400ac3d185c4446cac4bad8bd3a6bb5d1f3964febf55d5e074bcb8a65ca14ed80c66ea9c9483b3eb53d80a5ac91f04ba12f563d9d9d193c2998c19042f0201fac4e042a8a0d07f0fb93e780a3b19b72181aceb1aaa32b168f86f50ecabbf90d51273a8196ac310b1c8a52a8f48d283ec1f415cd53012bfdb10eb204f905b1135697e11be19ad936da5304f9d7ee36695cb6283f9694b7d25a08c6e38fa05a6fa55b339a6e24e34dcac6ce678ee7072022"], 0x2a, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c055) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00e0003b000000ce06b8beaf4c1d69d6fb941f2c9634bdcef77586fcc6b8db54c8564d7f006e3628c8c6b2722f729a591173e339cc05cbbb9b4169378a4818a1", @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdb11593f5e00000e0001006e657464657673696d0000000f0002006e6574640400000000000000080003000100000700000000ff0f0000060016003c9700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="180024ecb9c70910ffffff7f000000000400e500040017ed"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 10m15.937797223s ago: executing program 3 (id=4506): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 10m15.426938678s ago: executing program 32 (id=4506): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m25.153806428s ago: executing program 0 (id=6826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 1m22.087931565s ago: executing program 0 (id=6842): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x1275, 0x0) 1m21.734854086s ago: executing program 0 (id=6845): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xff, 0x0, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$BLKZEROOUT(r0, 0x1275, 0x0) 1m21.264964226s ago: executing program 0 (id=6847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000080229001110030008004a00", @ANYRES32=r8, @ANYBLOB], 0x30}}, 0x44000) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000280)='1', 0x1) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r11, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 1m20.393471632s ago: executing program 0 (id=6851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x398b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 1m20.130442595s ago: executing program 0 (id=6854): r0 = fsopen(&(0x7f0000000300)='affs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18400000068a000000000000040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000002e0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000580)={0x6, "aba26ed49fba3b04f7454c5e2e7fb6ed1fb798f5da35aec570aae34c1042e70b719bd2c577ebdddc38c473974879db9762dfc0ffb144035abb1b8a62676f2088150d25c1422600fbe1abaa81e8687ea739dec1290e6a77960c223128281f4c7c2c6863add427580ef580045ff5f07e50901fc537a64eb1fd94782006fd6f184999e9e50059dca654e0c8dfcc0e7e3dae54a07ae544724153da157cd20dd6e5711485337eff9afc0369058a770db73246880e5d3f5fde72a78d8b87e6d9c6e52cf52e7431a3424fe6316218c3e071097d9c6f90b55a737ee3a78dc3beda50b410767f2b839a3bb6fa486b08e2084029e929c4eb23efa93d3817dd89cdd10dd979"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x11, 0xe2, &(0x7f0000000040)="ca682626021372970968025b51d6406c44602f3ed35759d34769da6bc27058ee41b0ab05f0349b08b7a0125441b32d823275df5a9045e8fe9bb6eaf9c0d531d965b3ba7d269e3169ca50e0eed47d0632cd7c78d6dd0d3d46acd9aa6a1a280cb9050aab6bac5ade5c1d0d65573e6c808bfaee3d2bd11e76a4445c0a97f95eb587efec2acbc581818bc90791b0504e55294d9d9b3432312c2a5f9bc199a48fb0d88e393444434fbb8a290cdb51deb26b386ab069c1c8355e29f3f31854840f48efd0f3534d56263aab905c69c8eec95b6751b038faa6ebc897353ce8e79e9f54bf33b0"}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) io_setup(0xffffff3b, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd2(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1m5.027588439s ago: executing program 33 (id=6854): r0 = fsopen(&(0x7f0000000300)='affs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18400000068a000000000000040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000002e0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000580)={0x6, "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"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x11, 0xe2, &(0x7f0000000040)="ca682626021372970968025b51d6406c44602f3ed35759d34769da6bc27058ee41b0ab05f0349b08b7a0125441b32d823275df5a9045e8fe9bb6eaf9c0d531d965b3ba7d269e3169ca50e0eed47d0632cd7c78d6dd0d3d46acd9aa6a1a280cb9050aab6bac5ade5c1d0d65573e6c808bfaee3d2bd11e76a4445c0a97f95eb587efec2acbc581818bc90791b0504e55294d9d9b3432312c2a5f9bc199a48fb0d88e393444434fbb8a290cdb51deb26b386ab069c1c8355e29f3f31854840f48efd0f3534d56263aab905c69c8eec95b6751b038faa6ebc897353ce8e79e9f54bf33b0"}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) io_setup(0xffffff3b, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd2(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 8.047775612s ago: executing program 6 (id=7142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rt_sigsuspend(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x2000000, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xd}}, 0xe8) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendfile(r7, r6, 0x0, 0x80001d00c0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000280)=0x801, 0x4) socket$unix(0x1, 0x1, 0x0) 7.761533865s ago: executing program 6 (id=7143): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x22200, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8', @ANYRESHEX=r0], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0xf9, 0x7, &(0x7f00000000c0)={0x1e, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe35df2a1f63ef8df4077d040b"}}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) msgctl$IPC_RMID(0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) 7.20679738s ago: executing program 2 (id=7144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 6.603972748s ago: executing program 1 (id=7149): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201010220de83103c41b6813ac60102030109021200010e1030fa0904080100a884ce8105b402ccc19a60d76042bd71eeb821b035dcd8e5066c17c2c0e22de4027f4a0f880474e28b1a6baed68421fce5a67f80f5170a1b5dbc060a68929070d4748b7f522ac95894fbd73cad56fab2a634a5780180f7acb978bfb04a3bb4ac12f0a78552c864080000000000000067f3e8"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x60, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r6, 0x7fffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x4000, 0xdffffffd, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f00000001c0)) msgctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2], 0x48}}, 0x0) 6.148162905s ago: executing program 4 (id=7151): r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4180}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x8, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000280)=[{r7, 0x2b}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="12a425875b97fb1a65b443133957ca993172694ba3f0d9352a3e6fa5596ed283b68bfeace0fbf2bce738df21a0adb8fbc29cae6a4319a6a3b226d303ea017a96d28edbab482f75c93920aeb9e0313095250fbc5615d92ce3f40248c47f33b6631045dac41a4e780745b8db51da4a785736c6f692c09ead77c303426f2dd17aa38bcc139d30a15cb2b4fb10f2e4cc2e27571f7cdf5ebdb896d11b08be7a699d089bba6aef328f23330606be5876eabc0faa9899a3b23b27807bef588dd98cff8fd09028601babbae0a9c289880f9a560be32cdb46db298ee1b0b38944c7eb36c7", 0xe0}, {&(0x7f0000000580)="220154493e6008f4a2515cc45343d479e74fb540689f612c76cb84c94e938ab51749f1646bcc6e19f7fb8a0fc6786deb4986d2273bca88c8862e10c37af098872cdc5f2fdaf0898092ffd27b7f81ae20d2b78c296d28b95ce230be27f6683d6c68a9b33994b149ae46c6b47680a5bba7c4", 0x71}, {&(0x7f0000000600)="29ace94ff9698a7b782f255de671b9fa0658aa669d64736b5a496eaecee27dd58356476ac191398d8639d17e0da235d46a54403b90a941f63d669a98f55a68e6e737eddca83280", 0x47}], 0x3}}], 0x1, 0x8004) 5.535652229s ago: executing program 5 (id=7153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x2000000, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xd}}, 0xe8) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendfile(r7, r6, 0x0, 0x80001d00c0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000280)=0x801, 0x4) socket$unix(0x1, 0x1, 0x0) 5.339628583s ago: executing program 5 (id=7154): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.156327774s ago: executing program 4 (id=7155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() tkill(r2, 0x100) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0xd4bc, 0x200, 0xfffffffa}, &(0x7f0000000380), &(0x7f0000000280)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x18b, &(0x7f0000000480)={0x0, 0x334e, 0x10, 0xfffffffe, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_pwait2(r9, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100000032bbd70000605000000000000a0cb8ccea9012cdb43f679a7e581f6a4b2399bda948f4dfc8a0d85ad8f26bd2fc33dce65afdbe7608745c8408eea6cd7ca59fde76b3ffc99c021da62917f7420f5f40910a4156e046b54e7857b291711bd9e814fdc62e2fc1cba3cc7a5b38c9dddb2384a0c43be05b728f811d5f30261bea66fef9e3479c9e2bcc71bc667fc10cbe31c7addaf2f60715334", @ANYRES32=0x0, @ANYBLOB="f2240000000000001c0012800b0001006d616373656300000c000280050003000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 4.329900389s ago: executing program 5 (id=7156): socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_tos_u8={{0xd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x28}}, {{&(0x7f0000003500)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f000000b140)=[@ip_ttl={{0x10}}], 0x10}}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r2}, &(0x7f0000000500), &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x43, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="e6d3618b6ccc3314965a0fb1f24df2bd42", 0x11) 4.298321484s ago: executing program 6 (id=7157): getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) lstat64(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4.188536491s ago: executing program 4 (id=7158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x44000) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 3.771113771s ago: executing program 4 (id=7159): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) mount_setattr(r1, &(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000080)={0x100000, 0x71, 0x0, {r2}}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x18, r2}, 0x14) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x400004, 0x3c5e, 0x5, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0x6, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x10000800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x2, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x2200, 0x80, 0xf, 0xd, 0x2950bfaf, 0xdd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xaca, 0xbf, 0x2, 0x3, 0x4, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x22, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x6, 0x81, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x9, 0x8, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0x41dc]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000300)=0xb) process_mrelease(0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0xc, 0x0, @fd, 0xe9b8, 0x0, 0x800, 0x3}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xb) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r8, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.625974476s ago: executing program 2 (id=7160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="036c63a4a4b02a685aebb1de9336472f53d58d13e89334f8ce4b23f91c761cb4362290fdb6cf30525915e121ce1031ee3e925a5f647b5182e4ec71d18d2231682404525e09f0fcc552351c751a9b16a794b722259b65853ab203999ce295a11a0fe3ab06af1f57beb90955a2078eed81bbd530135236af3a8d48c96e632c5aa3ecf0f6284deecf8e17bcf08b5e2abfd9559fa0097a0aa4c0205f784dc3ceceab6d2e6af9c99ee8a22deeb377dc65dc024d4656c673073d8702da447284a8ac7d82956c3380766e14b939c8a4cb951dbb75dc7c17bca01420b40874aa22cb5edf6627dcd57c41161fd5d35962944560933321bd8e0c4260b184c5e489e31130142daa0052145c729573043a260c3ed5e5bb19f60d58c96f55f8028b5fa5b007ee827ee48e420fec270768dbe70fb3fa42374e0debf1a2cb8f92726472fada2f012819420464c074f271427de71fb63cd6a24a6d3412165300ce7ed0592215fed3a5ffeff47c12d728ee88bfaec1f76ea257c30af6b6ab87c05aff3cb3aee562d2d5150662ef4bea8fc2c7678e0ebf8e5594b387ce946b2297a93f4a814d8eec99cf2dc692912887d3f70e8a916415aeb472ecb793169b8b", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000080229001110030008004a00", @ANYRES32=r7, @ANYBLOB], 0x30}}, 0x44000) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r10, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 3.502535428s ago: executing program 1 (id=7161): unshare(0x2040400) personality(0x87bf5ac905ea0f7f) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.831355993s ago: executing program 6 (id=7162): r0 = fsopen(&(0x7f0000000440)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0xa, 0x0, 0x6, 0x480, 0x4000000000000009, 0x10200}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x4, 0x2, @vifc_lcl_addr=@rand_addr=0x64010100, @rand_addr=0x64010101}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000200)={@multicast, @multicast, @void, {@llc_tr={0x11, {@llc={0xfc, 0xe, "1a", "5a3331ab94e86645daeed092936613607df249d5fe33d8c63f40a5adceeecbd23205562384681f133a06"}}}}}, &(0x7f0000000280)={0x1, 0x3, [0x99f, 0x615, 0x17f, 0xefd]}) openat$cuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40041) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r7, 0x29, 0xa, 0x3, 0x0, 0x70, @loopback, @mcast1, 0x8000, 0x40, 0x8000, 0x9b5}}) connect$packet(r1, &(0x7f0000000080)={0x11, 0x6, r7, 0x1, 0x3, 0x6, @local}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x1d, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) 2.738553951s ago: executing program 2 (id=7163): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="036c63a4a4b02a685aebb1de9336472f53d58d13e89334f8ce4b23f91c761cb4362290fdb6cf30525915e121ce1031ee3e925a5f647b5182e4ec71d18d2231682404525e09f0fcc552351c751a9b16a794b722259b65853ab203999ce295a11a0fe3ab06af1f57beb90955a2078eed81bbd530135236af3a8d48c96e632c5aa3ecf0f6284deecf8e17bcf08b5e2abfd9559fa0097a0aa4c0205f784dc3ceceab6d2e6af9c99ee8a22deeb377dc65dc024d4656c673073d8702da447284a8ac7d82956c3380766e14b939c8a4cb951dbb75dc7c17bca01420b40874aa22cb5edf6627dcd57c41161fd5d35962944560933321bd8e0c4260b184c5e489e31130142daa0052145c729573043a260c3ed5e5bb19f60d58c96f55f8028b5fa5b007ee827ee48e420fec270768dbe70fb3fa42374e0debf1a2cb8f92726472fada2f012819420464c074f271427de71fb63cd6a24a6d3412165300ce7ed0592215fed3a5ffeff47c12d728ee88bfaec1f76ea257c30af6b6ab87c05aff3cb3aee562d2d5150662ef4bea8fc2c7678e0ebf8e5594b387ce946b2297a93f4a814d8eec99cf2dc692912887d3f70e8a916415aeb472ecb793169b8b88185bc084f0", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000080229001110030008004a00", @ANYBLOB], 0x30}}, 0x44000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) 2.72072821s ago: executing program 5 (id=7164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x2000000, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xd}}, 0xe8) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendfile(r7, r6, 0x0, 0x80001d00c0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000280)=0x801, 0x4) socket$unix(0x1, 0x1, 0x0) 2.573739152s ago: executing program 6 (id=7165): r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4180}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x8, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000280)=[{r8, 0x2b}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="12a425875b97fb1a65b443133957ca993172694ba3f0d9352a3e6fa5596ed283b68bfeace0fbf2bce738df21a0adb8fbc29cae6a4319a6a3b226d303ea017a96d28edbab482f75c93920aeb9e0313095250fbc5615d92ce3f40248c47f33b6631045dac41a4e780745b8db51da4a785736c6f692c09ead77c303426f2dd17aa38bcc139d30a15cb2b4fb10f2e4cc2e27571f7cdf5ebdb896d11b08be7a699d089bba6aef328f23330606be5876eabc0faa9899a3b23b27807bef588dd98cff8fd09028601babbae0a9c289880f9a560be32cdb46db298ee1b0b38944c7eb36c7", 0xe0}, {&(0x7f0000000580)="220154493e6008f4a2515cc45343d479e74fb540689f612c76cb84c94e938ab51749f1646bcc6e19f7fb8a0fc6786deb4986d2273bca88c8862e10c37af098872cdc5f2fdaf0898092ffd27b7f81ae20d2b78c296d28b95ce230be27f6683d6c68a9b33994b149ae46c6b47680a5bba7c4", 0x71}, {&(0x7f0000000600)="29ace94ff9698a7b782f255de671b9fa0658aa669d64736b5a496eaecee27dd58356476ac191398d8639d17e0da235d46a54403b90a941f63d669a98f55a68e6e737eddca83280", 0x47}], 0x3}}], 0x1, 0x8004) 2.209145061s ago: executing program 5 (id=7166): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.05007093s ago: executing program 5 (id=7167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 1.966280824s ago: executing program 2 (id=7168): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() tkill(r2, 0x100) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0xd4bc, 0x200, 0xfffffffa}, &(0x7f0000000380), &(0x7f0000000280)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x18b, &(0x7f0000000480)={0x0, 0x334e, 0x10, 