last executing test programs: 13m50.717163628s ago: executing program 3 (id=788): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7c, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) shutdown(r1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 13m49.566745455s ago: executing program 3 (id=794): socket(0x8000000010, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 13m47.539834944s ago: executing program 3 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r2, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) kcmp(r3, r3, 0x2, r5, r4) r6 = socket$tipc(0x1e, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000f060102000000000000000007000003050001000700000006000b00000000000aafaeb2752c4d631be6e30db682367186d2db087bf89f7daf4df089c09814e0621eb4ab23bdd6429c09135b8402599053fc81171fc5a18e996654013a023f6aa7cf85e4685f82f7491ba6d3224a19ba0aaad8dddab0eb6f952a50f5f6a37c090dd7a6a92bc5c92b0ae3077692a93abfcfc39ff7b19e2eb0168e8cf50e2ddd9793aaab892fea3d44c55e99e8392b606f8d5a743c41fb0a74a776db1b09c0774532f5e0d9f061d79e47b7552948e48597b14d78d7ea99f5bfb50b15f3c5a1a0d17d53e1d9c818ded75e6d7222e91c9cf8006b9a046913618134cb6d9f97cbadaa30d8f1b76b480cd6"], 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000) ptrace$setsig(0x4203, r3, 0x3, &(0x7f0000000080)={0x2a, 0x50, 0x3}) 13m46.338825444s ago: executing program 3 (id=805): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x2}, 0x18, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_restrict_self(r3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x3, 0xfd}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 13m45.296328082s ago: executing program 3 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 13m43.984547206s ago: executing program 3 (id=814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m27.967151988s ago: executing program 32 (id=814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m26.721146785s ago: executing program 2 (id=2841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = msgget$private(0x0, 0x504) msgsnd(r5, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000003c0)=""/177) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) clock_getres(0x8, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff03, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x8455730f3caa559a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r6, &(0x7f0000000100)="a7", 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = syz_usb_connect(0x6, 0x18, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)={0x20, 0x0, 0x8c, "30a988d86abc14318c15283faf3b3ecc968c44f7d9b84094ff076f54de09c0ef1ebb95b6dc604b53dd59d2c4ad97cd5d75dd900aa179c83ae4da142ad1f1302840fbbbb5aa6e720777d4853bc8be7a929fd265f21aedfc5608e6d66aefe17ab4d97a411038cb654d839ea989d6c19f7ad5e1ce34a76eae7e381119abee1ecf7377225beea1253514d9538d4f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x6de, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x22, 0x84, 0x1e, 0xff, 0x557, 0x2118, 0xc14e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cc, 0x3, 0xf, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0xdb, 0xd6, 0x0, 0x41, 0x95, 0xcc, 0x6}}, {{0x9, 0x4, 0x55, 0x2c, 0xf, 0xff, 0x6, 0x63, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xfe00, 0x14}, [@processing_unit={0x8, 0x24, 0x7, 0x3, 0x1, 0x2, "f8"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x1, 0x0, 0xe2, [@generic={0x1a, 0xa, "04bc41c2fd1fdc0dc7833577e1e652abf41d71c82574b6fd"}, @generic={0x94, 0x21, "d1b5a5dabd8149fa77448934d9798bdf478a316cfd90d25a9429bce75402ad46764220b05076e24d799adb672d5acc8f9a90f4a7122d4d7aa71188320119d77037bc3e95af776c7f991e19951c3016429cedc47ed5cf8d39a5eebde42e91594294afc6c5b3b9b1e6c9a3c86ffb140ed4fc183bc665704252b03ab46bdf8cf4b8fec594b1c6b3304c32ad8e95ec41165b60ba"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3d3, 0x3e, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x80, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x3, 0x6, [@generic={0x32, 0xb, "4f571ceae904faa6e16be685651bed1095fd68fc20b092b8c74b6889415856f9cd2d3282b57df0fe1a1324e496f303e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x43, 0xac}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x3, 0x70}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x2, 0x9, [@generic={0xb5, 0xc, "3efdc4ce98819f3704b6b7a71e63149839208abd24b014a05350c2b90c87aaf15f40e74e05f5547284edf65ee6d2aaa2c3d94e231a22565544f39d68ea57961ed9dd7bad74b57443038cf42a60f2559cfaf4e3089dfc3390549bf575b453340c2bdc4d47cbf384903c04c506221e6ab46d6e75c07918abbb7b625e0da07cf5739ad7b902253de3aeb294d513ebbeb93a3d4c79214ff47ea365b418b6eff90afa21b68366ce254945242c2d8c5a92a5b9329bd1"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x6, 0x0, 0xbb, [@generic={0x16, 0x23, "c3f74fa4d9590cee798534c95eb64cd8cab3ee1a"}, @generic={0x5c, 0x23, "4d993e1f47a772e3fd2b6c4dd1c1e7d44805a8470968e1d2cef4242dd98883b862db54849cf5669a1c9633769c47087a0288b5a7bed0e8e4c6ae98cc33d9c08dee742effb245c7eed7c2babd4f03e0edb130e9eac22057a181de"}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x20, 0x5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x2}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0xf59ff1b0572678a5, 0x0, 0x400, 0x9, 0x10, 0x14}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x6, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9d, 0x10}, @generic={0x57, 0x9, "d7008fbe3b169fa1e838075bc9a791bb97539c5e8544d1b5fb0fecd43a7dc07ef7944e411eb1b52739a376f3cd1cbca128e9f64c18c3a71be418d58a700e5c1e61a6125dd40ccfced3f74616bf7f8ce8848024b5e6"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x5, 0x9, 0x4, [@generic={0x67, 0x4, "4fc7ec99708b17067861fc3caa5b6757fb02b06436816be6e21a1a7de0f914e0462bf295b9801822b6fb77bd568fbd6cd1fa496e41e6d59875537ba5056b0b1aeb56a67e4a31d4ef301f51860020619d4d67faea233f567aa927caaeb5a8364dadc9ee3acd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x6b, 0x3}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xd8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}, @generic={0x62, 0x22, "a805cb13fc82e146a1f16a869f4225e2779636dd7656a876199bceaf40517c1cb442b2d023b364914073bccd85ccfcf00973b3525f5ee9d933b693b667253a3056bdd2ea95e6fa6ee5d0417a39e00286a73cb6f4cee89420733019067aa661af"}]}}]}}, {{0x9, 0x4, 0xac, 0x2, 0x5, 0xfb, 0x8a, 0x9f, 0x87, [@hid_hid={0x9, 0x21, 0x101, 0x6, 0x1, {0x22, 0xf1b}}, @hid_hid={0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0xd2c}}], [{{0x9, 0x5, 0xc, 0x4, 0x400, 0x8, 0x55, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x5a, 0x0, 0x2, [@generic={0x99, 0x9, "2e6432ed31e3a607b76690699d4a6063fe226d4ae7a7290be8e8e24a7dedae103428fd47a0b538026f2aab5b3c91cf55cb72d9abd8cd3cf19b5e6d7c681cbd9c7bb92cec5af54cd7c6592b0b10cea604839f269adbaa582a4be2f886d6f058906048dd6302b7100db937c751a3aaa28c548b7e3ff7f13ed5d72c634fb3307d55699156d8344ce8ec9792d2fd6d97bd22a3d451bf10d384"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x5c, 0x8, 0xf}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x80, 0x2, 0x1, [@generic={0x14, 0xf, "70df88465b796a99d8640da39c19946447db"}, @generic={0xee, 0xa, "dd9eec72636eababe85eea75395e618150ff0eeba307c109134457983e77d949dc2d2128fe904a10ac99c11a5dc339498a7bd0d9166c86530593f56c2ca90d1e1eb7816319f9d2ac35716a7578ba9a469cd087fccf3de447ad457fa7d0d7952da73fb2e3d75be5ec97eced8c993d90c5c3bfd88ce8bbb926a13d84687ff523a45dcbbfa9a4a87a93597aec341b40d969cbe226b5108c0d84187de06b67732f268c44ba6975bfa5b91d5fcfed760b707403333b98438a184424a76d2b0dabaebb40e9623d090d12e388a90ac1d3d8f0226b506c3b4345bd927a74b2a58e7e693e31ae4d20033ef629918c8d01"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x4, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}, @generic={0xd7, 0x8, "943ca8f180bb6295f569aecb3556ffe19c35ce4d4a5815fb13023e517b8a9b566411d0be3bd4b1114623aaa8755dbd335a9d504f675ea701d397cd4e4acc05f96095719589df134c7d018938ecfc3cb2320ea77fb5f3a3a208ecbb72168f2a4ca1a56c74e1a618a53fb4b67d03710c4b4276bbf4f201286cf194e5fc2804eee952799fb0b64d85ffe528709e937b8e109b9e0fe5f16ed6fa3cab7d5d849e0cf799a3ec1a4d16c649aada4db4635f2d7ca1ab475d7a191de9f5c927e322e4e7fa9409e29a09f0d689fc8ef924bf6f98cccca00f086c"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x51, 0x67, 0x9, 0xa, 0x40, 0x7}, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x8, 0x0, 0x7, 0xf4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0x8, 0x1, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xb0, "a835fe58e71b24ad49042309856eb453"}, @generic={0x1d, 0x10, 0x4, "a91bc9738b31d648d5b1713bb6d4be329629045c770c9b391deb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f7a1ab947838c113fd52a74269c3584d"}]}, 0x4, [{0x31, &(0x7f00000001c0)=@string={0x31, 0x3, "960e68f53cc8f95fc86058ea889d3566d5348f56520a743f4f735859aeaaf3e8cc7b702f30e49bff08395393850047"}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "8a0901d6856dc1628a55"}}, {0x3a, &(0x7f0000000240)=@string={0x3a, 0x3, "84ccf435986ffe289d6503d704a13e524a35484201c932255693c14432453842d310c9806309ba614145dde1cab94f602f4fc91ca19de059"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x408}}]}) 7m23.120559761s ago: executing program 2 (id=2855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 7m18.894071324s ago: executing program 2 (id=2865): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 7m18.589687242s ago: executing program 2 (id=2867): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000000)="f0928301000000", 0x7) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x4020400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 7m17.474161864s ago: executing program 2 (id=2869): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 7m16.660252993s ago: executing program 2 (id=2873): syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) socket(0x8, 0x0, 0x8000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="019806000000000020909a80080001641b7265001400ef8008000700a8141402061c65fc9c0000005770ad951e820608eec13f58938a7c97123ebfbe1fbac821019bcbee48d1edaea9aa2e000256af891f8f4d80d3fcd161bbb4754294aa36f013ea5415f1b4d1408793ea2a5a2790e2af7482de74e533420da77ec4941dd350f2f413f67c38988a2bead2c852d25128f552f04ee1f1bbce533768a0a18e04197058b3bd1e0bef9e369207bbe5ed23962b80f2dedceb814e1a50"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0), 0x0, 0x4048051, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) socket$inet(0xa, 0x801, 0x84) 7m0.764161555s ago: executing program 33 (id=2873): syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) socket(0x8, 0x0, 0x8000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="019806000000000020909a80080001641b7265001400ef8008000700a8141402061c65fc9c0000005770ad951e820608eec13f58938a7c97123ebfbe1fbac821019bcbee48d1edaea9aa2e000256af891f8f4d80d3fcd161bbb4754294aa36f013ea5415f1b4d1408793ea2a5a2790e2af7482de74e533420da77ec4941dd350f2f413f67c38988a2bead2c852d25128f552f04ee1f1bbce533768a0a18e04197058b3bd1e0bef9e369207bbe5ed23962b80f2dedceb814e1a50"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0), 0x0, 0x4048051, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) socket$inet(0xa, 0x801, 0x84) 5m59.45697785s ago: executing program 0 (id=3018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="17fd3d0ce76e053273ef3f7e776592b8b1e76b58c9ee26401882d65fd765d5ee8d1543de9e00cd963e34fc53b97f63f4eb4568fa725a28b2a80865947aa0e6da9e0242456757337a1f4a09f938f1675f7856839d8c497d2c10b4b813784db8c9c7ecc6c7595f4bf857e70d00f739816168371e63b24053c7fbc2", 0x7a}, {&(0x7f0000000000)="0ae2380b9a5a51c8bce7ccac5a6e21932f88c45b9b77007fdd8c72fefd52d7c60712297c8cb8f46f4ca94888028a14d54bbcc0e486120e3a", 0x38}, {&(0x7f0000000440)="5ee467f923555ec6b97cbbd292cceae10daa36f75e32e7d09f60d640edc2012f1d6bf438ede17c52fe6d2ba2d6a87c4666ec512536ab3f42ffeae36c602879c799474a905e018e21df3beb5b0e6b498608736ba9ed43042f9e3aec997d8b4aa1162492d68758ed35beba164641748b8b9446b1cc125003e0caf0d7c630ce5ff4826908df8a4a473ec987f694ee27eedd06b0e8eda3eab70f9e86899be5217127fc60fba1a3e96ad9a3bd5133a49491c4febf3bc8b7ff6efd84948e524c3e7d242df4dd8b62281663ee854297b7f764e78ba4f9c1fbe088df973be4f7f1499911c551f90b1defa3aaf6cade31f5", 0xed}, {&(0x7f0000000340)="e0e78f74431bb10fadcaa8edbcb887fa29442f94d4a15122c040da0cf21fe4c800e3406d183209386115cfd5eaf454a507fbb711346cedac942e9a267093871909bcf20759f4c741ba535bf7cf849c1e3def3837e1a2cd7682a8a2d77b30de073ff5c801169e910b4da3f6ea9b4662795407db0d3438069157090b3b6a624a3267954eb56922a7439f778eaa935d73af7f01022d72055f31b6ae4dd5e72f94db2b276f89", 0xa4}, {&(0x7f0000000b40)="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", 0x1ad}, {&(0x7f0000003100)="a5", 0x1}], 0x6}}], 0x1, 0x0) 5m59.026253278s ago: executing program 0 (id=3019): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 5m57.833092657s ago: executing program 0 (id=3021): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980"}) 5m54.340875604s ago: executing program 0 (id=3026): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000048, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r4 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r5 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2001, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept$alg(r6, 0x0, 0x0) 5m52.094712715s ago: executing program 0 (id=3028): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m50.170150787s ago: executing program 0 (id=3033): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10200021001c0000000000000000000000080000000000000000"], 0x30}}], 0x1, 0xc080) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0x11, 0x2, 0x100001) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000180)) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) 5m34.308142347s ago: executing program 34 (id=3033): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10200021001c0000000000000000000000080000000000000000"], 0x30}}], 0x1, 0xc080) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0x11, 0x2, 0x100001) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000180)) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) 14.161692251s ago: executing program 5 (id=4850): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.795111365s ago: executing program 5 (id=4856): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0xfffffff9, 0x7fffffff, 0x1, 'queue1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16, @ANYBLOB="080028bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x41054}, 0x48851) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x13, 0x0, {}, [{0xfffffffffffffff5, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 11.321124134s ago: executing program 4 (id=4867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0xf0ff) 11.085121543s ago: executing program 4 (id=4869): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 9.126248408s ago: executing program 4 (id=4870): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1bbc181e88357200000000f9901dddcd1af5be6bd31090aa924e587556ed5ce98708a6bb287736c515a750fa04ef"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.024644547s ago: executing program 7 (id=4872): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1b"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.840548026s ago: executing program 7 (id=4874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) 8.622378932s ago: executing program 7 (id=4876): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.384696391s ago: executing program 7 (id=4878): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.177454157s ago: executing program 7 (id=4880): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 6.436474301s ago: executing program 7 (id=4882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) 6.410907372s ago: executing program 5 (id=4883): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.220512096s ago: executing program 5 (id=4886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) 5.952545497s ago: executing program 5 (id=4890): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.841514242s ago: executing program 4 (id=4892): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 5.748485482s ago: executing program 5 (id=4893): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0xfffffff9, 0x7fffffff, 0x1, 'queue1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16, @ANYBLOB="080028bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x41054}, 0x48851) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x13, 0x0, {}, [{0xfffffffffffffff5, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 3.770204617s ago: executing program 4 (id=4896): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.72687879s ago: executing program 1 (id=4897): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.477955929s ago: executing program 1 (id=4900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)="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", 0x8df}], 0x1, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x10}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.249835526s ago: executing program 1 (id=4901): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.938447395s ago: executing program 