last executing test programs: 6m47.056716511s ago: executing program 0 (id=5270): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xda) (fail_nth: 3) 6m46.147250829s ago: executing program 0 (id=5273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666edd7a13cf1cb25fdc448", 0xb3}, {0x0}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, 0x0) 6m44.350793838s ago: executing program 0 (id=5283): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) close(0x3) 6m44.117325855s ago: executing program 0 (id=5284): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket$inet(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$nl_route(r11, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000740)=@getneightbl={0x14, 0x42, 0x0, 0x2, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20021850) recvmmsg$unix(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/108, 0x6c}], 0x1}}], 0x1, 0x10101, 0x0) 6m43.487864546s ago: executing program 0 (id=5286): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r0, 0x0) 6m43.056253703s ago: executing program 0 (id=5287): syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000ccbc740c0070315deb00100000109021b0001000000000000009403d036de0d0867cc8fcd15f453"], 0x0) syz_clone(0x2a9080, 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x3, 0x6, 0x10001, 0x7, 0x0, 0x4}) 6m42.210015714s ago: executing program 32 (id=5287): syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000ccbc740c0070315deb00100000109021b0001000000000000009403d036de0d0867cc8fcd15f453"], 0x0) syz_clone(0x2a9080, 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x3, 0x6, 0x10001, 0x7, 0x0, 0x4}) 41.005397728s ago: executing program 1 (id=6995): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x111, 0x2}}, 0x20) unshare(0x2c020400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x2, 0xd9, 0xb}, 0x9c) sendto$inet6(r2, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r3 = dup(0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0xd804, 0x100) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xa, 0x301, 0x0, 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="7853649ba824cb3ea2fa704d35eee51abeda79770e7ca5dd26c328cd8e64d684171832eae33ff3d3c723539e0282f0f45ee28d9e281e62717db3ac3e7092f5d3024d2df5b237936e78e1d3b7f668b407f10a3306e3c98f6a985bfdf45fe795d76626728f4d17f6338292903ffe18d7695f0aaddbaa7d07deaafd3555b5ac2124f522adf7b2818af4ee288c3ad64cecbbbf5774a47494db77deaf26a1188bf2efd149b70c7c4c1f1f46d88e609fbb2e57d4d2a64301b5bfa8ff58dc1e96c3696e59e156e0baea1fbf7ca3821ee31a449f888e94c9a9da0e2e1512d73e0c11955851f75f7c0dfe0b2861e7d2e151ab", 0xee, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e23, 0x4376, @mcast1, 0x5}, 0x1c) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000001500000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 38.459154562s ago: executing program 1 (id=7007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x420000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_getoverrun(r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a0, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 38.2002577s ago: executing program 1 (id=7010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004097}, 0x0) 37.457206995s ago: executing program 1 (id=7017): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000031c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x1, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x4040) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000008604"]) syz_usb_connect(0x0, 0x5a, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYBLOB="7c3320636b562161ab384de43e09a6334b6ae91c9c7915d7d5c34451ab26eb3868d78b942e941b642567889e2b2cb9742081a881a8e4e6f427e54758dfb01b6b2f5abdff501b1be49ecbdd96449c8bda3b909c718b3e4b87e139e3cfda", @ANYRES64, @ANYRES64=r2], 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000100)=@hopopts={0x3b, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xf35a}, @enc_lim={0x4, 0x1, 0x67}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x7, [0x5]}}, @padn={0x1, 0x1, [0x0]}]}, 0x30) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000400)=0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r12 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = openat$uinput(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x2) ioctl$VIDIOC_S_PARM(r12, 0xc0cc5616, &(0x7f0000000300)={0x7, @raw_data="c53b822fab48bd7cfaaf085e0b9f1613f8a868265e4e2a28c0dfc3c3a3240ea6e9b7506b6effd7c4ff5eec7fa616925449f9cd3e9fb9bbb4fcb812d7a96076f4a2263b30c00d979b0e67c59f3d9899ff1f681be0258fab5da6af08d721b60944975150076272bd8669ea84853a090dbb8706e0fbd683d2897314e866ce13d79b329ef5fab8418b3fd0dc1ec9331e942c1806fcecc9f0cc3a5e757350bab859b0e8173bbba15ec6ac26d06c530b7712ee66856c3ab0fc7274beb2dfbc5177f879841e4123e1dc3523"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r14 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r14, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r14, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 35.510893548s ago: executing program 2 (id=7038): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000300)={@void, @void, @ipv6=@tcp={0x3, 0x6, "85f04c", 0x120, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, @empty, {[@routing={0x2e, 0x4, 0x2, 0xff, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @remote]}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x68}, @fragment={0x32, 0x0, 0x93, 0x1, 0x0, 0xa, 0x67}, @srh={0x33, 0x12, 0x4, 0x9, 0x0, 0x40, 0x8c69, [@dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1]}, @srh={0x1d, 0x2, 0x4, 0x1, 0x1, 0x30, 0x7, [@loopback]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x40, 0x865, 0x0, 0x7fff, {[@fastopen={0x22, 0x2}]}}, {"2977338d192dabf4ea68b876b9322c4779c73aef3f894d1652d2493d3e7bc94b"}}}}}, 0x148) 35.092534535s ago: executing program 2 (id=7041): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x9) syz_open_procfs(0x0, &(0x7f0000000400)='sched\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') getdents(r1, &(0x7f0000000140)=""/72, 0x48) 34.86271692s ago: executing program 2 (id=7042): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000f80)={0x53, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ec0)="440afccbacc9", 0x0, 0x5, 0x22, 0x2, 0x0}) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000080)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x86ef, 0xc, 0x1b, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r4}) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x10000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) 34.069181688s ago: executing program 1 (id=7043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000100) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') (fail_nth: 1) 33.69761179s ago: executing program 2 (id=7045): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000100) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 33.182428243s ago: executing program 5 (id=7046): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000000580)=""/197, 0xc5}], 0x4, &(0x7f0000000680)=""/76, 0x4c}, 0x26}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x90) get_robust_list(0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2}) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) shutdown(0xffffffffffffffff, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000001440)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x5, 0xfffffffa, 0x8000, 0x10, "d1d209", 0x8e4, [0x6]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 33.058967553s ago: executing program 1 (id=7047): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000fcffffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)}], 0x1}, 0x4048043) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x400, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x2, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x6, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x80, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x3, 0xc, 0x6, {0x6, 0x0, 0x3, 0xd42, 0x8, 0x4}, {0x7, 0x0, 0x5, 0x7, 0x3, 0x2}, 0x3, 0x7ff, 0x3}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r9 = socket(0xa, 0x5, 0x0) sendto$inet6(r9, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 32.749189344s ago: executing program 2 (id=7050): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) r5 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r7, 0x10, 0x80, 0xdd7, 0x2, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x7, [{@multicast1, 0x2}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="200025bd7000ffdbdf25150000000c0001800800030002000000680001800800030002000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="0800030000000000140002006d6163766c616e31000000000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e3100000000000000001400020064766d727031000000000000000000002800018008000300000000000800030002000000140002006272696467655f736c6176655f300000"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000000a024000", @ANYRES32=0x0, @ANYBLOB="b11b65a961fc8c4014447dca210000000000c10000000000"], 0x24}}, 0x0) shutdown(r0, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) socket$inet6(0xa, 0x2, 0x0) 27.50252725s ago: executing program 3 (id=7052): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)}], 0x1}, 0x4048043) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x400, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x520b, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x400, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x2, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x7, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x6, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x504, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x8000001, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x80, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x3, 0xc, 0x6, {0x6, 0x0, 0x3, 0xd42, 0x8, 0x4}, {0x7, 0x0, 0x5, 0x7, 0x3, 0x2}, 0x3, 0x7ff, 0x3}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) socket(0xa, 0x5, 0x0) 26.750447298s ago: executing program 5 (id=7054): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1, 0x21, 0x0, 0xffffefff}, {0x6, 0x7, 0xa9, 0x1}]}, 0x8) (async) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040050) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x7, 0x2}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x1) 26.388291691s ago: executing program 4 (id=7055): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x400000b7, 0x0, 0x8004}]}) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) utimes(&(0x7f0000000080)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000009080)="d37f438c8ff0a793bb0fd85e80a3add0f8f65f17e46f60227e8b09439e47ae441d91f7c50d52383be1a08cfa58969071ef9251774b2aa82db4b537beb0834e94c9f625097a9fd8ae5d86ccc28ae9a5fbf7a931329d6c0aa28650849abea29afd035f5eb12f8126d5b8c277c8c14f25965396c229226cf8b0c6da769454f1981c1b0a8180b80469005a03d24fee1d6f5543a43d7156a0da6f40f6e4344cdfe5f96f373459fabd8c1fb029f3cbb965f11e04c92468dc54884926996135312816573b5f052907705fb31ed724a8097b4eb9a547bd0a4f9c66421393b19fe59fbc07bc8c6319225509823784428ca5f20741130774b9090811966d1de850ef61c965ba07e2fe52380c4bee79f58db0931b3d0c06cfac96c9e8676eb0e10ddcecb47f17e8c4ea80d3f67a9e04f5edae06ec33863b9fb5edf40c87fbdc5a00936d260eb32c3df5a905d3041a54d0fade7b220027169911111af6142645e771ce84efdff5ef5f3fe5b1efdb67ba83dd9f94008f787ecee2ec9849c34a8699900b3151e799fb1704100f2075cf313f719efba77efdfdf5e37379232785af24729608cf1099a9eeb643813fe492fbd86788f43e231fe0a6f3f0bf302efeaffa32890b1e48818959d7d2aabb83f062e356a81605f55da96df097b11471c46947910bb3e5e40a5a5c92077231d68efaec50b848907d1e37e18d885f5bd95d939ade1852a5e2f516781e1868f0894c8c0872c84d9c80fcfe085ac88e2a8caf63b3444f6d5f63c4582e766f1fb06a204d7b8c266e29bb43e04f42dc241b0f6926ea4b0340f0b3ac232d92677f2ec099b17361d988b72311e5e93d6d93ca3bb711c5fb979684f67f6ba32901b8adb223fea467157c55e8d5540743af46d36e6670fe21254ed91e207044db3424d42a63d780f2269ca3427aeb73632fb93dd42b07eff0f5ed90707423066f834c2881ae5272af5b3c04c6b9cadb8b234d24c5341696960a23f242837d91d6751695e9f07577bb81aea171df43b27c44ca5b815e66f63848403320ffdf2926f500b16e7496b835ae7a09288847cbb232e2e271cd732e38309d41ffb55391dc4a157e0c02505f54430a70a9ac197f5573a0b11722aec13a9adea4d8e0022810ca28414964d40cbcbf9d2704aa82637e13d561c4fed2ed602be375e547a7fa7198e6a75293abb3903d0b8204ba21dd369a79159cdd810162c2a2ee722bf4e43b7679dfb8b4ac9e768fb3d391fc4f1839f2e91f1c62050b8154cafb6dd19a3f8716a5c072725c5dad281281605ac02632d041accf07bed8135f4cab566db7e01c6902be5728fb01cd6b17edb8870e3417897a604ec795c440334b1bf9b6180ac13d13298b80b8f4352b0bb36ac151607d6ebedae06f8a0582ecd3963a6df647c38c64402ab29ed79533efbe311df5c29d9f1928371e99094f3e7d8aa3d277fe0e3471c6746ca5dab72d6ec161e05b46829c7b437cbbfd82e8606153f23205f051002e23a17906056a50a0d402814df2bfc1de9906b2ab651770a482315e06146af144acf0beea22a5a9bc61931d293483d0f3bf04e62e89cce3e3ee781b3340f59f8a026228e6f3cab05f23ea71334eadcaa1068f1b67f1eee3ee1698e92bc68759a3534069de9132ef7d853f4e20dc1cac32b42a995da861ee19c52e8387528db1ff0245807a1fb19c1670bc3c56f44db0333d7568eef79964f00d6d242a3735cf372c844d6cfcd9bd8934f14dbd5cb907108190fb7ed919840429d4da052d95a242e93db7f07c2c1f8f141026e15a767cc9386b31a18ecc82c4603354236446e9c79ad6899049648b4244446dad02225c5837fb8b033ce4db1fb044df7131bc99316434f232b8049701d33235e581341c5bb08208703e4daa83c0d4e1ab73e8c0724d0e9d6be114927acd0b792ab9464dd3b67963ed235243ebbc16e6af057e984fffc2554582cdd6548d9a929a89b39650a12511ea208ea9553703ec994318d50cea6a632724b08b0af3c11a4ca9d95dba675112563fbd166463cde649917402548547d54cede66d711d805060beed06c79be0c682dde2548a899bb121926ac690ecf1220764874c37810abc3c64291fef538f8959ed50a4b9f6058b8c45735fc783f3ec592c022b066583950037fed74e12f0fc8f04db78cae682c706fdc3783a206167336ff9e4707ce741893beec04916626c4ed07db0a73bfa5d786e3f3585e4b7b37f3968f08f8971963fef1a7b7311d4bef7b5a5d72d3c40297da80d995d866220e005713d69b5dec9a4481301e9aa6ba8a6bb1f911c1d9f827838edb81348231f3da450c1044c9c722d31a1fadccbbac0d82de32f2a46c0a083ec89e2baf21b2b1655702e7d58b950df5904f76f129d15c93f95550e3b52c72eb79a1e09aa253c35fce97977f881f61acc6268c2596b755f1838b390565d780929c4c6ba4c8d417775facfffce5c0bcc1f075913f5477563d06b3583c3bdcc7330bd6d1a8bdcce29f8452668a9f2a613f21d5195ba1a1bf134e80be88ee8fdd994936b1b40a0f2e98723d8bc53aef7b5af884f5fccd3eaf2dda01278be0b26eccd63cf68278e06e59889b8b9327550b615df368d99bd6d19636477c4d592e365b0c8c43a23d434ec3d622184f325d6d1c8b704aeac87359d9c09012deb32db9bc034fbf10b4662d6618b4d849a9546f00ed3265c22807072482b0ea4eacad35e10bded78ddc4e4025c7ba521b709e4923cfa8b6964fff4ef513965c4c71a77447daf08f7ddd10f2319b57c8075046ed4820e135f883fd4358edf30fc9965b16885aeb0f82cef2556f67bd33c44edad1a2e3bafe648f5e3797a62931218a468f637832f7ec481526824ebb8de5c207733c54313add8a24131f6de8eb8ddab462b5ac7693f7b278b38728449c9d595af99ba5b1548fd942b7b8538456a261a3ee3a7d18fb3e6180b6cfc9adc76a1defa797b57bcbcb9cb47fdeb2316fd2d913dd4aa0239638fc5c3d29df965aec2ade1f556ad58c9159c9f1b6e05691f476c5ff73230eb74a891f7b285de923d1cab7cf1fe2c82cc6ebcee9dd0be04bbc4d01b2ba8c2525fc4120ffae3df6bfe44663ee532ceb5a21db4f2204386f84e2f51666af55cda90dba169a9cd1adeadd7c90322af2656c3166fee2dc39b2db56e2e18b6f7a24bb7b0494320d2000d629e93427d224587dedb5c196b1796fec0c526a8a0355951045677733b33cb42ec170f137b934c4c6e141a8f8ebbeb1970797a29225901780f96521939b2edf85b1a456e9f97d02782104583757126159f264d9ed95e801561d63f0ca075543813c732e75deb01e585fb5b7bdbd7311d9f346e512b36e972489988f53f42118bbfefd3a52ff1fb97f47eaab7f8baa8e1f397bf877588c1c898690885273e47c1bdce3f220f80828fb7489283d5529756514842974a55cd95aa5a75a18627897836311486300bde4fec1c312c735e5ba3419028cbeeaef709d97752a12f83650aec7305232f22f90b8718113f06b3cf48cae0b365c456aa17610a78454fb81020c84ab51e27891dfe6e3820bb8c4ce0a5f72c72f2523b10be64a3c05f76e7bcb7b6c9aab9e49bc0c2b6044b66c475988f0a078f53912a9c442a40243da943376c8f75e74eac306c61004f6a88a818e3e992c0ccadf44e48c95472359c79f04462598dd467cc140e665e57b9b98702096750b82f291ee11b80a9064dc4a0c790107ac0aca2166e4a964aeadab9ec1ed1ca686b36ff00f75a3a131c09e3297d0471b689475941d09e09c62d94840a6083b1e8d80c22c9e10f3575cf53fe80702e0ef82f43bb13a1128a4f76a1728da93d86a5c86fe831334442deb1e003c96cc40a65ee721e219c06c01e75176d1035ec855258d3fc565f0d6eb31910c3c4e4450c65755ca563f0d877861df816160dbccce49865e0c6e9dc7cc281481b9f6bb8dee95d6a572421f1b2dc1995e0a3fde00ae6073015ae4176519e586ef434df534667d30ab103b7815f5a992e51004471ecdbbd8d9d464e7c24124a928b5aa925458825024ad03ad526a5b08ba1b30fef04288035749c266612bdd5caf4ed5245f67f5fccaabc6b2d8994c395dc7f8ce00089f4eacefb18e65a2d9d04136cd9172ce5aedad596d11fdd4b599f7f544f92a398042821b7c1e6ffdf053a35f95f9997791bbf6a0ecbc69531d14b2fd6b18dce4267816ef2fc135b24d76be1b59e35fd76796e9fd92dcb38c08968d9be724eb8a22575e7a7e2649f2a27fb3fac57f6aa53917ae27cd8efc4b6469de6155c3b9654a70ca7fa318682d1fbbf7e3e9f85f3fdf91f96eba538c899f3aebb79fa0ff96f122859061c2aca2a2fbac5640807cc7dec2a5f37a84cfe69af9775a703281d271a38ce08adcfe26ad3df7d0a1065393791dcb526634ceb5c33061fd83b4e1c72fa175585e0f839c9651002896fc7a6ced33919105de91d17083c8f6985e24ffd0fb35dd558af58cab9003e1fb7f87075704396ff677ae7a99725ac2c50c3a9edb15cce24de9a734f81f5187099b2ec316c6cf536c628445799bfc13803c6e94fa844de4b294b6f9b7f96ecf666c1088eee0997dc3d925e45fe9157ff86699e68ad786e973468de54ca6c9156c2e30541e97fb7b845ec2acdbfab05a03009de8260b444c48c0e64940a441d56446b33c698631f480dbcd6f8726e4c287c262bbb6de251c930e717797af777283e0575e8e1304af50cdc493f429dcbfa518e592550e980bf4516ff177a725c59ed0f8d9384bf9bbfe024560062eaf58bc6dd4ad29d71a39f02e00f6ca44ea68b9019387add513c767693d5535e46b3ff697aaeaeffe8e85b86ae877586fd706fbdcc492208c1b61556b80af1f80b018391a4d42e030d89e57c8c8c323c23805551954bcfeffb2c08f9043f24db22a9285f9edb6c66e1091b9dd8e51a228dac137df945491c53014a79b3e033305b1678d7664afc79bd04b0c397c0fb4a12fe3116b24e4d42830e3fb611b337f449c1e0e9667b09690b37789e45cc3007f4a56539c782fa41cbc30f8b213f36e03a1bcee413ae9b4706561c5c68e0ad645423eb5e799ca52a0cbb7e9468a7a0e253b5ea76f6a79a5dc9d72d5aab07703a814922f1fbe1eba0336659ae0acc46b46088b895846435a02bbacd4663f652c0e1289411bada43f1335d48d8ca7a021a60c8a19a8a894aa3375758a140bd040e24aabb0736f79ad95f2090a78418360cfba57398dbf3645bd6c964e53923ded0751512e8cadb650ab833ec3167e8bf385bfbbba46e0845e745810d0133cea434ddab18ef066caea680f16604baf0ee56b1f631f5ccf754fc79285af9d17d99346f7bcd7048dcbb3f0fbd6c2aaa415821f73e4ef5c09fffa911a7ecda2961342d0db95a92d597e8755e41fda1e39c65efc82ca82b22172b3e2017ec5bfbbdbecccc318190eca29ca4dfe393afbbaede3fbc53aa54fde14a1d98a3f0e673bd710d73a978cd7b37901915811c1a8478c61c4021792bd07d42a0e4f7f367139fd78ad1b6cc23c94bfc98bf73c8891c5c69c00c0aa4ba3d76472543fd8d2fef44f4fa928906a60f726a7aed2c6435ea80ffa1d91efc4a605b48845a1e66a7a79c92a869549383256e7724f796aa893c3a86c8c501dcef329d79d7ad5836cd41d48d0ddee68cd5dce8e59724bcf7a0d6872deae7dd15939db46b978fdb77158c3076ecc720b3fe3fefff15b28f7f1304c375a435f20c714576dfc8c9f53af9b6dd7d7ba14d8fe4408f8ffbd61aa0f1194e3c57d63519f96e42fdc97e7adfd686fdbef39bdca9a2716b337e406a909f3b2eed19e24408e8dbe91b5aa98fa62b6fb6f9f13dee6a5da24b24cd2cd859029aabb2bace5492de4985a19c508d2062e6b580bac1a55a41aecabf0d63f48315a6497f11a5a09bdfd1649203eedcd03069cac0bde4f7691e57e2a054e1c192f6d78f2647af7cfffc4daad033521b87103c5bbb81eafb0ff72c4cfc7beab3cd7074ed50f23021e917e85a0ea2dec4dd0d7f8efa68f15a1296ca768fac34f630014743eeeed57f80165e268c1cef7d5d385edb955195a3e44b8b388dcab72083fc2dc23d71913bb98ef2a34ad6df1675b936e294ebba47dbd74daa8098fcb627a1e17616d8775cf1fdec8676d57ce31bd4bfbe821a03ef251f651ce97dbae57f99c6755470e9cdd17699c568ada69a64621dd5625d95b0b550c596292b1816b9516cc7d8f02f8be32afda1f4357419b28363cec40c7429e7687531fb00de4d2e03fe4ca448e66ad17c58d909df244f4f7ed265164b42273187816e0872e6818b8bdf48097d108f4c67ffa10038f7d2a705b4489c9af1284a7b34dec3e5b56f350c880277fca26427e0746eece173de1ae1104b7822a9fd45b262e5f3ce16a64dfa69e84f077296144f0c119bd2aac2251f463b3e8177dc259088c8a1794953b248b95e7c6e6f91ed45a7d3bce7e91ec72b98c06ba6c625bfdefc69c7416d89a0b1f3bcab5aed96370d74c6812ef0338368756f83f4be0331cde6d11d9a917483f25beda96af71882c3d4d1b3785932fa0bc93d611c919dcb116699db1a3d26ad6826937a984fa121fac7a45ff220520f702ee942793dbf7023b98c9cca4f150bccd29f26aff58e2255aa73fb7a7abd24b501bd403f24900d42e88c57494ab5ef8bacc07ff9904b100d709cc9b1018cacfa42d839476b7aeceeb2236e2c1151d441b167036bef84069401d67a1473d5d11cc109bd39a1fca5d5aa