0xfffffffe, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_pwait2(r9, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100000032bbd70000605000000000000a0cb8ccea9012cdb43f679a7e581f6a4b2399bda948f4dfc8a0d85ad8f26bd2fc33dce65afdbe7608745c8408eea6cd7ca59fde76b3ffc99c021da62917f7420f5f40910a4156e046b54e7857b291711bd9e814fdc62e2fc1cba3cc7a5b38c9dddb2384a0c43be05b728f811d5f30261bea66fef9e3479c9e2bcc71bc667fc10cbe31c7addaf2f60715334", @ANYRES32=0x0, @ANYBLOB="f2240000000000001c0012800b0001006d616373656300000c000280050003000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 1.739896524s ago: executing program 1 (id=7169): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x12) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.549793304s ago: executing program 4 (id=7170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000080229001110030008004a00", @ANYRES32=r8], 0x30}}, 0x44000) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000280)='1', 0x1) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r11, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 1.105347107s ago: executing program 4 (id=7171): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201010220de83103c41b6813ac60102030109021200010e1030fa0904080100a884ce8105b402ccc19a60d76042bd71eeb821b035dcd8e5066c17c2c0e22de4027f4a0f880474e28b1a6baed68421fce5a67f80f5170a1b5dbc060a68929070d4748b7f522ac95894fbd73cad56fab2a634a5780180f7acb978bfb04a3bb4ac12f0a78552c864080000000000000067f3e8"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x60, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r6, 0x7fffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x4000, 0xdffffffd, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f00000001c0)) msgctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2], 0x48}}, 0x0) 962.591349ms ago: executing program 6 (id=7172): getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) lstat64(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 945.081804ms ago: executing program 2 (id=7173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000080229001110030008004a00", @ANYRES32=r7, @ANYBLOB], 0x30}}, 0x44000) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r10, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 299.243173ms ago: executing program 1 (id=7174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e6d3618b6ccc3314965a0fb1f24df2bd42", 0x11) 85.835024ms ago: executing program 1 (id=7175): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x808) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x68aa, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000091) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x68aa, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000091) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000001c0)={0x4, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x613a1cc9, 0x7}, 0x0, 0x0, 0x80000001, 0x8000000000000000, 0x9, 0xfffffffffffeffff, 0x53, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x44}, 0x0, 0x0, 0x4, 0x800, 0x6341, 0x7, 0x1, 0x8}}], 0xb0, 0x24004050}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012050000000000000064676500001400021900020000000500170000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) getdents64(r5, &(0x7f0000000400)=""/218, 0xda) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf87000000000000b5070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000001000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf87000000000000b5070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000001000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.843342ms ago: executing program 2 (id=7176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x2000000, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xd}}, 0xe8) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendfile(r7, r6, 0x0, 0x80001d00c0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000280)=0x801, 0x4) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 1 (id=7177): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): 3-1:4.128: config failed, can't get hub status (err -71) [ 1818.356283][T31303] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1818.388139][T31156] usb 3-1: USB disconnect, device number 104 [ 1819.227922][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1819.239716][T12034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1819.356012][T31339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6875'. [ 1819.811268][T31351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6880'. [ 1820.210635][T31156] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1820.397243][T31156] usb 6-1: Using ep0 maxpacket: 16 [ 1820.409065][T31156] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1820.415944][T31156] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1820.425634][T31156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.505948][T31156] usb 6-1: config 0 descriptor?? [ 1820.526149][T31156] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1820.567208][ T5900] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1820.728735][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 1820.744771][ T5900] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1820.760159][ T5900] usb 2-1: config 0 has no interface number 0 [ 1820.767504][ T5900] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1820.818061][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1820.839587][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.851435][ T5900] usb 2-1: Product: syz [ 1820.857513][ T5900] usb 2-1: Manufacturer: syz [ 1820.863827][ T5900] usb 2-1: SerialNumber: syz [ 1820.873378][ T5900] usb 2-1: config 0 descriptor?? [ 1820.884636][ T5900] f81534 2-1:0.12: required endpoints missing [ 1822.478019][T31158] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1822.558224][T31156] gspca_sonixj: reg_r err -71 [ 1822.575400][T31156] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1822.585436][T31156] usb 6-1: USB disconnect, device number 70 [ 1822.628282][T31158] usb 3-1: Using ep0 maxpacket: 32 [ 1822.634917][T31158] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1822.645218][T31158] usb 3-1: config 4 has no interface number 0 [ 1822.651516][T31158] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.662941][T31158] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.675896][T31158] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1822.686031][T31158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.711125][T31158] hub 3-1:4.128: USB hub found [ 1822.749198][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1822.749215][ T30] audit: type=1326 audit(1764244025.670:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.782101][ T30] audit: type=1326 audit(1764244025.670:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.811295][ T30] audit: type=1326 audit(1764244025.670:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.835673][ T30] audit: type=1326 audit(1764244025.670:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.858142][ T30] audit: type=1326 audit(1764244025.670:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.881094][ T30] audit: type=1326 audit(1764244025.670:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.903553][ T30] audit: type=1326 audit(1764244025.670:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.936284][T31158] hub 3-1:4.128: 2 ports detected [ 1822.936780][ T30] audit: type=1326 audit(1764244025.670:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.966650][ T30] audit: type=1326 audit(1764244025.670:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1822.969576][T31158] hub 3-1:4.128: Using single TT (err -22) [ 1822.989760][ T30] audit: type=1326 audit(1764244025.670:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.4.6888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1823.019615][T31380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6889'. [ 1823.140031][T31369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1823.169648][T31369] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1823.199051][T31369] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1823.223393][T31160] usb 2-1: USB disconnect, device number 18 [ 1823.258132][T31158] hub 3-1:4.128: config failed, can't get hub status (err -5) [ 1823.369239][T31158] usb 3-1: USB disconnect, device number 105 [ 1823.617494][T31392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1824.287235][T31160] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1824.317290][T31156] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1824.437362][T31160] usb 2-1: Using ep0 maxpacket: 32 [ 1824.448158][T31160] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1824.456447][T31160] usb 2-1: config 0 has no interface number 0 [ 1824.463339][T31160] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1824.474978][T31160] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1824.484537][T31160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.493615][T31160] usb 2-1: Product: syz [ 1824.501732][T31160] usb 2-1: Manufacturer: syz [ 1824.508356][T31160] usb 2-1: SerialNumber: syz [ 1824.517196][T31156] usb 3-1: Using ep0 maxpacket: 16 [ 1824.524145][T31160] usb 2-1: config 0 descriptor?? [ 1824.534736][T31160] f81534 2-1:0.12: required endpoints missing [ 1824.638639][T31156] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1824.680452][T31156] usb 3-1: config 14 has an invalid interface number: 8 but max is 0 [ 1824.688946][T31156] usb 3-1: config 14 has no interface number 0 [ 1824.695131][T31156] usb 3-1: config 14 interface 8 has no altsetting 0 [ 1824.704427][T31156] usb 3-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1824.713908][T31156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.722532][T31156] usb 3-1: Product: syz [ 1824.726965][T31156] usb 3-1: Manufacturer: syz [ 1824.731992][T31156] usb 3-1: SerialNumber: syz [ 1824.990333][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1825.001895][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1825.171289][T31411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1825.787249][T31158] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1825.939495][T31158] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1825.953466][T31158] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1825.960329][T31158] usb 6-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1825.969464][T31158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.980430][T31158] usb 6-1: config 0 descriptor?? [ 1826.579593][T22103] usb 2-1: USB disconnect, device number 19 [ 1826.620265][T31417] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6900'. [ 1826.665590][T31419] fuse: Unknown parameter 'i$òç„?<' [ 1827.039374][T31156] usb 3-1: USB disconnect, device number 106 [ 1827.203346][T31424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1827.647237][T31158] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1827.801647][T31158] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1827.810885][T31158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.818980][T31158] usb 3-1: Product: syz [ 1827.823219][T31158] usb 3-1: Manufacturer: syz [ 1827.827918][T31158] usb 3-1: SerialNumber: syz [ 1827.834461][T31158] usb 3-1: config 0 descriptor?? [ 1827.887233][T31156] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1828.037557][T31156] usb 2-1: Using ep0 maxpacket: 32 [ 1828.044661][T31156] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1828.049913][T31158] usb 3-1: USB disconnect, device number 107 [ 1828.062670][T31156] usb 2-1: config 4 has no interface number 0 [ 1828.071122][T31156] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.082673][T31156] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.093212][T31156] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1828.103431][T31156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.118854][T31156] hub 2-1:4.128: USB hub found [ 1828.317618][T31156] hub 2-1:4.128: 2 ports detected [ 1828.322778][T31156] hub 2-1:4.128: Using single TT (err -22) [ 1828.497235][T31158] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1828.522933][T31431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1828.533054][T31156] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 1828.541089][T31431] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1828.551889][T31431] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1828.567209][T31156] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 1828.590533][T31146] usb 6-1: USB disconnect, device number 71 [ 1828.618480][T31156] usb 2-1: USB disconnect, device number 20 [ 1828.648530][T31158] usb 3-1: Using ep0 maxpacket: 32 [ 1828.658165][T31158] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1828.666424][T31158] usb 3-1: config 0 has no interface number 0 [ 1828.672885][T31158] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1828.690085][T31158] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1828.702143][T31158] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1828.713523][T31158] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1828.723772][T31158] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1828.735552][T31158] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1828.745865][T31158] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1828.755972][T31158] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1828.765920][T31158] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1828.783989][T31437] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6907'. [ 1828.837653][T31158] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1828.846794][T31158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.855017][T31158] usb 3-1: Product: syz [ 1828.866727][T31158] usb 3-1: Manufacturer: syz [ 1828.871623][T31158] usb 3-1: SerialNumber: syz [ 1828.893462][T31158] usb 3-1: config 0 descriptor?? [ 1828.908448][T31429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1828.917055][T31158] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1828.927378][T31158] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1829.180190][T31442] FAULT_INJECTION: forcing a failure. [ 1829.180190][T31442] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.193726][T31442] CPU: 1 UID: 0 PID: 31442 Comm: syz.1.6909 Not tainted syzkaller #0 PREEMPT(full) [ 1829.193752][T31442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1829.193764][T31442] Call Trace: [ 1829.193773][T31442] [ 1829.193782][T31442] dump_stack_lvl+0x189/0x250 [ 1829.193811][T31442] ? __pfx____ratelimit+0x10/0x10 [ 1829.193835][T31442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1829.193857][T31442] ? __pfx__printk+0x10/0x10 [ 1829.193882][T31442] ? __pfx___might_resched+0x10/0x10 [ 1829.193907][T31442] should_fail_ex+0x414/0x560 [ 1829.193938][T31442] should_failslab+0xa8/0x100 [ 1829.193958][T31442] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1829.193983][T31442] ? __d_alloc+0x36/0x7a0 [ 1829.194009][T31442] __d_alloc+0x36/0x7a0 [ 1829.194035][T31442] d_alloc_parallel+0xe1/0x1610 [ 1829.194056][T31442] ? __lock_acquire+0xab9/0xd20 [ 1829.194085][T31442] ? __lock_acquire+0xab9/0xd20 [ 1829.194109][T31442] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1829.194135][T31442] ? __raw_spin_lock_init+0x45/0x100 [ 1829.194159][T31442] ? __init_waitqueue_head+0xa9/0x150 [ 1829.194187][T31442] __lookup_slow+0x116/0x3d0 [ 1829.194211][T31442] ? __pfx___lookup_slow+0x10/0x10 [ 1829.194241][T31442] ? d_lookup+0x8a/0xa0 [ 1829.194261][T31442] ? lookup_noperm+0x112/0x220 [ 1829.194286][T31442] simple_start_creating+0xfd/0x1e0 [ 1829.194305][T31442] ? __pfx_simple_start_creating+0x10/0x10 [ 1829.194336][T31442] debugfs_start_creating+0x10f/0x180 [ 1829.194363][T31442] __debugfs_create_file+0x79/0x4f0 [ 1829.194393][T31442] debugfs_create_file_full+0x3f/0x60 [ 1829.194420][T31442] ref_tracker_dir_debugfs+0x14e/0x270 [ 1829.194439][T31442] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1829.194493][T31442] ? trace_kmalloc+0x1f/0xd0 [ 1829.194513][T31442] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1829.194541][T31442] ? __raw_spin_lock_init+0x45/0x100 [ 1829.194567][T31442] alloc_netdev_mqs+0x272/0x11b0 [ 1829.194588][T31442] ? __pfx_vlan_setup+0x10/0x10 [ 1829.194613][T31442] register_vlan_device+0x24f/0x4c0 [ 1829.194634][T31442] ? __pfx_register_vlan_device+0x10/0x10 [ 1829.194652][T31442] ? security_capable+0x7e/0x2e0 [ 1829.194683][T31442] vlan_ioctl_handler+0x281/0x650 [ 1829.194701][T31442] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1829.194716][T31442] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1829.194742][T31442] ? do_vfs_ioctl+0xbe8/0x1430 [ 1829.194767][T31442] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1829.194790][T31442] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1829.194806][T31442] sock_ioctl+0x610/0x790 [ 1829.194831][T31442] ? __pfx_sock_ioctl+0x10/0x10 [ 1829.194854][T31442] ? __lock_acquire+0xab9/0xd20 [ 1829.194885][T31442] compat_sock_ioctl+0x285/0xc80 [ 1829.194913][T31442] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1829.194938][T31442] ? __fget_files+0x3a0/0x420 [ 1829.194954][T31442] ? __fget_files+0x2a/0x420 [ 1829.194974][T31442] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1829.194999][T31442] __ia32_compat_sys_ioctl+0x543/0x840 [ 1829.195024][T31442] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1829.195047][T31442] ? __fget_files+0x3a0/0x420 [ 1829.195071][T31442] ? fput+0xa0/0xd0 [ 1829.195091][T31442] ? ksys_write+0x22a/0x250 [ 1829.195112][T31442] ? exc_page_fault+0x82/0x100 [ 1829.195136][T31442] ? __pfx_ksys_write+0x10/0x10 [ 1829.195162][T31442] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1829.195187][T31442] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.195214][T31442] __do_fast_syscall_32+0xb6/0x2b0 [ 1829.195231][T31442] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.195259][T31442] do_fast_syscall_32+0x34/0x80 [ 1829.195275][T31442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1829.195303][T31442] RIP: 0023:0xf707d539 [ 1829.195320][T31442] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1829.195335][T31442] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1829.195355][T31442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008983 [ 1829.195368][T31442] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1829.195379][T31442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1829.195390][T31442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1829.195401][T31442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1829.195431][T31442] [ 1829.662246][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 1829.662263][ T30] audit: type=1326 audit(1764244032.580:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.694180][ T30] audit: type=1326 audit(1764244032.580:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.716739][ T30] audit: type=1326 audit(1764244032.580:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.738828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.746730][ T30] audit: type=1326 audit(1764244032.580:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.768893][ T30] audit: type=1326 audit(1764244032.580:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.791078][ T30] audit: type=1326 audit(1764244032.580:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.815192][ T30] audit: type=1326 audit(1764244032.580:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.837333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.843526][ T30] audit: type=1326 audit(1764244032.580:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.878803][ T30] audit: type=1326 audit(1764244032.580:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1829.902249][ T30] audit: type=1326 audit(1764244032.580:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31443 comm="syz.1.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1830.036728][T14039] usb 3-1: USB disconnect, device number 108 [ 1830.227321][T31156] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1830.373726][T16450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1830.384282][T16450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1830.393921][T16450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1830.402405][T16450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1830.412504][T16450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1830.433770][T31156] usb 2-1: Using ep0 maxpacket: 16 [ 1830.437474][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1830.442978][T31156] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1830.453210][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1830.456464][T31156] usb 2-1: config 14 has an invalid interface number: 8 but max is 0 [ 1830.460992][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1830.480518][T31156] usb 2-1: config 14 has no interface number 0 [ 1830.480592][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1830.486888][T31156] usb 2-1: config 14 interface 8 has no altsetting 0 [ 1830.517861][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1830.556662][T31156] usb 2-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1830.569350][T31156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.580913][T31156] usb 2-1: Product: syz [ 1830.585655][T31156] usb 2-1: Manufacturer: syz [ 1830.600047][T31156] usb 2-1: SerialNumber: syz [ 1830.747492][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1830.758802][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1831.088741][T31464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1831.449049][T31458] chnl_net:caif_netlink_parms(): no params data found [ 1831.521876][T31475] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1831.531378][T31475] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1831.745016][T31483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6918'. [ 1831.918803][T31458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.947694][T31458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.955286][T31458] bridge_slave_0: entered allmulticast mode [ 1831.964575][T31458] bridge_slave_0: entered promiscuous mode [ 1831.975026][T31458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.984060][T31458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.993340][T31458] bridge_slave_1: entered allmulticast mode [ 1832.004067][T31458] bridge_slave_1: entered promiscuous mode [ 1832.112039][T31458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.145626][T31458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.216711][T31458] team0: Port device team_slave_0 added [ 1832.235520][T31458] team0: Port device team_slave_1 added [ 1832.356953][T31458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.369640][T31458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.416972][T31458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.433624][T31458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.448144][T31458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.474094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1832.515171][T31458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.588298][ T5829] Bluetooth: hci5: command tx timeout [ 1832.673014][T31458] hsr_slave_0: entered promiscuous mode [ 1832.680996][T31458] hsr_slave_1: entered promiscuous mode [ 1832.687898][T31458] debugfs: 'hsr0' already exists in 'hsr' [ 1832.693754][T31458] Cannot create hsr debugfs directory [ 1832.921849][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6925'. [ 1832.949171][T31497] bridge0: entered promiscuous mode [ 1832.954988][T31497] macvtap1: entered promiscuous mode [ 1832.961633][T31497] macvtap1: entered allmulticast mode [ 1832.967332][T31497] bridge0: entered allmulticast mode [ 1833.012215][T31502] bridge0: left allmulticast mode [ 1833.020892][T31502] bridge0: left promiscuous mode [ 1833.043462][T31156] usb 2-1: USB disconnect, device number 21 [ 1833.168222][T22103] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1833.221103][T31458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1833.290436][T31458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1833.328830][T31458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1833.343368][T31458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1833.475433][T22103] usb 6-1: Using ep0 maxpacket: 32 [ 1833.482375][T22103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.501254][T22103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.545590][T22103] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1833.593930][T22103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.608424][T22103] usb 6-1: config 0 descriptor?? [ 1834.069591][T22103] ft260 0003:0403:6030.0046: unknown main item tag 0x7 [ 1834.168300][T31458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.196358][T31458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.347371][T22103] ft260 0003:0403:6030.0046: failed to retrieve chip version [ 1834.366220][T22103] ft260 0003:0403:6030.0046: probe with driver ft260 failed with error -5 [ 1834.426848][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.434116][T12044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.676735][ T5829] Bluetooth: hci5: command tx timeout [ 1834.936068][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.943409][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.125571][T31458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.306567][T31458] veth0_vlan: entered promiscuous mode [ 1835.338786][T31458] veth1_vlan: entered promiscuous mode [ 1835.449042][T31458] veth0_macvtap: entered promiscuous mode [ 1835.462235][T31458] veth1_macvtap: entered promiscuous mode [ 1835.503909][T31537] IPVS: Unknown mcast interface: ÿ [ 1835.616252][T31458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.659284][T31458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.740652][T12034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.757164][T12034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.853914][T12034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.865846][T12034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.875064][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1835.928630][T31160] usb 6-1: USB disconnect, device number 72 [ 1835.977247][T31158] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1836.189562][T31158] usb 3-1: Using ep0 maxpacket: 16 [ 1836.273948][T31158] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1836.292330][T31158] usb 3-1: config 14 has an invalid interface number: 8 but max is 0 [ 1836.311402][T31158] usb 3-1: config 14 has no interface number 0 [ 1836.331336][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.339762][T31158] usb 3-1: config 14 interface 8 has no altsetting 0 [ 1836.340862][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.364658][T31158] usb 3-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1836.381668][T31158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.394964][T31158] usb 3-1: Product: syz [ 1836.410239][T31158] usb 3-1: Manufacturer: syz [ 1836.420888][T31158] usb 3-1: SerialNumber: syz [ 1836.430149][T12046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.439560][T12046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.509061][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1836.561974][ T812] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1836.717353][ T812] usb 2-1: Using ep0 maxpacket: 32 [ 1836.724932][ T812] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1836.744919][ T812] usb 2-1: config 4 has no interface number 0 [ 1836.752055][ T5829] Bluetooth: hci5: command tx timeout [ 1836.763526][T31565] tunl0: entered promiscuous mode [ 1836.776264][ T812] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.789910][ T812] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.800987][ T812] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1836.810667][ T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.810748][T31565] tunl0: entered allmulticast mode [ 1836.838925][ T812] hub 2-1:4.128: USB hub found [ 1836.862854][T31565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6913'. [ 1836.915922][T31566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6936'. [ 1837.089072][ T812] hub 2-1:4.128: 2 ports detected [ 1837.094288][ T812] hub 2-1:4.128: Using single TT (err -22) [ 1837.293903][T31557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6940'. [ 1837.307908][ T812] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 1837.318559][T31557] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6940'. [ 1837.327601][ T812] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 1837.349170][T31557] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1837.428098][ T812] usb 2-1: USB disconnect, device number 22 [ 1837.550641][T31575] pim6reg: entered allmulticast mode [ 1837.645033][T31577] ip6_vti0: entered promiscuous mode [ 1837.658314][T31579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6942'. [ 1837.673083][T31577] ip6_vti0: entered allmulticast mode [ 1837.681595][T31578] pim6reg: left allmulticast mode [ 1838.072819][T31587] pim6reg: entered allmulticast mode [ 1838.082696][T31587] pim6reg: left allmulticast mode [ 1838.827281][ T5829] Bluetooth: hci5: command tx timeout [ 1838.967853][T31158] usb 3-1: USB disconnect, device number 109 [ 1839.497322][T31158] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1839.647224][T31158] usb 3-1: device descriptor read/64, error -71 [ 1839.887226][T31158] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1840.017275][T31158] usb 3-1: device descriptor read/64, error -71 [ 1840.127496][T31158] usb usb3-port1: attempt power cycle [ 1840.254313][T31609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6951'. [ 1840.477835][T31158] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1840.509226][T31158] usb 3-1: device descriptor read/8, error -71 [ 1840.748080][T31158] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1840.790089][T31158] usb 3-1: device descriptor read/8, error -71 [ 1840.897434][T31158] usb usb3-port1: unable to enumerate USB device [ 1841.293349][T31621] netlink: 'syz.4.6954': attribute type 1 has an invalid length. [ 1841.308467][T31621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6954'. [ 1841.627936][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1842.282967][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1842.328029][T31156] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1842.547189][T31156] usb 2-1: Using ep0 maxpacket: 16 [ 1842.563887][T31156] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1842.709237][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6961'. [ 1842.718228][T31643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6961'. [ 1842.727251][T31643] netlink: 'syz.6.6961': attribute type 20 has an invalid length. [ 1842.742497][T31643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6961'. [ 1842.844691][T31156] usb 2-1: config 14 has an invalid interface number: 8 but max is 0 [ 1842.904196][T31156] usb 2-1: config 14 has no interface number 0 [ 1842.996155][T31156] usb 2-1: config 14 interface 8 has no altsetting 0 [ 1843.066648][T31156] usb 2-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1843.076342][T31156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.110304][T31156] usb 2-1: Product: syz [ 1843.176157][T31156] usb 2-1: Manufacturer: syz [ 1843.212165][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1843.212183][ T30] audit: type=1326 audit(1764244046.130:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.215271][T31156] usb 2-1: SerialNumber: syz [ 1843.259252][ T30] audit: type=1326 audit(1764244046.130:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.371162][T31650] vxcan0: entered promiscuous mode [ 1843.406914][T31650] vxcan0: entered allmulticast mode [ 1843.441235][T31650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6963'. [ 1843.452503][ T30] audit: type=1326 audit(1764244046.130:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.685642][ T30] audit: type=1326 audit(1764244046.130:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.710447][ T30] audit: type=1326 audit(1764244046.130:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.733693][ T30] audit: type=1326 audit(1764244046.160:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.758824][ T30] audit: type=1326 audit(1764244046.160:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.825342][T31659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1843.834843][ T30] audit: type=1326 audit(1764244046.160:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.858952][ T30] audit: type=1326 audit(1764244046.180:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1843.885725][ T30] audit: type=1326 audit(1764244046.180:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31644 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1844.297221][T31158] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1844.447174][T31158] usb 3-1: Using ep0 maxpacket: 32 [ 1844.598196][T31158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.613128][T31158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.640048][T31158] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1844.649232][T31158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.672308][T31158] usb 3-1: config 0 descriptor?? [ 1845.037237][T31146] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1845.094997][T31156] usb 2-1: USB disconnect, device number 23 [ 1845.103383][T31158] ft260 0003:0403:6030.0047: unknown main item tag 0x7 [ 1845.192302][T31689] FAULT_INJECTION: forcing a failure. [ 1845.192302][T31689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1845.205682][T31689] CPU: 0 UID: 0 PID: 31689 Comm: syz.1.6974 Not tainted