1 (id=4904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x55) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 2.603782714s ago: executing program 1 (id=4906): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 889.211306ms ago: executing program 1 (id=4908): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c498"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 769.370855ms ago: executing program 6 (id=4909): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 596.611606ms ago: executing program 6 (id=4910): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e762400"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 389.868412ms ago: executing program 6 (id=4911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)="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", 0x8df}], 0x1, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x10}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 322.633139ms ago: executing program 6 (id=4912): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1b"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 251.557411ms ago: executing program 6 (id=4913): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 160.359253ms ago: executing program 4 (id=4914): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 6 (id=4915): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd0002006374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1bbc181e88357200000000f9901dddcd1af5be6bd31090aa924e587556ed5ce98708a6bb287736c515a750fa04ef"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/299], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 3399][T15266] usb 6-1: device descriptor read/8, error -71 [ 886.037216][T15266] usb usb6-port1: unable to enumerate USB device [ 886.206898][T16286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 886.315504][T16286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 886.510483][T16254] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.628080][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.628324][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.706781][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 886.706820][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 886.769887][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.770059][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.468753][T16612] QAT: failed to copy from user cfg_data. [ 887.793404][T11982] Bluetooth: hci3: command tx timeout [ 888.082672][T16539] chnl_net:caif_netlink_parms(): no params data found [ 891.266842][T11982] Bluetooth: hci3: command tx timeout [ 891.820618][ T6183] IPVS: stop unused estimator thread 0... [ 891.986520][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.986730][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.986923][T16539] bridge_slave_0: entered allmulticast mode [ 892.019370][T16539] bridge_slave_0: entered promiscuous mode [ 892.045382][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.045516][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.045726][T16539] bridge_slave_1: entered allmulticast mode [ 892.064619][T16539] bridge_slave_1: entered promiscuous mode [ 892.132216][T11951] lec:lec_start_xmit: lec0:No lecd attached [ 892.429198][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.950963][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.074590][T16640] 9p: Bad value for 'rfdno' [ 893.284008][T11982] Bluetooth: hci3: command tx timeout [ 893.943522][ T5984] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 894.073503][ T5984] usb 5-1: device descriptor read/64, error -71 [ 894.261426][T16539] team0: Port device team_slave_0 added [ 894.323623][ T5984] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 894.436241][T16539] team0: Port device team_slave_1 added [ 894.463541][ T5984] usb 5-1: device descriptor read/64, error -71 [ 894.584004][ T5984] usb usb5-port1: attempt power cycle [ 894.599948][T16649] QAT: failed to copy from user cfg_data. [ 894.857311][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.857326][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.857349][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.863196][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.889722][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.889784][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.889864][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.992896][T16254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.013553][ T5984] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 895.034070][ T5984] usb 5-1: device descriptor read/8, error -71 [ 895.280261][ T5984] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 895.282801][T16539] hsr_slave_0: entered promiscuous mode [ 895.294206][ T5984] usb 5-1: device descriptor read/8, error -71 [ 895.304926][T16539] hsr_slave_1: entered promiscuous mode [ 895.305846][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 895.305868][T16539] Cannot create hsr debugfs directory [ 895.339079][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.413534][ T5984] usb usb5-port1: unable to enumerate USB device [ 895.556433][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.556587][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.875728][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.875946][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.198399][ T6183] bridge_slave_1: left allmulticast mode [ 896.198430][ T6183] bridge_slave_1: left promiscuous mode [ 896.198693][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.265169][ T6183] bridge_slave_0: left allmulticast mode [ 896.265201][ T6183] bridge_slave_0: left promiscuous mode [ 896.265478][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.133397][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 897.133442][ C0] lec:lec_tx_timeout: lec0 [ 898.124172][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.214271][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.276116][ T6183] bond0 (unregistering): Released all slaves [ 898.702116][T16675] QAT: failed to copy from user cfg_data. [ 898.873544][ T6183] hsr_slave_0: left promiscuous mode [ 898.903784][ T6183] hsr_slave_1: left promiscuous mode [ 898.905075][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.927162][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.108628][ T6183] team0 (unregistering): Port device team_slave_1 removed [ 900.236186][T16689] 9p: Bad value for 'rfdno' [ 900.627035][T15266] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 900.826396][T15266] usb 6-1: device descriptor read/64, error -71 [ 901.087264][T15266] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 901.090443][ T6183] team0 (unregistering): Port device team_slave_0 removed [ 901.213516][T15266] usb 6-1: device descriptor read/64, error -71 [ 901.342776][T15266] usb usb6-port1: attempt power cycle [ 901.368096][T16694] EXT4-fs: Conflicting test_dummy_encryption options [ 901.713729][T15266] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 901.744137][T15266] usb 6-1: device descriptor read/8, error -71 [ 902.003776][T15266] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 902.034151][T15266] usb 6-1: device descriptor read/8, error -71 [ 902.150513][T15266] usb usb6-port1: unable to enumerate USB device [ 902.594979][T16254] veth0_vlan: entered promiscuous mode [ 902.745732][T16254] veth1_vlan: entered promiscuous mode [ 903.210171][T16254] veth0_macvtap: entered promiscuous mode [ 903.265448][T16254] veth1_macvtap: entered promiscuous mode [ 903.442086][T16713] QAT: failed to copy from user cfg_data. [ 903.458308][T16254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.517829][T16254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.569047][ T8806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.577986][ T8806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.578126][ T8806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.578235][ T8806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.744080][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.141457][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.141481][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.426683][T16539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 906.468536][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.468560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.497444][T16539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 906.549749][T16539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 906.591346][T16539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 906.706383][T16286] veth0_vlan: entered promiscuous mode [ 906.846747][T16286] veth1_vlan: entered promiscuous mode [ 907.228287][T16286] veth0_macvtap: entered promiscuous mode [ 907.425597][T16286] veth1_macvtap: entered promiscuous mode [ 907.537722][T16286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.602952][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.675674][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.701484][ T6209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.703115][ T6209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.740437][ T6209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.762556][ T6209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.825648][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.908737][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.911541][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.993488][ T5983] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 908.024341][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.025353][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.143619][ T5983] usb 8-1: Using ep0 maxpacket: 16 [ 908.146981][ T5983] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.147009][ T5983] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.150297][ T5983] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.150329][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.150352][ T5983] usb 8-1: Product: syz [ 908.150368][ T5983] usb 8-1: Manufacturer: syz [ 908.150385][ T5983] usb 8-1: SerialNumber: syz [ 908.468521][ T5983] usb 8-1: 0:2 : does not exist [ 908.512492][ T5983] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 908.538046][ T8806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.538070][ T8806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.761847][ T5983] usb 8-1: USB disconnect, device number 2 [ 908.943654][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.943678][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.061483][T16628] udevd[16628]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.587338][T16784] pimreg: entered allmulticast mode [ 910.646740][T16791] netlink: 'syz.1.2826': attribute type 1 has an invalid length. [ 911.007126][T16791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 911.272784][T16800] EXT4-fs: Conflicting test_dummy_encryption options [ 911.732088][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.730086][T16539] veth0_vlan: entered promiscuous mode [ 913.755974][T16539] veth1_vlan: entered promiscuous mode [ 913.878316][T16539] veth0_macvtap: entered promiscuous mode [ 913.902827][T16539] veth1_macvtap: entered promiscuous mode [ 914.057334][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.099874][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.131842][T16824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 914.200017][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.200591][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.244110][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.246448][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.820303][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 914.820335][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3156'. [ 915.021906][T16839] tipc: Enabled bearer , priority 0 [ 915.022346][ T8806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.022365][ T8806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.139378][T16839] tipc: Resetting bearer [ 915.218208][T16838] tipc: Resetting bearer [ 916.954896][T16838] tipc: Disabling bearer [ 917.195968][T16847] pimreg: entered allmulticast mode [ 917.206308][ T805] tipc: Node number set to 1196799515 [ 917.271410][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.271434][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.742563][T16887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 918.750774][T16887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 918.769332][T16887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 918.771653][T16887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 918.772448][T16887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 918.994301][T16889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'. [ 919.098895][T16889] fuse: Bad value for 'user_id' [ 919.098911][T16889] fuse: Bad value for 'user_id' [ 919.113870][T16891] FAULT_INJECTION: forcing a failure. [ 919.113870][T16891] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 919.113927][T16891] CPU: 1 UID: 0 PID: 16891 Comm: syz.5.3163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 919.113956][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 919.113973][T16891] Call Trace: [ 919.113982][T16891] [ 919.113989][T16891] dump_stack_lvl+0xe8/0x150 [ 919.114023][T16891] should_fail_ex+0x46c/0x600 [ 919.114052][T16891] _copy_to_user+0x31/0xb0 [ 919.114071][T16891] simple_read_from_buffer+0xe1/0x170 [ 919.114092][T16891] proc_fail_nth_read+0x1b6/0x220 [ 919.114118][T16891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.114144][T16891] ? rw_verify_area+0x2ac/0x4e0 [ 919.114165][T16891] ? tun_chr_write_iter+0x190/0x200 [ 919.114186][T16891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.114211][T16891] vfs_read+0x206/0xa30 [ 919.114239][T16891] ? __pfx_vfs_read+0x10/0x10 [ 919.114262][T16891] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 919.114281][T16891] ? lockdep_hardirqs_on+0x7b/0x110 [ 919.114298][T16891] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 919.114315][T16891] ? mutex_lock_nested+0x154/0x1d0 [ 919.114337][T16891] ? fdget_pos+0x253/0x320 [ 919.114361][T16891] ksys_read+0x14b/0x260 [ 919.114385][T16891] ? __pfx_ksys_read+0x10/0x10 [ 919.114415][T16891] do_syscall_64+0xec/0xf80 [ 919.114432][T16891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.114447][T16891] ? trace_irq_disable+0x37/0x100 [ 919.114463][T16891] ? clear_bhb_loop+0x60/0xb0 [ 919.114483][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.114498][T16891] RIP: 0033:0x7f5acb6fe15c [ 919.114540][T16891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 919.114560][T16891] RSP: 002b:00007f5ac9966030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 919.114594][T16891] RAX: ffffffffffffffda RBX: 00007f5acb955fa0 RCX: 00007f5acb6fe15c [ 919.114612][T16891] RDX: 000000000000000f RSI: 00007f5ac99660a0 RDI: 0000000000000003 [ 919.114627][T16891] RBP: 00007f5ac9966090 R08: 0000000000000000 R09: 0000000000000000 [ 919.114644][T16891] R10: 000000000000009e R11: 0000000000000246 R12: 0000000000000001 [ 919.114654][T16891] R13: 00007f5acb956038 R14: 00007f5acb955fa0 R15: 00007ffd7ecb97f8 [ 919.114679][T16891] [ 919.135271][T16885] wg1 speed is unknown, defaulting to 1000 [ 919.684421][ T5804] syz_tun (unregistering): left allmulticast mode [ 919.819305][T16893] pimreg: entered allmulticast mode [ 919.838680][T16895] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.3176'. [ 921.128492][T11982] Bluetooth: hci4: command tx timeout [ 923.283961][T11982] Bluetooth: hci4: command tx timeout [ 923.358512][T16885] chnl_net:caif_netlink_parms(): no params data found [ 923.603025][T16928] bridge0: entered promiscuous mode [ 923.611812][T16928] macsec1: entered promiscuous mode [ 924.077764][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.091944][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.092229][T16885] bridge_slave_0: entered allmulticast mode [ 924.387579][T16885] bridge_slave_0: entered promiscuous mode [ 924.488436][T16944] FAULT_INJECTION: forcing a failure. [ 924.488436][T16944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.488513][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.7.3188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 924.488542][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.488556][T16944] Call Trace: [ 924.488566][T16944] [ 924.488577][T16944] dump_stack_lvl+0xe8/0x150 [ 924.488616][T16944] should_fail_ex+0x46c/0x600 [ 924.488655][T16944] _copy_from_user+0x2d/0xb0 [ 924.488681][T16944] do_sock_getsockopt+0x15c/0x3d0 [ 924.488716][T16944] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 924.488748][T16944] ? __fget_files+0x3a6/0x420 [ 924.488773][T16944] ? __fget_files+0x2a/0x420 [ 924.488805][T16944] __x64_sys_getsockopt+0x1ab/0x250 [ 924.488848][T16944] do_syscall_64+0xec/0xf80 [ 