347c4fd5f6f3c12a8f5d1ec344dc1717f5e8e1aae6d7b7c42aa633ffdcb46c32ac667d933cb9fdaf6d83eefe77d8733a59fcf394d063efa474df67697f881991a34fa79bb78f3b19e9b29cc7b03ca7390b0ca6064a961f3fed249db4ff2c01840373b6242034cbac645d59743f1a90f372ee0c17efade2cef03e3f0edc640dfb629c6b98dc2f28ce06aff3574a2cbdb4b06fba31b2dfe34bba7e34e02a786fa4473d5ba847f4f1e644c1bad62ebd5ca9306219ad6beacb8a54ba299e1bad887293f1b65ff956ea2a562e290df607a608503afee3ae180d600f1d14a9459cd5a399c7e2c7bbde19c11ac869d34ea5e990a759e346c3d538108a277894d6ec7bc6fcd65862a2d9d0696551a4a37379feafb313a09f2575c52641db9f46f4cc5e851f67ce633572b6ffcea7b7c24b44b40d32e55e4f3b426e464c07741648f30d51fe3eb162cadcecf21b7182cc915ffd887e85c385b5989f87910c5c990d639f8d2cd9234c534400088ef49733c94f39131fd51d784a407a07eae6d5359acfa35994ec3760ca3866404a5faed0fb210ce1b849868a6007c8e839ac7518172928277bf2dc43d163d2a0f6146cca1738ec3526762e8e2caf69606a3980bd08fba42ec7cbf48d315e45b834bfb14221de8259250c4ae9590520288c73bfc7d8076d3fe46b772491173ea0daa76cb5cb40637a038ce734d72c0c020494062843715e762d71a8f8518fa7d837391c06b62c96efc17651158657db8ea9a57634b0b5628b06fd5d568fb02185a63a6beb56013cfb4fd1695b102fb58f39161232af39f6d87c5ff6af247df3d549b7f6f81cddf4e3cb12b18634e69df5af55127f72670a3104ce5aba7877c32ee4b0cfa076247a95750e830a240b092baec2f473e83581e5799d69593247f0e78ad8e44c0e0d09fc55888107c4badcdb20b2c82d5915b3b03060e53d199b20b29ad6742655bf62343421f826daf1a3c0c493c96bf719bdf0a8dc9a4fc3f75bcebec3aebfd898ef161cd4e2e33a142c36f673cd8da72edae4f691a4271881d326d77fca0af396bc1eaf9e9d2a047562f91f0e87972e3ae5abb75e352f28c81351c4be6a34e5a01b8ed8461f14e21d1afc9260d838b43e9e2ae078d64b6c718232bcd2b26d3c57beb3c605e00c6f9c1031a3bae4b1872ba5d6c23199253929f1cf57a2e961d798ca9d315fa6b9855c8e7efcc24ccde498a3f1ba23755360044f024753f886f97016bd45a56d802f3e9e040a84f6c46cd5aa99fd4471b97cdb0bd8d265853fb79c42b4cad7eda49ca08d3cefffee2d3f1b5f083a06ea4be4b0acf84ca27e5a8d579d3135f3e59bd5b823b2bef7708189f54c8f0d576e4c6bdbf932b55bc792bb302cddc5c555e4903eff45b493f9498f7bf184035335ad1ba1547795a443c9afb30f932e7d1b042fe1690cd34d98e2331cbe38108be26f8ed615590e8bd99fd01b700b21e6ed61de92297d8b447c723089cee359ccd4517328d54ebc43a3f9173698c4362a6130508c9a0ea57b9a8a74a997a21e3e2a7223ad3debd80f70aff2eba5a862aa667052462bf6635eca2dd3350ef70fda58f8492d34c5b819c802f97b8765680c39fcab3b92f8a8be88a93b5bfc1dbba3fbfd3051c4443e766f4cc6a9d0f96b66a081e9316a44efe5973479ae74bf13c18711218f75d7f4e6f70b0a34ff2a1aec8d1e3181a65b4d5f21f0c19789a2ff90ae5e1298e707628e97e6a5048ac29d916193577506a7f5a9cfb0c73d16a67a2e1f872c8026891e98df07579877460c845bf967f87d75295ed29ddf626340f313bb35a04f9304e34773eda19650f25a08b2bd603297d9edd7f7d1b88d0b18e7bc35b0593961e7403a03550a20a0eab83cb00e659f5fccc189d14b28f11b8f55db517ab124b3718e70868d2131c74640bc682ee785a75cf960a79fead7965d0798d98e386598efb5ce92b0ceeec4e63e2eee3a15642ac72691517c4197a667de3e57a56e2d6e4ecb5a2bc401f90ec2239baf6a9a418267fe2228f7776c7f932a048cd9aada01c2e6d9466ecc434ba61eb97a0d6eb00e719940b3dca3ae25b94e9040ee238184eeaf46e51b61d855ce476d10dd9cb09df18c585304bc4f9e88060e4bdd6e624dd90d7ae8874c0af1e17e67d3bb27babd15880cc61f22b6a0b24df6d03faa13f0c918a7b960f47d939934d9ae90edc40251fb53c9fde3ee255e49c8541d995a644d35b46ab202e56ad1de3da1c5ee587f167b398392d0fba4a43eedeaccb0ba16f571055381fe3885490c71e0805b1b3186bf2652b9a9df69d8d1232cf704fddfb5e7d3ff78ba5ae3b843f4f9b82161e223343240c33a9cd21eb312806163ebb2e60bc98b68b3d95bdd923f6ea831083c13ca65e4a06e999b2d01650ed218d72c5b776fd21ae21d14e23e9074de20d6d16520b1061aa4db3b5b8077b1c43aa375c68a6243ad582a148dc6878ceb2ab6792cac38ef21765df51171436a412f60f5dc68fba51aae8c4909efa690340fd8a63cbfa4af6235c1c904a20578f54b9c91b1fb8017d05321e0bb9eda1502c1506f3d2939977af87d1f9329e237c129d5cb65e093396f016eb0c2f0aa5cab92a00259f6056532ef188be500fec4cd4614e29daf5b41da2b4742b02999e651c42d2f405344a232e36278785dc7a681d0ee2014ce3214f44ff9d2c3e083e18c299cd7cc8ddea4b805c673cb7479a553f28349235d37874ae3da878a5b6321e501c2b77470dd15b35ace69b1b8e3ba20cce47acb8350f206d136dfdcea697bf558bf3426bb1e0ebcf2797a1c7a181fad43b8c68633b361d40868c279896eb1c628656a9b57dcde8444ff92f2cc1d2dfa1998054487d8fcf11b852019ac21ae0582b1c8f4ff90f31d862e20740d7b803b0f109a8d1506137ca58167e8be1d13e6a5590e2bf2af5cbb7e79db2f4cdec83983463e1e830f54f8534e4c660039c0d372c7c757be3498f6be9ff6b6d13b88ca0ee07a0fd4df8cb13de0fa094cd3b9eb87032a6aaa757a6391ccf98fa7f9d99065b4f747e70ca497af77fbad520c589445d3401c67972ff7e274571b8c35a17ae78de90c81f791a69d70975208153f94ac7199c45de1ca5746887ec677452fd1a018b7287ac45e14ecdf1876229964153cfe6b39f1d50a9be63a0eb10016607ff338751cf9bb97c917d532be1174d0410e26dcfab873769b71db87758c0ad015b1db4b7565e244925ea0dc24313ac65f0355abcfa96c786b8ab7b32166bbf4c7ddae0d3f63d1aad63a9b105e05825aa012e075ba3e1c20b757e1dce75f6fe14e891a20988d365cb5e69206a1b7d8caf2effc73eb577330cb56495fbeaa6b7aef3467a32f53634e468208a8e55d626f98a2b51d39b48341c27306e59c0fc5c8058719b526eac245ce857288976abdfc9be1d4f220817f879c15cf0a258f89cd8269113821b0a1073165923748c6e8e0331ae9e7df11e62a80bf28559850cce385a98e0f48209ebcf69e8938a7605e96f4ffcf580b6c1df742766458763dc91b34035c12396b06ca5995b8feee35e1a3891cca0402fb9e739d8f8aa1a637b7c8c2c458493a323fbe5a76f866e2d9adf0d1d76950bc527a969f61c8519508eb5a93447d212e209c724aa16a949d8be1b14c8711d4c85e728e9d50b5b78b76242f9d59d866a86da0f129201a5b665611360ab3f4b678746cbba1b47884d2bfe4d3e38bf441fac354654c5077620cdf5870fda1fd5ca2bf4780d474a27cb660dd9d7ea83d423240c7ffe743dbefa3b922ac6d5f9544a7d5477dc44761a1d47633f67fe220f37630d678daeb62360b5f4f5d40493169f6554897c5d05c4909834fb2ef1494f8bbbf9e986761b931a26b0ab76b88d4f9b9bd9a024dc39819e0a139eefba8f617401811b4a7b97212aa82965e6008447979d19bfeacceedd48a24d65b8a1705d686fa8c44100d27dca9bc764b74345e1da71bfd9604e2f5bfdd28097f90e98f91ca81b08e827f7a3e742e6c019691afb612042a375985b01b94b3eb61a484fc2ece84f53ba5738273c80047663ec335d31f1ce43c6205a78fe7712626e8e6ff691b5bb9fe1a41909db60d8644d73936c4eb663bbfef030499c8c7d31f4eacae3cbf736a1eba6f85008139ba7eaf5f1ef8804f617e56c820c24f139b7036887f2ed2de32fd63574d0359ad4026e67c550b4ae960a2ce234a20e076da3f91a7ed60bd59a38e1acd7941a66bf3e755a431cead3f01600c6e47564167340f3f853efae37b036988bf4b30849d9dd5d0d09b1799bf9fadca76c497a1345018c8724065291bd8cc633e06359b72040a7673ffe5e86c240d043963bf2d76a0fbf50243a63d45d7f3358e1b9d1f3cbffd7e60429afee778f305e7d8f07c3e49a104f3a4e92118ce84cd11839f507656757d6e89ff296cf792ca2f1429aa80c8092b970d6f065eda3fb25b6b8a699561f8fe5236bbbc96f15860e29326a5a2671a88545a65e587d986615998a124a97820a65f81779b3101086e6f261177a66858d788c5c66521408a9e70238719614aa6232a3ef7a33e99d3b1dcdc20c33e8124b1dabe50ce9e4eadf34685560039e7d7e08f038f2004da7703bc4a30a28409719092e6640e743ee8a4e75dea106314a26ed5cae5d02bf9c8b0e96020a6b7941db7f0c311476f377a992caccff7f1919062f9db36ba72b29e9dc0880fb8eb24f41e0a6cbaa487058c6fbe6b062b372e0b84c9fcfd64d84724b6cda7fb3f582abaa6757782b20f9c1fad78f98273129caaa9496c1dbbbd167b52bae60dc327d1e18d82450ff9b6b108a0f20cbee500", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x6, 0x6, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x2000, 0xffffffff, r6, r2, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.355167873s ago: executing program 5 (id=7056): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000400)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000100)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) r8 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r8, 0x40045108, &(0x7f0000000080)=0xfffffffd) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff22, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=@newchain={0xc14, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0xb9c, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x34}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1000}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfe1}, @TCA_FLOW_ACT={0xb54, 0x9, 0x0, 0x1, [@m_xt={0x1f4, 0x3, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x91, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc93049fd"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5e, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc50907"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x87c, 0x1c, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x80, 0xad, 0x5, 0xcb9, 0x3ff, 0x7fffffff, 0x8, 0x6, 0x986c, 0x3ff, 0x4, 0x8, 0x95, 0x3ff, 0x9eb3, 0x0, 0x4, 0xe, 0x2, 0x5, 0x6, 0x0, 0x200, 0x1, 0x3, 0xf, 0xc45a, 0xc855, 0x100, 0x1, 0x4, 0x664a, 0x4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x4, 0x10000000, 0x5, 0x81, 0xd23a, 0x7, 0x40, 0xff, 0x4, 0x7, 0x8, 0x0, 0xe, 0x2, 0x8, 0xa, 0x0, 0x9, 0x3, 0xfffffff8, 0xfff, 0x80000000, 0x7, 0xafdf, 0x6, 0x1000, 0x7, 0x2, 0x4, 0x3, 0x2, 0x8, 0x80, 0x0, 0x237, 0x800, 0x3, 0x7, 0x0, 0x7, 0x0, 0x95d01350, 0x2, 0xfe000000, 0x3, 0x3, 0xb, 0x9, 0x1, 0xfffffff9, 0xff, 0x3, 0x7, 0x2, 0x2, 0xa, 0x8, 0x5, 0x9, 0xd1, 0x101, 0x4, 0x4, 0x6, 0x400, 0x8, 0xffff, 0x7, 0x2, 0x21, 0x6, 0x9, 0xffffff81, 0x8, 0x66, 0xfffffff7, 0x98c, 0x4, 0x3, 0x2, 0x0, 0xfffffffc, 0x4, 0x7, 0x9, 0x4, 0xaca, 0x98, 0x3, 0x200, 0xe, 0x7ff, 0x7, 0x9, 0x46a, 0x8001, 0x6, 0xc46, 0x7, 0x1, 0x80, 0x1, 0x2, 0x5, 0x72, 0x5, 0x4, 0x0, 0x8001, 0x1, 0x4, 0x3, 0xff, 0x9, 0x0, 0x7, 0xc, 0x0, 0x22, 0x4e37, 0x0, 0x1, 0xfffffffa, 0x8, 0x9, 0x0, 0x2, 0x5, 0x5, 0xa000, 0x4, 0xffffff01, 0x1, 0x4, 0xb0b3, 0x6, 0xff, 0xd98, 0x0, 0x29a, 0x8, 0x6, 0x2, 0x8, 0x5, 0x2, 0x7fff, 0x0, 0x40, 0x0, 0x0, 0x4, 0x42a59a10, 0x4, 0x3, 0x1, 0xfffffad4, 0x80000001, 0xc, 0x7, 0x6, 0xff, 0x23, 0x3, 0x61, 0x500000, 0x9, 0x2, 0x6, 0xfffffff9, 0x5, 0xfff, 0x1000, 0x1a33, 0x81, 0x9, 0x6, 0x7, 0x1, 0x80000000, 0xfffffffe, 0x4, 0x9, 0x10, 0xfd91, 0xf, 0x0, 0x1, 0x0, 0xcf5, 0x86, 0x4, 0xf, 0x3ff, 0xb93, 0x7, 0x7, 0x40, 0x80000000, 0x5, 0x8, 0x3, 0xea, 0x9, 0x80000000, 0x1, 0x55b1, 0x2, 0xb, 0x3, 0x7, 0x9, 0x8, 0x5, 0x7, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x10000, 0x3, 0x6, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x5, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0x9, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x82, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x49, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x3, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0xe0, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x71}]}, {0xa2, 0x6, "25d27a49a3aca6b431b9390e226b9ee3592094f28da76ae92a2acedf26e366b960e65589250c610b2ff44f7a276fe42ebba7f6f73422a978d2930ec61b993b4be7f7d402c8a066afde567cbe2c82f188a1235064e0388b565af2140cfbed9d38f97e7edd20a3758403abeb349fdd39bee9aec2cbd2889ded5bea7ae318a84d780b3532c35d7da1422c31228d654b159e92f4650d0183efd1d3ce747b7c93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xffff}}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x39}]}}]}, 0xc14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23.782693572s ago: executing program 3 (id=7057): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 23.554259729s ago: executing program 4 (id=7058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010106bd7000fcffff91960000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 23.273632192s ago: executing program 2 (id=7059): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) r6 = socket(0x10, 0x3, 0x0) (async) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0018000000"], 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000000)=0x7) 11.152398061s ago: executing program 33 (id=7047): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000fcffffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)}], 0x1}, 0x4048043) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x400, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x2, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x6, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x80, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x3, 0xc, 0x6, {0x6, 0x0, 0x3, 0xd42, 0x8, 0x4}, {0x7, 0x0, 0x5, 0x7, 0x3, 0x2}, 0x3, 0x7ff, 0x3}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r9 = socket(0xa, 0x5, 0x0) sendto$inet6(r9, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 10.520323563s ago: executing program 3 (id=7061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010106bd7000fcffff91960000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 10.478453918s ago: executing program 5 (id=7062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/250) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000200)=0x3) close(r4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) 10.26734768s ago: executing program 4 (id=7063): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x111, 0x2}}, 0x20) unshare(0x2c020400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x2, 0xd9, 0xb}, 0x9c) sendto$inet6(r2, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r3 = dup(0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0xd804, 0x100) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xa, 0x301, 0x0, 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="7853649ba824cb3ea2fa704d35eee51abeda79770e7ca5dd26c328cd8e64d684171832eae33ff3d3c723539e0282f0f45ee28d9e281e62717db3ac3e7092f5d3024d2df5b237936e78e1d3b7f668b407f10a3306e3c98f6a985bfdf45fe795d76626728f4d17f6338292903ffe18d7695f0aaddbaa7d07deaafd3555b5ac2124f522adf7b2818af4ee288c3ad64cecbbbf5774a47494db77deaf26a1188bf2efd149b70c7c4c1f1f46d88e609fbb2e57d4d2a64301b5bfa8ff58dc1e96c3696e59e156e0baea1fbf7ca3821ee31a449f888e94c9a9da0e2e1512d73e0c11955851f75f7c0dfe0b2861e7d2e151ab", 0xee, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e23, 0x4376, @mcast1, 0x5}, 0x1c) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000001500000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 9.901473431s ago: executing program 3 (id=7064): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'pimreg1\x00', {0x2, 0x4e21, @local}}) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'sh\x00', 0x19, 0x60000000, 0xc}, {@multicast1, 0x4e21, 0x10000, 0x80000000, 0xe1b2, 0xfffffffd}}, 0x44) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r5, 0x400, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}}, 0x24000005) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8cdb, 0x66}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2e7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c895}, 0x4000000) 7.124962862s ago: executing program 34 (id=7059): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) r6 = socket(0x10, 0x3, 0x0) (async) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0018000000"], 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000000)=0x7) 6.672096444s ago: executing program 3 (id=7066): r0 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000300)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4010, r4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r6, r6, 0x0, 0x4800000009) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x170, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x140}}]}, 0x170}}, 0x8840) 6.548552732s ago: executing program 5 (id=7067): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x8}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000000380)) r9 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x203020, 0x0) r10 = openat$ptp0(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r10, 0x40103d0b, &(0x7f0000000100)={0x400, 0xb}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x401, 0xfffffff9, 0x801, 0x3, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x162ca054}) 5.663158678s ago: executing program 4 (id=7068): syz_emit_ethernet(0x18f, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x159, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x5a2, 0x1, 0xfffffff6, [{0x3, 0xb, "c89600000000a908579773e4fdb4bb49370518410eb28612bfca69b49056984c75e6798dbb4a64dd3dfa2228b6a49aa52c1072d5bf00074e80b2222a500d57897826428840bf06061d20b18cd612cdeb36cf1990365b"}, {0x3, 0x1, "c8480000001ce4"}, {0x3, 0x1d, "9d33a20a3a4b43e6a628ef0db7d56ee0601b14e59e9eec209fae0fa5dd17ef4d7c38e8133caa7c3eda34b93b6d408f281d476d0aa34a41ede61b65200649da6ab7e127b9d36ebc3ec292818accc6a572cb52d8b1f51dbcb4f1e4d042b980a0d0fa2973aa5832369e0fbed743eabb8c8f614c3cc678c85ffa79dffd3551aa39db1aed5193767fc83ef49f20300c4db48cd018e98e3d1e0fc7c418e941cd3c7661d2b88560b970d6ba65ef40453565ac6c2d8e19530540cc07196171253cc2e86186b33fb5a55f2854217213f6fdf6b773b46b4dd7e91dbf96dd093b2bc61a1b6ed82198221458"}]}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x16c, 0x2a8, 0x2a8, 0x16c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffffff, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x1, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x3, 'pptp\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x25c) 4.806958307s ago: executing program 4 (id=7069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000031c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x1, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x4040) 2.470060573s ago: executing program 5 (id=7070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.936709922s ago: executing program 4 (id=7071): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x18, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x290040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'wg1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x25, "437207000000b1b470c873b52e1127eb670000476fc05088f229a80536143d7a6c9a7affa7"}}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82b30fc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6acbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de3300"/219, 0xdb}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea43a5915ddddce2c11c5e374f2e0f387d2398fa0b899ff60dc7a73addcf253cd32aafbe2b9f907d9e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e6417ce13521257beb03e31b11bcfbc3e70bd3c8c6c0be9f653f977f1600"/184, 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)={{0x12, 0x1, 0x110, 0x3, 0xa1, 0xa3, 0x8, 0x1ba6, 0x1, 0x10e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0xc0, 0x4, [{{0x9, 0x4, 0x8d, 0x4, 0x0, 0x18, 0xa8, 0x15, 0xf0}}]}}]}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48800) 0s ago: executing program 3 (id=7072): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) close(0x3) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf\x00\x00', 0x7) r6 = dup(r5) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x36) fanotify_mark(r4, 0x1, 0x48001059, r6, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000000c0)=0x2) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r9) keyctl$read(0xb, r9, &(0x7f0000001300)=""/4084, 0xff4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cubic', 0x5) unshare(0x68040200) socket(0xa, 0x1, 0xf4a) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.3.6675'. [ 1736.680681][ T30] audit: type=1326 audit(1759908178.757:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28090 comm="syz.5.6677" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1736.836705][T24934] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1737.518862][T24934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.546400][T24934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1737.656323][T24934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1737.667555][T24934] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1737.686294][T24934] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1737.695474][T24934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.877643][T24934] usb 5-1: config 0 descriptor?? [ 1738.001945][T28110] FAULT_INJECTION: forcing a failure. [ 1738.001945][T28110] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.025861][T28110] CPU: 1 UID: 0 PID: 28110 Comm: syz.2.6681 Not tainted syzkaller #0 PREEMPT(full) [ 1738.025894][T28110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1738.025908][T28110] Call Trace: [ 1738.025918][T28110] [ 1738.025928][T28110] dump_stack_lvl+0x189/0x250 [ 1738.025960][T28110] ? __pfx____ratelimit+0x10/0x10 [ 1738.025995][T28110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1738.026018][T28110] ? __pfx__printk+0x10/0x10 [ 1738.026044][T28110] ? __pfx___might_resched+0x10/0x10 [ 1738.026068][T28110] ? fs_reclaim_acquire+0x7d/0x100 [ 1738.026109][T28110] should_fail_ex+0x414/0x560 [ 1738.026144][T28110] should_failslab+0xa8/0x100 [ 1738.026166][T28110] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1738.026197][T28110] ? trace_contention_end+0x39/0x120 [ 1738.026222][T28110] ? vhost_task_create+0xf8/0x320 [ 1738.026257][T28110] vhost_task_create+0xf8/0x320 [ 1738.026285][T28110] ? is_bpf_text_address+0x292/0x2b0 [ 1738.026307][T28110] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1738.026338][T28110] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1738.026369][T28110] ? __pfx_vhost_task_create+0x10/0x10 [ 1738.026406][T28110] ? __pfx_vhost_task_fn+0x10/0x10 [ 1738.026456][T28110] kvm_mmu_post_init_vm+0x14c/0x300 [ 1738.026493][T28110] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1738.026525][T28110] ? __mutex_trylock_common+0x153/0x260 [ 1738.026555][T28110] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1738.026579][T28110] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1738.026607][T28110] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1738.026634][T28110] ? rcu_is_watching+0x15/0xb0 [ 1738.026660][T28110] ? trace_contention_end+0x39/0x120 [ 1738.026685][T28110] ? look_up_lock_class+0x74/0x170 [ 1738.026712][T28110] ? register_lock_class+0x51/0x320 [ 1738.026739][T28110] ? __lock_acquire+0xab9/0xd20 [ 1738.026791][T28110] kvm_vcpu_ioctl+0x95c/0xe90 [ 1738.026823][T28110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1738.026844][T28110] ? do_vfs_ioctl+0xbe8/0x1430 [ 1738.026876][T28110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1738.026919][T28110] ? __lock_acquire+0xab9/0xd20 [ 1738.026963][T28110] kvm_vcpu_compat_ioctl+0x203/0x390 [ 1738.027002][T28110] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1738.027028][T28110] ? __fget_files+0x3a0/0x420 [ 1738.027047][T28110] ? __fget_files+0x2a/0x420 [ 1738.027071][T28110] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1738.027099][T28110] __ia32_compat_sys_ioctl+0x540/0x840 [ 1738.027132][T28110] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1738.027161][T28110] ? __fget_files+0x3a0/0x420 [ 1738.027189][T28110] ? fput+0xa0/0xd0 [ 1738.027213][T28110] ? ksys_write+0x22a/0x250 [ 1738.027242][T28110] ? exc_page_fault+0x82/0x100 [ 1738.027268][T28110] ? __pfx_ksys_write+0x10/0x10 [ 1738.027301][T28110] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1738.027331][T28110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1738.027361][T28110] __do_fast_syscall_32+0xb6/0x2b0 [ 1738.027390][T28110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1738.027421][T28110] do_fast_syscall_32+0x34/0x80 [ 1738.027450][T28110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1738.027476][T28110] RIP: 0023:0xf701d539 [ 1738.027497][T28110] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1738.027515][T28110] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1738.027538][T28110] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 1738.027552][T28110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1738.027565][T28110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1738.027577][T28110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1738.027590][T28110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.027623][T28110] [ 1738.412814][T28085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.421855][T28085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.468013][T21692] usb 5-1: USB disconnect, device number 121 [ 1738.969241][T28122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1739.054118][T28122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1739.546412][T24934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1739.868566][T28140] IPv6: addrconf: prefix option has invalid lifetime [ 1739.994813][T28142] FAULT_INJECTION: forcing a failure. [ 1739.994813][T28142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.016909][T28142] CPU: 0 UID: 0 PID: 28142 Comm: syz.2.6692 Not tainted syzkaller #0 PREEMPT(full) [ 1740.016940][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1740.016957][T28142] Call Trace: [ 1740.016966][T28142] [ 1740.016976][T28142] dump_stack_lvl+0x189/0x250 [ 1740.017006][T28142] ? __pfx____ratelimit+0x10/0x10 [ 1740.017041][T28142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1740.017066][T28142] ? __pfx__printk+0x10/0x10 [ 1740.017105][T28142] should_fail_ex+0x414/0x560 [ 1740.017139][T28142] strncpy_from_user+0x36/0x290 [ 1740.017169][T28142] getname_flags+0xf3/0x540 [ 1740.017198][T28142] io_openat_prep+0x236/0x5a0 [ 1740.017228][T28142] ? __pfx_io_openat_prep+0x10/0x10 [ 1740.017252][T28142] ? percpu_counter_add_batch+0x190/0x1e0 [ 1740.017284][T28142] ? io_task_refs_refill+0xbb/0x180 [ 1740.017312][T28142] io_submit_sqes+0x932/0x1e60 [ 1740.017375][T28142] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1740.017426][T28142] ? ksys_write+0x1cb/0x250 [ 1740.017461][T28142] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1740.017488][T28142] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1740.017517][T28142] ? __pfx_vfs_write+0x10/0x10 [ 1740.017551][T28142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1740.017585][T28142] ? __fget_files+0x3a0/0x420 [ 1740.017613][T28142] ? fput+0xa0/0xd0 [ 1740.017639][T28142] ? ksys_write+0x22a/0x250 [ 1740.017667][T28142] ? exc_page_fault+0x82/0x100 [ 1740.017694][T28142] ? __pfx_ksys_write+0x10/0x10 [ 1740.017728][T28142] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1740.017759][T28142] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1740.017791][T28142] __do_fast_syscall_32+0xb6/0x2b0 [ 1740.017822][T28142] ? lockdep_hardirqs_on+0x9c/0x150 [ 1740.017853][T28142] do_fast_syscall_32+0x34/0x80 [ 1740.017883][T28142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1740.017910][T28142] RIP: 0023:0xf701d539 [ 1740.017929][T28142] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1740.017949][T28142] RSP: 002b:00000000f53cb55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1740.017973][T28142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000003516 [ 1740.017989][T28142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1740.018003][T28142] RBP: 00000000fffffdcf R08: 0000000000000000 R09: 0000000000000000 [ 1740.018017][T28142] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1740.018039][T28142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.018073][T28142] [ 1740.921766][T28146] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 1740.925459][T28107] Set syz1 is full, maxelem 65536 reached [ 1742.230600][ T30] audit: type=1326 audit(1759908184.307:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.334207][T28159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6698'. [ 1742.370952][ T30] audit: type=1326 audit(1759908184.307:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.438028][ T30] audit: type=1326 audit(1759908184.307:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.549965][ T30] audit: type=1326 audit(1759908184.307:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.702058][ T30] audit: type=1326 audit(1759908184.307:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.816536][ T30] audit: type=1326 audit(1759908184.337:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1742.907599][ T30] audit: type=1326 audit(1759908184.337:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1743.026222][ T30] audit: type=1326 audit(1759908184.337:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1743.089339][ T30] audit: type=1326 audit(1759908184.337:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1743.159326][ T30] audit: type=1326 audit(1759908184.407:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.5.6698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1743.224310][T28176] IPv6: addrconf: prefix option has invalid lifetime [ 1743.378885][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.387040][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.394871][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.435872][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.444365][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.454233][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.476497][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.486570][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.494711][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.521850][T28178] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 1743.646265][T21692] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1743.796245][T21692] usb 3-1: Using ep0 maxpacket: 16 [ 1743.847899][T21692] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1743.910293][T21692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.286435][T21692] usb 3-1: Product: syz [ 1744.296792][T21692] usb 3-1: Manufacturer: syz [ 1744.301862][T21692] usb 3-1: SerialNumber: syz [ 1744.323435][T21692] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1744.330055][T21692] r8152-cfgselector 3-1: config 0 descriptor?? [ 1744.854831][T28179] bond1: option arp_interval: invalid value (18446744073709551615) [ 1744.883582][T28179] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1744.959890][T28179] bond1 (unregistering): Released all slaves [ 1745.231852][T21692] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1745.248242][T21692] r8152-cfgselector 3-1: bad CDC descriptors [ 1745.305781][T21692] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1745.618855][T28217] IPv6: addrconf: prefix option has invalid lifetime [ 1745.809850][T28220] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6712'. [ 1746.001324][T28226] bond1: (slave geneve2): making interface the new active one [ 1746.010162][T28226] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1746.023062][ T66] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.034409][ T66] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.050304][ T66] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.063960][ T66] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.084207][T28234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1746.507779][T28239] FAULT_INJECTION: forcing a failure. [ 1746.507779][T28239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1746.525765][T28239] CPU: 0 UID: 0 PID: 28239 Comm: syz.4.6723 Not tainted syzkaller #0 PREEMPT(full) [ 1746.525796][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1746.525811][T28239] Call Trace: [ 1746.525830][T28239] [ 1746.525841][T28239] dump_stack_lvl+0x189/0x250 [ 1746.525870][T28239] ? __pfx____ratelimit+0x10/0x10 [ 1746.525896][T28239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.525920][T28239] ? __pfx__printk+0x10/0x10 [ 1746.525956][T28239] should_fail_ex+0x414/0x560 [ 1746.525989][T28239] _copy_to_user+0x31/0xb0 [ 1746.526013][T28239] simple_read_from_buffer+0xe1/0x170 [ 1746.526051][T28239] proc_fail_nth_read+0x1b3/0x220 [ 1746.526082][T28239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1746.526113][T28239] ? rw_verify_area+0x2a6/0x4d0 [ 1746.526144][T28239] ? __lock_acquire+0xab9/0xd20 [ 1746.526164][T28239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1746.526191][T28239] vfs_read+0x200/0xa30 [ 1746.526218][T28239] ? fdget_pos+0x247/0x320 [ 1746.526242][T28239] ? __pfx___mutex_lock+0x10/0x10 [ 1746.526270][T28239] ? __pfx_vfs_read+0x10/0x10 [ 1746.526301][T28239] ? __fget_files+0x2a/0x420 [ 1746.526326][T28239] ? __fget_files+0x3a0/0x420 [ 1746.526345][T28239] ? __fget_files+0x2a/0x420 [ 1746.526375][T28239] ksys_read+0x145/0x250 [ 1746.526415][T28239] ? __pfx_ksys_read+0x10/0x10 [ 1746.526456][T28239] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1746.526485][T28239] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.526516][T28239] __do_fast_syscall_32+0xb6/0x2b0 [ 1746.526545][T28239] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.526576][T28239] do_fast_syscall_32+0x34/0x80 [ 1746.526604][T28239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1746.526631][T28239] RIP: 0023:0xf70ad539 [ 1746.526650][T28239] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1746.526669][T28239] RSP: 002b:00000000f549d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1746.526692][T28239] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f549d620 [ 1746.526708][T28239] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 1746.526723][T28239] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1746.526736][T28239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1746.526750][T28239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.526783][T28239] [ 1746.761941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1747.296663][T21692] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1747.356472][T24935] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1747.463300][T21692] usb 2-1: Using ep0 maxpacket: 32 [ 1747.478630][T21692] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1747.489131][T21692] usb 2-1: config 0 has no interface number 0 [ 1747.509195][T21692] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1747.522064][T24935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1747.536996][T21692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.542131][T24935] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1747.545391][T21692] usb 2-1: Product: syz [ 1747.573330][T24935] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1747.576035][T21692] usb 2-1: Manufacturer: syz [ 1747.606676][T21692] usb 2-1: SerialNumber: syz [ 1747.624220][T24935] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1747.639620][T21692] usb 2-1: config 0 descriptor?? [ 1747.644726][T24935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.663896][T21692] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1747.673490][T24935] usb 6-1: Product: syz [ 1747.678577][T24935] usb 6-1: Manufacturer: syz [ 1747.682614][T21692] usb 2-1: selecting invalid altsetting 1 [ 1747.689627][T24935] usb 6-1: SerialNumber: syz [ 1747.695268][T21692] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1747.723642][T21692] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1747.726959][T24935] hub 6-1:1.0: bad descriptor, ignoring hub [ 1747.754065][T24935] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1747.804830][T21692] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1747.834239][T21692] usb 2-1: media controller created [ 1747.907709][T21692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1747.939712][T24935] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1748.027047][T21692] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1748.036574][T21692] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1748.070165][T21692] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1748.263326][T21692] usb 2-1: USB disconnect, device number 45 [ 1748.723197][T28274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1748.890075][T28274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1749.129979][T28280] FAULT_INJECTION: forcing a failure. [ 1749.129979][T28280] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.143512][T28280] CPU: 0 UID: 0 PID: 28280 Comm: syz.3.6738 Not tainted syzkaller #0 PREEMPT(full) [ 1749.143542][T28280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1749.143556][T28280] Call Trace: [ 1749.143566][T28280] [ 1749.143576][T28280] dump_stack_lvl+0x189/0x250 [ 1749.143605][T28280] ? __pfx____ratelimit+0x10/0x10 [ 1749.143631][T28280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1749.143655][T28280] ? __pfx__printk+0x10/0x10 [ 1749.143674][T28280] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1749.143712][T28280] should_fail_ex+0x414/0x560 [ 1749.143745][T28280] should_failslab+0xa8/0x100 [ 1749.143769][T28280] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1749.143802][T28280] ? sctp_add_bind_addr+0x8c/0x370 [ 1749.143827][T28280] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1749.143864][T28280] sctp_add_bind_addr+0x8c/0x370 [ 1749.143888][T28280] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1749.143925][T28280] sctp_do_bind+0x5ab/0x940 [ 1749.143970][T28280] sctp_connect_new_asoc+0x25c/0x690 [ 1749.144006][T28280] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1749.144044][T28280] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1749.144076][T28280] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1749.144099][T28280] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1749.144127][T28280] sctp_sendmsg+0x155c/0x2810 [ 1749.144172][T28280] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1749.144207][T28280] ? aa_sk_perm+0x81e/0x950 [ 1749.144241][T28280] ? __pfx_aa_sk_perm+0x10/0x10 [ 1749.144272][T28280] ? sock_rps_record_flow+0x19/0x410 [ 1749.144312][T28280] ? inet_sendmsg+0x2f4/0x370 [ 1749.144337][T28280] __sock_sendmsg+0x19c/0x270 [ 1749.144373][T28280] __sys_sendto+0x3bd/0x520 [ 1749.144400][T28280] ? __pfx___sys_sendto+0x10/0x10 [ 1749.144419][T28280] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1749.144462][T28280] ? __fget_files+0x3a0/0x420 [ 1749.144507][T28280] ? rcu_is_watching+0x15/0xb0 [ 1749.144540][T28280] __ia32_sys_sendto+0xdd/0x100 [ 1749.144567][T28280] __do_fast_syscall_32+0xb6/0x2b0 [ 1749.144597][T28280] ? lockdep_hardirqs_on+0x9c/0x150 [ 1749.144628][T28280] do_fast_syscall_32+0x34/0x80 [ 1749.144657][T28280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1749.144684][T28280] RIP: 0023:0xf707d539 [ 1749.144704][T28280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1749.144723][T28280] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1749.144746][T28280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1749.144762][T28280] RDX: 0000000000000001 RSI: 0000000000044004 RDI: 0000000080000100 [ 1749.144776][T28280] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1749.144789][T28280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1749.144802][T28280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.144836][T28280] [ 1749.424410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1750.856695][T24935] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1751.006267][T24935] usb 4-1: Using ep0 maxpacket: 16 [ 1751.015939][T24935] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1751.030748][T24935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.097663][T24935] usb 4-1: Product: syz [ 1751.102666][T24935] usb 4-1: Manufacturer: syz [ 1751.108774][T24935] usb 4-1: SerialNumber: syz [ 1751.298197][T24935] usb 4-1: config 0 descriptor?? [ 1751.857554][T24935] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1751.890982][T24935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1751.958574][T24935] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1751.982334][T24935] usb 4-1: media controller created [ 1752.155722][T24935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1752.356685][T24935] zl10353_read_register: readreg error (reg=127, ret==0) [ 1752.377484][T14812] usb 6-1: USB disconnect, device number 29 [ 1752.398719][T14812] usblp0: removed [ 1752.408689][T24935] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1752.434019][T24935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1752.496171][T24935] usb 4-1: USB disconnect, device number 4 [ 1752.646283][ T89] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1752.655754][T24935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1752.826878][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 1752.875856][ T89] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1752.901431][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.936243][ T89] usb 5-1: Product: syz [ 1752.947941][ T89] usb 5-1: Manufacturer: syz [ 1752.963463][ T89] usb 5-1: SerialNumber: syz [ 1752.977183][ T89] usb 5-1: config 0 descriptor?? [ 1753.220016][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 1753.412373][ T89] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1753.449304][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1753.480686][ T89] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1753.603120][ T89] usb 5-1: media controller created [ 1753.614288][T28314] FAULT_INJECTION: forcing a failure. [ 1753.614288][T28314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.661575][T28314] CPU: 1 UID: 0 PID: 28314 Comm: syz.4.6748 Not tainted syzkaller #0 PREEMPT(full) [ 1753.661618][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1753.661633][T28314] Call