syzkaller #0 PREEMPT(full) [ 1845.205708][T31689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1845.205719][T31689] Call Trace: [ 1845.205725][T31689] [ 1845.205734][T31689] dump_stack_lvl+0x189/0x250 [ 1845.205763][T31689] ? __pfx____ratelimit+0x10/0x10 [ 1845.205786][T31689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1845.205807][T31689] ? __pfx__printk+0x10/0x10 [ 1845.205826][T31689] ? __might_fault+0xb0/0x130 [ 1845.205860][T31689] should_fail_ex+0x414/0x560 [ 1845.205891][T31689] _copy_from_user+0x2d/0xb0 [ 1845.205914][T31689] kstrtouint_from_user+0xc4/0x170 [ 1845.205936][T31689] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1845.205972][T31689] proc_fail_nth_write+0x88/0x200 [ 1845.205994][T31689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1845.206019][T31689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1845.206040][T31689] vfs_write+0x27e/0xb30 [ 1845.206074][T31689] ? __pfx_vfs_write+0x10/0x10 [ 1845.206098][T31689] ? __fget_files+0x2a/0x420 [ 1845.206132][T31689] ? __fget_files+0x3a0/0x420 [ 1845.206146][T31689] ? __fget_files+0x2a/0x420 [ 1845.206167][T31689] ksys_write+0x145/0x250 [ 1845.206192][T31689] ? __pfx_ksys_write+0x10/0x10 [ 1845.206216][T31689] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1845.206243][T31689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1845.206268][T31689] __do_fast_syscall_32+0xb6/0x2b0 [ 1845.206287][T31689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1845.206314][T31689] do_fast_syscall_32+0x34/0x80 [ 1845.206331][T31689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1845.206351][T31689] RIP: 0023:0xf707d539 [ 1845.206368][T31689] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1845.206383][T31689] RSP: 002b:00000000f546d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1845.206404][T31689] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546d620 [ 1845.206417][T31689] RDX: 0000000000000001 RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 1845.206427][T31689] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1845.206438][T31689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1845.206448][T31689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1845.206477][T31689] [ 1845.209030][T31146] usb 6-1: Using ep0 maxpacket: 32 [ 1845.446528][T31158] ft260 0003:0403:6030.0047: failed to retrieve chip version [ 1845.454383][T31158] ft260 0003:0403:6030.0047: probe with driver ft260 failed with error -5 [ 1845.468102][T31146] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 1845.476298][T31146] usb 6-1: config 4 has no interface number 0 [ 1845.493281][T31146] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.514614][T31146] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.524862][T31146] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1845.534094][T31146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.548839][T31146] hub 6-1:4.128: USB hub found [ 1845.632094][T31700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6977'. [ 1845.751921][T31146] hub 6-1:4.128: 2 ports detected [ 1845.758026][T31146] hub 6-1:4.128: Using single TT (err -22) [ 1845.955069][T31679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6970'. [ 1845.966798][T31146] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 1845.971989][T31679] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6970'. [ 1845.974303][T31146] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 1845.983860][T31679] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1846.029606][T31146] usb 6-1: USB disconnect, device number 73 [ 1846.525944][T31711] veth1_to_team: entered promiscuous mode [ 1846.531955][T31711] veth1_to_team: entered allmulticast mode [ 1846.811688][T31718] netlink: 'syz.5.6982': attribute type 3 has an invalid length. [ 1847.389959][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1847.945934][T31734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6987'. [ 1848.039023][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1848.152017][T31742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6989'. [ 1848.302841][T31156] usb 3-1: USB disconnect, device number 114 [ 1848.339189][T31747] vcan0: tx drop: invalid sa for name 0x0000020000000000 [ 1848.568504][T31752] FAULT_INJECTION: forcing a failure. [ 1848.568504][T31752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1848.582098][T31752] CPU: 1 UID: 0 PID: 31752 Comm: syz.5.6993 Not tainted syzkaller #0 PREEMPT(full) [ 1848.582121][T31752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1848.582128][T31752] Call Trace: [ 1848.582133][T31752] [ 1848.582139][T31752] dump_stack_lvl+0x189/0x250 [ 1848.582157][T31752] ? __pfx____ratelimit+0x10/0x10 [ 1848.582172][T31752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1848.582185][T31752] ? __pfx__printk+0x10/0x10 [ 1848.582202][T31752] should_fail_ex+0x414/0x560 [ 1848.582220][T31752] _copy_to_user+0x31/0xb0 [ 1848.582234][T31752] simple_read_from_buffer+0xe1/0x170 [ 1848.582253][T31752] proc_fail_nth_read+0x1b3/0x220 [ 1848.582268][T31752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1848.582282][T31752] ? rw_verify_area+0x2a6/0x4d0 [ 1848.582295][T31752] ? __lock_acquire+0xab9/0xd20 [ 1848.582304][T31752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1848.582317][T31752] vfs_read+0x200/0xa30 [ 1848.582329][T31752] ? fdget_pos+0x247/0x320 [ 1848.582341][T31752] ? __pfx___mutex_lock+0x10/0x10 [ 1848.582356][T31752] ? __pfx_vfs_read+0x10/0x10 [ 1848.582370][T31752] ? __fget_files+0x2a/0x420 [ 1848.582382][T31752] ? __fget_files+0x3a0/0x420 [ 1848.582390][T31752] ? __fget_files+0x2a/0x420 [ 1848.582404][T31752] ksys_read+0x145/0x250 [ 1848.582419][T31752] ? __pfx_ksys_read+0x10/0x10 [ 1848.582433][T31752] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1848.582449][T31752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1848.582463][T31752] __do_fast_syscall_32+0xb6/0x2b0 [ 1848.582473][T31752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1848.582488][T31752] do_fast_syscall_32+0x34/0x80 [ 1848.582498][T31752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1848.582510][T31752] RIP: 0023:0xf70cd539 [ 1848.582520][T31752] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1848.582529][T31752] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1848.582541][T31752] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54bd620 [ 1848.582548][T31752] RDX: 000000000000000f RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 1848.582554][T31752] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1848.582560][T31752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1848.582566][T31752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1848.582582][T31752] [ 1848.909660][T31755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1849.390358][T31762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6996'. [ 1849.412261][T31764] FAULT_INJECTION: forcing a failure. [ 1849.412261][T31764] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.413964][T31762] FAULT_INJECTION: forcing a failure. [ 1849.413964][T31762] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.435171][T31764] CPU: 1 UID: 0 PID: 31764 Comm: syz.2.6997 Not tainted syzkaller #0 PREEMPT(full) [ 1849.435197][T31764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1849.435208][T31764] Call Trace: [ 1849.435217][T31764] [ 1849.435226][T31764] dump_stack_lvl+0x189/0x250 [ 1849.435253][T31764] ? __pfx____ratelimit+0x10/0x10 [ 1849.435277][T31764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1849.435299][T31764] ? __pfx__printk+0x10/0x10 [ 1849.435320][T31764] ? __pfx___might_resched+0x10/0x10 [ 1849.435339][T31764] ? fs_reclaim_acquire+0x7d/0x100 [ 1849.435360][T31764] should_fail_ex+0x414/0x560 [ 1849.435390][T31764] should_failslab+0xa8/0x100 [ 1849.435409][T31764] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1849.435434][T31764] ? rtnl_newlink+0xfb/0x1c80 [ 1849.435458][T31764] ? kasan_save_track+0x4f/0x80 [ 1849.435485][T31764] rtnl_newlink+0xfb/0x1c80 [ 1849.435507][T31764] ? netlink_deliver_tap+0x19c/0x1b0 [ 1849.435523][T31764] ? netlink_unicast+0x7fa/0x9e0 [ 1849.435544][T31764] ? netlink_sendmsg+0x805/0xb30 [ 1849.435560][T31764] ? __sock_sendmsg+0x21c/0x270 [ 1849.435580][T31764] ? ____sys_sendmsg+0x505/0x830 [ 1849.435596][T31764] ? ___sys_sendmsg+0x21f/0x2a0 [ 1849.435612][T31764] ? __sys_sendmsg+0x164/0x220 [ 1849.435628][T31764] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1849.435644][T31764] ? do_fast_syscall_32+0x34/0x80 [ 1849.435658][T31764] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1849.435684][T31764] ? __pfx_rtnl_newlink+0x10/0x10 [ 1849.435730][T31764] ? kasan_quarantine_put+0xdd/0x220 [ 1849.435752][T31764] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.435787][T31764] ? nlmon_xmit+0xb0/0x100 [ 1849.435806][T31764] ? kmem_cache_free+0x19b/0x690 [ 1849.435837][T31764] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1849.435856][T31764] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.435880][T31764] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1849.435898][T31764] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1849.435919][T31764] ? __dev_queue_xmit+0x27b/0x3b50 [ 1849.435940][T31764] ? __dev_queue_xmit+0x27b/0x3b50 [ 1849.435958][T31764] ? __dev_queue_xmit+0x27b/0x3b50 [ 1849.435978][T31764] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1849.435996][T31764] ? kasan_save_track+0x3e/0x80 [ 1849.436017][T31764] ? __kasan_slab_alloc+0x6c/0x80 [ 1849.436043][T31764] ? __lock_acquire+0xab9/0xd20 [ 1849.436084][T31764] ? __pfx_rtnl_newlink+0x10/0x10 [ 1849.436107][T31764] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1849.436134][T31764] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1849.436157][T31764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1849.436179][T31764] ? ref_tracker_free+0x63a/0x7d0 [ 1849.436197][T31764] ? __asan_memcpy+0x40/0x70 [ 1849.436217][T31764] ? __pfx_ref_tracker_free+0x10/0x10 [ 1849.436244][T31764] netlink_rcv_skb+0x208/0x470 [ 1849.436262][T31764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1849.436287][T31764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1849.436314][T31764] ? netlink_deliver_tap+0x2e/0x1b0 [ 1849.436339][T31764] netlink_unicast+0x82f/0x9e0 [ 1849.436370][T31764] ? __pfx_netlink_unicast+0x10/0x10 [ 1849.436396][T31764] ? netlink_sendmsg+0x642/0xb30 [ 1849.436411][T31764] ? skb_put+0x11b/0x210 [ 1849.436432][T31764] netlink_sendmsg+0x805/0xb30 [ 1849.436458][T31764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.436478][T31764] ? __import_iovec+0x5d4/0x7f0 [ 1849.436497][T31764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1849.436523][T31764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1849.436541][T31764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.436559][T31764] __sock_sendmsg+0x21c/0x270 [ 1849.436584][T31764] ____sys_sendmsg+0x505/0x830 [ 1849.436607][T31764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1849.436641][T31764] ___sys_sendmsg+0x21f/0x2a0 [ 1849.436662][T31764] ? __pfx____sys_sendmsg+0x10/0x10 [ 1849.436714][T31764] ? __fget_files+0x2a/0x420 [ 1849.436730][T31764] ? __fget_files+0x3a0/0x420 [ 1849.436756][T31764] __sys_sendmsg+0x164/0x220 [ 1849.436782][T31764] ? __pfx___sys_sendmsg+0x10/0x10 [ 1849.436809][T31764] ? __pfx_ksys_write+0x10/0x10 [ 1849.436834][T31764] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1849.436859][T31764] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.436885][T31764] __do_fast_syscall_32+0xb6/0x2b0 [ 1849.436901][T31764] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.436927][T31764] do_fast_syscall_32+0x34/0x80 [ 1849.436944][T31764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1849.436964][T31764] RIP: 0023:0xf702d539 [ 1849.436980][T31764] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1849.436994][T31764] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1849.437014][T31764] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1849.437026][T31764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1849.437037][T31764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1849.437048][T31764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1849.437059][T31764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1849.437090][T31764] [ 1849.927695][T31762] CPU: 0 UID: 0 PID: 31762 Comm: syz.5.6996 Not tainted syzkaller #0 PREEMPT(full) [ 1849.927730][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1849.927741][T31762] Call Trace: [ 1849.927750][T31762] [ 1849.927759][T31762] dump_stack_lvl+0x189/0x250 [ 1849.927786][T31762] ? __pfx____ratelimit+0x10/0x10 [ 1849.927809][T31762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1849.927841][T31762] ? __pfx__printk+0x10/0x10 [ 1849.927866][T31762] ? __pfx___might_resched+0x10/0x10 [ 1849.927886][T31762] ? fs_reclaim_acquire+0x7d/0x100 [ 1849.927908][T31762] should_fail_ex+0x414/0x560 [ 1849.927940][T31762] should_failslab+0xa8/0x100 [ 1849.927960][T31762] __kvmalloc_node_noprof+0x158/0x910 [ 1849.927987][T31762] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1849.928017][T31762] alloc_netdev_mqs+0xa6/0x11b0 [ 1849.928036][T31762] ? __pfx_macvlan_setup+0x10/0x10 [ 1849.928068][T31762] rtnl_create_link+0x31f/0xd10 [ 1849.928097][T31762] rtnl_newlink_create+0x25c/0xb00 [ 1849.928122][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928146][T31762] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1849.928169][T31762] ? __pfx___mutex_lock+0x10/0x10 [ 1849.928204][T31762] ? ns_capable+0x8a/0xf0 [ 1849.928226][T31762] rtnl_newlink+0x16e4/0x1c80 [ 1849.928267][T31762] ? __pfx_rtnl_newlink+0x10/0x10 [ 1849.928301][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928329][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928360][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928398][T31762] ? is_bpf_text_address+0x26/0x2b0 [ 1849.928423][T31762] ? is_bpf_text_address+0x292/0x2b0 [ 1849.928441][T31762] ? is_bpf_text_address+0x26/0x2b0 [ 1849.928470][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928513][T31762] ? __pfx_rtnl_newlink+0x10/0x10 [ 1849.928537][T31762] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1849.928561][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928580][T31762] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1849.928604][T31762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1849.928647][T31762] netlink_rcv_skb+0x208/0x470 [ 1849.928664][T31762] ? __lock_acquire+0xab9/0xd20 [ 1849.928682][T31762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1849.928716][T31762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1849.928747][T31762] ? netlink_deliver_tap+0x2e/0x1b0 [ 1849.928774][T31762] netlink_unicast+0x82f/0x9e0 [ 1849.928808][T31762] ? __pfx_netlink_unicast+0x10/0x10 [ 1849.928834][T31762] ? netlink_sendmsg+0x642/0xb30 [ 1849.928851][T31762] ? skb_put+0x11b/0x210 [ 1849.928873][T31762] netlink_sendmsg+0x805/0xb30 [ 1849.928900][T31762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.928921][T31762] ? __import_iovec+0x5d4/0x7f0 [ 1849.928941][T31762] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1849.928968][T31762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1849.928985][T31762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.929005][T31762] __sock_sendmsg+0x21c/0x270 [ 1849.929030][T31762] ____sys_sendmsg+0x505/0x830 [ 1849.929055][T31762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1849.929089][T31762] ___sys_sendmsg+0x21f/0x2a0 [ 1849.929109][T31762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1849.929162][T31762] ? __fget_files+0x2a/0x420 [ 1849.929179][T31762] ? __fget_files+0x3a0/0x420 [ 1849.929207][T31762] __sys_sendmsg+0x164/0x220 [ 1849.929230][T31762] ? __pfx___sys_sendmsg+0x10/0x10 [ 1849.929259][T31762] ? __pfx_ksys_write+0x10/0x10 [ 1849.929286][T31762] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1849.929312][T31762] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.929339][T31762] __do_fast_syscall_32+0xb6/0x2b0 [ 1849.929357][T31762] ? lockdep_hardirqs_on+0x9c/0x150 [ 1849.929385][T31762] do_fast_syscall_32+0x34/0x80 [ 1849.929402][T31762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1849.929422][T31762] RIP: 0023:0xf70cd539 [ 1849.929438][T31762] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1849.929454][T31762] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1849.929474][T31762] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000800002c0 [ 1849.929487][T31762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1849.929498][T31762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1849.929509][T31762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1849.929520][T31762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1849.929550][T31762] [ 1850.633317][T31769] FAULT_INJECTION: forcing a