924.488874][T16944] ? rcu_is_watching+0x15/0xb0 [ 924.488894][T16944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.488918][T16944] ? clear_bhb_loop+0x60/0xb0 [ 924.488947][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.488971][T16944] RIP: 0033:0x7fe1c3a7f749 [ 924.488991][T16944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.489011][T16944] RSP: 002b:00007fe1c1ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 924.489037][T16944] RAX: ffffffffffffffda RBX: 00007fe1c3cd6180 RCX: 00007fe1c3a7f749 [ 924.489054][T16944] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000005 [ 924.489069][T16944] RBP: 00007fe1c1ca4090 R08: 00002000000002c0 R09: 0000000000000000 [ 924.489084][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.489099][T16944] R13: 00007fe1c3cd6218 R14: 00007fe1c3cd6180 R15: 00007ffddb7ab118 [ 924.489135][T16944] [ 924.961529][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.961664][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.961934][T16885] bridge_slave_1: entered allmulticast mode [ 924.996028][T16885] bridge_slave_1: entered promiscuous mode [ 925.363628][T11982] Bluetooth: hci4: command tx timeout [ 926.720623][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.736441][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.452121][T11982] Bluetooth: hci4: command tx timeout [ 927.489299][T16885] team0: Port device team_slave_0 added [ 927.507364][T16885] team0: Port device team_slave_1 added [ 927.674544][T16980] bridge: RTM_NEWNEIGH with invalid ether address [ 927.879042][T16987] sg_write: data in/out 201216/120 bytes for SCSI command 0x66-- guessing data in; [ 927.879042][T16987] program syz.1.3203 not setting count and/or reply_len properly [ 928.382250][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.382271][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.382304][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.053570][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.053590][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.053624][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.767891][T16885] hsr_slave_0: entered promiscuous mode [ 929.769376][T16885] hsr_slave_1: entered promiscuous mode [ 929.786808][T16885] debugfs: 'hsr0' already exists in 'hsr' [ 929.786838][T16885] Cannot create hsr debugfs directory [ 931.061201][T16885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.392027][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3220'. [ 931.399655][T17037] process 'syz.6.3220' launched '/dev/fd/4' with NULL argv: empty string added [ 931.414063][T16885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.441225][T17039] sctp: [Deprecated]: syz.7.3222 (pid 17039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.441225][T17039] Use struct sctp_sack_info instead [ 931.705887][T16885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.933150][T17054] ======================================================= [ 931.933150][T17054] WARNING: The mand mount option has been deprecated and [ 931.933150][T17054] and is ignored by this kernel. Remove the mand [ 931.933150][T17054] option from the mount to silence this warning. [ 931.933150][T17054] ======================================================= [ 931.933505][T17054] tmpfs: Bad value for 'mpol' [ 932.681803][T16885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.130216][T17072] pimreg: entered allmulticast mode [ 934.626536][T17066] syz.7.3230 (17066): drop_caches: 2 [ 935.312554][T17085] FAULT_INJECTION: forcing a failure. [ 935.312554][T17085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.312595][T17085] CPU: 1 UID: 0 PID: 17085 Comm: syz.7.3236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 935.312623][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.312638][T17085] Call Trace: [ 935.312647][T17085] [ 935.312657][T17085] dump_stack_lvl+0xe8/0x150 [ 935.312695][T17085] should_fail_ex+0x46c/0x600 [ 935.312735][T17085] _copy_from_user+0x2d/0xb0 [ 935.312761][T17085] ___sys_sendmsg+0x158/0x2a0 [ 935.312797][T17085] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.312836][T17085] ? kstrtouint+0x6e/0xe0 [ 935.312896][T17085] ? __fget_files+0x2a/0x420 [ 935.312920][T17085] ? __fget_files+0x3a6/0x420 [ 935.312956][T17085] __sys_sendmmsg+0x22d/0x430 [ 935.312995][T17085] ? __pfx___sys_sendmmsg+0x10/0x10 [ 935.313046][T17085] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 935.313097][T17085] ? ksys_write+0x230/0x260 [ 935.313134][T17085] ? __pfx_ksys_write+0x10/0x10 [ 935.313175][T17085] __x64_sys_sendmmsg+0xa0/0xc0 [ 935.313210][T17085] do_syscall_64+0xec/0xf80 [ 935.313236][T17085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.313258][T17085] ? trace_irq_disable+0x37/0x100 [ 935.313288][T17085] ? clear_bhb_loop+0x60/0xb0 [ 935.313315][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.313337][T17085] RIP: 0033:0x7fe1c3a7f749 [ 935.313356][T17085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.313376][T17085] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 935.313399][T17085] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 935.313415][T17085] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 935.313430][T17085] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 935.313443][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.313457][T17085] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 935.313491][T17085] [ 935.647024][T16885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 935.648612][T17087] FAULT_INJECTION: forcing a failure. [ 935.648612][T17087] name failslab, interval 1, probability 0, space 0, times 0 [ 935.648648][T17087] CPU: 0 UID: 0 PID: 17087 Comm: syz.7.3237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 935.648674][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.648689][T17087] Call Trace: [ 935.648697][T17087] [ 935.648707][T17087] dump_stack_lvl+0xe8/0x150 [ 935.648745][T17087] should_fail_ex+0x46c/0x600 [ 935.648783][T17087] ? __alloc_skb+0x1dc/0x3a0 [ 935.648810][T17087] should_failslab+0xa8/0x100 [ 935.648835][T17087] ? __alloc_skb+0x1dc/0x3a0 [ 935.648860][T17087] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 935.648899][T17087] ? lockdep_hardirqs_on+0x7b/0x110 [ 935.648927][T17087] ? __alloc_skb+0x198/0x3a0 [ 935.648955][T17087] __alloc_skb+0x1dc/0x3a0 [ 935.648988][T17087] netlink_sendmsg+0x5c6/0xb30 [ 935.649032][T17087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.649084][T17087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 935.649115][T17087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.649151][T17087] __sock_sendmsg+0x21c/0x270 [ 935.649178][T17087] ____sys_sendmsg+0x508/0x810 [ 935.649216][T17087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.649258][T17087] ? import_iovec+0x74/0xa0 [ 935.649286][T17087] ___sys_sendmsg+0x21f/0x2a0 [ 935.649320][T17087] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.649392][T17087] ? __fget_files+0x2a/0x420 [ 935.649416][T17087] ? __fget_files+0x3a6/0x420 [ 935.649452][T17087] __x64_sys_sendmsg+0x1a1/0x260 [ 935.649488][T17087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 935.649531][T17087] ? __pfx_ksys_write+0x10/0x10 [ 935.649578][T17087] do_syscall_64+0xec/0xf80 [ 935.649603][T17087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.649626][T17087] ? trace_irq_disable+0x37/0x100 [ 935.649650][T17087] ? clear_bhb_loop+0x60/0xb0 [ 935.649679][T17087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.649702][T17087] RIP: 0033:0x7fe1c3a7f749 [ 935.649722][T17087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.649741][T17087] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.649766][T17087] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 935.649783][T17087] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 935.649799][T17087] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 935.649813][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.649827][T17087] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 935.649864][T17087] [ 935.971629][T16885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 936.061339][T16885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 936.146099][T16885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 936.523749][T16905] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 936.839320][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.851650][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 937.213501][T16905] usb 8-1: Using ep0 maxpacket: 32 [ 937.217864][T16905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.217903][T16905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.217946][T16905] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 937.217971][T16905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.232404][T16905] usb 8-1: config 0 descriptor?? [ 937.608497][ T1367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.811651][T16905] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 937.874039][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.034491][ T5984] usb 8-1: USB disconnect, device number 3 [ 938.066624][T17115] binder: 17114:17115 ioctl c0306201 0 returned -14 [ 938.122975][T17109] fido_id[17109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 938.425664][ T1367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.566573][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.914170][ T1367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.974855][T17126] vlan2: entered promiscuous mode [ 938.974880][T17126] ip6gretap0: entered promiscuous mode [ 939.288011][ T1367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.449807][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.744281][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.878824][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.878978][T16511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.261910][T17149] usb usb2: usbfs: interface 0 claimed by hub while 'syz.7.3255' resets device [ 941.352921][T17149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 941.387216][T17150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 941.701714][ T1367] bridge_slave_1: left allmulticast mode [ 941.701744][ T1367] bridge_slave_1: left promiscuous mode [ 941.702006][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.794954][ T1367] bridge_slave_0: left allmulticast mode [ 941.794981][ T1367] bridge_slave_0: left promiscuous mode [ 941.796579][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.832469][T17159] FAULT_INJECTION: forcing a failure. [ 941.832469][T17159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.832508][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.7.3258 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 941.832535][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.832549][T17159] Call Trace: [ 941.832557][T17159] [ 941.832567][T17159] dump_stack_lvl+0xe8/0x150 [ 941.832605][T17159] should_fail_ex+0x46c/0x600 [ 941.832644][T17159] _copy_to_user+0x31/0xb0 [ 941.832672][T17159] simple_read_from_buffer+0xe1/0x170 [ 941.832702][T17159] proc_fail_nth_read+0x1b6/0x220 [ 941.832741][T17159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.832779][T17159] ? rw_verify_area+0x2ac/0x4e0 [ 941.832811][T17159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.832847][T17159] vfs_read+0x206/0xa30 [ 941.832890][T17159] ? __pfx_vfs_read+0x10/0x10 [ 941.832924][T17159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 941.832951][T17159] ? lockdep_hardirqs_on+0x7b/0x110 [ 941.832977][T17159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 941.833001][T17159] ? mutex_lock_nested+0x154/0x1d0 [ 941.833034][T17159] ? fdget_pos+0x253/0x320 [ 941.833069][T17159] ksys_read+0x14b/0x260 [ 941.833105][T17159] ? __pfx_ksys_read+0x10/0x10 [ 941.833149][T17159] do_syscall_64+0xec/0xf80 [ 941.833174][T17159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.833196][T17159] ? trace_irq_disable+0x37/0x100 [ 941.833220][T17159] ? clear_bhb_loop+0x60/0xb0 [ 941.833248][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.833271][T17159] RIP: 0033:0x7fe1c3a7e15c [ 941.833294][T17159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 941.833312][T17159] RSP: 002b:00007fe1c1ce6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.833337][T17159] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7e15c [ 941.833354][T17159] RDX: 000000000000000f RSI: 00007fe1c1ce60a0 RDI: 0000000000000004 [ 941.833368][T17159] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 941.833382][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.833395][T17159] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 941.833440][T17159] [ 941.883444][T16770] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 942.003432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 942.003465][ C0] lec:lec_tx_timeout: lec0 [ 942.128099][T16770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 942.128143][T16770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.128167][T16770] usb 6-1: Product: syz [ 942.128184][T16770] usb 6-1: Manufacturer: syz [ 942.128201][T16770] usb 6-1: SerialNumber: syz [ 942.135030][T16770] usb 6-1: config 0 descriptor?? [ 942.453582][T16770] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.950621][ T1367] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 943.118882][T17169] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3261'. [ 943.385949][T17171] fuse: Unknown parameter 'rotmode' [ 944.968043][T16770] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 945.594392][ T1367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.675148][ T1367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.694602][ T1367] bond0 (unregistering): Released all slaves [ 946.637606][ T1367] bond1 (unregistering): Released all slaves [ 947.491788][ T1367] bond2 (unregistering): Released all slaves [ 948.370293][ T1367] bond3 (unregistering): Released all slaves [ 948.568143][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.694072][T16905] usb 6-1: USB disconnect, device number 23 [ 948.852792][ T1367] tipc: Left network mode [ 949.666281][T17213] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3272'. [ 950.266964][T17223] mmap: syz.6.3275 (17223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 950.485174][T17232] tmpfs: Unknown parameter 'usrquota' [ 951.242030][T16885] veth0_vlan: entered promiscuous mode [ 951.270108][T16885] veth1_vlan: entered promiscuous mode [ 952.430785][T17242] FAULT_INJECTION: forcing a failure. [ 952.430785][T17242] name failslab, interval 1, probability 0, space 0, times 0 [ 952.430825][T17242] CPU: 0 UID: 0 PID: 17242 Comm: syz.7.3282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 952.430851][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 952.430866][T17242] Call Trace: [ 952.430875][T17242] [ 952.430884][T17242] dump_stack_lvl+0xe8/0x150 [ 952.430922][T17242] should_fail_ex+0x46c/0x600 [ 952.430962][T17242] should_failslab+0xa8/0x100 [ 952.430987][T17242] __kmalloc_noprof+0xe0/0x7e0 [ 952.431021][T17242] ? kfree+0x4d/0x900 [ 952.431047][T17242] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 952.431080][T17242] tomoyo_realpath_from_path+0xe3/0x5d0 [ 952.431108][T17242] ? tomoyo_domain+0xd9/0x130 [ 952.431139][T17242] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 952.431174][T17242] tomoyo_path_number_perm+0x1e8/0x5a0 [ 952.431212][T17242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 952.431245][T17242] ? __lock_acquire+0x6b6/0x2cf0 [ 952.431281][T17242] ? do_raw_spin_lock+0x121/0x290 [ 952.431344][T17242] ? __fget_files+0x2a/0x420 [ 952.431373][T17242] ? __fget_files+0x2a/0x420 [ 952.431396][T17242] ? __fget_files+0x3a6/0x420 [ 952.431420][T17242] ? __fget_files+0x2a/0x420 [ 952.431462][T17242] security_file_ioctl+0xcb/0x2d0 [ 952.431500][T17242] __se_sys_ioctl+0x47/0x170 [ 952.431536][T17242] do_syscall_64+0xec/0xf80 [ 952.431561][T17242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.431584][T17242] ? trace_irq_disable+0x37/0x100 [ 952.431608][T17242] ? clear_bhb_loop+0x60/0xb0 [ 952.431637][T17242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.431660][T17242] RIP: 0033:0x7fe1c3a7f749 [ 952.431680][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.431701][T17242] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.431725][T17242] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 952.431743][T17242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 952.431756][T17242] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 952.431771][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.431785][T17242] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 952.431822][T17242] [ 952.431831][T17242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 952.771350][T17251] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3284'. [ 953.081721][T16885] veth0_macvtap: entered promiscuous mode [ 953.111039][T16885] veth1_macvtap: entered promiscuous mode [ 