Trace: [ 1753.661643][T28314] [ 1753.661653][T28314] dump_stack_lvl+0x189/0x250 [ 1753.661682][T28314] ? __pfx____ratelimit+0x10/0x10 [ 1753.661707][T28314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1753.661731][T28314] ? __pfx__printk+0x10/0x10 [ 1753.661750][T28314] ? lock_acquire+0x175/0x360 [ 1753.661786][T28314] should_fail_ex+0x414/0x560 [ 1753.661818][T28314] _copy_from_user+0x2d/0xb0 [ 1753.661840][T28314] compat_i2cdev_ioctl+0x197/0x5c0 [ 1753.661879][T28314] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1753.661914][T28314] ? __fget_files+0x3a0/0x420 [ 1753.661933][T28314] ? __fget_files+0x2a/0x420 [ 1753.661956][T28314] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1753.661985][T28314] __ia32_compat_sys_ioctl+0x540/0x840 [ 1753.662016][T28314] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1753.662045][T28314] ? __fget_files+0x3a0/0x420 [ 1753.662072][T28314] ? fput+0xa0/0xd0 [ 1753.662095][T28314] ? ksys_write+0x22a/0x250 [ 1753.662126][T28314] ? __pfx_ksys_write+0x10/0x10 [ 1753.662160][T28314] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1753.662188][T28314] ? lockdep_hardirqs_on+0x9c/0x150 [ 1753.662218][T28314] __do_fast_syscall_32+0xb6/0x2b0 [ 1753.662246][T28314] ? lockdep_hardirqs_on+0x9c/0x150 [ 1753.662276][T28314] do_fast_syscall_32+0x34/0x80 [ 1753.662304][T28314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1753.662331][T28314] RIP: 0023:0xf70ad539 [ 1753.662351][T28314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1753.662370][T28314] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1753.662393][T28314] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1753.662408][T28314] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.662421][T28314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.662434][T28314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1753.662447][T28314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.662480][T28314] [ 1753.900398][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1754.027469][ T89] zl10353_read_register: readreg error (reg=127, ret==0) [ 1754.034776][ T89] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1754.043088][ T89] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1754.053724][ T89] usb 5-1: USB disconnect, device number 122 [ 1754.078947][ T89] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1755.693824][T28360] validate_nla: 43 callbacks suppressed [ 1755.693847][T28360] netlink: 'syz.3.6763': attribute type 10 has an invalid length. [ 1755.716646][T28361] netlink: 'syz.3.6763': attribute type 10 has an invalid length. [ 1755.860225][T28361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1755.888539][T28360] binder: 28358:28360 ioctl 9208 3 returned -22 [ 1756.269767][T28367] FAULT_INJECTION: forcing a failure. [ 1756.269767][T28367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.326217][T28367] CPU: 0 UID: 0 PID: 28367 Comm: syz.1.6765 Not tainted syzkaller #0 PREEMPT(full) [ 1756.326248][T28367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1756.326263][T28367] Call Trace: [ 1756.326272][T28367] [ 1756.326283][T28367] dump_stack_lvl+0x189/0x250 [ 1756.326313][T28367] ? __pfx____ratelimit+0x10/0x10 [ 1756.326338][T28367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1756.326361][T28367] ? __pfx__printk+0x10/0x10 [ 1756.326397][T28367] should_fail_ex+0x414/0x560 [ 1756.326429][T28367] _copy_to_user+0x31/0xb0 [ 1756.326453][T28367] simple_read_from_buffer+0xe1/0x170 [ 1756.326492][T28367] proc_fail_nth_read+0x1b3/0x220 [ 1756.326523][T28367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.326553][T28367] ? rw_verify_area+0x2a6/0x4d0 [ 1756.326583][T28367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.326612][T28367] vfs_read+0x200/0xa30 [ 1756.326646][T28367] ? _raw_read_unlock+0x3f/0x50 [ 1756.326672][T28367] ? __pfx_vfs_read+0x10/0x10 [ 1756.326700][T28367] ? __pfx_do_pidfd_send_signal+0x10/0x10 [ 1756.326741][T28367] ? count_memcg_event_mm+0x21/0x260 [ 1756.326769][T28367] ? count_memcg_event_mm+0x21/0x260 [ 1756.326809][T28367] ksys_read+0x145/0x250 [ 1756.326842][T28367] ? __pfx_ksys_read+0x10/0x10 [ 1756.326875][T28367] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1756.326905][T28367] ? lockdep_hardirqs_on+0x9c/0x150 [ 1756.326934][T28367] __do_fast_syscall_32+0xb6/0x2b0 [ 1756.326964][T28367] ? lockdep_hardirqs_on+0x9c/0x150 [ 1756.326994][T28367] do_fast_syscall_32+0x34/0x80 [ 1756.327022][T28367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1756.327048][T28367] RIP: 0023:0xf7f05539 [ 1756.327075][T28367] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1756.327095][T28367] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1756.327119][T28367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f6620 [ 1756.327135][T28367] RDX: 000000000000000f RSI: 00000000f7395ff4 RDI: 0000000000000000 [ 1756.327148][T28367] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1756.327160][T28367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1756.327172][T28367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.327204][T28367] [ 1757.152693][T28383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6773'. [ 1757.452956][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6774'. [ 1758.466888][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1758.479559][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1758.499570][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1758.508689][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1758.518043][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1758.796239][T24934] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1758.959075][T24934] usb 6-1: too many configurations: 22, using maximum allowed: 8 [ 1758.992315][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.026815][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.060306][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.079313][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6785'. [ 1759.088734][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.113385][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.138296][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1759.163378][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.186207][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.224506][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.240707][T28410] chnl_net:caif_netlink_parms(): no params data found [ 1759.247844][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.269869][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.320202][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1759.339498][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.356263][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.382080][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.396327][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.408535][T28440] FAULT_INJECTION: forcing a failure. [ 1759.408535][T28440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.422392][T28440] CPU: 1 UID: 0 PID: 28440 Comm: syz.1.6789 Not tainted syzkaller #0 PREEMPT(full) [ 1759.422418][T28440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1759.422431][T28440] Call Trace: [ 1759.422440][T28440] [ 1759.422450][T28440] dump_stack_lvl+0x189/0x250 [ 1759.422477][T28440] ? __pfx____ratelimit+0x10/0x10 [ 1759.422502][T28440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1759.422525][T28440] ? __pfx__printk+0x10/0x10 [ 1759.422561][T28440] should_fail_ex+0x414/0x560 [ 1759.422594][T28440] _copy_to_user+0x31/0xb0 [ 1759.422616][T28440] simple_read_from_buffer+0xe1/0x170 [ 1759.422654][T28440] proc_fail_nth_read+0x1b3/0x220 [ 1759.422685][T28440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1759.422715][T28440] ? rw_verify_area+0x2a6/0x4d0 [ 1759.422743][T28440] ? __lock_acquire+0xab9/0xd20 [ 1759.422762][T28440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1759.422791][T28440] vfs_read+0x200/0xa30 [ 1759.422819][T28440] ? fdget_pos+0x247/0x320 [ 1759.422844][T28440] ? __pfx___mutex_lock+0x10/0x10 [ 1759.422872][T28440] ? __pfx_vfs_read+0x10/0x10 [ 1759.422904][T28440] ? __fget_files+0x2a/0x420 [ 1759.422928][T28440] ? __fget_files+0x3a0/0x420 [ 1759.422946][T28440] ? __fget_files+0x2a/0x420 [ 1759.422974][T28440] ksys_read+0x145/0x250 [ 1759.423001][T28440] ? exc_page_fault+0x82/0x100 [ 1759.423026][T28440] ? __pfx_ksys_read+0x10/0x10 [ 1759.423058][T28440] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1759.423095][T28440] ? lockdep_hardirqs_on+0x9c/0x150 [ 1759.423125][T28440] __do_fast_syscall_32+0xb6/0x2b0 [ 1759.423154][T28440] ? lockdep_hardirqs_on+0x9c/0x150 [ 1759.423184][T28440] do_fast_syscall_32+0x34/0x80 [ 1759.423212][T28440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1759.423238][T28440] RIP: 0023:0xf7f05539 [ 1759.423258][T28440] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1759.423277][T28440] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1759.423299][T28440] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f6620 [ 1759.423313][T28440] RDX: 000000000000000f RSI: 00000000f7395ff4 RDI: 0000000000000000 [ 1759.423327][T28440] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1759.423339][T28440] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1759.423353][T28440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.423385][T28440] [ 1759.446725][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.687368][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1759.699486][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.707803][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.725003][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.731428][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.744449][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.755924][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1759.764414][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.775126][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.787313][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.793458][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.808969][T28410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.816336][T28410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.823779][T28410] bridge_slave_0: entered allmulticast mode [ 1759.833129][T28410] bridge_slave_0: entered promiscuous mode [ 1759.842616][T28410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.851877][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.868593][T28410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.875890][T28410] bridge_slave_1: entered allmulticast mode [ 1759.884407][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1759.893439][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1759.903240][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1759.915685][T28410] bridge_slave_1: entered promiscuous mode [ 1759.925587][T24934] usb 6-1: config 5 has no interface number 0 [ 1759.938780][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1759.977447][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1759.996233][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1760.023540][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1760.038280][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1760.059614][T28410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.068885][T24934] usb 6-1: config 5 has no interface number 0 [ 1760.075037][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1760.100678][T28410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.106307][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1760.136224][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1760.144721][T24934] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 1760.154089][T24934] usb 6-1: config 5 has an invalid descriptor of length 26, skipping remainder of the config [ 1760.249858][T24934] usb 6-1: config 5 has no interface number 0 [ 1760.259268][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 1760.271587][T24934] usb 6-1: config 5 interface 187 altsetting 8 endpoint 0x1 has invalid maxpacket 37637, setting to 1023 [ 1760.287248][T24934] usb 6-1: config 5 interface 187 has no altsetting 0 [ 1760.296843][T24934] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a [ 1760.332106][T24934] usb 6-1: New USB device strings: Mfr=145, Product=161, SerialNumber=84 [ 1760.348994][T28410] team0: Port device team_slave_0 added [ 1760.379874][T28410] team0: Port device team_slave_1 added [ 1760.434119][T24934] usb 6-1: Product: syz [ 1760.438633][T24934] usb 6-1: Manufacturer: syz [ 1760.465214][T24934] usb 6-1: SerialNumber: syz [ 1760.516016][T28410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.541974][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.589016][ T5148] Bluetooth: hci2: command tx timeout [ 1760.606375][T28410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.623058][T28410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.635953][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.663499][T28410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.753956][T28410] hsr_slave_0: entered promiscuous mode [ 1760.766395][T24934] usb 6-1: USB disconnect, device number 30 [ 1760.770522][T28410] hsr_slave_1: entered promiscuous mode [ 1760.864940][T28410] debugfs: 'hsr0' already exists in 'hsr' [ 1760.949543][T28410] Cannot create hsr debugfs directory [ 1761.040217][T28459] IPVS: set_ctl: invalid protocol: 60 172.20.20.26:20003 [ 1761.467524][T24936] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1761.644720][T24936] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1761.671928][T24936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.682228][T24936] usb 3-1: Product: syz [ 1761.688688][T24936] usb 3-1: Manufacturer: syz [ 1761.694159][T28410] bond0: (slave netdevsim0): Releasing backup interface [ 1761.702227][T24936] usb 3-1: SerialNumber: syz [ 1761.720162][T24936] usb 3-1: config 0 descriptor?? [ 1761.895306][T28482] FAULT_INJECTION: forcing a failure. [ 1761.895306][T28482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.914569][T28482] CPU: 1 UID: 0 PID: 28482 Comm: syz.3.6805 Not tainted syzkaller #0 PREEMPT(full) [ 1761.914595][T28482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1761.914607][T28482] Call Trace: [ 1761.914614][T28482] [ 1761.914623][T28482] dump_stack_lvl+0x189/0x250 [ 1761.914647][T28482] ? __pfx____ratelimit+0x10/0x10 [ 1761.914667][T28482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1761.914685][T28482] ? __pfx__printk+0x10/0x10 [ 1761.914703][T28482] ? __might_fault+0xb0/0x130 [ 1761.914735][T28482] should_fail_ex+0x414/0x560 [ 1761.914760][T28482] _copy_from_user+0x2d/0xb0 [ 1761.914778][T28482] raw_ioctl+0xc32/0x3c90 [ 1761.914802][T28482] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1761.914826][T28482] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1761.914851][T28482] ? do_vfs_ioctl+0xbe8/0x1430 [ 1761.914876][T28482] ? __pfx_raw_ioctl+0x10/0x10 [ 1761.914908][T28482] ? __lock_acquire+0xab9/0xd20 [ 1761.914942][T28482] ? __fget_files+0x2a/0x420 [ 1761.914962][T28482] ? __fget_files+0x3a0/0x420 [ 1761.914977][T28482] ? __fget_files+0x2a/0x420 [ 1761.914996][T28482] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1761.915021][T28482] __ia32_compat_sys_ioctl+0x540/0x840 [ 1761.915049][T28482] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1761.915073][T28482] ? __fget_files+0x3a0/0x420 [ 1761.915096][T28482] ? fput+0xa0/0xd0 [ 1761.915116][T28482] ? ksys_write+0x22a/0x250 [ 1761.915142][T28482] ? exc_page_fault+0x82/0x100 [ 1761.915169][T28482] ? __pfx_ksys_write+0x10/0x10 [ 1761.915202][T28482] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1761.915230][T28482] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.915259][T28482] __do_fast_syscall_32+0xb6/0x2b0 [ 1761.915287][T28482] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.915318][T28482] do_fast_syscall_32+0x34/0x80 [ 1761.915346][T28482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1761.915372][T28482] RIP: 0023:0xf707d539 [ 1761.915392][T28482] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1761.915410][T28482] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1761.915433][T28482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085503 [ 1761.915449][T28482] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1761.915463][T28482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1761.915477][T28482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1761.915491][T28482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1761.915523][T28482] [ 1761.917841][T28410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1762.192434][T28466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.201893][T28466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.219555][T28410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1762.230448][T28410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1762.251221][T28410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1762.330503][T24936] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1762.337251][T24936] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1762.368280][T24936] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1762.391632][T24936] usb 3-1: USB disconnect, device number 23 [ 1762.452348][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1762.453996][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1762.558519][T28410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.651215][T28410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.674302][ T5148] Bluetooth: hci2: command tx timeout [ 1762.692588][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.699835][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.766741][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.773982][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.078416][T28410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.203282][T28410] veth0_vlan: entered promiscuous mode [ 1763.209691][T28504] FAULT_INJECTION: forcing a failure. [ 1763.209691][T28504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.236272][T28504] CPU: 1 UID: 0 PID: 28504 Comm: syz.5.6811 Not tainted syzkaller #0 PREEMPT(full) [ 1763.236303][T28504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1763.236317][T28504] Call Trace: [ 1763.236325][T28504] [ 1763.236335][T28504] dump_stack_lvl+0x189/0x250 [ 1763.236364][T28504] ? __pfx____ratelimit+0x10/0x10 [ 1763.236388][T28504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1763.236411][T28504] ? __pfx__printk+0x10/0x10 [ 1763.236445][T28504] should_fail_ex+0x414/0x560 [ 1763.236477][T28504] _copy_from_user+0x2d/0xb0 [ 1763.236499][T28504] get_user_ifreq+0xa4/0x180 [ 1763.236530][T28504] inet_ioctl+0x38c/0x4c0 [ 1763.236554][T28504] ? __pfx_inet_ioctl+0x10/0x10 [ 1763.236572][T28504] ? lockdep_hardirqs_on+0x9c/0x150 [ 1763.236625][T28504] ? do_vfs_ioctl+0xbe8/0x1430 [ 1763.236656][T28504] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1763.236680][T28504] ? inet_compat_ioctl+0x1aa/0x3a0 [ 1763.236704][T28504] sock_do_ioctl+0xd9/0x300 [ 1763.236737][T28504] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1763.236768][T28504] ? __lock_acquire+0xab9/0xd20 [ 1763.236803][T28504] compat_sock_ioctl+0xb8d/0xc80 [ 1763.236839][T28504] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1763.236871][T28504] ? __fget_files+0x3a0/0x420 [ 1763.236889][T28504] ? __fget_files+0x2a/0x420 [ 1763.236913][T28504] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1763.236941][T28504] __ia32_compat_sys_ioctl+0x540/0x840 [ 1763.236973][T28504] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1763.237000][T28504] ? __fget_files+0x3a0/0x420 [ 1763.237024][T28504] ? fput+0xa0/0xd0 [ 1763.237047][T28504] ? ksys_write+0x22a/0x250 [ 1763.237075][T28504] ? exc_page_fault+0x82/0x100 [ 1763.237101][T28504] ? __pfx_ksys_write+0x10/0x10 [ 1763.237134][T28504] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1763.237162][T28504] ? lockdep_hardirqs_on+0x9c/0x150 [ 1763.237191][T28504] __do_fast_syscall_32+0xb6/0x2b0 [ 1763.237220][T28504] ? lockdep_hardirqs_on+0x9c/0x150 [ 1763.237250][T28504] do_fast_syscall_32+0x34/0x80 [ 1763.237278][T28504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1763.237310][T28504] RIP: 0023:0xf7fa1539 [ 1763.237331][T28504] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1763.237350][T28504] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1763.237373][T28504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008916 [ 1763.237389][T28504] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.237403][T28504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1763.237416][T28504] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1763.237429][T28504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1763.237462][T28504] [ 1763.246402][T28410] veth1_vlan: entered promiscuous mode [ 1763.267294][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1763.390067][T28410] veth0_macvtap: entered promiscuous mode [ 1763.700184][T28410] veth1_macvtap: entered promiscuous mode [ 1763.875744][T28410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.935253][T28410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.969129][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.995995][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.035620][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.136537][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.461637][T28522] FAULT_INJECTION: forcing a failure. [ 1764.461637][T28522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1764.506346][T28522] CPU: 0 UID: 0 PID: 28522 Comm: syz.3.6817 Not tainted syzkaller #0 PREEMPT(full) [ 1764.506377][T28522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1764.506390][T28522] Call Trace: [ 1764.506400][T28522] [ 1764.506410][T28522] dump_stack_lvl+0x189/0x250 [ 1764.506438][T28522] ? __pfx____ratelimit+0x10/0x10 [ 1764.506463][T28522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1764.506486][T28522] ? __pfx__printk+0x10/0x10 [ 1764.506510][T28522] ? fs_reclaim_acquire+0x7d/0x100 [ 1764.506554][T28522] should_fail_ex+0x414/0x560 [ 1764.506585][T28522] prepare_alloc_pages+0x213/0x610 [ 1764.506629][T28522] __alloc_frozen_pages_noprof+0x123/0x370 [ 1764.506656][T28522] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1764.506685][T28522] ? __lock_acquire+0xab9/0xd20 [ 1764.506709][T28522] ? policy_nodemask+0x27c/0x720 [ 1764.506749][T28522] alloc_pages_mpol+0x232/0x4a0 [ 1764.506790][T28522] alloc_pages_noprof+0xa9/0x190 [ 1764.506814][T28522] pte_alloc_one+0x23/0x310 [ 1764.506838][T28522] ? __pte_alloc+0x1d/0x1a0 [ 1764.506862][T28522] __pte_alloc+0x25/0x1a0 [ 1764.506889][T28522] __handle_mm_fault+0x4985/0x5400 [ 1764.506937][T28522] ? __pfx___handle_mm_fault+0x10/0x10 [ 1764.506989][T28522] ? find_vma+0xe7/0x160 [ 1764.507016][T28522] ? __pfx_find_vma+0x10/0x10 [ 1764.507047][T28522] handle_mm_fault+0x40a/0x8e0 [ 1764.507087][T28522] do_user_addr_fault+0x764/0x1380 [ 1764.507128][T28522] exc_page_fault+0x82/0x100 [ 1764.507156][T28522] asm_exc_page_fault+0x26/0x30 [ 1764.507177][T28522] RIP: 0010:__get_user_4+0x14/0x20 [ 1764.507211][T28522] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 80 2e 04 00 90 90 90 90 90 90 90 90 90 90 [ 1764.507230][T28522] RSP: 0018:ffffc9000de475b8 EFLAGS: 00050287 [ 1764.507250][T28522] RAX: 00000000800001c0 RBX: ffff88807a94a580 RCX: bec5e0c4bce60a00 [ 1764.507275][T28522] RDX: 00007ffffffff000 RSI: ffffffff8d9d13e7 RDI: ffffffff8bc074e0 [ 1764.507291][T28522] RBP: ffffc9000de47d70 R08: 0000000000000000 R09: ffffffff820cd760 [ 1764.507307][T28522] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000004 [ 1764.507319][T28522] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92001bc8ec4 [ 1764.507343][T28522] ? __might_fault+0xb0/0x130 [ 1764.507383][T28522] mptcp_getsockopt+0x671/0x1be0 [ 1764.507423][T28522] ? __page_table_check_zero+0xba/0x530 [ 1764.507455][T28522] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1764.507486][T28522] ? __page_table_check_zero+0xba/0x530 [ 1764.507516][T28522] ? __page_table_check_zero+0x406/0x530 [ 1764.507546][T28522] ? __page_table_check_zero+0xba/0x530 [ 1764.507581][T28522] ? post_alloc_hook+0x253/0x2a0 [ 1764.507616][T28522] ? get_page_from_freelist+0x2365/0x2440 [ 1764.507684][T28522] ? __lock_acquire+0xab9/0xd20 [ 1764.507721][T28522] ? __lock_acquire+0xab9/0xd20 [ 1764.507754][T28522] ? __might_fault+0xb0/0x130 [ 1764.507785][T28522] ? _parse_integer_limit+0x1ae/0x1f0 [ 1764.507815][T28522] ? aa_label_sk_perm+0x4cd/0x630 [ 1764.507848][T28522] ? __lock_acquire+0xab9/0xd20 [ 1764.507871][T28522] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1764.507921][T28522] ? __pfx___might_resched+0x10/0x10 [ 1764.507947][T28522] ? rcu_read_lock_any_held+0xb3/0x120 [ 1764.507975][T28522] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1764.508006][T28522] ? vfs_write+0x956/0xb30 [ 1764.508040][T28522] ? aa_sk_perm+0x81e/0x950 [ 1764.508073][T28522] ? __pfx_aa_sk_perm+0x10/0x10 [ 1764.508105][T28522] ? aa_sock_opt_perm+0xff/0x1b0 [ 1764.508139][T28522] ? sock_common_getsockopt+0x2d/0xb0 [ 1764.508171][T28522] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1764.508206][T28522] do_sock_getsockopt+0x372/0x450 [ 1764.508235][T28522] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1764.508258][T28522] ? lockdep_hardirqs_on+0x70/0x150 [ 1764.508289][T28522] ? __fget_files+0x3a0/0x420 [ 1764.508308][T28522] ? __fget_files+0x2a/0x420 [ 1764.508336][T28522] __ia32_sys_getsockopt+0x1a5/0x250 [ 1764.508361][T28522] ? lockdep_hardirqs_on+0x70/0x150 [ 1764.508388][T28522] ? lockdep_hardirqs_on+0x70/0x150 [ 1764.508418][T28522] __do_fast_syscall_32+0xb6/0x2b0 [ 1764.508448][T28522] ? lockdep_hardirqs_on+0x9c/0x150 [ 1764.508479][T28522] do_fast_syscall_32+0x34/0x80 [ 1764.508507][T28522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1764.508540][T28522] RIP: 0023:0xf707d539 [ 1764.508558][T28522] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1764.508577][T28522] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1764.508598][T28522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011c [ 1764.508613][T28522] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000800001c0 [ 1764.508627][T28522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1764.508639][T28522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1764.508653][T28522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1764.508686][T28522] [ 1764.530055][T28529] FAULT_INJECTION: forcing a failure. [ 1764.530055][T28529] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.537885][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.557507][T28529] CPU: 0 UID: 0 PID: 28529 Comm: syz.1.6820 Not tainted syzkaller #0 PREEMPT(full) [ 1764.557541][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1764.557558][T28529] Call Trace: [ 1764.557568][T28529] [ 1764.557581][T28529] dump_stack_lvl+0x189/0x250 [ 1764.557612][T28529] ? __pfx____ratelimit+0x10/0x10 [ 1764.557641][T28529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1764.557668][T28529] ? __pfx__printk+0x10/0x10 [ 1764.557701][T28529] ? __pfx___might_resched+0x10/0x10 [ 1764.557727][T28529] ? fs_reclaim_acquire+0x7d/0x100 [ 1764.557771][T28529] should_fail_ex+0x414/0x560 [ 1764.557807][T28529] should_failslab+0xa8/0x100 [ 1764.557833][T28529] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1764.557865][T28529] ? arch_stack_walk+0xfc/0x150 [ 1764.557895][T28529] ? __alloc_skb+0x112/0x2d0 [ 1764.557927][T28529] __alloc_skb+0x112/0x2d0 [ 1764.557956][T28529] alloc_skb_with_frags+0xca/0x890 [ 1764.558001][T28529] sock_alloc_send_pskb+0x84d/0x980 [ 1764.558057][T28529] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1764.558095][T28529] ? dev_get_by_index+0x22/0x2e0 [ 1764.558126][T28529] ? dev_get_by_index+0x22/0x2e0 [ 1764.558167][T28529] packet_sendmsg+0x33a0/0x5080 [ 1764.558214][T28529] ? aa_pivotroot+0xe0/0x13c0 [ 1764.558276][T28529] ? __pfx___might_resched+0x10/0x10 [ 1764.558322][T28529] ? __pfx_packet_sendmsg+0x10/0x10 [ 1764.558355][T28529] ? aa_sk_perm+0x81e/0x950 [ 1764.558394][T28529] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1764.558432][T28529] ? __asan_memset+0x22/0x50 [ 1764.558466][T28529] ? __import_iovec+0x40e/0x7f0 [ 1764.558488][T28529] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1764.558524][T28529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1764.558549][T28529] ? __pfx_packet_sendmsg+0x10/0x10 [ 1764.558585][T28529] __sock_sendmsg+0x21c/0x270 [ 1764.558623][T28529] ____sys_sendmsg+0x505/0x830 [ 1764.558659][T28529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1764.558707][T28529] ___sys_sendmsg+0x21f/0x2a0 [ 1764.558740][T28529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1764.558812][T28529] ? __fget_files+0x2a/0x420 [ 1764.558833][T28529] ? __fget_files+0x3a0/0x420 [ 1764.558868][T28529] __sys_sendmsg+0x164/0x220 [ 1764.558901][T28529] ? __pfx___sys_sendmsg+0x10/0x10 [ 1764.558940][T28529] ? __pfx_ksys_write+0x10/0x10 [ 1764.558978][T28529] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1764.559012][T28529] ? lockdep_hardirqs_on+0x9c/0x150 [ 1764.559044][T28529] __do_fast_syscall_32+0xb6/0x2b0 [ 1764.559079][T28529] ? lockdep_hardirqs_on+0x9c/0x150 [ 1764.559113][T28529] do_fast_syscall_32+0x34/0x80 [ 1764.559144][T28529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1764.559174][T28529] RIP: 0023:0xf7f05539 [ 1764.559197][T28529] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1764.559219][T28529] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1764.559246][T28529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 1764.559270][T28529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1764.559286][T28529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1764.559301][T28529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1764.559315][T28529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1764.559352][T28529] [ 1764.746302][T14514] Bluetooth: hci2: command tx timeout [ 1765.359338][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.517998][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.525883][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.146444][T28544] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1766.615437][ T5918] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1766.778285][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.778322][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.778364][ T5918] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1766.778390][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.781628][ T5918] usb 5-1: config 0 descriptor?? [ 1767.207377][ T5918] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1767.307330][ T5918] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1767.394321][T14514] Bluetooth: hci2: command tx timeout [ 1767.407431][ T5918] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 1768.011459][T28554] cp2112 0003:10C4:EA90.0028: Error starting transaction: -38 [ 1768.022881][ T5918] cp2112 0003:10C4:EA90.0028: error reading lock byte: -71 [ 1768.034048][ T5918] usb 5-1: USB disconnect, device number 123 [ 1768.966348][ T5918] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1769.096243][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1769.129737][T28589] netlink: 'syz.4.6835': attribute type 21 has an invalid length. [ 1769.138028][T28589] netlink: 'syz.4.6835': attribute type 6 has an invalid length. [ 1769.146216][T28589] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6835'. [ 1769.398427][ T5918] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1769.536379][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1769.545231][T28599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6839'. [ 1769.646710][ T5918] usb usb6-port1: attempt power cycle [ 1769.835796][T28605] FAULT_INJECTION: forcing a failure. [ 1769.835796][T28605] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.862532][T28605] CPU: 1 UID: 0 PID: 28605 Comm: syz.4.6841 Not tainted syzkaller #0 PREEMPT(full) [ 1769.862555][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1769.862566][T28605] Call Trace: [ 1769.862573][T28605] [ 1769.862580][T28605] dump_stack_lvl+0x189/0x250 [ 1769.862602][T28605] ? __pfx____ratelimit+0x10/0x10 [ 1769.862620][T28605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1769.862637][T28605] ? __pfx__printk+0x10/0x10 [ 1769.862657][T28605] ? __pfx___might_resched+0x10/0x10 [ 1769.862678][T28605] should_fail_ex+0x414/0x560 [ 1769.862706][T28605] should_failslab+0xa8/0x100 [ 1769.862729][T28605] __kmalloc_noprof+0xcb/0x7f0 [ 1769.862759][T28605] ? do_sys_poll+0x2ac/0x1070 [ 1769.862797][T28605] do_sys_poll+0x2ac/0x1070 [ 1769.862846][T28605] ? __pfx_do_sys_poll+0x10/0x10 [ 1769.862960][T28605] ? rcu_read_lock_any_held+0xb3/0x120 [ 1769.862988][T28605] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1769.863019][T28605] ? vfs_write+0x956/0xb30 [ 1769.863073][T28605] ? set_compat_user_sigmask+0xc1/0x1b0 [ 1769.863099][T28605] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1769.863136][T28605] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 1769.863171][T28605] ? fput+0xa0/0xd0 [ 1769.863197][T28605] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1769.863231][T28605] ? __pfx_ksys_write+0x10/0x10 [ 1769.863264][T28605] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1769.863294][T28605] ? lockdep_hardirqs_on+0x9c/0x150 [ 1769.863323][T28605] __do_fast_syscall_32+0xb6/0x2b0 [ 1769.863353][T28605] ? lockdep_hardirqs_on+0x9c/0x150 [ 1769.863384][T28605] do_fast_syscall_32+0x34/0x80 [ 1769.863413][T28605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.863438][T28605] RIP: 0023:0xf70cd539 [ 1769.863452][T28605] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1769.863466][T28605] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1769.863482][T28605] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 1769.863493][T28605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1769.863502][T28605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.863511][T28605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1769.863520][T28605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.863542][T28605] [ 1770.158172][ T5918] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1770.187044][ T5918] usb 6-1: device descriptor read/8, error -71 [ 1770.446569][ T5918] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1770.491560][ T5918] usb 6-1: device descriptor read/8, error -71 [ 1770.689000][ T5918] usb usb6-port1: unable to enumerate USB device [ 1771.566785][T28628] FAULT_INJECTION: forcing a failure. [ 1771.566785][T28628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.598091][T28628] CPU: 1 UID: 0 PID: 28628 Comm: syz.2.6849 Not tainted syzkaller #0 PREEMPT(full) [ 1771.598122][T28628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1771.598137][T28628] Call Trace: [ 1771.598146][T28628] [ 1771.598157][T28628] dump_stack_lvl+0x189/0x250 [ 1771.598186][T28628] ? __pfx____ratelimit+0x10/0x10 [ 1771.598211][T28628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1771.598234][T28628] ? __pfx__printk+0x10/0x10 [ 1771.598261][T28628] ? __might_fault+0xb0/0x130 [ 1771.598303][T28628] should_fail_ex+0x414/0x560 [ 1771.598334][T28628] _copy_from_user+0x2d/0xb0 [ 1771.598356][T28628] get_compat_msghdr+0xad/0x4a0 [ 1771.598388][T28628] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1771.598426][T28628] ___sys_sendmsg+0x193/0x2a0 [ 1771.598455][T28628] ? __pfx____sys_sendmsg+0x10/0x10 [ 1771.598518][T28628] ? __fget_files+0x2a/0x420 [ 1771.598537][T28628] ? __fget_files+0x3a0/0x420 [ 1771.598568][T28628] __sys_sendmsg+0x164/0x220 [ 1771.598602][T28628] ? __pfx___sys_sendmsg+0x10/0x10 [ 1771.598637][T28628] ? __pfx_ksys_write+0x10/0x10 [ 1771.598670][T28628] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1771.598699][T28628] ? lockdep_hardirqs_on+0x9c/0x150 [ 1771.598728][T28628] __do_fast_syscall_32+0xb6/0x2b0 [ 1771.598757][T28628] ? lockdep_hardirqs_on+0x9c/0x150 [ 1771.598786][T28628] do_fast_syscall_32+0x34/0x80 [ 1771.598814][T28628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1771.598840][T28628] RIP: 0023:0xf701d539 [ 1771.598862][T28628] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1771.598881][T28628] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1771.598904][T28628] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 1771.598919][T28628] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1771.598932][T28628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.598945][T28628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1771.598958][T28628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.598989][T28628] [ 1771.820862][T14812] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1772.161221][T28632] usb usb8: usbfs: process 28632 (syz.4.6850) did not claim interface 0 before use [ 1772.321519][T14812] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1772.336245][T14812] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1772.387517][T14812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1772.439749][T14812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1772.451654][T14812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1772.466082][T28632] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1772.471194][T14812] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1772.490418][T28638] FAULT_INJECTION: forcing a failure. [ 1772.490418][T28638] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.561979][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6852'. [ 1772.670693][T14812] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1772.707270][T28638] CPU: 0 UID: 0 PID: 28638 Comm: syz.5.6853 Not tainted syzkaller #0 PREEMPT(full) [ 1772.707302][T28638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1772.707317][T28638] Call Trace: [ 1772.707328][T28638] [ 1772.707338][T28638] dump_stack_lvl+0x189/0x250 [ 1772.707367][T28638] ? __pfx____ratelimit+0x10/0x10 [ 1772.707392][T28638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.707420][T28638] ? __pfx__printk+0x10/0x10 [ 1772.707441][T28638] ? __pfx___might_resched+0x10/0x10 [ 1772.707461][T28638] should_fail_ex+0x414/0x560 [ 1772.707484][T28638] should_failslab+0xa8/0x100 [ 1772.707508][T28638] __kmalloc_noprof+0xcb/0x7f0 [ 1772.707537][T28638] ? rcu_read_lock_any_held+0xb3/0x120 [ 1772.707564][T28638] ? kernfs_fop_write_iter+0x158/0x540 [ 1772.707595][T28638] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1772.707625][T28638] kernfs_fop_write_iter+0x158/0x540 [ 1772.707655][T28638] vfs_write+0x5c9/0xb30 [ 1772.707681][T28638] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1772.707717][T28638] ? __pfx_vfs_write+0x10/0x10 [ 1772.707761][T28638] ? __fget_files+0x2a/0x420 [ 1772.707792][T28638] ksys_write+0x145/0x250 [ 1772.707820][T28638] ? exc_page_fault+0x82/0x100 [ 1772.707847][T28638] ? __pfx_ksys_write+0x10/0x10 [ 1772.707880][T28638] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1772.707911][T28638] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.707941][T28638] __do_fast_syscall_32+0xb6/0x2b0 [ 1772.707971][T28638] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.708001][T28638] do_fast_syscall_32+0x34/0x80 [ 1772.708030][T28638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1772.708057][T28638] RIP: 0023:0xf7fa1539 [ 1772.708077][T28638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1772.708097][T28638] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1772.708120][T28638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1772.708136][T28638] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1772.708149][T28638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.708161][T28638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1772.708174][T28638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1772.708209][T28638] [ 1773.026586][T14812] usb 2-1: Product: syz [ 1773.030922][T14812] usb 2-1: Manufacturer: syz [ 1773.082819][T14812] cdc_wdm 2-1:1.0: skipping garbage [ 1773.088147][T14812] cdc_wdm 2-1:1.0: skipping garbage [ 1773.095409][T14812] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1773.109178][T14812] cdc_wdm 2-1:1.0: Unknown control protocol [ 1773.555069][T28624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.580001][T28632] kvm: pic: non byte read [ 1773.586736][T28632] kvm: pic: level sensitive irq not supported [ 1773.586808][T28632] kvm: pic: non byte read [ 1773.617066][T28624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.696257][T28646] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6865'. [ 1773.846802][T28632] kvm: pic: level sensitive irq not supported [ 1773.846922][T28632] kvm: pic: non byte read [ 1773.973407][T28624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.087314][T28624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.777725][T14812] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1775.071545][T14812] usb 5-1: Using ep0 maxpacket: 8 [ 1775.095603][T14812] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1775.105677][T14812] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1775.118192][T14812] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1775.143026][T14812] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1775.165543][T14812] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.179471][T14812] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1775.190581][T14812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.454574][T14812] usb 5-1: GET_CAPABILITIES returned 0 [ 1775.485692][T14812] usbtmc 5-1:16.0: can't read capabilities [ 1775.670724][ T89] usb 2-1: USB disconnect, device number 46 [ 1775.702473][ T5918] usb 5-1: USB disconnect, device number 124 [ 1776.708751][T28688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1776.800144][T28693] fuse: Unknown parameter '' [ 1777.089692][T14812] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1777.132216][T28681] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1777.148137][ T89] IPVS: starting estimator thread 0... [ 1777.276331][T14812] usb 3-1: device descriptor read/64, error -71 [ 1777.314101][T28700] IPVS: using max 31 ests per chain, 74400 per kthread [ 1777.556312][T14812] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1777.597643][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6871'. [ 1777.654996][T28705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 1777.696361][T14812] usb 3-1: device descriptor read/64, error -71 [ 1777.824225][T14812] usb usb3-port1: attempt power cycle [ 1777.987643][T28711] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6872'. [ 1778.186382][T14812] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1778.213460][T14812] usb 3-1: device descriptor read/8, error -71 [ 1779.220363][T14812] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1779.327994][T14812] usb 3-1: Using ep0 maxpacket: 8 [ 1779.359060][T14812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1779.419108][T14812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1779.487290][T14812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1779.526150][T14812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1779.544536][T14812] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1779.629230][T14812] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1779.646446][T14812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.916489][T14812] usb 3-1: GET_CAPABILITIES returned 0 [ 1779.953853][T14812] usbtmc 3-1:16.0: can't read capabilities [ 1780.108034][ T5918] usb 3-1: USB disconnect, device number 27 [ 1780.108988][T28736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6880'. [ 1780.577254][T28743] netlink: 'syz.3.6883': attribute type 4 has an invalid length. [ 1780.677268][T28744] netlink: 'syz.3.6883': attribute type 4 has an invalid length. [ 1780.786332][ T89] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1780.996267][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 1781.003252][ T89] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1781.046388][ T89] usb 5-1: config 0 has no interface number 0 [ 1781.058605][ T89] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1781.076885][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.095448][ T89] usb 5-1: Product: syz [ 1781.100783][ T89] usb 5-1: Manufacturer: syz [ 1781.115864][ T89] usb 5-1: SerialNumber: syz [ 1781.127133][ T89] usb 5-1: config 0 descriptor?? [ 1781.144382][ T89] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1781.184844][ T89] usb 5-1: selecting invalid altsetting 1 [ 1781.215252][ T89] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1781.250566][ T89] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1781.267576][ T89] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1781.300890][ T89] usb 5-1: media controller created [ 1781.378149][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1781.456492][T24934] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1781.658539][T24934] usb 6-1: Using ep0 maxpacket: 32 [ 1781.667683][T24934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.683443][T24934] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1781.711282][T24934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.719700][T24934] usb 6-1: Product: syz [ 1781.725099][T24934] usb 6-1: Manufacturer: syz [ 1781.731102][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1781.731122][ T30] audit: type=1326 audit(1759908223.807:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1781.764000][T24934] usb 6-1: SerialNumber: syz [ 1781.782693][T28746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6884'. [ 1781.797503][T24934] usb 6-1: config 0 descriptor?? [ 1781.809367][T24934] cdc_ether 6-1:0.0: skipping garbage [ 1781.815918][T28746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1781.819536][T24934] usb 6-1: bad CDC descriptors [ 1781.842486][ T30] audit: type=1326 audit(1759908223.807:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1781.880545][T24934] usb 6-1: unsupported MDLM descriptors [ 1781.894572][ T30] audit: type=1326 audit(1759908223.847:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1781.924401][ T30] audit: type=1326 audit(1759908223.847:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1781.947319][ T30] audit: type=1326 audit(1759908223.847:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1781.976712][ T30] audit: type=1326 audit(1759908223.847:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1782.003609][ T30] audit: type=1326 audit(1759908223.847:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1782.044329][ T30] audit: type=1326 audit(1759908223.847:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1782.071998][T24934] usb 6-1: USB disconnect, device number 35 [ 1782.091784][ T30] audit: type=1326 audit(1759908223.847:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1782.141378][ T30] audit: type=1326 audit(1759908223.847:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28768 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 1782.338764][T28782] netlink: 'syz.2.6894': attribute type 3 has an invalid length. [ 1782.416709][T28742] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1782.452029][ T89] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1782.460234][ T89] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1782.470005][ T89] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1782.512198][ T89] usb 5-1: USB disconnect, device number 125 [ 1783.027894][ T89] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1786.518468][T28827] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 1, id = 0 [ 1786.753337][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6911'. [ 1786.851438][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'. [ 1786.929642][T17488] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1786.940558][T28837] bridge3: port 1(veth5) entered blocking state [ 1786.956937][T28837] bridge3: port 1(veth5) entered disabled state [ 1786.975593][T28837] veth5: entered allmulticast mode [ 1787.013120][T28837] veth5: entered promiscuous mode [ 1787.069128][T28838] bridge3: port 2(veth0_to_bond) entered blocking state [ 1787.107694][T17488] usb 6-1: Using ep0 maxpacket: 8 [ 1787.137300][T17488] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1787.151833][T17488] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 1787.168704][T28838] bridge3: port 2(veth0_to_bond) entered disabled state [ 1787.185977][T17488] usb 6-1: config 8 has no interface number 0 [ 1787.199531][T17488] usb 6-1: config 8 interface 255 has no altsetting 0 [ 1787.209058][T28838] veth0_to_bond: entered allmulticast mode [ 1787.231674][T17488] usb 6-1: string descriptor 0 read error: -22 [ 1787.234437][T28838] veth0_to_bond: entered promiscuous mode [ 1787.243005][T17488] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1787.288137][T17488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.328614][T28839] bridge3: port 3(veth7) entered blocking state [ 1787.342803][T28839] bridge3: port 3(veth7) entered disabled state [ 1787.349904][T28839] veth7: entered allmulticast mode [ 1787.358696][T28839] veth7: entered promiscuous mode [ 1787.512935][T17488] catc 6-1:8.255: Can't set altsetting 1. [ 1787.556413][T17488] catc 6-1:8.255: probe with driver catc failed with error -5 [ 1787.582043][T17488] usb 6-1: USB disconnect, device number 36 [ 1788.059199][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1788.068763][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1788.326993][T28864] FAULT_INJECTION: forcing a failure. [ 1788.326993][T28864] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.359523][T28864] CPU: 1 UID: 0 PID: 28864 Comm: syz.1.6920 Not tainted syzkaller #0 PREEMPT(full) [ 1788.359557][T28864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1788.359572][T28864] Call Trace: [ 1788.359582][T28864] [ 1788.359592][T28864] dump_stack_lvl+0x189/0x250 [ 1788.359621][T28864] ? __pfx____ratelimit+0x10/0x10 [ 1788.359646][T28864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.359670][T28864] ? __pfx__printk+0x10/0x10 [ 1788.359699][T28864] ? __pfx___might_resched+0x10/0x10 [ 1788.359729][T28864] should_fail_ex+0x414/0x560 [ 1788.359761][T28864] should_failslab+0xa8/0x100 [ 1788.359785][T28864] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1788.359817][T28864] ? ip6_setup_cork+0x6c1/0x10e0 [ 1788.359845][T28864] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1788.359882][T28864] kmemdup_noprof+0x2b/0x70 [ 1788.359909][T28864] ip6_setup_cork+0x6c1/0x10e0 [ 1788.359949][T28864] ip6_append_data+0x237/0x380 [ 1788.359980][T28864] ? __pfx_raw6_getfrag+0x10/0x10 [ 1788.360016][T28864] rawv6_sendmsg+0x1286/0x1830 [ 1788.360070][T28864] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1788.360138][T28864] ? __pfx_aa_sk_perm+0x10/0x10 [ 1788.360171][T28864] ? sock_rps_record_flow+0x19/0x410 [ 1788.360209][T28864] ? inet_sendmsg+0x2f4/0x370 [ 1788.360228][T28864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1788.360253][T28864] __sock_sendmsg+0x19c/0x270 [ 1788.360289][T28864] __sys_sendto+0x3bd/0x520 [ 1788.360315][T28864] ? __pfx___sys_sendto+0x10/0x10 [ 1788.360335][T28864] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1788.360377][T28864] ? __fget_files+0x3a0/0x420 [ 1788.360410][T28864] ? ksys_write+0x22a/0x250 [ 1788.360438][T28864] ? exc_page_fault+0x82/0x100 [ 1788.360464][T28864] ? __pfx_ksys_write+0x10/0x10 [ 1788.360500][T28864] __ia32_sys_sendto+0xdd/0x100 [ 1788.360528][T28864] __do_fast_syscall_32+0xb6/0x2b0 [ 1788.360556][T28864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.360587][T28864] do_fast_syscall_32+0x34/0x80 [ 1788.360615][T28864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1788.360642][T28864] RIP: 0023:0xf7f05539 [ 1788.360662][T28864] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1788.360681][T28864] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1788.360705][T28864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1788.360721][T28864] RDX: 0000000000000019 RSI: 0000000000003b00 RDI: 0000000000000000 [ 1788.360734][T28864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1788.360747][T28864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1788.360760][T28864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1788.360794][T28864] [ 1788.992240][T28868] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1789.092007][T28868] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1789.326247][ T89] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1789.508048][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 1789.532388][ T89] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1789.596212][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.715973][ T89] usb 2-1: Product: syz [ 1789.725948][ T89] usb 2-1: Manufacturer: syz [ 1789.789304][ T89] usb 2-1: SerialNumber: syz [ 1789.845112][ T89] usb 2-1: config 0 descriptor?? [ 1789.925742][ T89] usb 2-1: selecting invalid altsetting 3 [ 1789.934186][ T89] comedi comedi5: could not set alternate setting 3 in high speed [ 1789.979606][ T89] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1790.085686][ T89] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1790.133702][ T89] usb 2-1: USB disconnect, device number 47 [ 1791.241380][T28895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1791.616893][T24935] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1791.668380][T28903] mac80211_hwsim hwsim88 wlan1: entered allmulticast mode [ 1792.286246][T24935] usb 3-1: Using ep0 maxpacket: 32 [ 1792.330812][T24935] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1792.348992][T24935] usb 3-1: config 0 has no interface number 0 [ 1792.375536][T24935] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1792.394427][T24935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.424943][T24935] usb 3-1: Product: syz [ 1792.435090][T24935] usb 3-1: Manufacturer: syz [ 1792.439825][T24935] usb 3-1: SerialNumber: syz [ 1792.553279][T24935] usb 3-1: config 0 descriptor?? [ 1792.598776][T24935] smsc95xx v2.0.0 [ 1792.815314][T24935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1792.832925][T28912] netlink: 'syz.5.6932': attribute type 10 has an invalid length. [ 1792.871934][T28912] syz_tun: entered promiscuous mode [ 1792.887977][T24935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1792.961460][T28912] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1793.118499][T24935] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1793.147417][T24935] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1793.857265][T17488] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1794.028801][T17488] usb 2-1: Using ep0 maxpacket: 32 [ 1794.066088][T17488] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1794.100274][T17488] usb 2-1: config 0 has no interface number 0 [ 1794.118739][T17488] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1794.135071][T17488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.180634][T17488] usb 2-1: Product: syz [ 1794.220034][T17488] usb 2-1: Manufacturer: syz [ 1794.229647][T17488] usb 2-1: SerialNumber: syz [ 1794.271333][T17488] usb 2-1: config 0 descriptor?? [ 1794.298185][T17488] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1794.361861][T17488] usb 2-1: selecting invalid altsetting 1 [ 1794.382915][T17488] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1794.407600][T17488] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1794.410153][T24935] usb 3-1: USB disconnect, device number 28 [ 1794.447779][T17488] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1794.488119][T17488] usb 2-1: media controller created [ 1794.531528][T17488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1794.760084][T28946] mac80211_hwsim hwsim86 wlan1: entered allmulticast mode [ 1794.786260][ T5918] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1794.874632][T28952] vivid-008: disconnect [ 1795.014107][ T5918] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1795.028244][ T5918] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1795.044111][T28954] vlan3: entered promiscuous mode [ 1795.049909][ T5918] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1795.064715][T28954] bridge0: entered promiscuous mode [ 1795.073687][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1795.097855][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1795.144137][ T5918] usb 4-1: SerialNumber: syz [ 1795.549934][ T89] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1795.557123][T28924] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1795.571554][ T5918] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 1795.666670][T17488] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1795.673713][T17488] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1795.691871][T28952] vivid-008: reconnect [ 1795.698132][ T5918] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 1795.707416][T17488] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1795.778440][ T89] usb 6-1: device descriptor read/64, error -71 [ 1796.536292][ T5918] usb 4-1: USB disconnect, device number 6 [ 1796.628467][T17488] usb 2-1: USB disconnect, device number 48 [ 1796.648748][ T89] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1796.856302][ T89] usb 6-1: device descriptor read/64, error -71 [ 1796.966726][ T89] usb usb6-port1: attempt power cycle [ 1797.261020][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.267600][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.316505][ T89] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1797.372501][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 1797.389946][ T89] usb 6-1: device descriptor read/8, error -71 [ 1797.465115][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6952'. [ 1798.005247][ T89] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1798.070969][ T89] usb 6-1: device descriptor read/8, error -71 [ 1798.186700][ T89] usb usb6-port1: unable to enumerate USB device [ 1798.636847][ T89] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1798.801413][ T89] usb 6-1: Using ep0 maxpacket: 16 [ 1798.822592][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.905859][ T89] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1798.956585][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.029712][ T89] usb 6-1: config 0 descriptor?? [ 1799.144525][T24934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1799.318898][T24934] usb 4-1: Using ep0 maxpacket: 32 [ 1799.347761][T24934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1799.360983][T24934] usb 4-1: config 0 has no interface number 0 [ 1799.459693][ T89] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1799.466013][T24934] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1799.478615][ T89] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1799.485499][ T89] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1799.534079][ T89] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1799.540646][T24934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.562300][ T89] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1799.576611][T24934] usb 4-1: Product: syz [ 1799.605074][ T89] elan 0003:04F3:0755.0029: hidraw0: USB HID v0.06 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1799.609870][T24934] usb 4-1: Manufacturer: syz [ 1799.662405][T24934] usb 4-1: SerialNumber: syz [ 1799.737038][T24934] usb 4-1: config 0 descriptor?? [ 1799.774907][T24934] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1799.826264][T24934] usb 4-1: selecting invalid altsetting 1 [ 1799.832188][T24934] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1799.869731][T14812] usb 6-1: USB disconnect, device number 41 [ 1799.892645][T24934] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1799.906598][T24934] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1799.934656][T24934] usb 4-1: media controller created [ 1799.956278][T28997] fido_id[28997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1800.112403][T24934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1801.057998][T28996] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1801.077369][T28999] FAULT_INJECTION: forcing a failure. [ 1801.077369][T28999] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.096300][T24934] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1801.108958][T24934] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1801.126484][T28999] CPU: 0 UID: 0 PID: 28999 Comm: syz.2.6963 Not tainted syzkaller #0 PREEMPT(full) [ 1801.126516][T28999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1801.126532][T28999] Call Trace: [ 1801.126541][T28999] [ 1801.126551][T28999] dump_stack_lvl+0x189/0x250 [ 1801.126579][T28999] ? __pfx____ratelimit+0x10/0x10 [ 1801.126603][T28999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1801.126626][T28999] ? __pfx__printk+0x10/0x10 [ 1801.126654][T28999] ? __pfx___might_resched+0x10/0x10 [ 1801.126683][T28999] should_fail_ex+0x414/0x560 [ 1801.126735][T28999] should_failslab+0xa8/0x100 [ 1801.126760][T28999] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1801.126796][T28999] ? ebt_register_table+0x190/0x10e0 [ 1801.126825][T28999] ? net_generic+0x1e/0x240 [ 1801.126860][T28999] kmemdup_noprof+0x2b/0x70 [ 1801.126885][T28999] ebt_register_table+0x190/0x10e0 [ 1801.126918][T28999] ? net_generic+0x1e/0x240 [ 1801.126956][T28999] find_inlist_lock_noload+0x180/0x270 [ 1801.126996][T28999] do_ebt_get_ctl+0x451/0x1c50 [ 1801.127041][T28999] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 1801.127083][T28999] ? __lock_acquire+0xab9/0xd20 [ 1801.127114][T28999] ? __mutex_trylock_common+0x153/0x260 [ 1801.127145][T28999] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1801.127177][T28999] ? rcu_is_watching+0x15/0xb0 [ 1801.127203][T28999] ? trace_contention_end+0x39/0x120 [ 1801.127240][T28999] ? nf_getsockopt+0x224/0x290 [ 1801.127282][T28999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1801.127316][T28999] ? __might_fault+0xb0/0x130 [ 1801.127356][T28999] nf_getsockopt+0x26e/0x290 [ 1801.127391][T28999] ip_getsockopt+0x1c4/0x220 [ 1801.127421][T28999] ? __pfx_ip_getsockopt+0x10/0x10 [ 1801.127447][T28999] ? sock_common_getsockopt+0x2d/0xb0 [ 1801.127479][T28999] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1801.127513][T28999] do_sock_getsockopt+0x372/0x450 [ 1801.127541][T28999] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1801.127564][T28999] ? lockdep_hardirqs_on+0x70/0x150 [ 1801.127589][T28999] ? __fget_files+0x3a0/0x420 [ 1801.127608][T28999] ? __fget_files+0x2a/0x420 [ 1801.127635][T28999] __ia32_sys_getsockopt+0x1a5/0x250 [ 1801.127667][T28999] ? lockdep_hardirqs_on+0x70/0x150 [ 1801.127694][T28999] ? lockdep_hardirqs_on+0x70/0x150 [ 1801.127737][T28999] __do_fast_syscall_32+0xb6/0x2b0 [ 1801.127767][T28999] ? lockdep_hardirqs_on+0x9c/0x150 [ 1801.127796][T28999] do_fast_syscall_32+0x34/0x80 [ 1801.127824][T28999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1801.127850][T28999] RIP: 0023:0xf701d539 [ 1801.127870][T28999] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1801.127890][T28999] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1801.127913][T28999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1801.127928][T28999] RDX: 0000000000000081 RSI: 00000000800001c0 RDI: 0000000080000240 [ 1801.127943][T28999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1801.127956][T28999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1801.127969][T28999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1801.128002][T28999] [ 1801.128848][T24934] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1801.317987][T28999] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1801.590982][T24934] usb 4-1: USB disconnect, device number 7 [ 1802.206320][ T89] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1802.469081][T29040] netlink: 'syz.3.6971': attribute type 10 has an invalid length. [ 1802.486916][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 1802.497980][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1802.511742][ T89] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1802.537641][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.555823][ T89] usb 5-1: Product: syz [ 1802.564731][ T89] usb 5-1: Manufacturer: syz [ 1802.574002][T29045] netlink: 'syz.3.6971': attribute type 10 has an invalid length. [ 1802.586607][ T89] usb 5-1: SerialNumber: syz [ 1802.595664][ T89] usb 5-1: config 0 descriptor?? [ 1802.676954][ T89] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1802.754746][T29040] team0: Port device netdevsim0 added [ 1802.848810][ T89] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1803.234993][T29045] team0: Port device netdevsim0 removed [ 1803.471402][T29045] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1803.576295][ T89] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1805.458839][ T89] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1805.486626][ T89] em28xx 5-1:0.0: board has no eeprom [ 1805.596211][ T89] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1805.630947][ T89] em28xx 5-1:0.0: dvb set to bulk mode. [ 1805.663848][ T24] em28xx 5-1:0.0: Binding DVB extension [ 1805.695944][ T89] usb 5-1: USB disconnect, device number 126 [ 1805.755342][ T89] em28xx 5-1:0.0: Disconnecting em28xx [ 1805.941573][ T24] em28xx 5-1:0.0: Registering input extension [ 1805.986372][ T89] em28xx 5-1:0.0: Closing input extension [ 1806.040187][ T89] em28xx 5-1:0.0: Freeing device [ 1807.083922][T29108] netlink: 'syz.4.6992': attribute type 10 has an invalid length. [ 1807.111941][T29108] team0: Port device netdevsim0 added [ 1807.145443][T29104] netlink: 'syz.4.6992': attribute type 10 has an invalid length. [ 1807.194898][T29107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6993'. [ 1807.240787][T29104] team0: Port device netdevsim0 removed [ 1807.288828][T29104] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1807.671859][ T5918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1807.879301][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 1807.927901][ T5918] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 1807.938112][ T5918] usb 4-1: config 150 has no interface number 0 [ 1807.955766][ T5918] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1807.970127][ T5918] usb 4-1: config 150 interface 1 has no altsetting 0 [ 1807.980946][ T5918] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1807.990929][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.051402][ T5918] usb 4-1: Product: syz [ 1808.055823][ T5918] usb 4-1: Manufacturer: syz [ 1808.097301][ T5918] usb 4-1: SerialNumber: syz [ 1808.346641][ T5918] xr_serial 4-1:150.204: xr_serial converter detected [ 1808.675830][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1808.675847][ T30] audit: type=1800 audit(1759908250.747:1225): pid=29138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7004" name="file0" dev="tmpfs" ino=1631 res=0 errno=0 [ 1808.869291][T29141] FAULT_INJECTION: forcing a failure. [ 1808.869291][T29141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.885694][T29141] CPU: 1 UID: 0 PID: 29141 Comm: syz.5.7005 Not tainted syzkaller #0 PREEMPT(full) [ 1808.885728][T29141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1808.885743][T29141] Call Trace: [ 1808.885757][T29141] [ 1808.885773][T29141] dump_stack_lvl+0x189/0x250 [ 1808.885805][T29141] ? __pfx____ratelimit+0x10/0x10 [ 1808.885830][T29141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1808.885853][T29141] ? __pfx__printk+0x10/0x10 [ 1808.886009][T29141] should_fail_ex+0x414/0x560 [ 1808.886058][T29141] _copy_to_user+0x31/0xb0 [ 1808.886079][T29141] simple_read_from_buffer+0xe1/0x170 [ 1808.886114][T29141] proc_fail_nth_read+0x1b3/0x220 [ 1808.886142][T29141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1808.886172][T29141] ? rw_verify_area+0x2a6/0x4d0 [ 1808.886200][T29141] ? __lock_acquire+0xab9/0xd20 [ 1808.886219][T29141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1808.886245][T29141] vfs_read+0x200/0xa30 [ 1808.886272][T29141] ? fdget_pos+0x247/0x320 [ 1808.886296][T29141] ? __pfx___mutex_lock+0x10/0x10 [ 1808.886323][T29141] ? __pfx_vfs_read+0x10/0x10 [ 1808.886375][T29141] ? __fget_files+0x2a/0x420 [ 1808.886409][T29141] ? __fget_files+0x3a0/0x420 [ 1808.886428][T29141] ? __fget_files+0x2a/0x420 [ 1808.886459][T29141] ksys_read+0x145/0x250 [ 1808.886492][T29141] ? __pfx_ksys_read+0x10/0x10 [ 1808.886526][T29141] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1808.886556][T29141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1808.886586][T29141] __do_fast_syscall_32+0xb6/0x2b0 [ 1808.886616][T29141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1808.886647][T29141] do_fast_syscall_32+0x34/0x80 [ 1808.886675][T29141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1808.886703][T29141] RIP: 0023:0xf7fa1539 [ 1808.886720][T29141] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1808.886736][T29141] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1808.886756][T29141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 1808.886769][T29141] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 1808.886782][T29141] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1808.886796][T29141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1808.886810][T29141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1808.886845][T29141] [ 1809.306737][ T5918] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1809.313458][ T5918] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1809.401313][ T5918] usb 4-1: USB disconnect, device number 8 [ 1809.444073][ T5918] xr_serial 4-1:150.204: device disconnected [ 1809.849307][ T89] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1809.952917][T29152] tipc: Started in network mode [ 1809.967698][T29152] tipc: Node identity dae64313d3cf, cluster identity 4711 [ 1809.977177][T29152] tipc: Enabled bearer , priority 0 [ 1810.015222][T29152] syzkaller0: entered promiscuous mode [ 1810.029085][ T89] usb 6-1: device descriptor read/64, error -71 [ 1810.045487][T29152] syzkaller0: entered allmulticast mode [ 1810.101981][T29152] tipc: Resetting bearer [ 1810.116903][T29150] tipc: Resetting bearer [ 1810.204301][T29150] tipc: Disabling bearer [ 1810.276365][ T89] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1810.286580][T29169] FAULT_INJECTION: forcing a failure. [ 1810.286580][T29169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.318208][T29169] CPU: 1 UID: 0 PID: 29169 Comm: syz.2.7014 Not tainted syzkaller #0 PREEMPT(full) [ 1810.318243][T29169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1810.318257][T29169] Call Trace: [ 1810.318267][T29169] [ 1810.318278][T29169] dump_stack_lvl+0x189/0x250 [ 1810.318309][T29169] ? __pfx____ratelimit+0x10/0x10 [ 1810.318335][T29169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1810.318359][T29169] ? __pfx__printk+0x10/0x10 [ 1810.318383][T29169] ? __might_fault+0xb0/0x130 [ 1810.318426][T29169] should_fail_ex+0x414/0x560 [ 1810.318458][T29169] _copy_from_user+0x2d/0xb0 [ 1810.318481][T29169] get_compat_msghdr+0xad/0x4a0 [ 1810.318504][T29169] ? __lock_acquire+0xab9/0xd20 [ 1810.318530][T29169] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1810.318558][T29169] ? get_pid_task+0x20/0x1f0 [ 1810.318597][T29169] ___sys_recvmsg+0x17f/0x510 [ 1810.318632][T29169] ? __pfx____sys_recvmsg+0x10/0x10 [ 1810.318687][T29169] ? __fget_files+0x3a0/0x420 [ 1810.318720][T29169] __sys_recvmsg+0x161/0x220 [ 1810.318749][T29169] ? __pfx___sys_recvmsg+0x10/0x10 [ 1810.318785][T29169] ? __pfx_ksys_write+0x10/0x10 [ 1810.318820][T29169] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1810.318859][T29169] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.318888][T29169] __do_fast_syscall_32+0xb6/0x2b0 [ 1810.318918][T29169] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.318948][T29169] do_fast_syscall_32+0x34/0x80 [ 1810.318975][T29169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1810.319001][T29169] RIP: 0023:0xf701d539 [ 1810.319020][T29169] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1810.319038][T29169] RSP: 002b:00000000f53ec55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1810.319061][T29169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1810.319076][T29169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.319090][T29169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1810.319103][T29169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1810.319117][T29169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1810.319150][T29169] [ 1810.606369][ T89] usb 6-1: device descriptor read/64, error -71 [ 1810.716694][ T89] usb usb6-port1: attempt power cycle [ 1810.774523][T29182] FAULT_INJECTION: forcing a failure. [ 1810.774523][T29182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.789079][T29182] CPU: 1 UID: 0 PID: 29182 Comm: syz.4.7020 Not tainted syzkaller #0 PREEMPT(full) [ 1810.789110][T29182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1810.789125][T29182] Call Trace: [ 1810.789134][T29182] [ 1810.789144][T29182] dump_stack_lvl+0x189/0x250 [ 1810.789174][T29182] ? __pfx____ratelimit+0x10/0x10 [ 1810.789200][T29182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1810.789223][T29182] ? __pfx__printk+0x10/0x10 [ 1810.789246][T29182] ? __might_fault+0xb0/0x130 [ 1810.789288][T29182] should_fail_ex+0x414/0x560 [ 1810.789319][T29182] _copy_from_user+0x2d/0xb0 [ 1810.789341][T29182] get_compat_msghdr+0xad/0x4a0 [ 1810.789373][T29182] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1810.789412][T29182] ___sys_sendmsg+0x193/0x2a0 [ 1810.789442][T29182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1810.789505][T29182] ? __fget_files+0x2a/0x420 [ 1810.789525][T29182] ? __fget_files+0x3a0/0x420 [ 1810.789556][T29182] __sys_sendmsg+0x164/0x220 [ 1810.789583][T29182] ? __pfx___sys_sendmsg+0x10/0x10 [ 1810.789622][T29182] ? __pfx_ksys_write+0x10/0x10 [ 1810.789655][T29182] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1810.789684][T29182] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.789712][T29182] __do_fast_syscall_32+0xb6/0x2b0 [ 1810.789740][T29182] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.789829][T29182] do_fast_syscall_32+0x34/0x80 [ 1810.789858][T29182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1810.789884][T29182] RIP: 0023:0xf70cd539 [ 1810.789904][T29182] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1810.789923][T29182] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1810.789948][T29182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1810.789962][T29182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.789976][T29182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1810.789988][T29182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1810.790002][T29182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1810.790034][T29182] [ 1811.078241][ T89] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1811.090292][T29186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7022'. [ 1811.107485][ T89] usb 6-1: device descriptor read/8, error -71 [ 1811.148487][T17488] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1811.183490][T29190] ipvlan2: entered allmulticast mode [ 1811.189485][T29190] vlan0: entered allmulticast mode [ 1811.194813][T29190] veth0_vlan: entered allmulticast mode [ 1811.203362][T29190] team0: Device ipvlan2 failed to register rx_handler [ 1811.306450][T17488] usb 2-1: Using ep0 maxpacket: 16 [ 1811.314119][T17488] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1811.322847][T17488] usb 2-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 1811.333464][T17488] usb 2-1: config 0 has no interface number 0 [ 1811.343690][T17488] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1811.352951][ T89] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1811.361672][T17488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.370109][T17488] usb 2-1: Product: syz [ 1811.374582][T17488] usb 2-1: Manufacturer: syz [ 1811.379473][T17488] usb 2-1: SerialNumber: syz [ 1811.385233][ T89] usb 6-1: device descriptor read/8, error -71 [ 1811.407269][T17488] usb 2-1: config 0 descriptor?? [ 1811.427129][T17488] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1811.434560][T17488] uvcvideo 2-1:0.105: No valid video chain found. [ 1811.496679][ T89] usb usb6-port1: unable to enumerate USB device [ 1811.601423][T29202] FAULT_INJECTION: forcing a failure. [ 1811.601423][T29202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.618864][T29202] CPU: 0 UID: 0 PID: 29202 Comm: syz.2.7029 Not tainted syzkaller #0 PREEMPT(full) [ 1811.618895][T29202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1811.618908][T29202] Call Trace: [ 1811.618917][T29202] [ 1811.618926][T29202] dump_stack_lvl+0x189/0x250 [ 1811.618953][T29202] ? __pfx____ratelimit+0x10/0x10 [ 1811.618978][T29202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1811.618999][T29202] ? __pfx__printk+0x10/0x10 [ 1811.619021][T29202] ? __might_fault+0xb0/0x130 [ 1811.619063][T29202] should_fail_ex+0x414/0x560 [ 1811.619091][T29202] _copy_from_user+0x2d/0xb0 [ 1811.619111][T29202] get_compat_msghdr+0xad/0x4a0 [ 1811.619139][T29202] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1811.619173][T29202] ___sys_sendmsg+0x193/0x2a0 [ 1811.619199][T29202] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.619256][T29202] ? __fget_files+0x2a/0x420 [ 1811.619272][T29202] ? __fget_files+0x3a0/0x420 [ 1811.619300][T29202] __sys_sendmsg+0x164/0x220 [ 1811.619325][T29202] ? __pfx___sys_sendmsg+0x10/0x10 [ 1811.619356][T29202] ? __pfx_ksys_write+0x10/0x10 [ 1811.619385][T29202] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1811.619411][T29202] ? lockdep_hardirqs_on+0x9c/0x150 [ 1811.619438][T29202] __do_fast_syscall_32+0xb6/0x2b0 [ 1811.619475][T29202] ? lockdep_hardirqs_on+0x9c/0x150 [ 1811.619502][T29202] do_fast_syscall_32+0x34/0x80 [ 1811.619527][T29202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1811.619552][T29202] RIP: 0023:0xf701d539 [ 1811.619569][T29202] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1811.619587][T29202] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1811.619609][T29202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1811.619624][T29202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.619636][T29202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1811.619648][T29202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1811.619660][T29202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1811.619689][T29202] [ 1812.002202][T29175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1812.153219][T29218] FAULT_INJECTION: forcing a failure. [ 1812.153219][T29218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.228169][T29218] CPU: 1 UID: 0 PID: 29218 Comm: syz.2.7036 Not tainted syzkaller #0 PREEMPT(full) [ 1812.228205][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1812.228221][T29218] Call Trace: [ 1812.228232][T29218] [ 1812.228242][T29218] dump_stack_lvl+0x189/0x250 [ 1812.228399][T29218] ? __pfx____ratelimit+0x10/0x10 [ 1812.228422][T29218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1812.228445][T29218] ? __pfx__printk+0x10/0x10 [ 1812.228467][T29218] ? __might_fault+0xb0/0x130 [ 1812.228636][T29218] should_fail_ex+0x414/0x560 [ 1812.228679][T29218] _copy_from_user+0x2d/0xb0 [ 1812.228704][T29218] __sys_sendto+0x25c/0x520 [ 1812.228731][T29218] ? __pfx___sys_sendto+0x10/0x10 [ 1812.228752][T29218] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1812.228806][T29218] ? __fget_files+0x3a0/0x420 [ 1812.228837][T29218] ? ksys_write+0x22a/0x250 [ 1812.228866][T29218] ? exc_page_fault+0x82/0x100 [ 1812.228902][T29218] ? __pfx_ksys_write+0x10/0x10 [ 1812.228937][T29218] __ia32_sys_sendto+0xdd/0x100 [ 1812.228966][T29218] __do_fast_syscall_32+0xb6/0x2b0 [ 1812.228997][T29218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1812.229036][T29218] do_fast_syscall_32+0x34/0x80 [ 1812.229065][T29218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1812.229094][T29218] RIP: 0023:0xf701d539 [ 1812.229116][T29218] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1812.229137][T29218] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1812.229163][T29218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1812.229179][T29218] RDX: 0000000000000022 RSI: 0000000020054001 RDI: 00000000800000c0 [ 1812.229194][T29218] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1812.229207][T29218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1812.229221][T29218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1812.229255][T29218] [ 1812.515624][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1812.831355][T29229] vivid-000: disconnect [ 1813.732393][T29229] vivid-000: reconnect [ 1813.944654][T17488] usb 2-1: USB disconnect, device number 49 [ 1814.303008][T29241] FAULT_INJECTION: forcing a failure. [ 1814.303008][T29241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1814.372882][T29241] CPU: 1 UID: 0 PID: 29241 Comm: syz.1.7043 Not tainted syzkaller #0 PREEMPT(full) [ 1814.372907][T29241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1814.372918][T29241] Call Trace: [ 1814.372928][T29241] [ 1814.372938][T29241] dump_stack_lvl+0x189/0x250 [ 1814.372962][T29241] ? __pfx____ratelimit+0x10/0x10 [ 1814.372981][T29241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1814.372997][T29241] ? __pfx__printk+0x10/0x10 [ 1814.373023][T29241] should_fail_ex+0x414/0x560 [ 1814.373047][T29241] strncpy_from_user+0x36/0x290 [ 1814.373069][T29241] path_removexattrat+0xe0/0x690 [ 1814.373234][T29241] ? __pfx_path_removexattrat+0x10/0x10 [ 1814.373252][T29241] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1814.373275][T29241] ? __pfx_vfs_write+0x10/0x10 [ 1814.373316][T29241] ? exc_page_fault+0x82/0x100 [ 1814.373334][T29241] ? __pfx_ksys_write+0x10/0x10 [ 1814.373358][T29241] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1814.373382][T29241] __ia32_sys_lremovexattr+0x64/0x80 [ 1814.373405][T29241] __do_fast_syscall_32+0xb6/0x2b0 [ 1814.373429][T29241] ? lockdep_hardirqs_on+0x9c/0x150 [ 1814.373451][T29241] do_fast_syscall_32+0x34/0x80 [ 1814.373471][T29241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1814.373491][T29241] RIP: 0023:0xf7f05539 [ 1814.373507][T29241] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1814.373520][T29241] RSP: 002b:00000000f53d555c EFLAGS: 00000206 ORIG_RAX: 00000000000000ec [ 1814.373536][T29241] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800001c0 [ 1814.373548][T29241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1814.373556][T29241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1814.373565][T29241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1814.373575][T29241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1814.373597][T29241] [ 1815.258270][T29255] IPv6: addrconf: prefix option has invalid lifetime [ 1815.547708][T29257] FAULT_INJECTION: forcing a failure. [ 1815.547708][T29257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.865362][T29257] CPU: 0 UID: 0 PID: 29257 Comm: syz.3.7049 Not tainted syzkaller #0 PREEMPT(full) [ 1815.865395][T29257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1815.865410][T29257] Call Trace: [ 1815.865421][T29257] [ 1815.865431][T29257] dump_stack_lvl+0x189/0x250 [ 1815.865461][T29257] ? __pfx____ratelimit+0x10/0x10 [ 1815.865488][T29257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1815.865512][T29257] ? __pfx__printk+0x10/0x10 [ 1815.865536][T29257] ? __might_fault+0xb0/0x130 [ 1815.865578][T29257] should_fail_ex+0x414/0x560 [ 1815.865611][T29257] _copy_from_user+0x2d/0xb0 [ 1815.865634][T29257] get_compat_msghdr+0xad/0x4a0 [ 1815.865658][T29257] ? __lock_acquire+0xab9/0xd20 [ 1815.865686][T29257] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1815.865713][T29257] ? get_pid_task+0x20/0x1f0 [ 1815.865751][T29257] ___sys_recvmsg+0x17f/0x510 [ 1815.865786][T29257] ? __pfx____sys_recvmsg+0x10/0x10 [ 1815.865840][T29257] ? __fget_files+0x3a0/0x420 [ 1815.865873][T29257] __sys_recvmsg+0x161/0x220 [ 1815.865903][T29257] ? __pfx___sys_recvmsg+0x10/0x10 [ 1815.865939][T29257] ? __pfx_ksys_write+0x10/0x10 [ 1815.865973][T29257] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1815.866002][T29257] ? lockdep_hardirqs_on+0x9c/0x150 [ 1815.866037][T29257] __do_fast_syscall_32+0xb6/0x2b0 [ 1815.866067][T29257] ? lockdep_hardirqs_on+0x9c/0x150 [ 1815.866096][T29257] do_fast_syscall_32+0x34/0x80 [ 1815.866122][T29257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1815.866149][T29257] RIP: 0023:0xf707d539 [ 1815.866169][T29257] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1815.866188][T29257] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1815.866235][T29257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1815.866251][T29257] RDX: 0000000000002082 RSI: 0000000000000000 RDI: 0000000000000000 [ 1815.866265][T29257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1815.866278][T29257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1815.866291][T29257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1815.866324][T29257] [ 1816.201234][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1824.089261][T29291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1824.171367][T29291] team0: Port device batadv1 added [ 1833.136160][ C1] sched: DL replenish lagged too much [ 1838.244326][ T5921] kworker/0:5 (5921) used greatest stack depth: 15864 bytes left [ 1838.667446][ T30] audit: type=1326 audit(1759908280.567:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1839.214069][ T30] audit: type=1326 audit(1759908280.607:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1839.414847][ T30] audit: type=1326 audit(1759908280.607:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1839.590101][T29316] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1839.611047][T24934] IPVS: starting estimator thread 0... [ 1839.687171][ T30] audit: type=1326 audit(1759908280.607:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1839.936348][T29318] IPVS: using max 28 ests per chain, 67200 per kthread [ 1840.672539][ T30] audit: type=1326 audit(1759908280.607:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1840.798433][ T30] audit: type=1326 audit(1759908280.607:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1840.856721][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1840.867783][ T30] audit: type=1326 audit(1759908280.637:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1840.909704][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1840.919905][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1840.928669][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1840.936640][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1841.123830][ T30] audit: type=1326 audit(1759908280.637:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1841.147235][ T30] audit: type=1326 audit(1759908280.637:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1841.171167][ T30] audit: type=1326 audit(1759908280.637:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.5.7062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1843.137560][ T5148] Bluetooth: hci0: command tx timeout [ 1843.594434][T15085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.217769][ T5148] Bluetooth: hci0: command tx timeout [ 1845.543157][T29330] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1846.576493][T14514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1846.589456][T14514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1846.598319][T14514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1846.610119][T14514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1846.618433][T14514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1847.213235][T15085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.317351][T14514] Bluetooth: hci0: command tx timeout [ 1847.536812][T29337] syzkaller1: entered promiscuous mode [ 1847.542350][T29337] syzkaller1: entered allmulticast mode [ 1848.787654][T14514] Bluetooth: hci3: command tx timeout [ 1849.816679][T14514] Bluetooth: hci0: command tx timeout [ 1851.535768][ T5148] Bluetooth: hci3: command tx timeout [ 1853.799496][ T5148] Bluetooth: hci3: command tx timeout [ 1858.772115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.786629][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.801264][ T5148] Bluetooth: hci3: command tx timeout [ 1960.056075][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1960.063116][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5187/1:b..l [ 1960.072151][ C0] rcu: (detected by 0, t=10502 jiffies, g=202281, q=432 ncpus=2) [ 1960.080230][ C0] task:klogd state:R running task stack:22792 pid:5187 tgid:5187 ppid:1 task_flags:0x400100 flags:0x00080001 [ 1960.096528][ C0] Call Trace: [ 1960.100054][ C0] [ 1960.103383][ C0] __schedule+0x1798/0x4cc0 [ 1960.108021][ C0] ? __pfx___schedule+0x10/0x10 [ 1960.113209][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1960.118627][ C0] preempt_schedule_irq+0xb5/0x150 [ 1960.123802][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1960.129582][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1960.135521][ C0] irqentry_exit+0x6f/0x90 [ 1960.139966][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1960.146293][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1960.151632][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b fc f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1960.171372][ C0] RSP: 0018:ffffc900032a7118 EFLAGS: 00000206 [ 1960.177569][ C0] RAX: b92ac95c5c500500 RBX: 0000000000000000 RCX: b92ac95c5c500500 [ 1960.185920][ C0] RDX: 0000000000000000 RSI: ffffffff8d9d13e7 RDI: ffffffff8bc074e0 [ 1960.194223][ C0] RBP: ffffffff81731db5 R08: 0000000000000000 R09: ffffffff81731db5 [ 1960.202364][ C0] R10: ffffc900032a72d8 R11: ffffffff81abbcd0 R12: 0000000000000002 [ 1960.210488][ C0] R13: ffffffff8e13d320 R14: 0000000000000000 R15: 0000000000000246 [ 1960.218684][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.223855][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1960.230304][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.235805][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.241167][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1960.247068][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.252282][ C0] unwind_next_frame+0xc2/0x2390 [ 1960.257367][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.262534][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1960.267892][ C0] ? qlist_free_all+0x97/0x140 [ 1960.272721][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1960.279014][ C0] arch_stack_walk+0x11c/0x150 [ 1960.283916][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1960.289703][ C0] stack_trace_save+0x9c/0xe0 [ 1960.294528][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1960.299978][ C0] save_stack+0xf5/0x1f0 [ 1960.304287][ C0] ? __pfx_save_stack+0x10/0x10 [ 1960.309199][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 1960.314611][ C0] ? __put_partials+0x146/0x170 [ 1960.319524][ C0] ? put_cpu_partial+0x1f2/0x2e0 [ 1960.324538][ C0] ? __slab_free+0x2b9/0x390 [ 1960.329154][ C0] ? qlist_free_all+0x97/0x140 [ 1960.334226][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1960.339937][ C0] ? page_ext_put+0x97/0xc0 [ 1960.344477][ C0] __reset_page_owner+0x71/0x1f0 [ 1960.349488][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1960.354905][ C0] __put_partials+0x146/0x170 [ 1960.359633][ C0] put_cpu_partial+0x1f2/0x2e0 [ 1960.364649][ C0] __slab_free+0x2b9/0x390 [ 1960.369233][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1960.375728][ C0] ? __phys_addr+0xd3/0x180 [ 1960.380298][ C0] qlist_free_all+0x97/0x140 [ 1960.385126][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1960.391130][ C0] __kasan_kmalloc+0x22/0xb0 [ 1960.395964][ C0] __kmalloc_node_track_caller_noprof+0x568/0x800 [ 1960.402440][ C0] ? __alloc_skb+0x142/0x2d0 [ 1960.407061][ C0] ? rcu_is_watching+0x15/0xb0 [ 1960.411961][ C0] ? __alloc_skb+0x142/0x2d0 [ 1960.416630][ C0] kmalloc_reserve+0x136/0x290 [ 1960.421455][ C0] __alloc_skb+0x142/0x2d0 [ 1960.426044][ C0] alloc_skb_with_frags+0xca/0x890 [ 1960.431205][ C0] ? kasan_save_track+0x4f/0x80 [ 1960.436083][ C0] ? kasan_save_track+0x3e/0x80 [ 1960.441063][ C0] ? __kasan_save_free_info+0x46/0x50 [ 1960.446790][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1960.451953][ C0] sock_alloc_send_pskb+0x84d/0x980 [ 1960.457363][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1960.463594][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1960.469810][ C0] unix_dgram_sendmsg+0x461/0x1850 [ 1960.475357][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 1960.480843][ C0] ? kfree+0x19a/0x6d0 [ 1960.484946][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1960.490732][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1960.497413][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1960.502849][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1960.508451][ C0] __sock_sendmsg+0x21c/0x270 [ 1960.513207][ C0] __sys_sendto+0x3bd/0x520 [ 1960.517757][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1960.523043][ C0] __x64_sys_sendto+0xde/0x100 [ 1960.527867][ C0] do_syscall_64+0xfa/0xfa0 [ 1960.532407][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.538592][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1960.545495][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1960.550254][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.556201][ C0] RIP: 0033:0x7fb14005d407 [ 1960.560672][ C0] RSP: 002b:00007ffe7e5d7aa0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1960.569115][ C0] RAX: ffffffffffffffda RBX: 00007fb13ff0dc80 RCX: 00007fb14005d407 [ 1960.577215][ C0] RDX: 0000000000000055 RSI: 00007ffe7e5d7be0 RDI: 0000000000000003 [ 1960.585309][ C0] RBP: 00007ffe7e5d8010 R08: 0000000000000000 R09: 0000000000000000 [ 1960.593320][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe7e5d8028 [ 1960.601340][ C0] R13: 00007ffe7e5d7be0 R14: 000000000000003a R15: 00007ffe7e5d7be0 [ 1960.609507][ C0] [ 1960.612659][ C0] rcu: rcu_preempt kthread starved for 5768 jiffies! g202281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1960.623895][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1960.633900][ C0] rcu: RCU grace-period kthread stack dump: [ 1960.639995][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1960.653603][ C0] Call Trace: [ 1960.656916][ C0] [ 1960.659859][ C0] __schedule+0x1798/0x4cc0 [ 1960.664396][ C0] ? __lock_acquire+0xab9/0xd20 [ 1960.669298][ C0] ? __pfx___schedule+0x10/0x10 [ 1960.674209][ C0] ? schedule+0x91/0x360 [ 1960.678491][ C0] schedule+0x165/0x360 [ 1960.682833][ C0] schedule_timeout+0x12b/0x270 [ 1960.687808][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1960.693722][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1960.699666][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1960.705107][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1960.710801][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1960.715692][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1960.721958][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1960.727277][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1960.732542][ C0] ? finish_swait+0xcd/0x1f0 [ 1960.737158][ C0] rcu_gp_kthread+0x99/0x390 [ 1960.741789][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1960.747021][ C0] ? __kthread_parkme+0x7b/0x200 [ 1960.752251][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1960.757415][ C0] kthread+0x70e/0x8a0 [ 1960.761535][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1960.766750][ C0] ? __pfx_kthread+0x10/0x10 [ 1960.771398][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1960.776851][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1960.782317][ C0] ? __pfx_kthread+0x10/0x10 [ 1960.787044][ C0] ret_from_fork+0x4bc/0x870 [ 1960.791888][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1960.797058][ C0] ? __switch_to_asm+0x39/0x70 [ 1960.801868][ C0] ? __switch_to_asm+0x33/0x70 [ 1960.806666][ C0] ? __pfx_kthread+0x10/0x10 [ 1960.811484][ C0] ret_from_fork_asm+0x1a/0x30 [ 1960.816337][ C0] [ 1960.819472][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1960.826101][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1960.831434][ C1] NMI backtrace for cpu 1 [ 1960.831455][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1960.831486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1960.831497][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x1e/0x130 [ 1960.831520][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 06 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 02 7f 1e 48 85 c9 74 3c <48> 83 f9 01 0f 85 f4 00 00 00 b9 03 00 00 00 48 85 c0 75 36 e9 e5 [ 1960.831537][ C1] RSP: 0018:ffffc90000a08798 EFLAGS: 00000202 [ 1960.831553][ C1] RAX: 0000000000000002 RBX: ffff888175a20280 RCX: 0000000000000001 [ 1960.831566][ C1] RDX: 0000000000000100 RSI: ffffffff8f4d7d00 RDI: 000000000000dd86 [ 1960.831579][ C1] RBP: ffffc90000a08a08 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 1960.831592][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: 0000000000000001 [ 1960.831606][ C1] R13: dffffc0000000000 R14: 000000000000dd86 R15: 000000000132000e [ 1960.831619][ C1] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 1960.831634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1960.831646][ C1] CR2: 00000000f52e677d CR3: 000000007af8a000 CR4: 00000000003526f0 [ 1960.831662][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1960.831674][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1960.831688][ C1] Call Trace: [ 1960.831695][ C1] [ 1960.831702][ C1] __netif_receive_skb_core+0x39d/0x4380 [ 1960.831734][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1960.831768][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1960.831802][ C1] ? __lock_acquire+0xab9/0xd20 [ 1960.831822][ C1] ? process_backlog+0x2d5/0x14f0 [ 1960.831840][ C1] ? process_backlog+0x2d5/0x14f0 [ 1960.831858][ C1] __netif_receive_skb+0x72/0x380 [ 1960.831885][ C1] ? process_backlog+0x2d5/0x14f0 [ 1960.831902][ C1] process_backlog+0x60e/0x14f0 [ 1960.831927][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1960.831942][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1960.831963][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1960.831983][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1960.832010][ C1] __napi_poll+0xc7/0x360 [ 1960.832035][ C1] ? skb_defer_free_flush+0x229/0x250 [ 1960.832063][ C1] net_rx_action+0x5f7/0xdf0 [ 1960.832088][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1960.832113][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1960.832142][ C1] handle_softirqs+0x283/0x870 [ 1960.832164][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1960.832185][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1960.832207][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1960.832234][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1960.832253][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1960.832277][ C1] irq_exit_rcu+0x9/0x30 [ 1960.832294][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1960.832314][ C1] [ 1960.832320][ C1] [ 1960.832328][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1960.832348][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1960.832368][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1960.832385][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1960.832400][ C1] RAX: a7dd863360f49c00 RBX: ffffffff81960ca7 RCX: a7dd863360f49c00 [ 1960.832414][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e858c RDI: ffffffff8bc074e0 [ 1960.832427][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 1960.832441][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 1960.832455][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dcb58 [ 1960.832476][ C1] ? do_idle+0x1e7/0x510 [ 1960.832500][ C1] default_idle+0x13/0x20 [ 1960.832523][ C1] default_idle_call+0x73/0xb0 [ 1960.832546][ C1] do_idle+0x1e7/0x510 [ 1960.832568][ C1] ? __pfx_do_idle+0x10/0x10 [ 1960.832595][ C1] cpu_startup_entry+0x44/0x60 [ 1960.832615][ C1] start_secondary+0x101/0x110 [ 1960.832642][ C1] common_startup_64+0x13e/0x147 [ 1960.832675][ C1] [ 1968.636158][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1968.650997][ T1301] ieee802154 phy1 wpan1: encryption failed: -22