failure. [ 1850.633317][T31769] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.973348][T31769] CPU: 1 UID: 0 PID: 31769 Comm: syz.2.6999 Not tainted syzkaller #0 PREEMPT(full) [ 1850.973374][T31769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1850.973386][T31769] Call Trace: [ 1850.973395][T31769] [ 1850.973404][T31769] dump_stack_lvl+0x189/0x250 [ 1850.973434][T31769] ? __pfx____ratelimit+0x10/0x10 [ 1850.973459][T31769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1850.973482][T31769] ? __pfx__printk+0x10/0x10 [ 1850.973498][T31769] ? netlink_sendmsg+0x805/0xb30 [ 1850.973518][T31769] ? __sys_sendmsg+0x164/0x220 [ 1850.973536][T31769] ? do_fast_syscall_32+0x34/0x80 [ 1850.973562][T31769] should_fail_ex+0x414/0x560 [ 1850.973594][T31769] should_failslab+0xa8/0x100 [ 1850.973614][T31769] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1850.973639][T31769] ? skb_clone+0x212/0x3a0 [ 1850.973663][T31769] skb_clone+0x212/0x3a0 [ 1850.973687][T31769] __netlink_deliver_tap+0x404/0x850 [ 1850.973718][T31769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1850.973738][T31769] netlink_deliver_tap+0x19c/0x1b0 [ 1850.973758][T31769] netlink_sendskb+0x68/0x140 [ 1850.973786][T31769] netlink_unicast+0x397/0x9e0 [ 1850.973807][T31769] ? __asan_memcpy+0x40/0x70 [ 1850.973838][T31769] ? __pfx_netlink_unicast+0x10/0x10 [ 1850.973872][T31769] netlink_rcv_skb+0x28c/0x470 [ 1850.973888][T31769] ? __lock_acquire+0xab9/0xd20 [ 1850.973916][T31769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1850.973939][T31769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1850.973976][T31769] ? down_read+0x1ad/0x2e0 [ 1850.973998][T31769] genl_rcv+0x28/0x40 [ 1850.974018][T31769] netlink_unicast+0x82f/0x9e0 [ 1850.974052][T31769] ? __pfx_netlink_unicast+0x10/0x10 [ 1850.974078][T31769] ? netlink_sendmsg+0x642/0xb30 [ 1850.974094][T31769] ? skb_put+0x11b/0x210 [ 1850.974116][T31769] netlink_sendmsg+0x805/0xb30 [ 1850.974144][T31769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.974166][T31769] ? __import_iovec+0x5d4/0x7f0 [ 1850.974185][T31769] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1850.974213][T31769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1850.974231][T31769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.974251][T31769] __sock_sendmsg+0x21c/0x270 [ 1850.974277][T31769] ____sys_sendmsg+0x505/0x830 [ 1850.974303][T31769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1850.974339][T31769] ___sys_sendmsg+0x21f/0x2a0 [ 1850.974362][T31769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1850.974422][T31769] ? __fget_files+0x2a/0x420 [ 1850.974439][T31769] ? __fget_files+0x3a0/0x420 [ 1850.974468][T31769] __sys_sendmsg+0x164/0x220 [ 1850.974490][T31769] ? __pfx___sys_sendmsg+0x10/0x10 [ 1850.974519][T31769] ? __pfx_ksys_write+0x10/0x10 [ 1850.974547][T31769] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1850.974573][T31769] ? lockdep_hardirqs_on+0x9c/0x150 [ 1850.974601][T31769] __do_fast_syscall_32+0xb6/0x2b0 [ 1850.974619][T31769] ? lockdep_hardirqs_on+0x9c/0x150 [ 1850.974645][T31769] do_fast_syscall_32+0x34/0x80 [ 1850.974662][T31769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1850.974683][T31769] RIP: 0023:0xf702d539 [ 1850.974699][T31769] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1850.974715][T31769] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1850.974736][T31769] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1850.974749][T31769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1850.974760][T31769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1850.974771][T31769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1850.974782][T31769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1850.974812][T31769] [ 1850.976499][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 1850.976514][ T30] audit: type=1326 audit(1764244053.890:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.400612][ T30] audit: type=1326 audit(1764244053.890:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.423044][ T30] audit: type=1326 audit(1764244054.330:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.445601][ T30] audit: type=1326 audit(1764244054.330:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.526866][ T30] audit: type=1326 audit(1764244054.330:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.629581][ T30] audit: type=1326 audit(1764244054.330:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.675801][ T30] audit: type=1326 audit(1764244054.330:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.758969][ T30] audit: type=1326 audit(1764244054.330:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.893225][ T30] audit: type=1326 audit(1764244054.340:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1851.921866][T31786] hsr_slave_0: entered allmulticast mode [ 1851.930308][T31786] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7003'. [ 1852.031415][ T30] audit: type=1326 audit(1764244054.340:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31770 comm="syz.5.7001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1852.517482][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1852.612750][T31800] FAULT_INJECTION: forcing a failure. [ 1852.612750][T31800] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.626040][T31800] CPU: 0 UID: 0 PID: 31800 Comm: syz.4.7008 Not tainted syzkaller #0 PREEMPT(full) [ 1852.626064][T31800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1852.626075][T31800] Call Trace: [ 1852.626084][T31800] [ 1852.626093][T31800] dump_stack_lvl+0x189/0x250 [ 1852.626121][T31800] ? __pfx____ratelimit+0x10/0x10 [ 1852.626144][T31800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1852.626166][T31800] ? __pfx__printk+0x10/0x10 [ 1852.626188][T31800] ? __lock_acquire+0xab9/0xd20 [ 1852.626213][T31800] should_fail_ex+0x414/0x560 [ 1852.626243][T31800] should_failslab+0xa8/0x100 [ 1852.626263][T31800] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1852.626288][T31800] ? reuseport_alloc+0x121/0x4d0 [ 1852.626311][T31800] reuseport_alloc+0x121/0x4d0 [ 1852.626333][T31800] reuseport_attach_prog+0x113/0x2d0 [ 1852.626354][T31800] sk_reuseport_attach_bpf+0x216/0x360 [ 1852.626381][T31800] sk_setsockopt+0x2460/0x2dc0 [ 1852.626399][T31800] ? __pfx___might_resched+0x10/0x10 [ 1852.626425][T31800] ? __pfx_sk_setsockopt+0x10/0x10 [ 1852.626442][T31800] ? __lock_acquire+0xab9/0xd20 [ 1852.626464][T31800] ? aa_sk_perm+0x81e/0x950 [ 1852.626493][T31800] ? __pfx_aa_sk_perm+0x10/0x10 [ 1852.626517][T31800] ? __fget_files+0x2a/0x420 [ 1852.626533][T31800] ? aa_sock_opt_perm+0xff/0x1b0 [ 1852.626566][T31800] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1852.626589][T31800] do_sock_setsockopt+0x11b/0x1b0 [ 1852.626612][T31800] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1852.626637][T31800] __do_fast_syscall_32+0xb6/0x2b0 [ 1852.626655][T31800] ? lockdep_hardirqs_on+0x9c/0x150 [ 1852.626682][T31800] do_fast_syscall_32+0x34/0x80 [ 1852.626699][T31800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1852.626721][T31800] RIP: 0023:0xf706d539 [ 1852.626737][T31800] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1852.626753][T31800] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1852.626773][T31800] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1852.626786][T31800] RDX: 0000000000000034 RSI: 00000000800000c0 RDI: 0000000000000004 [ 1852.626797][T31800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1852.626808][T31800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1852.626819][T31800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1852.626847][T31800] [ 1853.152476][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.161822][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.755277][T31815] FAULT_INJECTION: forcing a failure. [ 1853.755277][T31815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.768835][T31815] CPU: 1 UID: 0 PID: 31815 Comm: syz.5.7015 Not tainted syzkaller #0 PREEMPT(full) [ 1853.768860][T31815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1853.768872][T31815] Call Trace: [ 1853.768881][T31815] [ 1853.768889][T31815] dump_stack_lvl+0x189/0x250 [ 1853.768917][T31815] ? __pfx____ratelimit+0x10/0x10 [ 1853.768940][T31815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1853.768963][T31815] ? __pfx__printk+0x10/0x10 [ 1853.768982][T31815] ? __might_fault+0xb0/0x130 [ 1853.769016][T31815] should_fail_ex+0x414/0x560 [ 1853.769047][T31815] _copy_from_iter+0x1de/0x1790 [ 1853.769075][T31815] ? rcu_is_watching+0x15/0xb0 [ 1853.769098][T31815] ? __alloc_skb+0x142/0x2d0 [ 1853.769116][T31815] ? __pfx__copy_from_iter+0x10/0x10 [ 1853.769138][T31815] ? __build_skb_around+0x262/0x3f0 [ 1853.769158][T31815] ? netlink_sendmsg+0x642/0xb30 [ 1853.769175][T31815] ? skb_put+0x11b/0x210 [ 1853.769197][T31815] netlink_sendmsg+0x6b2/0xb30 [ 1853.769224][T31815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1853.769245][T31815] ? __import_iovec+0x5d4/0x7f0 [ 1853.769263][T31815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1853.769288][T31815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1853.769305][T31815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1853.769325][T31815] __sock_sendmsg+0x21c/0x270 [ 1853.769351][T31815] ____sys_sendmsg+0x505/0x830 [ 1853.769376][T31815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1853.769410][T31815] ___sys_sendmsg+0x21f/0x2a0 [ 1853.769432][T31815] ? __pfx____sys_sendmsg+0x10/0x10 [ 1853.769487][T31815] ? __fget_files+0x2a/0x420 [ 1853.769504][T31815] ? __fget_files+0x3a0/0x420 [ 1853.769531][T31815] __sys_sendmsg+0x164/0x220 [ 1853.769551][T31815] ? __pfx___sys_sendmsg+0x10/0x10 [ 1853.769579][T31815] ? __pfx_ksys_write+0x10/0x10 [ 1853.769605][T31815] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1853.769631][T31815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1853.769658][T31815] __do_fast_syscall_32+0xb6/0x2b0 [ 1853.769675][T31815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1853.769702][T31815] do_fast_syscall_32+0x34/0x80 [ 1853.769719][T31815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1853.769740][T31815] RIP: 0023:0xf70cd539 [ 1853.769756][T31815] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1853.769771][T31815] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1853.769791][T31815] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1853.769810][T31815] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1853.769821][T31815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1853.769831][T31815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1853.769842][T31815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1853.769871][T31815] [ 1853.827346][T31156] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1853.833306][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1854.009421][T31156] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1854.094136][T31156] usb 3-1: not running at top speed; connect to a high speed hub [ 1854.121716][T31156] usb 3-1: config 2 has an invalid interface number: 206 but max is 2 [ 1854.130319][T31156] usb 3-1: config 2 has an invalid interface number: 142 but max is 2 [ 1854.138559][T31156] usb 3-1: config 2 has an invalid interface number: 37 but max is 2 [ 1854.146861][T31156] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1854.155830][T31156] usb 3-1: config 2 has no interface number 0 [ 1854.162640][T31156] usb 3-1: config 2 has no interface number 1 [ 1854.168790][T31156] usb 3-1: config 2 has no interface number 2 [ 1854.174927][T31156] usb 3-1: config 2 interface 206 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1854.186063][T31156] usb 3-1: config 2 interface 206 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1854.198136][T31156] usb 3-1: config 2 interface 142 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1854.211618][T31156] usb 3-1: config 2 interface 142 altsetting 6 endpoint 0x2 has an invalid bInterval 70, changing to 4 [ 1854.222754][T31156] usb 3-1: config 2 interface 37 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 1023 [ 1854.234581][T31156] usb 3-1: config 2 interface 37 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1854.245852][T31156] usb 3-1: config 2 interface 37 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1854.257031][T31156] usb 3-1: config 2 interface 37 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1854.271785][T31156] usb 3-1: config 2 interface 37 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1854.282540][T31156] usb 3-1: config 2 interface 37 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1854.293410][T31156] usb 3-1: config 2 interface 206 has no altsetting 0 [ 1854.300248][T31156] usb 3-1: config 2 interface 142 has no altsetting 0 [ 1854.307026][T31156] usb 3-1: config 2 interface 37 has no altsetting 0 [ 1854.315461][T31156] usb 3-1: Dual-Role OTG device on HNP port [ 1854.324075][T31156] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0160, bcdDevice=52.87 [ 1854.333177][T31156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.341210][T31156] usb 3-1: Product: syz [ 1854.345365][T31156] usb 3-1: Manufacturer: syz [ 1854.349996][T31156] usb 3-1: SerialNumber: syz [ 1854.362968][T31808] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1855.621359][T31156] ftdi_sio 3-1:2.206: FTDI USB Serial Device converter detected [ 1855.634999][T31156] ftdi_sio ttyUSB0: unknown device type: 0x5287 [ 1855.674430][T31156] ftdi_sio 3-1:2.142: FTDI USB Serial Device converter detected [ 1855.694971][T31156] ftdi_sio ttyUSB1: unknown device type: 0x5287 [ 1855.718102][T31156] ftdi_sio 3-1:2.37: FTDI USB Serial Device converter detected [ 1855.740666][T31156] ftdi_sio ttyUSB2: unknown device type: 0x5287 [ 1855.774830][T31156] usb 3-1: USB disconnect, device number 115 [ 1855.795455][T31156] ftdi_sio 3-1:2.206: device disconnected [ 1855.814271][T31156] ftdi_sio 3-1:2.142: device disconnected [ 1855.845763][T31156] ftdi_sio 3-1:2.37: device disconnected [ 1856.147558][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7020'. [ 1856.226171][T31829] netlink: 180 bytes leftover after parsing attributes in process `syz.6.7020'. [ 1856.842134][T31842] macvlan0: entered promiscuous mode [ 1856.852710][T31842] macvlan0: entered allmulticast mode [ 1856.875797][T31842] veth1_vlan: entered allmulticast mode [ 1856.927168][T14039] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1857.026773][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1857.046483][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1857.057300][T31846] FAULT_INJECTION: forcing a failure. [ 1857.057300][T31846] name failslab, interval 1, probability 0, space 0, times 0 [ 1857.057653][T31158] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1857.078340][T31846] CPU: 0 UID: 0 PID: 31846 Comm: syz.5.7025 Not tainted syzkaller #0 PREEMPT(full) [ 1857.078363][T31846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1857.078373][T31846] Call Trace: [ 1857.078381][T31846] [ 1857.078388][T31846] dump_stack_lvl+0x189/0x250 [ 1857.078416][T31846] ? __pfx____ratelimit+0x10/0x10 [ 1857.078439][T31846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1857.078461][T31846] ? __pfx__printk+0x10/0x10 [ 1857.078480][T31846] ? copy_to_user_tmpl+0xe2/0x700 [ 1857.078508][T31846] should_fail_ex+0x414/0x560 [ 1857.078537][T31846] should_failslab+0xa8/0x100 [ 1857.078554][T31846] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1857.078579][T31846] ? __alloc_skb+0x112/0x2d0 [ 1857.078603][T31846] __alloc_skb+0x112/0x2d0 [ 1857.078625][T31846] xfrm_alloc_compat+0x1a6/0x16f0 [ 1857.078653][T31846] ? xfrm_get_translator+0x1b/0x240 [ 1857.078676][T31846] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1857.078699][T31846] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1857.078722][T31846] xfrm_send_policy_notify+0xb35/0x1bb0 [ 1857.078753][T31846] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1857.078776][T31846] ? km_policy_notify+0x28/0x200 [ 1857.078801][T31846] ? km_policy_notify+0x28/0x200 [ 1857.078819][T31846] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1857.078838][T31846] km_policy_notify+0x121/0x200 [ 1857.078855][T31846] ? km_policy_notify+0x28/0x200 [ 1857.078876][T31846] xfrm_add_policy+0x4c7/0x800 [ 1857.078901][T31846] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1857.078926][T31846] ? __nla_parse+0x40/0x60 [ 1857.078948][T31846] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1857.078973][T31846] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1857.079026][T31846] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1857.079054][T31846] ? rcu_is_watching+0x15/0xb0 [ 1857.079074][T31846] ? trace_contention_end+0x39/0x120 [ 1857.079095][T31846] ? __mutex_lock+0x335/0x1350 [ 1857.079130][T31846] netlink_rcv_skb+0x208/0x470 [ 