953.333500][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.536815][ T1367] hsr_slave_0: left promiscuous mode [ 953.593528][ T1367] hsr_slave_1: left promiscuous mode [ 953.597067][ T1367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.633442][ T805] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 953.664312][ T1367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.783449][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 953.788106][ T805] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 953.788139][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.788162][ T805] usb 2-1: Product: syz [ 953.788178][ T805] usb 2-1: Manufacturer: syz [ 953.788194][ T805] usb 2-1: SerialNumber: syz [ 953.834263][ T805] usb 2-1: config 0 descriptor?? [ 953.857446][ T805] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 953.858248][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 953.962845][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 953.975361][ T805] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 953.975601][ T805] usb 2-1: media controller created [ 954.020916][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 954.073516][ T805] usb 2-1: selecting invalid altsetting 7 [ 954.073540][ T805] cxusb: set interface failed [ 954.073554][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 954.103056][T17263] dvb-usb: bulk message failed: -22 (3/0) [ 954.171032][ T805] DVB: Unable to find symbol lgdt330x_attach() [ 954.171063][ T805] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 954.273456][ T805] rc_core: IR keymap rc-dvico-portable not found [ 954.273479][ T805] Registered IR keymap rc-empty [ 954.327056][ T805] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 954.331317][ T805] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 954.384206][ T805] dvb-usb: schedule remote query interval to 100 msecs. [ 954.384232][ T805] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 954.504057][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 954.616751][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 954.723490][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 954.833576][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 954.945509][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 955.053469][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 955.163672][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 955.273657][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 955.384315][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 955.493468][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 955.603592][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 955.713431][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 955.823435][T16770] dvb-usb: bulk message failed: -22 (1/0) [ 955.933446][T16770] dvb-usb: bulk message failed: -22 (1/0) [ 956.073400][T16770] dvb-usb: bulk message failed: -22 (1/0) [ 956.213411][T16770] dvb-usb: bulk message failed: -22 (1/0) [ 956.326146][T16770] dvb-usb: bulk message failed: -22 (1/0) [ 956.385845][ T5947] usb 2-1: USB disconnect, device number 14 [ 956.718766][T17342] FAULT_INJECTION: forcing a failure. [ 956.718766][T17342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.718795][T17342] CPU: 1 UID: 0 PID: 17342 Comm: syz.7.3324 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 956.718814][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.718824][T17342] Call Trace: [ 956.718830][T17342] [ 956.718837][T17342] dump_stack_lvl+0xe8/0x150 [ 956.718864][T17342] should_fail_ex+0x46c/0x600 [ 956.718891][T17342] _copy_from_user+0x2d/0xb0 [ 956.718910][T17342] __sys_bpf+0x1e3/0x860 [ 956.718930][T17342] ? __pfx___sys_bpf+0x10/0x10 [ 956.718946][T17342] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 956.718981][T17342] ? ksys_write+0x230/0x260 [ 956.719010][T17342] ? __pfx_ksys_write+0x10/0x10 [ 956.719038][T17342] __x64_sys_bpf+0x7c/0x90 [ 956.719055][T17342] do_syscall_64+0xec/0xf80 [ 956.719072][T17342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.719087][T17342] ? trace_irq_disable+0x37/0x100 [ 956.719104][T17342] ? clear_bhb_loop+0x60/0xb0 [ 956.719124][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.719140][T17342] RIP: 0033:0x7fe1c3a7f749 [ 956.719179][T17342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.719199][T17342] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.719223][T17342] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 956.719240][T17342] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 956.719255][T17342] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 956.719271][T17342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.719286][T17342] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 956.719311][T17342] [ 956.993548][T16770] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 957.051166][ T5947] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 957.153565][T16770] usb 8-1: Using ep0 maxpacket: 32 [ 957.191993][T16770] usb 8-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.192032][T16770] usb 8-1: config 0 interface 0 has no altsetting 0 [ 957.192066][T16770] usb 8-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 957.192091][T16770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.237619][T16770] usb 8-1: config 0 descriptor?? [ 957.260573][T16770] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 957.757399][ T1367] team0 (unregistering): Port device team_slave_1 removed [ 958.034074][ T1367] team0 (unregistering): Port device team_slave_0 removed [ 959.748141][T16770] usb 8-1: USB disconnect, device number 4 [ 961.537817][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.588141][ T1035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.588962][ T1035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.589009][ T1035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.589050][ T1035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.252493][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.252518][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.644324][T17414] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3357'. [ 962.748165][T17415] FAULT_INJECTION: forcing a failure. [ 962.748165][T17415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.748239][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz.7.3356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 962.748266][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 962.748281][T17415] Call Trace: [ 962.748290][T17415] [ 962.748300][T17415] dump_stack_lvl+0xe8/0x150 [ 962.748339][T17415] should_fail_ex+0x46c/0x600 [ 962.748380][T17415] _copy_from_user+0x2d/0xb0 [ 962.748406][T17415] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 962.748450][T17415] ? sock_alloc_send_pskb+0x877/0x990 [ 962.748496][T17415] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 962.748538][T17415] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 962.748571][T17415] ? lockdep_hardirqs_on+0x7b/0x110 [ 962.748597][T17415] ? finish_task_switch+0x23d/0x940 [ 962.748639][T17415] ping_getfrag+0x72/0x260 [ 962.748671][T17415] ? skb_put+0x11b/0x210 [ 962.748705][T17415] __ip6_append_data+0x3974/0x3f30 [ 962.748755][T17415] ? __pfx_ping_getfrag+0x10/0x10 [ 962.748807][T17415] ? __pfx___ip6_append_data+0x10/0x10 [ 962.748828][T17415] ? __pfx_ip6_mtu+0x10/0x10 [ 962.748875][T17415] ip6_append_data+0x1c1/0x380 [ 962.748902][T17415] ? __pfx_ping_getfrag+0x10/0x10 [ 962.748938][T17415] ping_v6_sendmsg+0xe0e/0x1210 [ 962.748988][T17415] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 962.749040][T17415] ? __bpf_trace_sched_switch+0x17a/0x1e0 [ 962.749091][T17415] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 962.749122][T17415] ? sock_rps_record_flow+0x19/0x410 [ 962.749164][T17415] ? inet_sendmsg+0x2f4/0x370 [ 962.749192][T17415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.749228][T17415] __sock_sendmsg+0x19c/0x270 [ 962.749255][T17415] __sys_sendto+0x3c7/0x520 [ 962.749287][T17415] ? __pfx___sys_sendto+0x10/0x10 [ 962.749345][T17415] ? ksys_write+0x230/0x260 [ 962.749383][T17415] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 962.749416][T17415] __x64_sys_sendto+0xde/0x100 [ 962.749450][T17415] do_syscall_64+0xec/0xf80 [ 962.749474][T17415] ? rcu_is_watching+0x15/0xb0 [ 962.749495][T17415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.749519][T17415] ? clear_bhb_loop+0x60/0xb0 [ 962.749547][T17415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.749570][T17415] RIP: 0033:0x7fe1c3a7f749 [ 962.749592][T17415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.749613][T17415] RSP: 002b:00007fe1c1ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 962.749639][T17415] RAX: ffffffffffffffda RBX: 00007fe1c3cd6180 RCX: 00007fe1c3a7f749 [ 962.749657][T17415] RDX: 000000000000ffd8 RSI: 0000200000000080 RDI: 0000000000000007 [ 962.749672][T17415] RBP: 00007fe1c1ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 962.749687][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.749701][T17415] R13: 00007fe1c3cd6218 R14: 00007fe1c3cd6180 R15: 00007ffddb7ab118 [ 962.749740][T17415] [ 963.389912][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.389936][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.026386][ T1367] IPVS: stop unused estimator thread 0... [ 968.175976][T17498] FAULT_INJECTION: forcing a failure. [ 968.175976][T17498] name failslab, interval 1, probability 0, space 0, times 0 [ 968.176015][T17498] CPU: 1 UID: 0 PID: 17498 Comm: syz.7.3388 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 968.176041][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 968.176055][T17498] Call Trace: [ 968.176063][T17498] [ 968.176073][T17498] dump_stack_lvl+0xe8/0x150 [ 968.176107][T17498] should_fail_ex+0x46c/0x600 [ 968.176143][T17498] ? skb_clone+0x212/0x3a0 [ 968.176175][T17498] should_failslab+0xa8/0x100 [ 968.176198][T17498] ? skb_clone+0x212/0x3a0 [ 968.176225][T17498] kmem_cache_alloc_noprof+0x84/0x6c0 [ 968.176256][T17498] ? __netlink_lookup+0xbd/0x8a0 [ 968.176300][T17498] skb_clone+0x212/0x3a0 [ 968.176353][T17498] __netlink_deliver_tap+0x404/0x850 [ 968.176401][T17498] ? netlink_deliver_tap+0x2e/0x1b0 [ 968.176437][T17498] netlink_deliver_tap+0x19c/0x1b0 [ 968.176477][T17498] netlink_unicast+0x811/0xa10 [ 968.176514][T17498] ? __pfx_netlink_unicast+0x10/0x10 [ 968.176542][T17498] ? __alloc_skb+0x198/0x3a0 [ 968.176571][T17498] ? netlink_sendmsg+0x642/0xb30 [ 968.176603][T17498] ? skb_put+0x11b/0x210 [ 968.176636][T17498] netlink_sendmsg+0x805/0xb30 [ 968.176676][T17498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.176719][T17498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 968.176749][T17498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.176783][T17498] __sock_sendmsg+0x21c/0x270 [ 968.176807][T17498] ____sys_sendmsg+0x508/0x810 [ 968.176844][T17498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 968.176886][T17498] ? import_iovec+0x74/0xa0 [ 968.176913][T17498] ___sys_sendmsg+0x21f/0x2a0 [ 968.176948][T17498] ? __pfx____sys_sendmsg+0x10/0x10 [ 968.177020][T17498] ? __fget_files+0x2a/0x420 [ 968.177045][T17498] ? __fget_files+0x3a6/0x420 [ 968.177082][T17498] __x64_sys_sendmsg+0x1a1/0x260 [ 968.177131][T17498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 968.177174][T17498] ? __pfx_ksys_write+0x10/0x10 [ 968.177220][T17498] do_syscall_64+0xec/0xf80 [ 968.177245][T17498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.177268][T17498] ? trace_irq_disable+0x37/0x100 [ 968.177292][T17498] ? clear_bhb_loop+0x60/0xb0 [ 968.177321][T17498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.177344][T17498] RIP: 0033:0x7fe1c3a7f749 [ 968.177364][T17498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.177385][T17498] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.177410][T17498] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 968.177427][T17498] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 968.177442][T17498] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 968.177462][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.177474][T17498] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 968.177508][T17498] [ 968.588512][T11982] Bluetooth: hci4: link tx timeout [ 968.589042][T11982] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 969.378579][T17524] binfmt_misc: register: failed to install interpreter file ./file0 [ 970.210228][T17531] FAULT_INJECTION: forcing a failure. [ 970.210228][T17531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.210313][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.7.3399 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.210343][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.210357][T17531] Call Trace: [ 970.210370][T17531] [ 970.210377][T17531] dump_stack_lvl+0xe8/0x150 [ 970.210405][T17531] should_fail_ex+0x46c/0x600 [ 970.210433][T17531] _copy_to_user+0x31/0xb0 [ 970.210452][T17531] simple_read_from_buffer+0xe1/0x170 [ 970.210473][T17531] proc_fail_nth_read+0x1b6/0x220 [ 970.210501][T17531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.210528][T17531] ? rw_verify_area+0x2ac/0x4e0 [ 970.210550][T17531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.210575][T17531] vfs_read+0x206/0xa30 [ 970.210603][T17531] ? __pfx_vfs_read+0x10/0x10 [ 970.210627][T17531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.210646][T17531] ? lockdep_hardirqs_on+0x7b/0x110 [ 970.210663][T17531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 970.210681][T17531] ? mutex_lock_nested+0x154/0x1d0 [ 970.210703][T17531] ? fdget_pos+0x253/0x320 [ 970.210727][T17531] ksys_read+0x14b/0x260 [ 970.210751][T17531] ? __pfx_ksys_read+0x10/0x10 [ 970.210782][T17531] do_syscall_64+0xec/0xf80 [ 970.210799][T17531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.210815][T17531] ? clear_bhb_loop+0x60/0xb0 [ 970.210835][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.210851][T17531] RIP: 0033:0x7fe1c3a7e15c [ 970.210865][T17531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 970.210879][T17531] RSP: 002b:00007fe1c1cc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.210896][T17531] RAX: ffffffffffffffda RBX: 00007fe1c3cd6090 RCX: 00007fe1c3a7e15c [ 970.210908][T17531] RDX: 000000000000000f RSI: 00007fe1c1cc50a0 RDI: 0000000000000006 [ 970.210919][T17531] RBP: 00007fe1c1cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 970.210929][T17531] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 970.210939][T17531] R13: 00007fe1c3cd6128 R14: 00007fe1c3cd6090 R15: 00007ffddb7ab118 [ 970.210964][T17531] [ 971.134443][T11982] Bluetooth: hci4: command 0x0406 tx timeout [ 972.953424][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 972.957116][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 973.325819][T17564] netlink: 'syz.4.3411': attribute type 12 has an invalid length. [ 974.714416][T17593] FAULT_INJECTION: forcing a failure. [ 974.714416][T17593] name failslab, interval 1, probability 0, space 0, times 0 [ 974.714456][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.4.3423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 974.714483][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.714498][T17593] Call Trace: [ 974.714506][T17593] [ 974.714516][T17593] dump_stack_lvl+0xe8/0x150 [ 974.714553][T17593] should_fail_ex+0x46c/0x600 [ 974.714593][T17593] should_failslab+0xa8/0x100 [ 974.714619][T17593] __kmalloc_cache_noprof+0x84/0x6d0 [ 974.714654][T17593] ? _copy_from_user+0x94/0xb0 [ 974.714677][T17593] ? __se_sys_mount+0x166/0x410 [ 974.714700][T17593] ? memdup_user+0x99/0xd0 [ 974.714730][T17593] __se_sys_mount+0x166/0x410 [ 974.714762][T17593] ? __pfx___se_sys_mount+0x10/0x10 [ 974.714794][T17593] ? __x64_sys_mount+0x20/0xc0 [ 974.714821][T17593] do_syscall_64+0xec/0xf80 [ 974.714847][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.714870][T17593] ? trace_irq_disable+0x37/0x100 [ 974.714896][T17593] ? clear_bhb_loop+0x60/0xb0 [ 974.714924][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.714947][T17593] RIP: 0033:0x7f99ee38f749 [ 974.714967][T17593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.714988][T17593] RSP: 002b:00007f99ec5ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.715013][T17593] RAX: ffffffffffffffda RBX: 00007f99ee5e5fa0 RCX: 00007f99ee38f749 [ 974.715036][T17593] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 974.715052][T17593] RBP: 00007f99ec5ee090 R08: 0000200000000000 R09: 0000000000000000 [ 974.715068][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.715082][T17593] R13: 00007f99ee5e6038 R14: 00007f99ee5e5fa0 R15: 00007fff692c0868 [ 974.715119][T17593] [ 974.904957][ T7189] Bluetooth: hci2: command 0x0406 tx timeout [ 974.904998][ T7189] Bluetooth: hci1: command 0x0406 tx timeout [ 974.999441][T17596] FAULT_INJECTION: forcing a failure. [ 974.999441][T17596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.999515][T17596] CPU: 1 UID: 0 PID: 17596 Comm: syz.7.3421 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 974.999542][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.999557][T17596] Call Trace: [ 974.999566][T17596] [ 974.999577][T17596] dump_stack_lvl+0xe8/0x150 [ 974.999614][T17596] should_fail_ex+0x46c/0x600 [ 974.999654][T17596] _copy_from_user+0x2d/0xb0 [ 974.999681][T17596] binder_ioctl_write_read+0x127/0x9ef0 [ 974.999711][T17596] ? __pfx___schedule+0x10/0x10 [ 974.999743][T17596] ? irqentry_exit+0x5e8/0x670 [ 974.999779][T17596] ? try_to_take_rt_mutex+0x840/0xb00 [ 974.999816][T17596] ? preempt_schedule_notrace+0x57/0x90 [ 974.999852][T17596] ? __lock_acquire+0x6b6/0x2cf0 [ 974.999891][T17596] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 974.999938][T17596] ? do_raw_spin_lock+0x121/0x290 [ 974.999978][T17596] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 975.000005][T17596] ? lockdep_hardirqs_on+0x7b/0x110 [ 975.000030][T17596] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 975.000056][T17596] ? rt_mutex_slowunlock+0x493/0x8a0 [ 975.000091][T17596] ? reacquire_held_locks+0x104/0x190 [ 975.000126][T17596] ? rt_spin_lock+0x1c1/0x3e0 [ 975.000162][T17596] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 975.000209][T17596] ? rt_spin_unlock+0x150/0x200 [ 975.000254][T17596] ? binder_get_thread+0x598/0x6d0 [ 975.000295][T17596] binder_ioctl+0x3c8/0x19d0 [ 975.000328][T17596] ? do_vfs_ioctl+0xf9/0x1440 [ 975.000362][T17596] ? do_vfs_ioctl+0xac5/0x1440 [ 975.000395][T17596] ? do_vfs_ioctl+0xbeb/0x1440 [ 975.000427][T17596] ? __pfx_binder_ioctl+0x10/0x10 [ 975.000455][T17596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 975.000488][T17596] ? __pfx_smack_log+0x10/0x10 [ 975.000516][T17596] ? smk_access+0x14c/0x4e0 [ 975.000550][T17596] ? smk_tskacc+0x2fc/0x370 [ 975.000583][T17596] ? smack_file_ioctl+0x2ac/0x340 [ 975.000617][T17596] ? __pfx_smack_file_ioctl+0x10/0x10 [ 975.000659][T17596] ? __fget_files+0x2a/0x420 [ 975.000683][T17596] ? __fget_files+0x3a6/0x420 [ 975.000707][T17596] ? __fget_files+0x2a/0x420 [ 975.000743][T17596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 975.000778][T17596] ? __pfx_binder_ioctl+0x10/0x10 [ 975.000807][T17596] __se_sys_ioctl+0xff/0x170 [ 975.000842][T17596] do_syscall_64+0xec/0xf80 [ 975.000867][T17596] ? rcu_is_watching+0x15/0xb0 [ 975.000887][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.000911][T17596] ? clear_bhb_loop+0x60/0xb0 [ 975.000940][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.000964][T17596] RIP: 0033:0x7fe1c3a7f749 [ 975.000984][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.001005][T17596] RSP: 002b:00007fe1c1ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.001030][T17596] RAX: ffffffffffffffda RBX: 00007fe1c3cd6180 RCX: 00007fe1c3a7f749 [ 975.001048][T17596] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000007 [ 975.001063][T17596] RBP: 00007fe1c1ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 975.001079][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.001092][T17596] R13: 00007fe1c3cd6218 R14: 00007fe1c3cd6180 R15: 00007ffddb7ab118 [ 975.001129][T17596] [ 975.001169][T17596] binder: 17586:17596 ioctl c0306201 200000000080 returned -14 [ 975.793673][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3424'. [ 976.078977][T17600] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 980.585389][T17666] FAULT_INJECTION: forcing a failure. [ 980.585389][T17666] name failslab, interval 1, probability 0, space 0, times 0 [ 980.585425][T17666] CPU: 0 UID: 0 PID: 17666 Comm: syz.6.3450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 980.585451][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.585466][T17666] Call Trace: [ 980.585475][T17666] [ 980.585484][T17666] dump_stack_lvl+0xe8/0x150 [ 980.585522][T17666] should_fail_ex+0x46c/0x600 [ 980.585561][T17666] should_failslab+0xa8/0x100 [ 980.585585][T17666] __kmalloc_cache_noprof+0x84/0x6d0 [ 980.585621][T17666] ? init_srcu_struct_fields+0x7f/0xa30 [ 980.585656][T17666] ? __pfx_snprintf+0x10/0x10 [ 980.585700][T17666] init_srcu_struct_fields+0x7f/0xa30 [ 980.585743][T17666] kvm_dev_ioctl+0x5a0/0x1600 [ 980.585783][T17666] ? __fget_files+0x2a/0x420 [ 980.585808][T17666] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 980.585837][T17666] ? __fget_files+0x2a/0x420 [ 980.585865][T17666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 980.585899][T17666] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 980.585930][T17666] __se_sys_ioctl+0xff/0x170 [ 980.585964][T17666] do_syscall_64+0xec/0xf80 [ 980.585989][T17666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.586010][T17666] ? trace_irq_disable+0x37/0x100 [ 980.586034][T17666] ? clear_bhb_loop+0x60/0xb0 [ 980.586061][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.586083][T17666] RIP: 0033:0x7fdb0ac0f749 [ 980.586102][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.586132][T17666] RSP: 002b:00007fdb08e55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.586157][T17666] RAX: ffffffffffffffda RBX: 00007fdb0ae66090 RCX: 00007fdb0ac0f749 [ 980.586173][T17666] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 980.586187][T17666] RBP: 00007fdb08e55090 R08: 0000000000000000 R09: 0000000000000000 [ 980.586201][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.586214][T17666] R13: 00007fdb0ae66128 R14: 00007fdb0ae66090 R15: 00007fff1cd4d3e8 [ 980.586248][T17666] [ 990.166706][T17796] ip6gretap0: entered promiscuous mode [ 990.166952][T17796] vlan0: entered promiscuous mode [ 990.393730][T17798] 8021q: VLANs not supported on wg1 [ 990.752986][T17816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3511'. [ 991.059294][T17827] FAULT_INJECTION: forcing a failure. [ 991.059294][T17827] name failslab, interval 1, probability 0, space 0, times 0 [ 991.059334][T17827] CPU: 0 UID: 0 PID: 17827 Comm: syz.7.3516 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 991.059365][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.059380][T17827] Call Trace: [ 991.059389][T17827] [ 991.059399][T17827] dump_stack_lvl+0xe8/0x150 [ 991.059437][T17827] should_fail_ex+0x46c/0x600 [ 991.059476][T17827] ? __alloc_skb+0x1dc/0x3a0 [ 991.059503][T17827] should_failslab+0xa8/0x100 [ 991.059527][T17827] ? __alloc_skb+0x1dc/0x3a0 [ 991.059552][T17827] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 991.059586][T17827] ? __build_skb_around+0x22d/0x3c0 [ 991.059614][T17827] ? __pfx__copy_from_iter+0x10/0x10 [ 991.059654][T17827] __alloc_skb+0x1dc/0x3a0 [ 991.059686][T17827] tcp_stream_alloc_skb+0x3d/0x350 [ 991.059721][T17827] tcp_sendmsg_locked+0x1abe/0x5520 [ 991.059807][T17827] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 991.059849][T17827] ? __local_bh_enable_ip+0x1af/0x2c0 [ 991.059877][T17827] ? lockdep_hardirqs_on+0x7b/0x110 [ 991.059909][T17827] tcp_sendmsg+0x2f/0x50 [ 991.059938][T17827] __sock_sendmsg+0x19c/0x270 [ 991.059965][T17827] __sys_sendto+0x3c7/0x520 [ 991.059996][T17827] ? __pfx___sys_sendto+0x10/0x10 [ 991.060054][T17827] ? ksys_write+0x230/0x260 [ 991.060090][T17827] ? __pfx_ksys_write+0x10/0x10 [ 991.060129][T17827] __x64_sys_sendto+0xde/0x100 [ 991.060162][T17827] do_syscall_64+0xec/0xf80 [ 991.060187][T17827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.060210][T17827] ? trace_irq_disable+0x37/0x100 [ 991.060235][T17827] ? clear_bhb_loop+0x60/0xb0 [ 991.060270][T17827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.060293][T17827] RIP: 0033:0x7fe1c3a7f749 [ 991.060313][T17827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.060335][T17827] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 991.060359][T17827] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 991.060377][T17827] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 991.060393][T17827] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.060408][T17827] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 991.060422][T17827] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 991.060459][T17827] [ 991.973976][T17837] FAULT_INJECTION: forcing a failure. [ 991.973976][T17837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.974015][T17837] CPU: 1 UID: 0 PID: 17837 Comm: syz.7.3517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 991.974043][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.974058][T17837] Call Trace: [ 991.974067][T17837] [ 991.974078][T17837] dump_stack_lvl+0xe8/0x150 [ 991.974116][T17837] should_fail_ex+0x46c/0x600 [ 991.974164][T17837] _copy_to_user+0x31/0xb0 [ 991.974191][T17837] simple_read_from_buffer+0xe1/0x170 [ 991.974221][T17837] proc_fail_nth_read+0x1b6/0x220 [ 991.974262][T17837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.974300][T17837] ? rw_verify_area+0x2ac/0x4e0 [ 991.974332][T17837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.974370][T17837] vfs_read+0x206/0xa30 [ 991.974411][T17837] ? __pfx_vfs_read+0x10/0x10 [ 991.974447][T17837] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 991.974474][T17837] ? lockdep_hardirqs_on+0x7b/0x110 [ 991.974499][T17837] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 991.974526][T17837] ? mutex_lock_nested+0x154/0x1d0 [ 991.974557][T17837] ? fdget_pos+0x253/0x320 [ 991.974592][T17837] ksys_read+0x14b/0x260 [ 991.974628][T17837] ? __pfx_ksys_read+0x10/0x10 [ 991.974674][T17837] do_syscall_64+0xec/0xf80 [ 991.974699][T17837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.974721][T17837] ? trace_irq_disable+0x37/0x100 [ 991.974745][T17837] ? clear_bhb_loop+0x60/0xb0 [ 991.974773][T17837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.974796][T17837] RIP: 0033:0x7fe1c3a7e15c [ 991.974816][T17837] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 991.974837][T17837] RSP: 002b:00007fe1c1cc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.974862][T17837] RAX: ffffffffffffffda RBX: 00007fe1c3cd6090 RCX: 00007fe1c3a7e15c [ 991.974879][T17837] RDX: 000000000000000f RSI: 00007fe1c1cc50a0 RDI: 0000000000000008 [ 991.974894][T17837] RBP: 00007fe1c1cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 991.974909][T17837] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 991.974924][T17837] R13: 00007fe1c3cd6128 R14: 00007fe1c3cd6090 R15: 00007ffddb7ab118 [ 991.974962][T17837] [ 992.166499][T17841] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3519'. [ 993.758583][T17865] FAULT_INJECTION: forcing a failure. [ 993.758583][T17865] name failslab, interval 1, probability 0, space 0, times 0 [ 993.758622][T17865] CPU: 0 UID: 0 PID: 17865 Comm: syz.4.3529 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 993.758648][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.758663][T17865] Call Trace: [ 993.758673][T17865] [ 993.758683][T17865] dump_stack_lvl+0xe8/0x150 [ 993.758721][T17865] should_fail_ex+0x46c/0x600 [ 993.758761][T17865] should_failslab+0xa8/0x100 [ 993.758793][T17865] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 993.758832][T17865] ? smk_import_entry+0x178/0x1f0 [ 993.758873][T17865] kstrndup+0x80/0x160 [ 993.758902][T17865] smk_import_entry+0x178/0x1f0 [ 993.758935][T17865] smk_set_cipso+0x23d/0x6f0 [ 993.758973][T17865] ? look_up_lock_class+0x57/0x110 [ 993.759000][T17865] ? register_lock_class+0x31/0x2e0 [ 993.759033][T17865] ? __pfx_smk_set_cipso+0x10/0x10 [ 993.759072][T17865] ? vfs_write+0x217/0xb40 [ 993.759121][T17865] ? __pfx_smk_write_cipso2+0x10/0x10 [ 993.759160][T17865] vfs_write+0x287/0xb40 [ 993.759203][T17865] ? __pfx_vfs_write+0x10/0x10 [ 993.759239][T17865] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.759267][T17865] ? lockdep_hardirqs_on+0x7b/0x110 [ 993.759291][T17865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.759318][T17865] ? mutex_lock_nested+0x154/0x1d0 [ 993.759350][T17865] ? fdget_pos+0x253/0x320 [ 993.759386][T17865] ksys_write+0x14b/0x260 [ 993.759422][T17865] ? __pfx_ksys_write+0x10/0x10 [ 993.759470][T17865] do_syscall_64+0xec/0xf80 [ 993.759494][T17865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.759517][T17865] ? trace_irq_disable+0x37/0x100 [ 993.759543][T17865] ? clear_bhb_loop+0x60/0xb0 [ 993.759572][T17865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.759595][T17865] RIP: 0033:0x7f99ee38f749 [ 993.759615][T17865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.759636][T17865] RSP: 002b:00007f99ec5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 993.759661][T17865] RAX: ffffffffffffffda RBX: 00007f99ee5e5fa0 RCX: 00007f99ee38f749 [ 993.759678][T17865] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 993.759693][T17865] RBP: 00007f99ec5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 993.759708][T17865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.759722][T17865] R13: 00007f99ee5e6038 R14: 00007f99ee5e5fa0 R15: 00007fff692c0868 [ 993.759760][T17865] [ 994.800311][T17884] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 994.800389][T17884] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3534'. [ 994.800470][T17884] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3534'. [ 994.800570][T17884] netlink: 'syz.4.3534': attribute type 8 has an invalid length. [ 994.800617][T17884] netlink: 622 bytes leftover after parsing attributes in process `syz.4.3534'. [ 996.753957][T17923] netlink: 'syz.6.3553': attribute type 1 has an invalid length. [ 996.753983][T17923] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3553'. [ 996.754002][T17923] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3553'. [ 996.754018][T17923] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3553'. [ 996.924000][T17926] netlink: 'syz.4.3556': attribute type 49 has an invalid length. [ 997.043415][T11982] Bluetooth: hci4: command 0x0406 tx timeout [ 997.279398][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3558'. [ 997.359188][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 998.153466][T17441] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 998.292810][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.296428][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 998.371232][T17441] usb 6-1: config 5 has an invalid interface number: 243 but max is 0 [ 998.371263][T17441] usb 6-1: config 5 has no interface number 0 [ 998.371318][T17441] usb 6-1: config 5 interface 243 altsetting 14 endpoint 0x4 has an invalid bInterval 247, changing to 11 [ 998.371351][T17441] usb 6-1: config 5 interface 243 has no altsetting 0 [ 998.999671][T17441] usb 6-1: New USB device found, idVendor=07b8, idProduct=9271, bcdDevice=eb.6c [ 998.999708][T17441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.999732][T17441] usb 6-1: Product: syz [ 998.999750][T17441] usb 6-1: Manufacturer: syz [ 998.999766][T17441] usb 6-1: SerialNumber: syz [ 999.537086][T17441] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 999.579385][T17441] usb 6-1: USB disconnect, device number 24 [ 999.753740][T17964] netlink: 'syz.6.3569': attribute type 1 has an invalid length. [ 999.753767][T17964] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3569'. [ 999.753785][T17964] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3569'. [ 999.753800][T17964] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3569'. [ 999.944799][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3570'. [ 999.944828][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1001.615119][T18007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1003.363777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1003.363817][ C0] lec:lec_tx_timeout: lec0 [ 1003.947500][T18032] FAULT_INJECTION: forcing a failure. [ 1003.947500][T18032] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.947539][T18032] CPU: 0 UID: 0 PID: 18032 Comm: syz.5.3596 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1003.947566][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1003.947580][T18032] Call Trace: [ 1003.947589][T18032] [ 1003.947606][T18032] dump_stack_lvl+0xe8/0x150 [ 1003.947644][T18032] should_fail_ex+0x46c/0x600 [ 1003.947682][T18032] ? __alloc_skb+0x1dc/0x3a0 [ 1003.947709][T18032] should_failslab+0xa8/0x100 [ 1003.947733][T18032] ? __alloc_skb+0x1dc/0x3a0 [ 1003.947759][T18032] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1003.947794][T18032] ? lockdep_hardirqs_on+0x7b/0x110 [ 1003.947821][T18032] ? __alloc_skb+0x198/0x3a0 [ 1003.947848][T18032] __alloc_skb+0x1dc/0x3a0 [ 1003.947881][T18032] netlink_dump+0x1b7/0xe90 [ 1003.947921][T18032] ? __netlink_lookup+0xbd/0x8a0 [ 1003.947958][T18032] ? __pfx_netlink_dump+0x10/0x10 [ 1003.947985][T18032] ? do_raw_spin_lock+0x121/0x290 [ 1003.948026][T18032] ? lockdep_hardirqs_on+0x7b/0x110 [ 1003.948061][T18032] __netlink_dump_start+0x5cb/0x7e0 [ 1003.948100][T18032] unix_diag_handler_dump+0x199/0x920 [ 1003.948126][T18032] ? __pfx_stack_trace_save+0x10/0x10 [ 1003.948169][T18032] ? sock_diag_lock_handler+0x19/0x290 [ 1003.948200][T18032] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 1003.948224][T18032] ? __pfx_unix_diag_dump+0x10/0x10 [ 1003.948249][T18032] ? sock_diag_lock_handler+0x19/0x290 [ 