1857.079151][T31846] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1857.079174][T31846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1857.079222][T31846] ? netlink_deliver_tap+0x2e/0x1b0 [ 1857.079245][T31846] ? netlink_deliver_tap+0x2e/0x1b0 [ 1857.079266][T31846] xfrm_netlink_rcv+0x79/0x90 [ 1857.079287][T31846] netlink_unicast+0x82f/0x9e0 [ 1857.079321][T31846] ? __pfx_netlink_unicast+0x10/0x10 [ 1857.079347][T31846] ? netlink_sendmsg+0x642/0xb30 [ 1857.079363][T31846] ? skb_put+0x11b/0x210 [ 1857.079385][T31846] netlink_sendmsg+0x805/0xb30 [ 1857.079414][T31846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1857.079435][T31846] ? __import_iovec+0x5d4/0x7f0 [ 1857.079454][T31846] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1857.079481][T31846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1857.079499][T31846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1857.079518][T31846] __sock_sendmsg+0x21c/0x270 [ 1857.079545][T31846] ____sys_sendmsg+0x505/0x830 [ 1857.079571][T31846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1857.079608][T31846] ___sys_sendmsg+0x21f/0x2a0 [ 1857.079631][T31846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1857.079689][T31846] ? __fget_files+0x2a/0x420 [ 1857.079706][T31846] ? __fget_files+0x3a0/0x420 [ 1857.079735][T31846] __sys_sendmsg+0x164/0x220 [ 1857.079757][T31846] ? __pfx___sys_sendmsg+0x10/0x10 [ 1857.079786][T31846] ? __pfx_ksys_write+0x10/0x10 [ 1857.079813][T31846] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1857.079839][T31846] ? lockdep_hardirqs_on+0x9c/0x150 [ 1857.079866][T31846] __do_fast_syscall_32+0xb6/0x2b0 [ 1857.079884][T31846] ? lockdep_hardirqs_on+0x9c/0x150 [ 1857.079912][T31846] do_fast_syscall_32+0x34/0x80 [ 1857.079929][T31846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1857.079949][T31846] RIP: 0023:0xf70cd539 [ 1857.079966][T31846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1857.079981][T31846] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1857.080001][T31846] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 1857.080014][T31846] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1857.080025][T31846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1857.080036][T31846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1857.080048][T31846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1857.080078][T31846] [ 1857.543985][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1857.544002][ T30] audit: type=1326 audit(1764244060.460:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.587219][T31158] usb 2-1: Using ep0 maxpacket: 32 [ 1857.593044][T14039] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 1857.601231][T14039] usb 3-1: config 0 has no interface number 0 [ 1857.607407][T14039] usb 3-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1857.618341][T14039] usb 3-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 1857.630746][T14039] usb 3-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 1857.638072][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1857.642520][T14039] usb 3-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 1857.663566][T14039] usb 3-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1857.676548][T14039] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 1857.685610][T14039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.716897][T31158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.717681][T14039] usb 3-1: config 0 descriptor?? [ 1857.736095][T14039] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1857.742508][T14039] gspca_mr97310a: reg write [21] error -22 [ 1857.748891][T14039] mr97310a 3-1:0.57: probe with driver mr97310a failed with error -22 [ 1857.798199][ T30] audit: type=1326 audit(1764244060.620:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.806832][T31158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.820852][ T30] audit: type=1326 audit(1764244060.620:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.854885][ T30] audit: type=1326 audit(1764244060.620:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.877823][ T30] audit: type=1326 audit(1764244060.620:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.900010][ T30] audit: type=1326 audit(1764244060.620:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.922968][ T30] audit: type=1326 audit(1764244060.620:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1857.951100][ T30] audit: type=1326 audit(1764244060.620:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1858.015257][ T30] audit: type=1326 audit(1764244060.620:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1858.061656][T31158] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1858.207188][T31158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.228634][ T30] audit: type=1326 audit(1764244060.620:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31847 comm="syz.6.7026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1858.684578][T31158] usb 2-1: config 0 descriptor?? [ 1858.767762][T14039] usb 3-1: USB disconnect, device number 116 [ 1859.110736][T31158] ft260 0003:0403:6030.0048: unknown main item tag 0x7 [ 1859.328770][T31158] ft260 0003:0403:6030.0048: failed to retrieve chip version [ 1859.336764][T31158] ft260 0003:0403:6030.0048: probe with driver ft260 failed with error -5 [ 1859.381234][T31871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1859.433217][T31874] FAULT_INJECTION: forcing a failure. [ 1859.433217][T31874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1859.448894][T31874] CPU: 0 UID: 0 PID: 31874 Comm: syz.2.7034 Not tainted syzkaller #0 PREEMPT(full) [ 1859.448925][T31874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1859.448936][T31874] Call Trace: [ 1859.448945][T31874] [ 1859.448953][T31874] dump_stack_lvl+0x189/0x250 [ 1859.448982][T31874] ? __pfx____ratelimit+0x10/0x10 [ 1859.449006][T31874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1859.449037][T31874] ? __pfx__printk+0x10/0x10 [ 1859.449057][T31874] ? __might_fault+0xb0/0x130 [ 1859.449091][T31874] should_fail_ex+0x414/0x560 [ 1859.449122][T31874] _copy_from_user+0x2d/0xb0 [ 1859.449146][T31874] do_ipt_set_ctl+0x6de/0xcd0 [ 1859.449171][T31874] ? rcu_is_watching+0x15/0xb0 [ 1859.449192][T31874] ? trace_contention_end+0x39/0x120 [ 1859.449214][T31874] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1859.449240][T31874] ? nf_setsockopt+0x221/0x290 [ 1859.449267][T31874] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1859.449306][T31874] ? __pfx_aa_sk_perm+0x10/0x10 [ 1859.449337][T31874] nf_setsockopt+0x26f/0x290 [ 1859.449360][T31874] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1859.449386][T31874] do_sock_setsockopt+0x17c/0x1b0 [ 1859.449411][T31874] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1859.449435][T31874] __do_fast_syscall_32+0xb6/0x2b0 [ 1859.449453][T31874] ? lockdep_hardirqs_on+0x9c/0x150 [ 1859.449481][T31874] do_fast_syscall_32+0x34/0x80 [ 1859.449498][T31874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1859.449519][T31874] RIP: 0023:0xf702d539 [ 1859.449536][T31874] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1859.449552][T31874] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1859.449572][T31874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1859.449585][T31874] RDX: 0000000000000040 RSI: 0000000080000540 RDI: 000000000000029c [ 1859.449597][T31874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1859.449608][T31874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1859.449619][T31874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1859.449647][T31874] [ 1859.668486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.695916][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1860.224678][T31889] netlink: 'syz.5.7037': attribute type 3 has an invalid length. [ 1860.517758][T31892] bond_slave_0: entered promiscuous mode [ 1860.523959][T31892] bond_slave_1: entered promiscuous mode [ 1860.531926][T31892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1860.542452][T31892] bond1: (slave macvlan2): making interface the new active one [ 1860.551335][T31892] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1860.576011][T31892] netlink: 'syz.6.7038': attribute type 10 has an invalid length. [ 1860.584540][T31892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.592106][T31892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.604110][T31892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.611264][T31892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.620027][T31892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.627213][T31892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.637266][T31892] bridge0: entered promiscuous mode [ 1860.643622][T31892] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1860.730033][T31158] usb 2-1: USB disconnect, device number 24 [ 1860.758699][T31898] syz_tun: entered allmulticast mode [ 1860.790609][T31897] syz_tun: left allmulticast mode [ 1861.031438][T31904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7043'. [ 1861.354811][T31919] FAULT_INJECTION: forcing a failure. [ 1861.354811][T31919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.369899][T31919] CPU: 1 UID: 0 PID: 31919 Comm: syz.2.7047 Not tainted syzkaller #0 PREEMPT(full) [ 1861.369923][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1861.369935][T31919] Call Trace: [ 1861.369943][T31919] [ 1861.369952][T31919] dump_stack_lvl+0x189/0x250 [ 1861.369979][T31919] ? __pfx____ratelimit+0x10/0x10 [ 1861.370002][T31919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1861.370024][T31919] ? __pfx__printk+0x10/0x10 [ 1861.370044][T31919] ? __might_fault+0xb0/0x130 [ 1861.370079][T31919] should_fail_ex+0x414/0x560 [ 1861.370109][T31919] _copy_to_iter+0x1de/0x1790 [ 1861.370157][T31919] ? anon_pipe_read+0xd14/0x1040 [ 1861.370175][T31919] ? __pfx__copy_to_iter+0x10/0x10 [ 1861.370198][T31919] ? __pfx___mutex_lock+0x10/0x10 [ 1861.370231][T31919] ? page_copy_sane+0x4e/0x280 [ 1861.370253][T31919] copy_page_to_iter+0x10c/0x1c0 [ 1861.370278][T31919] anon_pipe_read+0x4d1/0x1040 [ 1861.370321][T31919] ? __pfx_anon_pipe_read+0x10/0x10 [ 1861.370342][T31919] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1861.370367][T31919] ? common_file_perm+0x1b5/0x230 [ 1861.370396][T31919] ? bpf_lsm_file_permission+0x9/0x20 [ 1861.370415][T31919] ? security_file_permission+0x75/0x290 [ 1861.370439][T31919] fifo_pipe_read+0x22/0xd0 [ 1861.370458][T31919] vfs_read+0x55a/0xa30 [ 1861.370490][T31919] ? __pfx_vfs_read+0x10/0x10 [ 1861.370523][T31919] ? __fget_files+0x2a/0x420 [ 1861.370550][T31919] ksys_read+0x145/0x250 [ 1861.370571][T31919] ? exc_page_fault+0x82/0x100 [ 1861.370595][T31919] ? __pfx_ksys_read+0x10/0x10 [ 1861.370621][T31919] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1861.370646][T31919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1861.370673][T31919] __do_fast_syscall_32+0xb6/0x2b0 [ 1861.370690][T31919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1861.370717][T31919] do_fast_syscall_32+0x34/0x80 [ 1861.370734][T31919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1861.370755][T31919] RIP: 0023:0xf702d539 [ 1861.370771][T31919] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1861.370787][T31919] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1861.370807][T31919] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080006100 [ 1861.370820][T31919] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1861.370831][T31919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1861.370842][T31919] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1861.370852][T31919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1861.370880][T31919] [ 1862.506829][T31146] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1862.653568][T31944] FAULT_INJECTION: forcing a failure. [ 1862.653568][T31944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.668337][T31944] CPU: 0 UID: 0 PID: 31944 Comm: syz.5.7055 Not tainted syzkaller #0 PREEMPT(full) [ 1862.668364][T31944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1862.668375][T31944] Call Trace: [ 1862.668383][T31944] [ 1862.668391][T31944] dump_stack_lvl+0x189/0x250 [ 1862.668420][T31944] ? __pfx____ratelimit+0x10/0x10 [ 1862.668444][T31944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1862.668467][T31944] ? __pfx__printk+0x10/0x10 [ 1862.668482][T31944] ? __might_fault+0xb0/0x130 [ 1862.668513][T31944] should_fail_ex+0x414/0x560 [ 1862.668542][T31944] _copy_from_user+0x2d/0xb0 [ 1862.668565][T31944] kstrtouint_from_user+0xc4/0x170 [ 1862.668587][T31944] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1862.668620][T31944] proc_fail_nth_write+0x88/0x200 [ 1862.668642][T31944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1862.668668][T31944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1862.668692][T31944] vfs_write+0x27e/0xb30 [ 1862.668723][T31944] ? __pfx_vfs_write+0x10/0x10 [ 1862.668747][T31944] ? __fget_files+0x2a/0x420 [ 1862.668768][T31944] ? __fget_files+0x3a0/0x420 [ 1862.668784][T31944] ? __fget_files+0x2a/0x420 [ 1862.668809][T31944] ksys_write+0x145/0x250 [ 1862.668833][T31944] ? __pfx_ksys_write+0x10/0x10 [ 1862.668858][T31944] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1862.668883][T31944] ? lockdep_hardirqs_on+0x9c/0x150 [ 1862.668908][T31944] __do_fast_syscall_32+0xb6/0x2b0 [ 1862.668926][T31944] ? lockdep_hardirqs_on+0x9c/0x150 [ 1862.668953][T31944] do_fast_syscall_32+0x34/0x80 [ 1862.668970][T31944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1862.668991][T31944] RIP: 0023:0xf70cd539 [ 1862.669008][T31944] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1862.669024][T31944] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1862.669043][T31944] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54bd620 [ 1862.669055][T31944] RDX: 0000000000000001 RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 1862.669066][T31944] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1862.669077][T31944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1862.669087][T31944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1862.669124][T31944] [ 1862.903077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.912791][T31146] usb 3-1: Using ep0 maxpacket: 32 [ 1863.087263][T31146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.115395][T31146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.150976][T31146] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1863.183622][T31146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.214602][T31146] usb 3-1: config 0 descriptor?? [ 1863.522195][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1863.551513][T31950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7057'. [ 1864.336950][T14039] hid-generic 0000:0004:0000.004A: unknown main item tag 0x0 [ 1864.354039][T31146] ft260 0003:0403:6030.0049: unknown main item tag 0x7 [ 1864.355461][T14039] hid-generic 0000:0004:0000.004A: unknown main item tag 0x0 [ 1864.443890][T31146] ft260 0003:0403:6030.0049: failed to retrieve chip version [ 1864.451886][T31146] ft260 0003:0403:6030.0049: probe with driver ft260 failed with error -5 [ 1864.460952][T14039] hid-generic 0000:0004:0000.004A: unknown main item tag 0x0 [ 1864.554880][T14039] hid-generic 0000:0004:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1865.015198][T31963] fido_id[31963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1865.309827][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1865.497210][T31146] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1865.657235][T31146] usb 6-1: Using ep0 maxpacket: 16 [ 1865.684451][T31984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7060'. [ 1865.697766][T31146] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1865.727779][T31146] usb 6-1: config 14 has an invalid interface number: 8 but max is 0 [ 1865.737440][T31146] usb 6-1: config 14 has no interface number 0 [ 1865.747338][T31146] usb 6-1: config 14 interface 8 has no altsetting 0 [ 1865.758864][T31146] usb 6-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1865.769637][T31146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.777843][T31146] usb 6-1: Product: syz [ 1865.783282][T31146] usb 6-1: Manufacturer: syz [ 1865.788522][T31146] usb 6-1: SerialNumber: syz [ 1866.074775][T31156] usb 3-1: USB disconnect, device number 117 [ 1866.226933][T31991] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1866.983097][T32014] FAULT_INJECTION: forcing a failure. [ 1866.983097][T32014] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.037023][T32014] CPU: 1 UID: 0 PID: 32014 Comm: syz.4.7072 Not tainted syzkaller #0 PREEMPT(full) [ 1867.037050][T32014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1867.037064][T32014] Call Trace: [ 1867.037071][T32014] [ 1867.037080][T32014] dump_stack_lvl+0x189/0x250 [ 1867.037110][T32014] ? __pfx____ratelimit+0x10/0x10 [ 1867.037132][T32014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1867.037154][T32014] ? __pfx__printk+0x10/0x10 [ 1867.037168][T32014] ? netlink_sendmsg+0x805/0xb30 [ 1867.037185][T32014] ? __sys_sendmsg+0x164/0x220 [ 1867.037202][T32014] ? do_fast_syscall_32+0x34/0x80 [ 1867.037225][T32014] should_fail_ex+0x414/0x560 [ 1867.037254][T32014] should_failslab+0xa8/0x100 [ 1867.037275][T32014] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1867.037300][T32014] ? skb_clone+0x212/0x3a0 [ 1867.037326][T32014] skb_clone+0x212/0x3a0 [ 1867.037350][T32014] __netlink_deliver_tap+0x404/0x850 [ 1867.037381][T32014] ? netlink_deliver_tap+0x2e/0x1b0 [ 1867.037402][T32014] netlink_deliver_tap+0x19c/0x1b0 [ 1867.037421][T32014] netlink_sendskb+0x68/0x140 [ 1867.037447][T32014] netlink_unicast+0x397/0x9e0 [ 1867.037469][T32014] ? __asan_memcpy+0x40/0x70 [ 1867.037501][T32014] ? __pfx_netlink_unicast+0x10/0x10 [ 1867.037535][T32014] netlink_rcv_skb+0x28c/0x470 [ 1867.037551][T32014] ? __lock_acquire+0xab9/0xd20 [ 1867.037571][T32014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1867.037594][T32014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1867.037631][T32014] ? down_read+0x1ad/0x2e0 [ 1867.037652][T32014] genl_rcv+0x28/0x40 [ 1867.037672][T32014] netlink_unicast+0x82f/0x9e0 [ 1867.037706][T32014] ? __pfx_netlink_unicast+0x10/0x10 [ 1867.037732][T32014] ? netlink_sendmsg+0x642/0xb30 [ 1867.037748][T32014] ? skb_put+0x11b/0x210 [ 1867.037770][T32014] netlink_sendmsg+0x805/0xb30 [ 1867.037799][T32014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1867.037820][T32014] ? __import_iovec+0x5d4/0x7f0 [ 1867.037839][T32014] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1867.037871][T32014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1867.037889][T32014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1867.037909][T32014] __sock_sendmsg+0x21c/0x270 [ 1867.037935][T32014] ____sys_sendmsg+0x505/0x830 [ 1867.037961][T32014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1867.037996][T32014] ___sys_sendmsg+0x21f/0x2a0 [ 1867.038019][T32014] ? __pfx____sys_sendmsg+0x10/0x10 [ 1867.038073][T32014] ? __fget_files+0x2a/0x420 [ 1867.038095][T32014] ? __fget_files+0x3a0/0x420 [ 1867.038124][T32014] __sys_sendmsg+0x164/0x220 [ 1867.038145][T32014] ? __pfx___sys_sendmsg+0x10/0x10 [ 1867.038172][T32014] ? __pfx_ksys_write+0x10/0x10 [ 1867.038197][T32014] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1867.038221][T32014] ? lockdep_hardirqs_on+0x9c/0x150 [ 1867.038243][T32014] __do_fast_syscall_32+0xb6/0x2b0 [ 1867.038258][T32014] ? lockdep_hardirqs_on+0x9c/0x150 [ 1867.038280][T32014] do_fast_syscall_32+0x34/0x80 [ 1867.038294][T32014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1867.038311][T32014] RIP: 0023:0xf706d539 [ 1867.038325][T32014] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1867.038337][T32014] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1867.038354][T32014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1867.038365][T32014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1867.038374][T32014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1867.038383][T32014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1867.038392][T32014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1867.038415][T32014] [ 1867.389902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.568027][T32016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7071'. [ 1867.594803][T32019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7074'. [ 1867.627658][T32019] netlink: 19 bytes leftover after parsing attributes in process `syz.6.7074'. [ 1867.643136][T32020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7073'. [ 1868.118335][T32031] netlink: 356 bytes leftover after parsing attributes in process `syz.6.7077'. [ 1868.134368][T32031] netlink: 356 bytes leftover after parsing attributes in process `syz.6.7077'. [ 1868.199910][T22103] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1868.267838][T31146] usb 6-1: USB disconnect, device number 74 [ 1868.357174][T22103] usb 2-1: Using ep0 maxpacket: 32 [ 1868.392800][T22103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.415403][T22103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.464665][T22103] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1868.490222][T22103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.530422][T10646] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1868.560202][T22103] usb 2-1: config 0 descriptor?? [ 1868.583106][T10646] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1868.633794][T10646] usb 1-1: USB disconnect, device number 62 [ 1869.078976][T22103] ft260 0003:0403:6030.004B: unknown main item tag 0x7 [ 1869.158101][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1869.214561][T22103] ft260 0003:0403:6030.004B: failed to retrieve chip version [ 1869.240375][T22103] ft260 0003:0403:6030.004B: probe with driver ft260 failed with error -5 [ 1870.202927][T12046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.383269][T12046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.452416][T12046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.775822][T12046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.068864][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1871.307744][T12046] bridge_slave_1: left allmulticast mode [ 1871.340838][T12046] bridge_slave_1: left promiscuous mode [ 1871.441088][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.494556][T12046] bridge_slave_0: left allmulticast mode [ 1871.517201][T12046] bridge_slave_0: left promiscuous mode [ 1871.542556][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.677636][T31146] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1871.845134][T31146] usb 6-1: Using ep0 maxpacket: 16 [ 1871.853174][T31146] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1871.866763][T31146] usb 6-1: config 14 has an invalid interface number: 8 but max is 0 [ 1871.897300][T31146] usb 6-1: config 14 has no interface number 0 [ 1871.934839][T31146] usb 6-1: config 14 interface 8 has no altsetting 0 [ 1871.963601][T31146] usb 6-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1871.975164][T22103] usb 2-1: USB disconnect, device number 25 [ 1871.981961][T31146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.990738][T31146] usb 6-1: Product: syz [ 1871.995153][T31146] usb 6-1: Manufacturer: syz [ 1872.003852][T31146] usb 6-1: SerialNumber: syz [ 1872.528109][T32121] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7089'. [ 1872.539265][T12046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1872.550560][T12046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1872.561171][T12046] bond0 (unregistering): Released all slaves [ 1872.710498][T12046] bond1 (unregistering): Released all slaves [ 1872.742571][T32103] tipc: Enabling of bearer rejected, failed to enable media [ 1872.856001][T12046] tipc: Left network mode [ 1873.532185][T12046] hsr_slave_0: left promiscuous mode [ 1873.541289][T12046] hsr_slave_1: left promiscuous mode [ 1873.548201][T12046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1873.669383][T32141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7099'. [ 1873.761707][T12046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1873.880171][T12046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1873.902771][T12046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1874.263921][T12046] veth1_macvtap: left promiscuous mode [ 1874.271663][T12046] veth0_macvtap: left promiscuous mode [ 1874.283753][T12046] veth1_vlan: left promiscuous mode [ 1874.317094][T12046] veth0_vlan: left promiscuous mode [ 1874.872502][T31146] usb 6-1: USB disconnect, device number 75 [ 1874.912768][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1875.427922][T10646] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1876.052818][T10646] usb 6-1: Using ep0 maxpacket: 32 [ 1876.064743][T10646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.076809][T10646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.096692][T10646] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1876.106951][T10646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.120837][T10646] usb 6-1: config 0 descriptor?? [ 1876.446891][T12046] team0 (unregistering): Port device team_slave_1 removed [ 1876.549547][T10646] ft260 0003:0403:6030.004C: unknown main item tag 0x7 [ 1876.559841][T12046] team0 (unregistering): Port device team_slave_0 removed [ 1876.762033][T10646] ft260 0003:0403:6030.004C: chip code: 6424 8183 [ 1876.848446][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1876.962525][T10646] ft260 0003:0403:6030.004C: failed to retrieve system status [ 1876.980618][T10646] ft260 0003:0403:6030.004C: probe with driver ft260 failed with error -32 [ 1878.252503][T31146] usb 6-1: USB disconnect, device number 76 [ 1878.907835][T31146] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1879.694936][T31146] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1879.722202][T31146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.765290][T31146] usb 3-1: config 0 has no interface number 0 [ 1879.842544][T31146] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1879.949967][T31146] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1880.027695][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1880.075471][T31146] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1880.314877][T31146] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1880.340323][T31146] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1880.407584][T31146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1880.416043][T31146] usb 3-1: SerialNumber: syz [ 1880.452941][T31146] usb 3-1: config 0 descriptor?? [ 1880.946262][T31146] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1880.977167][T31146] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1881.666005][T32254] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7117'. [ 1881.710635][T32210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.745806][T32210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.555615][T32269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1882.589598][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1882.645610][T32269] input: syz1 as /devices/virtual/input/input68 [ 1882.977157][T22103] usb 3-1: USB disconnect, device number 118 [ 1883.897388][ T5900] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1884.077519][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1884.087893][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1884.169246][T32307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7130'. [ 1884.319027][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1884.461236][ T5900] usb 6-1: config 14 has an invalid interface number: 8 but max is 0 [ 1884.517714][ T5900] usb 6-1: config 14 has no interface number 0 [ 1884.524027][ T5900] usb 6-1: config 14 interface 8 has no altsetting 0 [ 1884.652529][T32308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1884.738948][ T5900] usb 6-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1884.759559][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.783783][ T5900] usb 6-1: Product: syz [ 1884.794000][ T5900] usb 6-1: Manufacturer: syz [ 1884.813390][ T5900] usb 6-1: SerialNumber: syz [ 1885.553780][T32327] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1885.788715][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1886.070493][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7136'. [ 1887.082131][ T5900] usb 6-1: USB disconnect, device number 77 [ 1887.314977][T32353] FAULT_INJECTION: forcing a failure. [ 1887.314977][T32353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.460391][T32353] CPU: 1 UID: 0 PID: 32353 Comm: syz.4.7140 Not tainted syzkaller #0 PREEMPT(full) [ 1887.460416][T32353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1887.460426][T32353] Call Trace: [ 1887.460435][T32353] [ 1887.460443][T32353] dump_stack_lvl+0x189/0x250 [ 1887.460472][T32353] ? __pfx____ratelimit+0x10/0x10 [ 1887.460495][T32353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1887.460515][T32353] ? __pfx__printk+0x10/0x10 [ 1887.460538][T32353] ? __might_fault+0xb0/0x130 [ 1887.460572][T32353] should_fail_ex+0x414/0x560 [ 1887.460607][T32353] _copy_from_user+0x2d/0xb0 [ 1887.460630][T32353] get_compat_msghdr+0xad/0x4a0 [ 1887.460658][T32353] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1887.460679][T32353] ? ___sys_recvmsg+0x1c4/0x510 [ 1887.460698][T32353] ? kfree+0x4d/0x6d0 [ 1887.460725][T32353] ___sys_recvmsg+0x17f/0x510 [ 1887.460750][T32353] ? __pfx____sys_recvmsg+0x10/0x10 [ 1887.460795][T32353] ? __fget_files+0x3a0/0x420 [ 1887.460824][T32353] do_recvmmsg+0x36a/0x770 [ 1887.460853][T32353] ? __pfx_do_recvmmsg+0x10/0x10 [ 1887.460873][T32353] ? ksys_write+0x1cb/0x250 [ 1887.460915][T32353] ? __fget_files+0x3a0/0x420 [ 1887.460944][T32353] __sys_recvmmsg+0x19d/0x280 [ 1887.460970][T32353] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1887.460991][T32353] ? __pfx_ksys_write+0x10/0x10 [ 1887.461020][T32353] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1887.461044][T32353] __do_fast_syscall_32+0xb6/0x2b0 [ 1887.461062][T32353] ? lockdep_hardirqs_on+0x9c/0x150 [ 1887.461097][T32353] do_fast_syscall_32+0x34/0x80 [ 1887.461115][T32353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1887.461136][T32353] RIP: 0023:0xf706d539 [ 1887.461152][T32353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1887.461168][T32353] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1887.461188][T32353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1887.461202][T32353] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1887.461213][T32353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1887.461225][T32353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1887.461237][T32353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1887.461266][T32353] [ 1888.187272][ T5900] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1888.268023][T32371] syzkaller1: entered promiscuous mode [ 1888.275942][T32371] syzkaller1: entered allmulticast mode [ 1888.352030][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1888.364215][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 1888.374399][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.390792][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.403827][ T5900] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1888.414639][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.435559][ T5900] usb 3-1: config 0 descriptor?? [ 1888.751612][T10646] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1888.856965][ T5900] ft260 0003:0403:6030.004D: unknown main item tag 0x7 [ 1888.917689][T10646] usb 2-1: Using ep0 maxpacket: 16 [ 1888.925750][T10646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1888.935308][T10646] usb 2-1: config 14 has an invalid interface number: 8 but max is 0 [ 1888.947823][T10646] usb 2-1: config 14 has no interface number 0 [ 1888.954387][T10646] usb 2-1: config 14 interface 8 has no altsetting 0 [ 1888.964736][T10646] usb 2-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=c6.3a [ 1888.974429][T10646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.983659][T10646] usb 2-1: Product: syz [ 1888.991849][T10646] usb 2-1: Manufacturer: syz [ 1888.996874][T10646] usb 2-1: SerialNumber: syz [ 1889.049864][ T5900] ft260 0003:0403:6030.004D: chip code: 6424 8183 [ 1889.262337][ T5900] ft260 0003:0403:6030.004D: failed to retrieve system status [ 1889.275780][ T5900] ft260 0003:0403:6030.004D: probe with driver ft260 failed with error -32 [ 1889.386835][T32387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7149'. [ 1889.410023][T32389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7152'. [ 1889.651872][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1889.651890][ T30] audit: type=1326 audit(1764244092.570:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.681282][ T30] audit: type=1326 audit(1764244092.570:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.705445][ T30] audit: type=1326 audit(1764244092.570:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.732534][ T30] audit: type=1326 audit(1764244092.570:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.758356][ T30] audit: type=1326 audit(1764244092.580:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.783363][ T30] audit: type=1326 audit(1764244092.580:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.813881][ T30] audit: type=1326 audit(1764244092.580:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.858172][ T30] audit: type=1326 audit(1764244092.580:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.887501][ T30] audit: type=1326 