1003.948275][T18032] ? sock_diag_lock_handler+0x19/0x290 [ 1003.948307][T18032] sock_diag_rcv_msg+0x4cc/0x600 [ 1003.948337][T18032] netlink_rcv_skb+0x208/0x470 [ 1003.948370][T18032] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1003.948399][T18032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.948444][T18032] ? netlink_deliver_tap+0x2e/0x1b0 [ 1003.948490][T18032] netlink_unicast+0x846/0xa10 [ 1003.948530][T18032] ? __pfx_netlink_unicast+0x10/0x10 [ 1003.948559][T18032] ? __alloc_skb+0x198/0x3a0 [ 1003.948586][T18032] ? netlink_sendmsg+0x642/0xb30 [ 1003.948627][T18032] ? skb_put+0x11b/0x210 [ 1003.948661][T18032] netlink_sendmsg+0x805/0xb30 [ 1003.948704][T18032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.948748][T18032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1003.948779][T18032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.948815][T18032] __sock_sendmsg+0x21c/0x270 [ 1003.948842][T18032] sock_write_iter+0x27f/0x370 [ 1003.948882][T18032] ? __pfx_sock_write_iter+0x10/0x10 [ 1003.948944][T18032] vfs_write+0x5d5/0xb40 [ 1003.948982][T18032] ? __pfx_sock_write_iter+0x10/0x10 [ 1003.949019][T18032] ? __pfx_vfs_write+0x10/0x10 [ 1003.949064][T18032] ? __fget_files+0x2a/0x420 [ 1003.949100][T18032] ksys_write+0x14b/0x260 [ 1003.949135][T18032] ? __pfx_ksys_write+0x10/0x10 [ 1003.949181][T18032] do_syscall_64+0xec/0xf80 [ 1003.949206][T18032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.949229][T18032] ? trace_irq_disable+0x37/0x100 [ 1003.949254][T18032] ? clear_bhb_loop+0x60/0xb0 [ 1003.949283][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.949304][T18032] RIP: 0033:0x7f5acb6ff749 [ 1003.949325][T18032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.949344][T18032] RSP: 002b:00007f5ac9945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.949368][T18032] RAX: ffffffffffffffda RBX: 00007f5acb956090 RCX: 00007f5acb6ff749 [ 1003.949385][T18032] RDX: 0000000000000029 RSI: 0000200000000000 RDI: 0000000000000005 [ 1003.949400][T18032] RBP: 00007f5ac9945090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.949414][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.949428][T18032] R13: 00007f5acb956128 R14: 00007f5acb956090 R15: 00007ffd7ecb97f8 [ 1003.949471][T18032] [ 1004.827959][T18043] ip6gretap0: entered promiscuous mode [ 1004.832533][T18043] vlan0: entered promiscuous mode [ 1005.332082][T18053] QAT: failed to copy from user cfg_data. [ 1005.523882][T11982] Bluetooth: hci3: command 0x0406 tx timeout [ 1006.154053][T18073] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1006.154579][T18073] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1007.096963][T18083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1007.137930][T18088] tmpfs: Unknown parameter '00000000000000000000' [ 1007.687524][T18106] QAT: failed to copy from user cfg_data. [ 1008.856331][T18149] vlan0: entered promiscuous mode [ 1009.453226][T18173] FAULT_INJECTION: forcing a failure. [ 1009.453226][T18173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.453316][T18173] CPU: 1 UID: 0 PID: 18173 Comm: syz.7.3654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1009.453345][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.453359][T18173] Call Trace: [ 1009.453368][T18173] [ 1009.453378][T18173] dump_stack_lvl+0xe8/0x150 [ 1009.453416][T18173] should_fail_ex+0x46c/0x600 [ 1009.453455][T18173] _copy_from_user+0x2d/0xb0 [ 1009.453480][T18173] core_sys_select+0x60b/0xa20 [ 1009.453530][T18173] ? __pfx_core_sys_select+0x10/0x10 [ 1009.453593][T18173] ? __pfx_set_user_sigmask+0x10/0x10 [ 1009.453619][T18173] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1009.453653][T18173] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1009.453695][T18173] __se_sys_pselect6+0x27a/0x300 [ 1009.453740][T18173] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1009.453777][T18173] ? __pfx_ksys_write+0x10/0x10 [ 1009.453815][T18173] ? __x64_sys_pselect6+0x21/0xf0 [ 1009.453855][T18173] do_syscall_64+0xec/0xf80 [ 1009.453880][T18173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.453902][T18173] ? trace_irq_disable+0x37/0x100 [ 1009.453927][T18173] ? clear_bhb_loop+0x60/0xb0 [ 1009.453955][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.453979][T18173] RIP: 0033:0x7fe1c3a7f749 [ 1009.453999][T18173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.454019][T18173] RSP: 002b:00007fe1c1cc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1009.454043][T18173] RAX: ffffffffffffffda RBX: 00007fe1c3cd6090 RCX: 00007fe1c3a7f749 [ 1009.454060][T18173] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1009.454074][T18173] RBP: 00007fe1c1cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.454089][T18173] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1009.454104][T18173] R13: 00007fe1c3cd6128 R14: 00007fe1c3cd6090 R15: 00007ffddb7ab118 [ 1009.454140][T18173] [ 1009.603474][T18175] FAULT_INJECTION: forcing a failure. [ 1009.603474][T18175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.603539][T18175] CPU: 0 UID: 0 PID: 18175 Comm: syz.5.3649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1009.603566][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.603580][T18175] Call Trace: [ 1009.603590][T18175] [ 1009.603600][T18175] dump_stack_lvl+0xe8/0x150 [ 1009.603646][T18175] should_fail_ex+0x46c/0x600 [ 1009.603685][T18175] _copy_from_user+0x2d/0xb0 [ 1009.603712][T18175] kstrtouint_from_user+0xc4/0x170 [ 1009.603743][T18175] ? lockdep_hardirqs_on+0x7b/0x110 [ 1009.603772][T18175] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1009.603825][T18175] proc_fail_nth_write+0x88/0x200 [ 1009.603862][T18175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1009.603904][T18175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1009.603940][T18175] vfs_write+0x287/0xb40 [ 1009.603984][T18175] ? __pfx_vfs_write+0x10/0x10 [ 1009.604021][T18175] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1009.604049][T18175] ? lockdep_hardirqs_on+0x7b/0x110 [ 1009.604074][T18175] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1009.604100][T18175] ? mutex_lock_nested+0x154/0x1d0 [ 1009.604133][T18175] ? fdget_pos+0x253/0x320 [ 1009.604169][T18175] ksys_write+0x14b/0x260 [ 1009.604205][T18175] ? __pfx_ksys_write+0x10/0x10 [ 1009.604260][T18175] do_syscall_64+0xec/0xf80 [ 1009.604284][T18175] ? rcu_is_watching+0x15/0xb0 [ 1009.604304][T18175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.604327][T18175] ? clear_bhb_loop+0x60/0xb0 [ 1009.604356][T18175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.604378][T18175] RIP: 0033:0x7f5acb6fe1ff [ 1009.604399][T18175] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1009.604420][T18175] RSP: 002b:00007f5ac9924030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1009.604445][T18175] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5acb6fe1ff [ 1009.604462][T18175] RDX: 0000000000000001 RSI: 00007f5ac99240a0 RDI: 0000000000000006 [ 1009.604477][T18175] RBP: 00007f5ac9924090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.604491][T18175] R10: 0000000004000000 R11: 0000000000000293 R12: 0000000000000001 [ 1009.604505][T18175] R13: 00007f5acb956218 R14: 00007f5acb956180 R15: 00007ffd7ecb97f8 [ 1009.604543][T18175] [ 1010.945031][T18198] QAT: failed to copy from user cfg_data. [ 1011.587862][T18227] ./cgroup: Can't lookup blockdev [ 1011.587918][T18228] ./cgroup: Can't lookup blockdev [ 1012.857672][T18256] QAT: failed to copy from user cfg_data. [ 1013.613876][T18277] capability: warning: `syz.5.3700' uses deprecated v2 capabilities in a way that may be insecure [ 1016.498940][ T37] audit: type=1326 audit(1768858826.512:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.499016][ T37] audit: type=1326 audit(1768858826.512:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593630][ T37] audit: type=1326 audit(1768858826.542:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593693][ T37] audit: type=1326 audit(1768858826.552:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593743][ T37] audit: type=1326 audit(1768858826.552:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593792][ T37] audit: type=1326 audit(1768858826.552:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593839][ T37] audit: type=1326 audit(1768858826.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593887][ T37] audit: type=1326 audit(1768858826.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593936][ T37] audit: type=1326 audit(1768858826.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.593984][ T37] audit: type=1326 audit(1768858826.582:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18307 comm="syz.1.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fa70f749 code=0x7ffc0000 [ 1016.999346][T18315] QAT: failed to copy from user cfg_data. [ 1020.344515][T18388] vlan2: entered promiscuous mode [ 1022.453668][T17441] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1022.603393][T17441] usb 2-1: Using ep0 maxpacket: 32 [ 1022.606113][T17441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.606139][T17441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.606168][T17441] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1022.606185][T17441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.643200][T17441] usb 2-1: config 0 descriptor?? [ 1022.670631][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1022.731774][T17441] hub 2-1:0.0: USB hub found [ 1022.833407][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1022.850375][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.850431][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.850478][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1022.850504][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.906658][ T9] usb 5-1: config 0 descriptor?? [ 1022.925465][ T9] hub 5-1:0.0: USB hub found [ 1022.992277][T17441] hub 2-1:0.0: 1 port detected [ 1023.117825][ T9] hub 5-1:0.0: 1 port detected [ 1023.211930][T17441] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1023.211961][T17441] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1023.310783][T17441] usbhid 2-1:0.0: can't add hid device: -71 [ 1023.310919][T17441] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1023.331572][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1023.331602][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1023.359357][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1023.359488][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1023.449919][ T9] usb 5-1: USB disconnect, device number 15 [ 1023.460080][T17441] usb 2-1: USB disconnect, device number 15 [ 1026.398346][T18477] QAT: failed to copy from user cfg_data. [ 1027.063394][T17720] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1027.245301][T17720] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1027.245335][T17720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.245359][T17720] usb 6-1: Product: syz [ 1027.245375][T17720] usb 6-1: Manufacturer: syz [ 1027.245392][T17720] usb 6-1: SerialNumber: syz [ 1027.297119][T17720] usb 6-1: config 0 descriptor?? [ 1027.321371][T17720] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1027.596071][T18516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1027.723851][ T5947] usb 6-1: USB disconnect, device number 25 [ 1027.945207][T18529] QAT: failed to copy from user cfg_data. [ 1030.167226][T18581] QAT: failed to copy from user cfg_data. [ 1031.972660][T18655] QAT: failed to copy from user cfg_data. [ 1034.247647][T18700] tmpfs: Bad value for 'mpol' [ 1036.885875][T18722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3893'. [ 1037.417892][T18734] vlan2: entered promiscuous mode [ 1037.800878][T18748] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1038.567713][T18758] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3905'. [ 1039.074034][ T804] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1039.149376][T18771] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 1039.149454][T18771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1039.149508][T18771] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1039.149588][T18771] netlink: 'syz.4.3908': attribute type 8 has an invalid length. [ 1039.149630][T18771] netlink: 622 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1039.460069][ T804] usb 7-1: Using ep0 maxpacket: 32 [ 1039.594178][ T804] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1039.594216][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.622627][ T804] usb 7-1: config 0 descriptor?? [ 1039.656774][ T804] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1040.389136][ T804] gspca_sunplus: reg_w_riv err -110 [ 1040.389288][ T804] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1041.238301][T18801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1041.373069][T18807] vlan0: entered promiscuous mode [ 1042.153957][ T805] usb 7-1: USB disconnect, device number 3 [ 1042.462305][T16887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.770962][T16887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.776414][T16887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.778307][T16887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.779679][T16887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1042.892414][T18841] netlink: 'syz.4.3940': attribute type 1 has an invalid length. [ 1042.892467][T18841] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1042.892511][T18841] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1042.892581][T18841] netlink: 'syz.4.3940': attribute type 8 has an invalid length. [ 1042.892622][T18841] netlink: 622 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1043.928603][T18833] wg1 speed is unknown, defaulting to 1000 [ 1044.165695][T18853] ip6gretap0: entered promiscuous mode [ 1044.165811][T18853] vlan0: entered promiscuous mode [ 1044.940110][T18867] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1044.940193][T18867] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1045.725394][T18876] cgroup2: Unknown parameter 'euid>00000000000000000000' [ 1045.843525][T11982] Bluetooth: hci0: command tx timeout [ 1046.086965][T18885] netlink: 'syz.4.3954': attribute type 1 has an invalid length. [ 1046.087040][T18885] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1046.087084][T18885] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1046.087154][T18885] netlink: 'syz.4.3954': attribute type 8 has an invalid length. [ 1046.087194][T18885] netlink: 622 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1046.952246][T18880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.970483][T18880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.035107][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3960'. [ 1047.158257][T18904] cgroup2: Unknown parameter 'euid>00000000000000000000' [ 1047.411451][ T6183] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.490323][T18833] chnl_net:caif_netlink_parms(): no params data found [ 1047.807651][ T6183] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.027128][T11982] Bluetooth: hci0: command tx timeout [ 1049.254919][ T804] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1050.335996][ T804] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1050.336028][ T804] usb 5-1: config 0 has no interface number 0 [ 1050.336079][ T804] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1050.336105][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.057296][T11982] Bluetooth: hci0: command tx timeout [ 1051.112193][ T804] usb 5-1: config 0 descriptor?? [ 1051.163054][ T804] usb 5-1: can't set config #0, error -71 [ 1051.204508][ T804] usb 5-1: USB disconnect, device number 16 [ 1051.498397][ T6183] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.807027][ T6183] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.112127][T18833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.112346][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.112590][T18833] bridge_slave_0: entered allmulticast mode [ 1052.149446][T18833] bridge_slave_0: entered promiscuous mode [ 1052.160390][T18833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.160713][T18833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.160984][T18833] bridge_slave_1: entered allmulticast mode [ 1052.237673][T18833] bridge_slave_1: entered promiscuous mode [ 1052.307126][T18974] EXT4-fs: Conflicting test_dummy_encryption options [ 1053.100148][T18833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.144501][T11982] Bluetooth: hci0: command tx timeout [ 1053.161370][T18833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.744650][T18833] team0: Port device team_slave_0 added [ 1053.836065][T18833] team0: Port device team_slave_1 added [ 1054.227697][T19006] vlan0: entered promiscuous mode [ 1054.426049][T18833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.426068][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.426101][T18833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.511255][T18833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.511275][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.511307][T18833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.524700][ T6183] bridge_slave_1: left allmulticast mode [ 1054.524804][ T6183] bridge_slave_1: left promiscuous mode [ 1054.525784][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.707602][ T6183] bridge_slave_0: left allmulticast mode [ 1054.707636][ T6183] bridge_slave_0: left promiscuous mode [ 1054.707896][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.036396][T19036] EXT4-fs: Conflicting test_dummy_encryption options [ 1057.298408][T19089] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1059.164695][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.245892][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.294786][ T6183] bond0 (unregistering): Released all slaves [ 1059.730555][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.734050][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 1060.384267][ T6183] bond1 (unregistering): Released all slaves [ 1060.627199][ T6183] tipc: Disabling bearer [ 1060.972506][ T6183] tipc: Left network mode [ 1061.124028][T18833] hsr_slave_0: entered promiscuous mode [ 1061.125546][T18833] hsr_slave_1: entered promiscuous mode [ 1061.126645][T18833] debugfs: 'hsr0' already exists in 'hsr' [ 1061.126678][T18833] Cannot create hsr debugfs directory [ 1061.868251][T19227] vlan0: entered promiscuous mode [ 1063.283289][T19269] FAULT_INJECTION: forcing a failure. [ 1063.283289][T19269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.283360][T19269] CPU: 0 UID: 0 PID: 19269 Comm: syz.7.4131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1063.283393][T19269] Tainted: [L]=SOFTLOCKUP [ 1063.283402][T19269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1063.283417][T19269] Call Trace: [ 1063.283433][T19269] [ 1063.283443][T19269] dump_stack_lvl+0xe8/0x150 [ 1063.283484][T19269] should_fail_ex+0x46c/0x600 [ 1063.283524][T19269] _copy_from_user+0x2d/0xb0 [ 1063.283550][T19269] memdup_user+0x5e/0xd0 [ 1063.283578][T19269] strndup_user+0x68/0xd0 [ 1063.283606][T19269] __se_sys_mount+0xdf/0x410 [ 1063.283633][T19269] ? ksys_write+0x230/0x260 [ 1063.283670][T19269] ? __pfx___se_sys_mount+0x10/0x10 [ 1063.283694][T19269] ? rcu_is_watching+0x15/0xb0 [ 1063.283722][T19269] ? __x64_sys_mount+0x20/0xc0 [ 1063.283749][T19269] do_syscall_64+0xec/0xf80 [ 1063.283775][T19269] ? rcu_is_watching+0x15/0xb0 [ 1063.283795][T19269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.283819][T19269] ? clear_bhb_loop+0x60/0xb0 [ 1063.283848][T19269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.283871][T19269] RIP: 0033:0x7fe1c3a7f749 [ 1063.283892][T19269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.283913][T19269] RSP: 002b:00007fe1c1ca4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1063.283939][T19269] RAX: ffffffffffffffda RBX: 00007fe1c3cd6180 RCX: 00007fe1c3a7f749 [ 1063.283957][T19269] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 1063.283974][T19269] RBP: 00007fe1c1ca4090 R08: 0000200000000300 R09: 0000000000000000 [ 1063.283990][T19269] R10: 0000000002008440 R11: 0000000000000246 R12: 0000000000000001 [ 1063.284005][T19269] R13: 00007fe1c3cd6218 R14: 00007fe1c3cd6180 R15: 00007ffddb7ab118 [ 1063.284043][T19269] [ 1064.773595][ T6183] hsr_slave_0: left promiscuous mode [ 1064.813546][ T6183] hsr_slave_1: left promiscuous mode [ 1064.816164][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.864689][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.006854][ T6183] pimreg (unregistering): left allmulticast mode [ 1065.043342][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 1065.043379][ C0] lec:lec_tx_timeout: lec0 [ 1067.936487][ T6183] team0 (unregistering): Port device team_slave_1 removed [ 1068.244381][ T6183] team0 (unregistering): Port device team_slave_0 removed [ 1068.780761][T19417] FAULT_INJECTION: forcing a failure. [ 1068.780761][T19417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.780798][T19417] CPU: 0 UID: 0 PID: 19417 Comm: syz.7.4205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1068.780825][T19417] Tainted: [L]=SOFTLOCKUP [ 1068.780832][T19417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1068.780843][T19417] Call Trace: [ 1068.780859][T19417] [ 1068.780868][T19417] dump_stack_lvl+0xe8/0x150 [ 1068.780900][T19417] should_fail_ex+0x46c/0x600 [ 1068.780932][T19417] _copy_from_user+0x2d/0xb0 [ 1068.780954][T19417] smk_write_direct+0xff/0x390 [ 1068.780983][T19417] ? __pfx_smk_write_direct+0x10/0x10 [ 1068.781028][T19417] vfs_writev+0x4bf/0x970 [ 1068.781052][T19417] ? __pfx_smk_write_direct+0x10/0x10 [ 1068.781080][T19417] ? __pfx_vfs_writev+0x10/0x10 [ 1068.781114][T19417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1068.781141][T19417] ? mutex_lock_nested+0x154/0x1d0 [ 1068.781166][T19417] ? fdget_pos+0x253/0x320 [ 1068.781194][T19417] do_writev+0x153/0x2d0 [ 1068.781216][T19417] ? __pfx_do_writev+0x10/0x10 [ 1068.781247][T19417] do_syscall_64+0xec/0xf80 [ 1068.781266][T19417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.781284][T19417] ? trace_irq_disable+0x37/0x100 [ 1068.781304][T19417] ? clear_bhb_loop+0x60/0xb0 [ 1068.781327][T19417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.781345][T19417] RIP: 0033:0x7fe1c3a7f749 [ 1068.781362][T19417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.781378][T19417] RSP: 002b:00007fe1c1ce6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1068.781400][T19417] RAX: ffffffffffffffda RBX: 00007fe1c3cd5fa0 RCX: 00007fe1c3a7f749 [ 1068.781413][T19417] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1068.781425][T19417] RBP: 00007fe1c1ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.781443][T19417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.781454][T19417] R13: 00007fe1c3cd6038 R14: 00007fe1c3cd5fa0 R15: 00007ffddb7ab118 [ 1068.781484][T19417] [ 1069.070626][T19418] kvm: user requested TSC rate below hardware speed [ 1071.566850][T19325] vlan0: entered promiscuous mode [ 1072.735535][T19513] vlan0: entered promiscuous mode [ 1073.631437][T18833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1074.043469][T18833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1074.282177][T18833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1074.394207][T18833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1074.892166][T18833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.191346][T18833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.258326][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.258475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.315282][T17719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.315429][T17719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.413497][ T805] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1075.564776][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 1075.567828][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.567864][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.567904][ T805] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1075.567940][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.625847][ T805] usb 5-1: config 0 descriptor?? [ 1075.630216][ T805] hub 5-1:0.0: USB hub found [ 1075.837074][ T805] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1075.885424][ T805] usbhid 5-1:0.0: can't add hid device: -71 [ 1075.885553][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1075.931430][ T805] usb 5-1: USB disconnect, device number 17 [ 1076.460709][T19592] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.4278'. [ 1076.460859][T19592] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1076.959723][T18833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.890614][T18833] veth0_vlan: entered promiscuous mode [ 1078.930192][T18833] veth1_vlan: entered promiscuous mode [ 1079.009308][T18833] veth0_macvtap: entered promiscuous mode [ 1079.024716][T18833] veth1_macvtap: entered promiscuous mode [ 1079.052316][T18833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.105431][T18833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.148482][ T6209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.148536][ T6209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.148578][ T6209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.148616][ T6209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.219255][T19646] program syz.1.4301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1079.448087][T19648] input: syz1 as /devices/virtual/input/input7 [ 1079.767205][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.767226][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.880153][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.880177][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.211847][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1080.223199][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1080.898051][T19703] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4324'. [ 1081.669535][T19730] capability: warning: `syz.6.4337' uses 32-bit capabilities (legacy support in use) [ 1083.225048][T16887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1083.246893][T16887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1083.264279][T16887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1083.269065][T16887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1083.293829][T16887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.612707][T19755] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1084.745717][T19748] chnl_net:caif_netlink_parms(): no params data found [ 1085.309566][T19748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.309923][T19748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.310133][T19748] bridge_slave_0: entered allmulticast mode [ 1085.337808][T19748] bridge_slave_0: entered promiscuous mode [ 1085.361800][T19748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.363504][T11982] Bluetooth: hci5: command tx timeout [ 1085.374483][T19748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.381068][T19748] bridge_slave_1: entered allmulticast mode [ 1085.400490][T19748] bridge_slave_1: entered promiscuous mode [ 1085.623936][T19748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.648366][T19748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.932774][T19748] team0: Port device team_slave_0 added [ 1085.944397][T19748] team0: Port device team_slave_1 added [ 1086.228243][T19748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.228262][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.228294][T19748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.294726][T19748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.294746][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.294792][T19748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.876624][T19748] hsr_slave_0: entered promiscuous mode [ 1086.903192][T19748] hsr_slave_1: entered promiscuous mode [ 1086.904542][T19748] debugfs: 'hsr0' already exists in 'hsr' [ 1086.904571][T19748] Cannot create hsr debugfs directory [ 1087.443568][T11982] Bluetooth: hci5: command tx timeout [ 1088.252432][T19748] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.616699][T19867] FAULT_INJECTION: forcing a failure. [ 1088.616699][T19867] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.616740][T19867] CPU: 1 UID: 0 PID: 19867 Comm: syz.6.4395 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1088.616771][T19867] Tainted: [L]=SOFTLOCKUP [ 1088.616778][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.616792][T19867] Call Trace: [ 1088.616801][T19867] [ 1088.616811][T19867] dump_stack_lvl+0xe8/0x150 [ 1088.616848][T19867] should_fail_ex+0x46c/0x600 [ 1088.616887][T19867] should_failslab+0xa8/0x100 [ 1088.616912][T19867] __kmalloc_noprof+0xe0/0x7e0 [ 1088.616945][T19867] ? kfree+0x4d/0x900 [ 1088.616972][T19867] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1088.617004][T19867] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1088.617031][T19867] ? tomoyo_domain+0xd9/0x130 [ 1088.617060][T19867] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1088.617095][T19867] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1088.617131][T19867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1088.617162][T19867] ? __lock_acquire+0x6b6/0x2cf0 [ 1088.617196][T19867] ? do_raw_spin_lock+0x121/0x290 [ 1088.617258][T19867] ? __fget_files+0x2a/0x420 [ 1088.617288][T19867] ? __fget_files+0x2a/0x420 [ 1088.617310][T19867] ? __fget_files+0x3a6/0x420 [ 1088.617334][T19867] ? __fget_files+0x2a/0x420 [ 1088.617362][T19867] security_file_ioctl+0xcb/0x2d0 [ 1088.617400][T19867] __se_sys_ioctl+0x47/0x170 [ 1088.617443][T19867] do_syscall_64+0xec/0xf80 [ 1088.617468][T19867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.617491][T19867] ? trace_irq_disable+0x37/0x100 [ 1088.617515][T19867] ? clear_bhb_loop+0x60/0xb0 [ 1088.617544][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.617567][T19867] RIP: 0033:0x7fdb0ac0f749 [ 1088.617586][T19867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.617607][T19867] RSP: 002b:00007fdb08e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.617632][T19867] RAX: ffffffffffffffda RBX: 00007fdb0ae65fa0 RCX: 00007fdb0ac0f749 [ 1088.617648][T19867] RDX: 0000200000000180 RSI: 0000000080085617 RDI: 0000000000000003 [ 1088.617663][T19867] RBP: 00007fdb08e76090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.617678][T19867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.617691][T19867] R13: 00007fdb0ae66038 R14: 00007fdb0ae65fa0 R15: 00007fff1cd4d3e8 [ 1088.617726][T19867] [ 1088.617736][T19867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1089.040464][T19748] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.613915][T11982] Bluetooth: hci5: command tx timeout [ 1090.866310][T19748] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.365227][T19748] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.007498][T11982] Bluetooth: hci5: command tx timeout [ 1094.070156][T19748] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1094.124900][T19748] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1094.227969][T19748] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1094.345698][T19748] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1096.205670][T19748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.267926][T19748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.322942][T17719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.333739][T17719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.369328][T17719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.395042][T17719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.457423][T19945] 9p: Bad value for 'rfdno' [ 1097.575717][T19748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.894038][ T5984] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1098.376850][ T5984] usb 2-1: device descriptor read/64, error -71 [ 1098.623611][ T5984] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1098.763608][ T5984] usb 2-1: device descriptor read/64, error -71 [ 1098.873771][ T5984] usb usb2-port1: attempt power cycle [ 1099.045311][T19748] veth0_vlan: entered promiscuous mode [ 1099.089805][T19748] veth1_vlan: entered promiscuous mode [ 1099.217254][ T5984] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1099.221484][T19748] veth0_macvtap: entered promiscuous mode [ 1099.234115][ T5984] usb 2-1: device descriptor read/8, error -71 [ 1099.257992][T19748] veth1_macvtap: entered promiscuous mode [ 1099.330047][T19748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.400383][T19748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.441302][T15867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.441817][T15867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.442278][ T8806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.442472][ T8806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.487951][ T5984] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1099.504099][ T5984] usb 2-1: device descriptor read/8, error -71 [ 1099.613792][ T5984] usb usb2-port1: unable to enumerate USB device [ 1101.428731][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.428756][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.646931][T19882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.646949][T19882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.212255][T19994] vlan0: entered promiscuous mode [ 1102.442111][T17534] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1102.573432][T17534] usb 8-1: device descriptor read/64, error -71 [ 1102.589904][T16905] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1102.739199][T16905] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1102.739267][T16905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.765362][T16905] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1102.765398][T16905] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1102.765422][T16905] usb 6-1: Manufacturer: syz [ 1102.771019][T16905] usb 6-1: config 0 descriptor?? [ 1102.813467][T17534] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1102.850520][T20004] QAT: failed to copy from user cfg_data. [ 1102.933342][T16905] rc_core: IR keymap rc-hauppauge not found [ 1102.933366][T16905] Registered IR keymap rc-empty [ 1102.941695][T16905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1102.943863][T17534] usb 8-1: device descriptor read/64, error -71 [ 1102.981817][T16905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 1103.016149][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1103.053736][T17534] usb usb8-port1: attempt power cycle [ 1103.190447][T20008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.190966][T20008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.403378][T17534] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1103.404103][T20011] vlan0: entered promiscuous mode [ 1103.424424][T17534] usb 8-1: device descriptor read/8, error -71 [ 1103.619431][T16905] usb 6-1: USB disconnect, device number 26 [ 1103.663420][T17534] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1103.683990][T17534] usb 8-1: device descriptor read/8, error -71 [ 1103.793743][T17534] usb usb8-port1: unable to enumerate USB device [ 1104.084339][T11982] Bluetooth: hci3: command 0x0406 tx timeout [ 1104.089318][T19990] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 1104.670560][T20033] 9p: Bad value for 'rfdno' [ 1105.578070][T19976] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1105.723900][T19976] usb 7-1: device descriptor read/64, error -71 [ 1105.969494][T19976] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1106.093375][T19976] usb 7-1: device descriptor read/64, error -71 [ 1107.010158][T19976] usb usb7-port1: attempt power cycle [ 1108.952933][T20103] 9p: Bad value for 'rfdno' [ 1109.212338][T16905] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1109.464598][ T49] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1109.819852][ T49] usb 7-1: device descriptor read/64, error -71 [ 1109.833446][T16905] usb 8-1: Using ep0 maxpacket: 32 [ 1109.837845][T16905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.837870][T16905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.837899][T16905] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1109.837916][T16905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.894204][T16905] usb 8-1: config 0 descriptor?? [ 1109.898951][T16905] hub 8-1:0.0: USB hub found [ 1110.053546][ T49] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1110.113829][T16905] hub 8-1:0.0: 1 port detected [ 1110.163595][ T805] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1110.183381][ T49] usb 7-1: device descriptor read/64, error -71 [ 1110.293773][ T49] usb usb7-port1: attempt power cycle [ 1110.306021][T16905] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1110.306049][T16905] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1110.314202][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 1110.319295][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.319418][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.319556][ T805] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1110.319624][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.380151][T16905] usbhid 8-1:0.0: can't add hid device: -71 [ 1110.380287][T16905] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1110.411429][ T805] usb 5-1: config 0 descriptor?? [ 1110.420033][T16905] usb 8-1: USB disconnect, device number 9 [ 1110.463519][ T805] hub 5-1:0.0: USB hub found [ 1110.616919][ T805] hub 5-1:0.0: 1 port detected [ 1110.644212][ T49] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1110.664141][ T49] usb 7-1: device descriptor read/8, error -71 [ 1110.827056][ T805] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1110.827096][ T805] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1110.859844][ T805] usbhid 5-1:0.0: can't add hid device: -71 [ 1110.859984][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1110.913421][ T49] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1110.918049][ T805] usb 5-1: USB disconnect, device number 18 [ 1110.944005][ T49] usb 7-1: device descriptor read/8, error -71 [ 1111.058839][ T49] usb usb7-port1: unable to enumerate USB device [ 1117.797813][T20259] QAT: failed to copy from user cfg_data. [ 1118.091436][T16887] Bluetooth: hci4: command 0x0406 tx timeout [ 1118.528940][T20288] QAT: failed to copy from user cfg_data. [ 1120.383392][ T7465] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1120.408677][T20355] QAT: failed to copy from user cfg_data. [ 1120.533684][ T7465] usb 6-1: Using ep0 maxpacket: 32 [ 1120.536613][ T7465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.536649][ T7465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.536691][ T7465] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1120.536871][ T7465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.594960][ T7465] usb 6-1: config 0 descriptor?? [ 1120.611755][ T7465] hub 6-1:0.0: USB hub found [ 1120.801386][ T7465] hub 6-1:0.0: 1 port detected [ 1121.332978][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.390382][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 1121.852607][ T7465] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1121.852637][ T7465] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1121.872834][ T7465] usbhid 6-1:0.0: can't add hid device: -71 [ 1121.879241][ T7465] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1121.987108][ T7465] usb 6-1: USB disconnect, device number 27 [ 1123.043054][T20398] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.4596'. [ 1123.043141][T20398] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1124.235802][T20410] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.4599'. [ 1124.236407][T20410] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1127.761480][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms [ 1127.761661][ C0] lec:lec_tx_timeout: lec0 [ 1128.364177][T20473] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1128.364260][T20473] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1129.974093][T16770] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1130.123384][T16770] usb 8-1: Using ep0 maxpacket: 32 [ 1130.127297][T16770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.127324][T16770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.127352][T16770] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1130.127370][T16770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.132685][T16770] usb 8-1: config 0 descriptor?? [ 1130.164105][T16770] hub 8-1:0.0: USB hub found [ 1130.338810][T16770] hub 8-1:0.0: 1 port detected [ 1130.539508][T16770] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1130.539537][T16770] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1130.568525][T16770] usbhid 8-1:0.0: can't add hid device: -71 [ 1130.568658][T16770] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1130.634977][T16770] usb 8-1: USB disconnect, device number 10 [ 1131.186625][T20520] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.4648'. [ 1131.191840][T20520] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1133.125685][T16770] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1133.313950][T16770] usb 8-1: Using ep0 maxpacket: 16 [ 1134.133480][T16770] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.133544][T16770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1134.133576][T16770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1134.133600][T16770] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1134.133624][T16770] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.246863][T16770] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1134.246898][T16770] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1134.246921][T16770] usb 8-1: Manufacturer: syz [ 1134.289057][T16770] usb 8-1: config 0 descriptor?? [ 1134.883485][T16770] rc_core: IR keymap rc-hauppauge not found [ 1134.883508][T16770] Registered IR keymap rc-empty [ 1134.883675][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.903433][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.925234][T16770] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1134.928615][T16770] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 1134.983687][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.003824][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.023894][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.043601][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.063453][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.083545][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.103507][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.123601][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.143422][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.163452][T16770] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.233892][T16770] mceusb 8-1:0.0: Registered 艣閦뙿瑞ۨﻃˣઍ with mce emulator interface version 1 [ 1135.233924][T16770] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1135.359038][T20558] kvm: emulating exchange as write [ 1135.374587][ T804] usb 8-1: USB disconnect, device number 11 [ 1137.507367][T20644] QAT: failed to copy from user cfg_data. [ 1138.476520][T20671] QAT: failed to copy from user cfg_data. [ 1142.695231][T20712] QAT: failed to copy from user cfg_data. [ 1145.896873][T20756] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.4747'. [ 1145.901049][T20756] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1149.719999][T20809] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1149.720519][T20809] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1161.292804][T20933] QAT: failed to copy from user cfg_data. [ 1170.104209][T11982] Bluetooth: hci0: command 0x0406 tx timeout [ 1181.583388][T17442] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1181.733396][T17442] usb 8-1: Using ep0 maxpacket: 32 [ 1181.762560][T17442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.762597][T17442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.762641][T17442] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1181.762674][T17442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.815463][T17442] usb 8-1: config 0 descriptor?? [ 1181.849998][T17442] hub 8-1:0.0: USB hub found [ 1182.024907][T17442] hub 8-1:0.0: 1 port detected [ 1182.253479][T17442] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1182.253514][T17442] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1182.317053][T17442] usbhid 8-1:0.0: can't add hid device: -71 [ 1182.317193][T17442] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1182.364539][T17442] usb 8-1: USB disconnect, device number 12 [ 1182.408169][ T1367] ------------[ cut here ]------------ [ 1182.408190][ T1367] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#0: kworker/u8:9/1367 [ 1182.408239][ T1367] Modules linked in: [ 1182.408265][ T1367] CPU: 0 UID: 0 PID: 1367 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.408298][ T1367] Tainted: [L]=SOFTLOCKUP [ 1182.408308][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.408325][ T1367] Workqueue: events_unbound cfg80211_wiphy_work [ 1182.408363][ T1367] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 1182.408391][ T1367] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 21 f9 bd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 09 89 12 09 89 c0 48 c7 c7 a0 e3 b3 [ 1182.408413][ T1367] RSP: 0018:ffffc90005277978 EFLAGS: 00010202 [ 1182.408433][ T1367] RAX: 0000000000000002 RBX: ffff888027171e40 RCX: 0000000000000000 [ 1182.408450][ T1367] RDX: 0000000000000000 RSI: ffffffff8b3f5940 RDI: ffffffff8b3f5900 [ 1182.408468][ T1367] RBP: ffff8880393ac640 R08: ffffffff8ad49021 R09: ffffffff8d5ae980 [ 1182.408486][ T1367] R10: dffffc0000000000 R11: fffffbfff1db680f R12: ffff888079801d08 [ 1182.408504][ T1367] R13: ffff88804ff807c0 R14: 0000000000000000 R15: ffff888079801d20 [ 1182.408522][ T1367] FS: 0000000000000000(0000) GS:ffff888126ceb000(0000) knlGS:0000000000000000 [ 1182.408543][ T1367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.408559][ T1367] CR2: 000055d38c749040 CR3: 000000006dada000 CR4: 00000000003526f0 [ 1182.408590][ T1367] Call Trace: [ 1182.408600][ T1367] [ 1182.408616][ T1367] ieee80211_iface_work+0x211/0x12d0 [ 1182.408666][ T1367] cfg80211_wiphy_work+0x2ab/0x450 [ 1182.408703][ T1367] ? process_scheduled_works+0x9ef/0x1770 [ 1182.408734][ T1367] process_scheduled_works+0xad1/0x1770 [ 1182.408796][ T1367] ? __pfx_process_scheduled_works+0x10/0x10 [ 1182.408821][ T1367] ? do_raw_spin_lock+0x121/0x290 [ 1182.408868][ T1367] worker_thread+0x8a0/0xda0 [ 1182.408927][ T1367] kthread+0x711/0x8a0 [ 1182.408965][ T1367] ? __pfx_worker_thread+0x10/0x10 [ 1182.408993][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.409024][ T1367] ? rt_spin_unlock+0x150/0x200 [ 1182.409065][ T1367] ? rt_spin_unlock+0x161/0x200 [ 1182.409098][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.409134][ T1367] ret_from_fork+0x510/0xa50 [ 1182.409164][ T1367] ? __pfx_ret_from_fork+0x10/0x10 [ 1182.409188][ T1367] ? __switch_to+0xc9e/0x1480 [ 1182.409231][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.409266][ T1367] ret_from_fork_asm+0x1a/0x30 [ 1182.409324][ T1367] [ 1182.409343][ T1367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1182.409363][ T1367] CPU: 0 UID: 0 PID: 1367 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.409396][ T1367] Tainted: [L]=SOFTLOCKUP [ 1182.409405][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.409421][ T1367] Workqueue: events_unbound cfg80211_wiphy_work [ 1182.409454][ T1367] Call Trace: [ 1182.409464][ T1367] [ 1182.409473][ T1367] vpanic+0x1e0/0x670 [ 1182.409513][ T1367] panic+0xb9/0xc0 [ 1182.409547][ T1367] ? __pfx_panic+0x10/0x10 [ 1182.409601][ T1367] ? ret_from_fork_asm+0x1a/0x30 [ 1182.409645][ T1367] __warn+0x317/0x4b0 [ 1182.409676][ T1367] ? kcov_remote_start+0x5d9/0x710 [ 1182.409706][ T1367] ? kcov_remote_start+0x5d9/0x710 [ 1182.409731][ T1367] __report_bug+0x288/0x500 [ 1182.409758][ T1367] ? kcov_remote_start+0x5d9/0x710 [ 1182.409791][ T1367] ? __pfx___report_bug+0x10/0x10 [ 1182.409817][ T1367] ? do_raw_spin_lock+0x121/0x290 [ 1182.409844][ T1367] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1182.409886][ T1367] ? rt_spin_lock+0x1c1/0x3e0 [ 1182.409921][ T1367] ? rt_spin_lock+0x1c1/0x3e0 [ 1182.409957][ T1367] ? kcov_remote_start+0x5d9/0x710 [ 1182.409982][ T1367] report_bug+0x16a/0x220 [ 1182.410007][ T1367] ? kcov_remote_start+0x5d9/0x710 [ 1182.410030][ T1367] ? kcov_remote_start+0x5db/0x710 [ 1182.410054][ T1367] handle_bug+0x98/0x200 [ 1182.410086][ T1367] exc_invalid_op+0x1a/0x50 [ 1182.410117][ T1367] asm_exc_invalid_op+0x1a/0x20 [ 1182.410140][ T1367] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 1182.410166][ T1367] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 21 f9 bd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 09 89 12 09 89 c0 48 c7 c7 a0 e3 b3 [ 1182.410187][ T1367] RSP: 0018:ffffc90005277978 EFLAGS: 00010202 [ 1182.410207][ T1367] RAX: 0000000000000002 RBX: ffff888027171e40 RCX: 0000000000000000 [ 1182.410224][ T1367] RDX: 0000000000000000 RSI: ffffffff8b3f5940 RDI: ffffffff8b3f5900 [ 1182.410242][ T1367] RBP: ffff8880393ac640 R08: ffffffff8ad49021 R09: ffffffff8d5ae980 [ 1182.410261][ T1367] R10: dffffc0000000000 R11: fffffbfff1db680f R12: ffff888079801d08 [ 1182.410279][ T1367] R13: ffff88804ff807c0 R14: 0000000000000000 R15: ffff888079801d20 [ 1182.410306][ T1367] ? rt_spin_lock+0x1c1/0x3e0 [ 1182.410349][ T1367] ? kcov_remote_start+0xe1/0x710 [ 1182.410379][ T1367] ieee80211_iface_work+0x211/0x12d0 [ 1182.410426][ T1367] cfg80211_wiphy_work+0x2ab/0x450 [ 1182.410462][ T1367] ? process_scheduled_works+0x9ef/0x1770 [ 1182.410492][ T1367] process_scheduled_works+0xad1/0x1770 [ 1182.410554][ T1367] ? __pfx_process_scheduled_works+0x10/0x10 [ 1182.410587][ T1367] ? do_raw_spin_lock+0x121/0x290 [ 1182.410634][ T1367] worker_thread+0x8a0/0xda0 [ 1182.410693][ T1367] kthread+0x711/0x8a0 [ 1182.410731][ T1367] ? __pfx_worker_thread+0x10/0x10 [ 1182.410759][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.410790][ T1367] ? rt_spin_unlock+0x150/0x200 [ 1182.410832][ T1367] ? rt_spin_unlock+0x161/0x200 [ 1182.410864][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.410900][ T1367] ret_from_fork+0x510/0xa50 [ 1182.410929][ T1367] ? __pfx_ret_from_fork+0x10/0x10 [ 1182.410954][ T1367] ? __switch_to+0xc9e/0x1480 [ 1182.410995][ T1367] ? __pfx_kthread+0x10/0x10 [ 1182.411031][ T1367] ret_from_fork_asm+0x1a/0x30 [ 1182.411088][ T1367] [ 1182.411691][ T1367] Kernel Offset: disabled