audit(1764244092.580:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1889.915978][ T30] audit: type=1326 audit(1764244092.580:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.5.7153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1891.405348][T22103] usb 3-1: USB disconnect, device number 119 [ 1891.651600][T32424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1891.710539][T10646] usb 2-1: USB disconnect, device number 26 [ 1892.629677][T32435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7163'. [ 1893.470236][T31153] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1893.605840][T32456] program syz.1.7169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1893.775932][T32456] syz.1.7169 (32456): drop_caches: 2 [ 1893.833852][T31153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.846961][T32455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7170'. [ 1893.854819][T31153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1893.898982][T31153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1893.940560][T31153] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1893.992887][T31153] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1894.003216][T31153] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1894.011783][T31153] usb 6-1: Manufacturer: syz [ 1894.025521][T31153] usb 6-1: config 0 descriptor?? [ 1894.109468][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1894.475040][T32453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1894.483034][T32453] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1894.516406][T32453] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1894.629303][T32466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7173'. [ 1894.737445][T31153] rc_core: IR keymap rc-hauppauge not found [ 1894.748249][T31153] Registered IR keymap rc-empty [ 1894.780704][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1894.817288][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1894.870305][T31153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1894.891288][T31153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input69 [ 1894.912032][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1894.937365][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1894.957391][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.019322][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.057295][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.087431][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.127272][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.143754][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1895.143774][ T30] audit: type=1326 audit(1764244098.060:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.157413][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.182583][ T30] audit: type=1326 audit(1764244098.070:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.197331][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.216421][ T30] audit: type=1326 audit(1764244098.100:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.245436][ T30] audit: type=1326 audit(1764244098.100:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.257332][T31153] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1895.278898][ T30] audit: type=1326 audit(1764244098.100:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.315376][T31153] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1895.338284][T31153] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1895.338909][ T30] audit: type=1326 audit(1764244098.100:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.368986][T31153] usb 6-1: USB disconnect, device number 78 [ 1895.387601][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1895.409391][ T30] audit: type=1326 audit(1764244098.100:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.463262][ T30] audit: type=1326 audit(1764244098.100:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.487911][ T30] audit: type=1326 audit(1764244098.100:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.525637][ T30] audit: type=1326 audit(1764244098.100:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32475 comm="syz.2.7176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1895.619323][T32489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7178'. [ 1895.639982][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 1896.201981][T32506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1897.216539][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7184'. [ 1897.343652][T32518] syzkaller0: entered promiscuous mode [ 1897.371298][T32518] syzkaller0: entered allmulticast mode [ 1897.707273][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 1897.754491][T32529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7186'. [ 1899.787366][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 1899.867739][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1900.519552][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1904.987737][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1906.267848][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1910.757715][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1911.387540][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1914.600951][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.607917][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.507588][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1917.157649][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1922.907900][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1928.667589][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1933.797638][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1935.718397][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1939.548564][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1941.477865][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1944.677933][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1947.227668][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1950.430636][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1952.347605][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1956.187552][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1958.107903][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1961.947683][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1963.867838][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1967.077556][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1969.627841][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1972.829147][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1974.747572][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1976.042079][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.049004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.587631][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1979.867643][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1983.627549][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1985.627553][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1988.827686][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1990.668098][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1994.587762][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1995.787612][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1999.707698][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2000.997917][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2006.757491][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2009.307585][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2012.507523][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2014.437729][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2018.277976][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2020.187439][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2023.387702][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2025.308269][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2028.508144][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2030.427799][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2034.267735][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2036.187439][T12046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2037.472306][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.479075][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.027592][T12029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2041.317523][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2047.077564][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2052.827637][ T31] INFO: task kworker/1:3:5886 blocked for more than 143 seconds. [ 2052.828436][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2052.835789][ T31] Not tainted syzkaller #0 [ 2052.852193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2052.860966][ T31] task:kworker/1:3 state:D stack:20648 pid:5886 tgid:5886 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2052.873201][ T31] Workqueue: usb_hub_wq hub_event [ 2052.879159][ T31] Call Trace: [ 2052.882526][ T31] [ 2052.885505][ T31] __schedule+0x1798/0x4cc0 [ 2052.890815][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2052.896217][ T31] ? __pfx___schedule+0x10/0x10 [ 2052.901500][ T31] ? schedule+0x91/0x360 [ 2052.906150][ T31] schedule+0x165/0x360 [ 2052.910771][ T31] usb_kill_urb+0x1be/0x2d0 [ 2052.915839][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2052.921534][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2052.927762][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2052.933087][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2052.938910][ T31] ? usb_alloc_urb+0x46/0x150 [ 2052.943712][ T31] usb_control_msg+0x232/0x3e0 [ 2052.948676][ T31] hub_port_init+0xbf9/0x2800 [ 2052.953391][ T31] hub_event+0x2532/0x4a20 [ 2052.957889][ T31] ? __pfx_hub_event+0x10/0x10 [ 2052.962660][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2052.968560][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2052.973857][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2052.979805][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2052.985807][ T31] process_scheduled_works+0xae1/0x17b0 [ 2052.991553][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2052.997680][ T31] worker_thread+0x8a0/0xda0 [ 2053.002366][ T31] kthread+0x711/0x8a0 [ 2053.006509][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2053.012125][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.016751][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2053.023505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.028859][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.033571][ T31] ret_from_fork+0x4bc/0x870 [ 2053.038234][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.043367][ T31] ? __switch_to_asm+0x39/0x70 [ 2053.048254][ T31] ? __switch_to_asm+0x33/0x70 [ 2053.053034][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.057805][ T31] ret_from_fork_asm+0x1a/0x30 [ 2053.062637][ T31] [ 2053.065783][ T31] [ 2053.065783][ T31] Showing all locks held in the system: [ 2053.074153][ T31] 1 lock held by khungtaskd/31: [ 2053.081079][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2053.092423][ T31] 1 lock held by klogd/5188: [ 2053.097556][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2053.107733][ T31] 2 locks held by getty/5590: [ 2053.112502][ T31] #0: ffff88814e20d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2053.123216][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2053.134928][ T31] 5 locks held by kworker/1:3/5886: [ 2053.140376][ T31] #0: ffff888021eaad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2053.152153][ T31] #1: ffffc900050cfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2053.164668][ T31] #2: ffff88823be70998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2053.173653][ T31] #3: ffff888028a7f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2053.183961][ T31] #4: ffff888145be3368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2053.193944][ T31] 5 locks held by kworker/u8:23/12044: [ 2053.199446][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2053.210106][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2053.219051][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 2053.229296][ T31] #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 2053.240614][ T31] #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 2053.250635][ T31] [ 2053.252981][ T31] ============================================= [ 2053.252981][ T31] [ 2053.261732][ T31] NMI backtrace for cpu 0 [ 2053.261753][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2053.261771][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2053.261781][ T31] Call Trace: [ 2053.261791][ T31] [ 2053.261800][ T31] dump_stack_lvl+0x189/0x250 [ 2053.261830][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2053.261850][ T31] ? __pfx__printk+0x10/0x10 [ 2053.261874][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2053.261897][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2053.261916][ T31] ? __pfx__printk+0x10/0x10 [ 2053.261935][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2053.261959][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2053.261981][ T31] watchdog+0xf60/0xfa0 [ 2053.262000][ T31] ? watchdog+0x1e2/0xfa0 [ 2053.262020][ T31] kthread+0x711/0x8a0 [ 2053.262045][ T31] ? __pfx_watchdog+0x10/0x10 [ 2053.262062][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.262085][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2053.262107][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.262129][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.262151][ T31] ret_from_fork+0x4bc/0x870 [ 2053.262173][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.262198][ T31] ? __switch_to_asm+0x39/0x70 [ 2053.262213][ T31] ? __switch_to_asm+0x33/0x70 [ 2053.262226][ T31] ? __pfx_kthread+0x10/0x10 [ 2053.262248][ T31] ret_from_fork_asm+0x1a/0x30 [ 2053.262279][ T31] [ 2053.262286][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2053.412274][ C1] NMI backtrace for cpu 1 [ 2053.412310][ C1] CPU: 1 UID: 0 PID: 12029 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 2053.412335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2053.412348][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2053.412372][ C1] RIP: 0010:__list_add_valid_or_report+0x0/0x130 [ 2053.412396][ C1] Code: 06 d9 92 fd e9 fc fe ff ff e8 5c 14 2d fd 90 0f 0b cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 85 f6 0f 84 90 00 00 [ 2053.412410][ C1] RSP: 0018:ffffc9000e9e7918 EFLAGS: 00000046 [ 2053.412479][ C1] RAX: 1ffffffff1c0bd30 RBX: ffffffff8e05e980 RCX: dffffc0000000000 [ 2053.412491][ C1] RDX: ffffffff8e05e980 RSI: ffffffff8e05e980 RDI: ffffc9000e9e79b8 [ 2053.412502][ C1] RBP: ffffc9000e9e79a0 R08: 0000000000000003 R09: 0000000000000004 [ 2053.412513][ C1] R10: dffffc0000000000 R11: fffff52001d3cf00 R12: ffff88802e575ac0 [ 2053.412525][ C1] R13: ffffc9000e9e79b8 R14: ffffffff8e05e980 R15: ffffffff8e05e980 [ 2053.412537][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 2053.412554][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2053.412565][ C1] CR2: 00005595218c7168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2053.412589][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2053.412598][ C1] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2053.412618][ C1] Call Trace: [ 2053.412628][ C1] [ 2053.412635][ C1] prepare_to_wait_event+0x32d/0x480 [ 2053.412664][ C1] toggle_allocation_gate+0x12d/0x240 [ 2053.412679][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2053.412694][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2053.412717][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2053.412734][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2053.412750][ C1] process_scheduled_works+0xae1/0x17b0 [ 2053.412779][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2053.412801][ C1] worker_thread+0x8a0/0xda0 [ 2053.412829][ C1] kthread+0x711/0x8a0 [ 2053.412849][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2053.412864][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.412882][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2053.412902][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.412920][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.412938][ C1] ret_from_fork+0x4bc/0x870 [ 2053.412956][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.412974][ C1] ? __switch_to_asm+0x39/0x70 [ 2053.412988][ C1] ? __switch_to_asm+0x33/0x70 [ 2053.413000][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.413018][ C1] ret_from_fork_asm+0x1a/0x30 [ 2053.413040][ C1] [ 2058.587660][T12044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2059.228114][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration