last executing test programs: 1m41.57299589s ago: executing program 0 (id=136): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x80000001, 0x8, 0x7fc00000}]}]}, {0x0, [0x61]}}, &(0x7f0000000000)=""/243, 0x33, 0xf3, 0x8, 0x80000001}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @host}, 0x10) r2 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x3, {0x7, 0x3, 0x7, 0x1000}}) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) splice(r0, 0x0, r1, 0x0, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000200"], 0x20}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x1, 0x5000003a, r5, 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, &(0x7f0000000780)}, 0x20) 1m38.362735603s ago: executing program 0 (id=140): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x6, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000100)=""/183}, 0x20) 1m37.366445768s ago: executing program 0 (id=143): socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x208100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x8802, 0x48) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) timerfd_create(0x8, 0x800) keyctl$clear(0x5, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0) eventfd(0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x1d880, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x88800, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m36.947412602s ago: executing program 0 (id=146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m35.584926497s ago: executing program 0 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000076000d0b15001e000000000003000079859be40008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x5a9242, 0x30) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 1m29.027519888s ago: executing program 0 (id=168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x8a91, 0xbb, &(0x7f0000000540)=""/187, 0x41100, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x6, 0x8, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x2, 0xc, 0x5}, {0x2, 0x4, 0x7, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x3, 0xc, 0xa}, {0x0, 0x3, 0x10001, 0xc}, {0x0, 0x1, 0x0, 0xa}, {0x0, 0x5, 0xa, 0x2}, {0x3, 0x5, 0xe, 0x6}, {0x2, 0x1, 0x0, 0x9}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 1m26.193869461s ago: executing program 32 (id=168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x8a91, 0xbb, &(0x7f0000000540)=""/187, 0x41100, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x6, 0x8, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x2, 0xc, 0x5}, {0x2, 0x4, 0x7, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x3, 0xc, 0xa}, {0x0, 0x3, 0x10001, 0xc}, {0x0, 0x1, 0x0, 0xa}, {0x0, 0x5, 0xa, 0x2}, {0x3, 0x5, 0xe, 0x6}, {0x2, 0x1, 0x0, 0x9}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 28.170157491s ago: executing program 5 (id=174): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000100)=""/183}, 0x20) 27.71990765s ago: executing program 5 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x7, 0x4, 0x6, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x80, 0x20, 0x7f, 0x2634}}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x6, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x20, 0x6, 0xffffffff, {{0x17, 0x4, 0x3, 0x25, 0x5c, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x3, [{@broadcast, 0xffffffff}]}, @lsrr={0x83, 0x1b, 0xdb, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @private=0xa010100, @private=0xa010102]}, @end, @rr={0x7, 0xf, 0x9b, [@broadcast, @loopback, @local]}, @timestamp={0x44, 0xc, 0xde, 0x0, 0x1, [0x8001, 0x40]}, @ra={0x94, 0x4}]}}}}}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c0001ff01000000fbdbdf2507000000", @ANYRES32=r9, @ANYBLOB="80000e0a0a00020079125908f2a000000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) 26.565297525s ago: executing program 5 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xe}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000023c0)={@map, 0xffffffffffffffff, 0x2e, 0x6}, 0x20) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000100000bf852c8986626691b01b2d44e4ce28715f2c2828"], 0xe0}], 0x1}, 0x40040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff, 0x7}]}, 0x10) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 24.454797911s ago: executing program 5 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x91d93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000c06"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(0x0, 0x8000, 0x0) 16.014222541s ago: executing program 5 (id=379): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x400000000, 0x0, 0x0, 0x200, 0x80}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "6f6c743a4e53fa04ebbb0bee9ea93de3379b9f641e41296b989c71b4599c47c5", "06f5041376defa15189ab755754cfc0128c37b37427b3fb11e47c10075a307f5", "1b556277ad41ea6799da942456a95b650deb33e00575e741453755383c844149", "4944d31bc9b6ae4e2c2f80a73bd6762953cf295d10003d6cef28bf3cc2f6018d", "80e1d332672a3eaee40701d723553fc58b01f7018d3bf1b31e36f64674aae6bf", "ae08763df61635bcf0d9715d", 0x4, 0x6, 0x0, 0x5}}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x5, &(0x7f0000000200)=[{0xb, 0xf, 0x3, 0x5f07}, {0x1, 0x9, 0x78, 0x9}, {0x9, 0x7, 0xd, 0x2}, {0x9, 0x5, 0x2, 0x7}, {0x2081, 0x0, 0x0, 0x2}]}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/75, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x2001, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/75, &(0x7f0000000180)=""/70, 0xe000}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000006c0)="c8a440641e0b66a495cf5da58fc3d1c6303fd1ae742bd044c0b363da45daaa3c3ad458e810d2e083fa382bdb33ed66bb50c4e333455997d9e171126da9028b55fdaacf121da2f61096248485c6090edadab10e06e7d87da885903ab299e9bb3984fe9c575e64a4d6437ab2a737c4b2ee256aad37819501a0352f029f7940cde0b7771c6b93879212cb473c129a3e4900e6b05262727dea92894770f4bce865483b06d41a8a311529a7a9cc84f3e69b399e02092fa6ec43e3284ffd65c05fdd5e9575cde5634094de7086899f887a4f48153dbfbf3635c2d17a4287d256f61a1be99060350cb12560b310719769ad4aa14952f72c049860553c82bde38739", 0xfe, r4}, 0x68) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 14.400014266s ago: executing program 1 (id=383): umount2(&(0x7f0000000240)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x2b) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000002180)) sendto$packet(r3, &(0x7f00000000c0)="3f0302e9dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000300)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="5241ed7d558babba762c36bc48c41f1754260a4a678bdc4fb1361f6e5e5c783958bab787907824521794bb99c4289a8ea64eb7fc", 0x34, 0x800, &(0x7f0000000280)={0x11, 0x1a, r4, 0x1, 0x5, 0x6, @random="5f1c5f5ceb26"}, 0x14) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000016c0)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, r5, 0x2, 0x3}, 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe90200000000000000164ce8cd4e0d4c7b546787a7", 0x3631564e}) 11.994427428s ago: executing program 1 (id=387): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x17}, @generic={0x44, 0x2}]}}, @info_request={0xf, 0x0, 0x0, 0x5, 0x6}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x10000004}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x61059000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 11.659903343s ago: executing program 3 (id=390): io_uring_enter(0xffffffffffffffff, 0x3b6f, 0xd5ad, 0x72, 0x0, 0x0) syz_usb_connect(0x3, 0x3f3, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0xc5, 0x17, 0x2e, 0x40, 0x12d1, 0xd66f, 0x4b39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e1, 0x3, 0x0, 0x2, 0x4527d0c25c9d6f7b, 0x2, "", [{{0x9, 0x4, 0x50, 0x81, 0xa, 0xff, 0x5, 0x65, 0xc, [], [{{0x9, 0x5, 0x3, 0x2, 0x400, 0xb0, 0xb, 0x4, [@generic={0x95, 0x22, "e7675c99abceba57e85b00006428be53cc33534416fcef14afb53625b630f63d7fc943e3bb9af8a4a639b9f0d0091abeb3264dca2059c1eac7ef42cfd3c4205bf70e53a2c275b3a7b02eeb005f87c2ff36162296295d7e91768a1f5e631ee16f7fe1bc2dd102f2398488fd1504e22daa631ccd9d3785fd68b57329701288ec88e1e77179c46c6e7664fce4ecbc5c4d708050fe"}, @generic={0x5c, 0x2b, "07e4999a816b9ce42de7ff41651b4006fac7cdec66a8a8c2dd09b3237557fb759654c7a4253cc1697b8a895cd352b0ec09f4b03367c89000810c68ab7ef2d5456de373465467ef331a7ecfc07b61ee0b25be2bac7c2258d11326"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xb, 0x3, 0xf9, [@generic={0x56, 0xcfa29b0cc41503fc, "d9d8f4ae9085854839b9bd05401914909abbdc7a4ca8ef221ba0aba6349f2cf5911e0547adbb86f7bd73b850f3a886036d4c5733651ad8153744aeb808331d5100dc4a8660997ead350824410d38367e0ddcd64e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x200}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x1, 0x34, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xf4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xe5d0}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0xf}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6e04}, @generic={0x8d, 0xd, "1705cb1539be21bd22e2818694522bcad30204a4e1f8bed7e10e4674b956b262542279c98e4c5cfbdeae46b2e795e398e57f0440b76625d92e5bcbec5dcbd8fc2f0f72fb2bfdba3399c76a56b888664b13d4c4efd3adb9058b80a0fac62995bffb0844722db365151f035af5a8bb05f2bc6d566a0e3284ae7ac703fb023d95b73b1bc47f786527454795e8"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x7, 0x6, 0x7}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x7, 0xc, 0x4, [@generic={0xba, 0xa, "15b8d721d85ce158d96cb41113a7368e475a17a5ba491598b4f8af5f8c4df83d4bf8924b0ab2bcf1e320b580475edd17ccb2c76e111d75d28e38404e957ed32f0ffb76a673df9d23e4b0932824e74ce492063e982d9d0ae7039a8c18594078f2d0f0afb94a7ecd0f5ea34fd75102c2e969748459be8bbf8991296b054d7971242b1948705b8618a75248d8ff9417cba9616839f460e8d78eaef8cf5bbcad466609f83306a3671381c92416e05aa971621d1d5221abf58406"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0x11, 0xb, "34c182694f6e3de72eb6431256d2ce"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x5, 0x0, 0xd4}}]}}, {{0x9, 0x4, 0x3a, 0x3, 0x0, 0xc4, 0xef, 0x28, 0x1, [@generic={0x95, 0x6, "0dc15fbef5a33bd855ed08a2ed9cae867cb4417d587f2291cba79b28b81111138cef7ea6676f3c1fe986d563a79549a11593cc8c04ea1d714c1b7880a97a8286e0c61217718a5e71266670950c0314b0c84a766c47b1ba5d165aad335c66c932e5b05c60ada6b17579cfb7beffb9ac1e709e1ce8c03f1cbe5814ee38533989cc43e9bf89b313a161b0fc733db46c1e48183ea8"}, @uac_control={{0xa, 0x24, 0x1, 0xffff, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x401, 0x6, 0x6, 0xfb}]}]}}, {{0x9, 0x4, 0xac, 0x7, 0x0, 0x24, 0xc1, 0xc, 0x3}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x310, 0xfd, 0x5, 0x1, 0x10, 0x10}, 0xf3, &(0x7f0000001640)={0x5, 0xf, 0xf3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "8da06b3789956e2a656c0464d83bf625"}, @ptm_cap={0x3}, @generic={0xd7, 0x10, 0x4, "cf8a7db7a5b7362e8a883f0eafa0c8dea5301d261c7635429eb5f70b99a144de8c799fbe271f42dae20b410af576f6005b7c6a3bf6584d2361a8d3ac636abbe0d49520f28b259a882634319f0bfa07801a36e96c13dd168a3066beeeb393e7b833d7f2bc059738cc768c11d724b05b60148080c9b269a5e9add502111f8f2969610c9d07c640e4695aabba6a8f3465c6613e5170306e6c42a3411855db27e841b893978d16020423475c54678315a636800aaac413e7a3790b1e98dfbf2c9bc219641c1261b24a0ed09adabcadac7882c311e4b6"}]}, 0x3, [{0x50, &(0x7f0000001740)=@string={0x50, 0x3, "05b514ed33f40149de88d51f0bc32fc464688b31cacd84befd6f256c12eb0c859b1ddc1b0ccdc9385176ff77548af4e6be11afa4b970c73507810255084faf51ce0a413d941e7a6eef839332758a"}}, {0x101, &(0x7f00000017c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x1c09}}]}) 10.713235576s ago: executing program 4 (id=391): socket(0xa, 0x3, 0x3a) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001b40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000380)={0x140, 0x1, {0x0, 0x0, 0x6, 0x1, 0x5}, 0xa4}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4dfff0d", @ANYRES16=r6, @ANYBLOB="030300000000fcffffff0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x9, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000680)={{0x6, 0x3, 0xfffffffd, 0x1000, 'syz0\x00', 0x7}, 0x0, [0x7, 0x6, 0x8, 0x5, 0x3, 0xd, 0x1, 0x8000, 0x14c, 0x3, 0xb, 0x8, 0x8, 0x5, 0x481e, 0xc, 0x99e2, 0x0, 0x101, 0xffff, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x2, 0x0, 0x1, 0xf, 0x8, 0x1ff, 0x9, 0x5, 0x99b2, 0x8, 0x80000000, 0x2, 0x1, 0x7, 0x8, 0x0, 0xab60, 0xa0c, 0x4, 0xca, 0x400, 0xffffffffffffffff, 0x8, 0x7fff, 0x4, 0x9, 0x6, 0x5, 0x2, 0x1, 0x1, 0xfffffffffffffff5, 0x41, 0xfffffffffffffffe, 0xe2cf, 0x1, 0x5, 0xd, 0x7, 0x0, 0xe5, 0x2b, 0x400, 0x7fffffff, 0x8, 0x2, 0x1ca4, 0xf2, 0x456, 0x9, 0x7, 0x8001, 0x313, 0xdd, 0x0, 0x1, 0x81, 0xff, 0x5, 0xfffffffffffffffa, 0xc0000, 0x7, 0x7, 0x15266e41, 0x2, 0x510, 0x7f, 0x8, 0x7d68, 0x400, 0x8, 0xe4f, 0x7ff, 0xffff, 0x3527, 0x0, 0x8, 0x10, 0x9, 0xe7f, 0x88, 0x7, 0x3, 0x1, 0x7, 0xea5, 0x7f, 0x8, 0x7fffffffffffffff, 0x8, 0x7fffffffffffffff, 0x350, 0x8000000000000000, 0xfffffffffffffff7, 0xa, 0x8, 0x590e, 0x8, 0xffffffffffffffff, 0x767, 0xe1, 0x5, 0x1, 0x2]}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x8012, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x9) 9.713312046s ago: executing program 1 (id=392): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="e90c610faca20180c200000008"], 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r3, @ANYBLOB="21fff103ab728386e9705b517255da4a29a6b40eb92f9b05cfa220cccb4502bb42"]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000740)=""/4096, 0x1000) 8.94512143s ago: executing program 4 (id=394): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getgid() (fail_nth: 1) 8.070446457s ago: executing program 2 (id=395): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) (fail_nth: 1) 7.939617514s ago: executing program 5 (id=396): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) socket$caif_stream(0x25, 0x1, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), 0x4) 7.420375307s ago: executing program 2 (id=397): umount2(&(0x7f0000000240)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x2b) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000002180)) sendto$packet(r3, &(0x7f00000000c0)="3f0302e9dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000300)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="5241ed7d558babba762c36bc48c41f1754260a4a678bdc4fb1361f6e5e5c783958bab787907824521794bb99c4289a8ea64eb7fc", 0x34, 0x800, &(0x7f0000000280)={0x11, 0x1a, r4, 0x1, 0x5, 0x6, @random="5f1c5f5ceb26"}, 0x14) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000016c0)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, r5, 0x2, 0x3}, 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe90200000000000000164ce8cd4e0d4c7b546787a7", 0x3631564e}) 7.418155486s ago: executing program 3 (id=398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75", 0xd2}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.999044128s ago: executing program 2 (id=399): umount2(&(0x7f0000000240)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x2b) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000002180)) sendto$packet(r3, &(0x7f00000000c0)="3f0302e9dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000300)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000016c0)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, r6, 0x2, 0x3}, 0x50) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000ff090000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.699515088s ago: executing program 4 (id=400): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0xfffffffd}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffff70]}, 0x8) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xf1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0xea60}}) 4.706236121s ago: executing program 4 (id=401): socket(0x29, 0x3, 0x9c) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x29, 0xc, @val=@netfilter={0x7, 0x1, 0x6, 0x1}}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0x5d, 0x0, &(0x7f0000000240)="b9ffddc1ddcccdf175537d53088edfcef6e296510cff24fc834233685059613b5ff33a48a3d68811eb5441410160ae243fd4023552d70747f62ea69404d4f4a67b73a5a90971e57134dc9a7f1f854ad06f7f4492e27810767cb651efef", 0x0, 0x602, 0x60000009, 0x0, 0x45, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x50) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x100, &(0x7f0000001200), &(0x7f0000001240)=0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/hibernate_compression_threads', 0x8182, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x3, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.583609347s ago: executing program 3 (id=402): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x17}, @generic={0x44, 0x2}]}}, @info_request={0xf, 0x0, 0x0, 0x5, 0x6}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x10000004}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x61059000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.572562397s ago: executing program 2 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x91d93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000c06"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(0x0, 0x8000, 0x0) 3.134072905s ago: executing program 2 (id=404): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setfsuid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x400, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.762530289s ago: executing program 3 (id=405): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x6, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000100)=""/183}, 0x20) 2.431775696s ago: executing program 3 (id=406): umount2(&(0x7f0000000240)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x2b) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) 2.100693589s ago: executing program 1 (id=407): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 1.172644677s ago: executing program 3 (id=408): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r1, 0x0, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x3ff, 0x0, 0xffff, 0x8, 0xe6, 0x5, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xec, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0xdc, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e9"]}]}, 0xec}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff0524060000"], 0x0) (rerun: 64) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9, 0x2007, 0x1}) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0x31, 0x98, {0x98, 0x6, "0be7d820b3b22c251134d965383a207ea77d7be0eec472f782076ae3fe039b56c3a4a325446a1fd0196da02a9789143d95092e2069babf70383286033bbec1c41dffa798f869a7c30ecebf950d158632ee101f77b8cee05a65100f79242e10918b7fb90afac2b2542d574eec9e5352f0ef875a79c3276adaf493d6a307cc8407944b00ab5ec681e1f1d17bb44e3067fdd59ec5a60cb8"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x20, 0x0, 0x61, "8a8133a4ba4d5dc9959db90abc6cf92f77bb24c62251007a4928bb6081de2b8b4c33033e90c1efd12c7a3fdab660ea18d8c554ff1a993b79a19fc0576371b277d02bbf02bdfa3cb98052d15e47069512004ff0d0f1783a9e595e0f7054e01b9bb3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xa7c4, 0xac2, 0xc95, 0x4, 0x2, 0x1, 0x200, 0x6, 0x3cf, 0x0, 0x2, 0x5}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x497}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x6, 0xff, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x3, 0x40, 0x8c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4e}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x6, 0x1, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x2, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x7}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x5, "c9f0c1d0"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x2, 0x4, 0x8, 0x8, 0x8, 0x7], 0x5}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x3, 0x3, 0x5], 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x1, 0x3a, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x91, 0x4, 0x2, 0xf8, "48062c47"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0xba, 0x5, "cab93f67da432b2a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xc493, 0xf, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x79, 0x1, 0x81, 0x8, ']', "985936"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x4, 0x9, 0x0, "f1b95e", "79b1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x5ff, 0x7, 0x6, 0x0, {0x7, 0x25, 0x1, 0x0, 0x80, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x11, 0x0, {0x7, 0x25, 0x1, 0xc, 0x5, 0x3ff}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x4, 0x8, 0x6, 0x10}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}]}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000180), 0x101, 0x1) syz_extract_tcp_res(&(0x7f0000000200), 0x5, 0x10001) syz_emit_ethernet(0x72, &(0x7f0000000540)={@link_local, @local, @void, {@mpls_uc={0x8847, {[{0x6}, {0x6}, {0x7}], @ipv4=@icmp={{0x0, 0x4, 0x3, 0x7, 0x0, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, {[@timestamp_addr={0x44, 0x0, 0xcb, 0x1, 0x8, [{@remote, 0x9}]}, @generic={0x82, 0x0, "c47da1d476c78a8c8ad448c420b2"}, @ssrr={0x89, 0x0, 0xb8, [@empty, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x0, 0x3, [{0x0, 0x0, "d75f79751f36a5118670a68e0aa6a8"}, {0x6, 0x0, "99660a9d33b96cbba9f6"}, {0x5, 0x0, "8aeb2f636f16a7fe56a0e476356c"}]}, @timestamp_addr={0x44, 0x0, 0x1b, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x400000}, {@private=0xa010100, 0x17db}, {@rand_addr=0x64010101, 0xe}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x0, 0x67, 0x3, 0x0, [{@private=0xa010100, 0xfffffffa}, {@local, 0x7}]}]}}, @info_request={0xf, 0x0, 0x0, 0x6, 0x1}}}}}}, 0x0) 1.051730677s ago: executing program 1 (id=409): syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) setuid(0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="12011101000000209904021040000102030109027500030180d009080b02000000202e09040000000101200009240104000b090002090801000001022000090401010101022000090501"], 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 527.318615ms ago: executing program 4 (id=410): socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x208100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x8802, 0x48) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x8, 0x800) eventfd(0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x88800, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x22020600) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 362.393807ms ago: executing program 1 (id=411): r0 = socket$packet(0x11, 0x3, 0x300) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0x40}, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0xfe}, 0x2) r3 = socket$inet6_sctp(0xa, 0x9dde7d150a066036, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000040)=0x97230f4c7fc23cac) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003540)=@vmx={0x9, 0x0, 0x2080, {0xffff1000, 0x26000, {}, 0x0, 0x5}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba413013bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d93b0b000000000000cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1b2c7af758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae528cc8253009914bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e475a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0afbaf33ebf7c948840b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca0900898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c5ca77908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/170}, {&(0x7f00000014c0)=""/186}, {&(0x7f0000001580)=""/162}, {&(0x7f0000001640)=""/200}, {&(0x7f0000001740)=""/208}, {&(0x7f0000001840)=""/206}, {&(0x7f0000001940)=""/211}, {&(0x7f0000001a40)=""/170}]}, 0x7f}, {{&(0x7f0000001b80), 0x0, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2}, {&(0x7f0000001c40)=""/195}, {&(0x7f0000001d40)=""/208}, {&(0x7f0000001e40)=""/100}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000002ec0)=""/201}, {&(0x7f0000002fc0)=""/164}, {&(0x7f0000003080)=""/252}, {&(0x7f0000003180)=""/32}, {&(0x7f0000003300)=""/4096}], 0x0, &(0x7f00000043c0)=""/69}, 0x2}], 0x400000000000262, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x50) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0x2, 0x1, 0x1, 0x3, 0x2, 0x10, 0x57, 0xa, 0x6ef, 0x14, 0x8d9, 0x6, 0x101, 0x1, 0x0, 0x12, {0x3}, 0x54, 0x80}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="00072c0000002c0f99524f9ac763d063f5c8b6d57249525a92b335cc8f8a4d8a716e09b41948a5413821cdb2ed4d64dda6b3"], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="000b0300016f44009a"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1}}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000340)) ioctl$int_out(r10, 0x0, &(0x7f0000000100)) 60.497864ms ago: executing program 2 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75", 0xd2}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 4 (id=413): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0xfffffffd}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffff70]}, 0x8) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xf1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0xea60}}) kernel console output (not intermixed with test programs): 749][ T5809] usb 5-1: can't read configurations, error -61 [ 93.218420][ T5809] usb usb5-port1: attempt power cycle [ 93.502653][ T6078] FAULT_INJECTION: forcing a failure. [ 93.502653][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 93.502683][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.502704][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.502714][ T6078] Call Trace: [ 93.502721][ T6078] [ 93.502729][ T6078] dump_stack_lvl+0xe8/0x150 [ 93.502759][ T6078] should_fail_ex+0x46b/0x600 [ 93.502790][ T6078] should_failslab+0xa8/0x100 [ 93.502810][ T6078] __kmalloc_noprof+0xdf/0x7b0 [ 93.502835][ T6078] ? kfree+0x4d/0x6c0 [ 93.502856][ T6078] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 93.502884][ T6078] tomoyo_realpath_from_path+0xe3/0x5d0 [ 93.502918][ T6078] ? tomoyo_path_number_perm+0x219/0x630 [ 93.502937][ T6078] tomoyo_path_number_perm+0x246/0x630 [ 93.502960][ T6078] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.502982][ T6078] ? __lock_acquire+0x6b5/0x2cf0 [ 93.503043][ T6078] ? __fget_files+0x2a/0x420 [ 93.503067][ T6078] ? __fget_files+0x2a/0x420 [ 93.503088][ T6078] ? __fget_files+0x3a6/0x420 [ 93.503109][ T6078] ? __fget_files+0x2a/0x420 [ 93.503135][ T6078] security_file_ioctl+0xc3/0x2a0 [ 93.503158][ T6078] __se_sys_ioctl+0x47/0x170 [ 93.503176][ T6078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.503196][ T6078] do_syscall_64+0x15f/0xf80 [ 93.503221][ T6078] ? trace_irq_disable+0x3b/0x150 [ 93.503242][ T6078] ? clear_bhb_loop+0x40/0x90 [ 93.503271][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.503288][ T6078] RIP: 0033:0x7ff1a912c819 [ 93.503305][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.503319][ T6078] RSP: 002b:00007ff1a737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.503339][ T6078] RAX: ffffffffffffffda RBX: 00007ff1a93a5fa0 RCX: 00007ff1a912c819 [ 93.503352][ T6078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 93.503363][ T6078] RBP: 00007ff1a737e090 R08: 0000000000000000 R09: 0000000000000000 [ 93.503374][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.503384][ T6078] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 93.503414][ T6078] [ 93.503421][ T6078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.567921][ T5809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.588710][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 93.591977][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 93.592009][ T5809] usb 5-1: can't read configurations, error -61 [ 93.686066][ T6075] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 93.717933][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.738779][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 93.741016][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 93.741047][ T5809] usb 5-1: can't read configurations, error -61 [ 93.741397][ T5809] usb usb5-port1: unable to enumerate USB device [ 93.854831][ T6075] bond1 (unregistering): Released all slaves [ 95.171557][ T6097] dummy0: entered promiscuous mode [ 95.171734][ T6097] macsec1: entered promiscuous mode [ 95.183656][ T6093] block nbd2: shutting down sockets [ 95.220168][ T6097] dummy0: left promiscuous mode [ 95.333222][ T6103] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 95.333245][ T6103] netlink: 992 bytes leftover after parsing attributes in process `syz.3.56'. [ 95.830955][ T824] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.978098][ T824] usb 5-1: Using ep0 maxpacket: 8 [ 95.981371][ T824] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 95.981394][ T824] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 95.981420][ T824] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 95.981440][ T824] usb 5-1: config 127 has no interface number 0 [ 95.981470][ T824] usb 5-1: config 127 interface 171 has no altsetting 0 [ 95.987601][ T824] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 95.987633][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.987654][ T824] usb 5-1: Product: syz [ 95.987668][ T824] usb 5-1: Manufacturer: syz [ 95.987682][ T824] usb 5-1: SerialNumber: syz [ 96.284427][ T824] xr_serial 5-1:127.171: skipping garbage [ 96.343695][ T824] usb 5-1: USB disconnect, device number 8 [ 96.542119][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 96.659490][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.820911][ T10] usb 1-1: config 5 has an invalid interface number: 71 but max is 0 [ 96.820989][ T10] usb 1-1: config 5 has an invalid descriptor of length 154, skipping remainder of the config [ 96.821008][ T10] usb 1-1: config 5 has no interface number 0 [ 96.821038][ T10] usb 1-1: config 5 interface 71 has no altsetting 0 [ 96.823192][ T10] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a3c, bcdDevice=71.4c [ 96.823218][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.823231][ T10] usb 1-1: Product: syz [ 96.823238][ T10] usb 1-1: Manufacturer: syz [ 96.823246][ T10] usb 1-1: SerialNumber: syz [ 98.003972][ T10] uvcvideo 1-1:5.71: probe with driver uvcvideo failed with error -22 [ 98.028600][ T10] usb 1-1: USB disconnect, device number 2 [ 98.200055][ T6159] loop8: detected capacity change from 0 to 7 [ 98.236650][ T6159] Dev loop8: unable to read RDB block 7 [ 98.236694][ T6159] loop8: unable to read partition table [ 98.236887][ T6159] loop8: partition table beyond EOD, truncated [ 98.236913][ T6159] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 98.237061][ T6160] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure [ 98.383997][ T6168] ======================================================= [ 98.383997][ T6168] WARNING: The mand mount option has been deprecated and [ 98.383997][ T6168] and is ignored by this kernel. Remove the mand [ 98.383997][ T6168] option from the mount to silence this warning. [ 98.383997][ T6168] ======================================================= [ 98.427483][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.427549][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.445470][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.456540][ T6166] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.474667][ T6166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.570705][ T6170] FAULT_INJECTION: forcing a failure. [ 98.570705][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 98.570736][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.570757][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.570767][ T6170] Call Trace: [ 98.570781][ T6170] [ 98.570787][ T6170] dump_stack_lvl+0xe8/0x150 [ 98.570814][ T6170] should_fail_ex+0x46b/0x600 [ 98.570842][ T6170] should_failslab+0xa8/0x100 [ 98.570861][ T6170] kmem_cache_alloc_noprof+0x87/0x680 [ 98.570884][ T6170] ? do_getname+0x2e/0x250 [ 98.570901][ T6170] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.570928][ T6170] do_getname+0x2e/0x250 [ 98.570944][ T6170] ? user_path_at+0x1e/0x160 [ 98.570966][ T6170] user_path_at+0x2a/0x160 [ 98.570989][ T6170] __se_sys_mount+0x2dc/0x420 [ 98.571014][ T6170] ? __pfx___se_sys_mount+0x10/0x10 [ 98.571038][ T6170] ? __x64_sys_mount+0x20/0xc0 [ 98.571056][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.571071][ T6170] do_syscall_64+0x15f/0xf80 [ 98.571091][ T6170] ? trace_irq_disable+0x3b/0x150 [ 98.571110][ T6170] ? clear_bhb_loop+0x40/0x90 [ 98.571138][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.571154][ T6170] RIP: 0033:0x7f3aae34c819 [ 98.571171][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.571183][ T6170] RSP: 002b:00007f3aac59e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.571201][ T6170] RAX: ffffffffffffffda RBX: 00007f3aae5c5fa0 RCX: 00007f3aae34c819 [ 98.571214][ T6170] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 98.571224][ T6170] RBP: 00007f3aac59e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.571234][ T6170] R10: 0000000000084000 R11: 0000000000000246 R12: 0000000000000001 [ 98.571245][ T6170] R13: 00007f3aae5c6038 R14: 00007f3aae5c5fa0 R15: 00007ffc6e060ee8 [ 98.571274][ T6170] [ 98.613920][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.623051][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.664838][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.680067][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.705344][ T6166] wg1 speed is unknown, defaulting to 1000 [ 98.717691][ T6172] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 98.722977][ T6173] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 98.732932][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.170988][ T6202] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.274081][ T5814] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.282380][ T5814] Bluetooth: hci3: Injecting HCI hardware error event [ 102.284470][ T5805] Bluetooth: hci3: hardware error 0x00 [ 102.419861][ T6209] FAULT_INJECTION: forcing a failure. [ 102.419861][ T6209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.419890][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.419911][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.419921][ T6209] Call Trace: [ 102.419926][ T6209] [ 102.419932][ T6209] dump_stack_lvl+0xe8/0x150 [ 102.419960][ T6209] should_fail_ex+0x46b/0x600 [ 102.419989][ T6209] _copy_from_user+0x2d/0xb0 [ 102.420007][ T6209] do_tcp_setsockopt+0x4f3/0x2060 [ 102.420036][ T6209] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 102.420058][ T6209] ? kmem_cache_free+0x185/0x6b0 [ 102.420087][ T6209] ? sock_common_setsockopt+0x36/0xc0 [ 102.420104][ T6209] ? tcp_setsockopt+0x3d/0xe0 [ 102.420126][ T6209] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.420147][ T6209] do_sock_setsockopt+0x17c/0x1b0 [ 102.420172][ T6209] __x64_sys_setsockopt+0x143/0x1b0 [ 102.420195][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.420213][ T6209] do_syscall_64+0x15f/0xf80 [ 102.420231][ T6209] ? trace_irq_disable+0x3b/0x150 [ 102.420250][ T6209] ? clear_bhb_loop+0x40/0x90 [ 102.420274][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.420290][ T6209] RIP: 0033:0x7ff1a912c819 [ 102.420307][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.420320][ T6209] RSP: 002b:00007ff1a737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.420340][ T6209] RAX: ffffffffffffffda RBX: 00007ff1a93a5fa0 RCX: 00007ff1a912c819 [ 102.420353][ T6209] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003 [ 102.420363][ T6209] RBP: 00007ff1a737e090 R08: 0000000000000004 R09: 0000000000000000 [ 102.420372][ T6209] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 102.420383][ T6209] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 102.420408][ T6209] [ 102.420922][ T6207] loop5: detected capacity change from 0 to 7 [ 102.477655][ T6207] Dev loop5: unable to read RDB block 7 [ 102.477700][ T6207] loop5: AHDI p1 p2 p3 [ 102.477735][ T6207] loop5: partition table partially beyond EOD, truncated [ 102.478250][ T6207] loop5: p1 start 1818582900 is beyond EOD, truncated [ 102.478272][ T6207] loop5: p3 start 335544320 is beyond EOD, truncated [ 102.919974][ T6219] FAULT_INJECTION: forcing a failure. [ 102.919974][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 102.920005][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.920026][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.920036][ T6219] Call Trace: [ 102.920043][ T6219] [ 102.920050][ T6219] dump_stack_lvl+0xe8/0x150 [ 102.920079][ T6219] should_fail_ex+0x46b/0x600 [ 102.920109][ T6219] should_failslab+0xa8/0x100 [ 102.920129][ T6219] kmem_cache_alloc_noprof+0x87/0x680 [ 102.920153][ T6219] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.920175][ T6219] ? do_getname+0x2e/0x250 [ 102.920199][ T6219] do_getname+0x2e/0x250 [ 102.920217][ T6219] ? getname_flags+0x11/0x20 [ 102.920239][ T6219] do_sys_openat2+0xca/0x200 [ 102.920263][ T6219] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.920285][ T6219] ? ksys_write+0x248/0x270 [ 102.920316][ T6219] ? __pfx_ksys_write+0x10/0x10 [ 102.920344][ T6219] __x64_sys_openat+0x138/0x170 [ 102.920368][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.920387][ T6219] do_syscall_64+0x15f/0xf80 [ 102.920408][ T6219] ? trace_irq_disable+0x3b/0x150 [ 102.920429][ T6219] ? clear_bhb_loop+0x40/0x90 [ 102.920452][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.920470][ T6219] RIP: 0033:0x7f3aae34c819 [ 102.920486][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.920500][ T6219] RSP: 002b:00007f3aac57d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.920527][ T6219] RAX: ffffffffffffffda RBX: 00007f3aae5c6090 RCX: 00007f3aae34c819 [ 102.920539][ T6219] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 102.920551][ T6219] RBP: 00007f3aac57d090 R08: 0000000000000000 R09: 0000000000000000 [ 102.920561][ T6219] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 102.920572][ T6219] R13: 00007f3aae5c6128 R14: 00007f3aae5c6090 R15: 00007ffc6e060ee8 [ 102.920600][ T6219] [ 103.217270][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.107932][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 104.113796][ T5908] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 104.113822][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.113841][ T5908] usb 2-1: Product: syz [ 104.113855][ T5908] usb 2-1: Manufacturer: syz [ 104.113868][ T5908] usb 2-1: SerialNumber: syz [ 104.119822][ T5908] usb 2-1: config 0 descriptor?? [ 104.201748][ T5908] gspca_main: spca508-2.14.0 probing 041e:4018 [ 104.394052][ T6234] netlink: 'syz.4.96': attribute type 16 has an invalid length. [ 104.394072][ T6234] netlink: 'syz.4.96': attribute type 17 has an invalid length. [ 104.681151][ T5908] gspca_spca508: reg_read err -71 [ 104.681553][ T5908] gspca_spca508: reg_read err -71 [ 104.682266][ T5908] gspca_spca508: reg_read err -71 [ 104.684313][ T5908] gspca_spca508: reg_read err -71 [ 104.684689][ T5908] gspca_spca508: reg write: error -71 [ 104.684774][ T5908] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 104.694700][ T5908] usb 2-1: USB disconnect, device number 3 [ 104.753898][ T6234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.648813][ T5805] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 105.648955][ T824] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.857744][ T824] usb 5-1: Using ep0 maxpacket: 8 [ 106.358563][ T824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 106.362146][ T824] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 106.362172][ T824] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 106.362192][ T824] usb 5-1: Product: syz [ 106.362205][ T824] usb 5-1: Manufacturer: syz [ 106.362219][ T824] usb 5-1: SerialNumber: syz [ 106.423714][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 106.496614][ T6249] syz.3.99 (6249) used greatest stack depth: 16792 bytes left [ 106.549918][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.600314][ T824] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 106.600338][ T824] usb 5-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 106.600357][ T824] usb 5-1: Handspring Visor / Palm OS: port 247, is for unknown use [ 106.600375][ T824] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 106.663887][ T6256] capability: warning: `syz.2.103' uses 32-bit capabilities (legacy support in use) [ 106.743104][ T6256] program syz.2.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.027679][ T824] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 107.027745][ T824] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 107.340420][ T824] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 107.372534][ T824] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 108.547971][ T806] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.702936][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 108.710729][ T806] usb 1-1: config 0 has no interfaces? [ 108.719881][ T806] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 108.719910][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.719930][ T806] usb 1-1: Product: syz [ 108.719945][ T806] usb 1-1: Manufacturer: syz [ 108.719958][ T806] usb 1-1: SerialNumber: syz [ 108.764755][ T806] r8152-cfgselector 1-1: Unknown version 0x0000 [ 108.764780][ T806] r8152-cfgselector 1-1: config 0 descriptor?? [ 108.812405][ T824] usb 5-1: USB disconnect, device number 9 [ 108.834665][ T824] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 108.869067][ T824] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 108.869825][ T824] visor 5-1:1.0: device disconnected [ 108.876603][ T6281] process 'syz.3.109' launched '/dev/fd/6' with NULL argv: empty string added [ 108.922452][ T6278] Invalid ELF header magic: != ELF [ 108.967329][ T6283] loop2: detected capacity change from 0 to 7 [ 108.978020][ T6283] loop2: [ 108.978056][ T6283] loop2: partition table partially beyond EOD, truncated [ 109.014761][ T806] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 109.641077][ T5908] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 110.155673][ T5908] usb 3-1: not running at top speed; connect to a high speed hub [ 110.156997][ T5908] usb 3-1: config 6 has an invalid interface number: 71 but max is 2 [ 110.157023][ T5908] usb 3-1: config 6 has an invalid interface number: 68 but max is 2 [ 110.157042][ T5908] usb 3-1: config 6 has an invalid interface number: 162 but max is 2 [ 110.157060][ T5908] usb 3-1: config 6 has an invalid interface number: 190 but max is 2 [ 110.157071][ T5908] usb 3-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 110.157080][ T5908] usb 3-1: config 6 has no interface number 0 [ 110.157088][ T5908] usb 3-1: config 6 has no interface number 1 [ 110.157096][ T5908] usb 3-1: config 6 has no interface number 2 [ 110.157103][ T5908] usb 3-1: config 6 has no interface number 3 [ 110.157145][ T5908] usb 3-1: config 6 interface 71 altsetting 86 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 110.157194][ T5908] usb 3-1: config 6 interface 71 altsetting 86 endpoint 0x8F has invalid maxpacket 18135, setting to 64 [ 110.157209][ T5908] usb 3-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 110.157221][ T5908] usb 3-1: config 6 interface 71 altsetting 86 has an invalid descriptor for endpoint zero, skipping [ 110.157232][ T5908] usb 3-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 110.157243][ T5908] usb 3-1: config 6 interface 71 altsetting 86 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 110.157256][ T5908] usb 3-1: config 6 interface 71 altsetting 86 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 110.157269][ T5908] usb 3-1: config 6 interface 71 altsetting 86 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 110.157283][ T5908] usb 3-1: too many endpoints for config 6 interface 68 altsetting 186: 69, using maximum allowed: 30 [ 110.157308][ T5908] usb 3-1: config 6 interface 68 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 110.157328][ T5908] usb 3-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 110.157339][ T5908] usb 3-1: config 6 interface 190 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 110.157350][ T5908] usb 3-1: config 6 interface 190 altsetting 9 endpoint 0xE has an invalid bInterval 178, changing to 4 [ 110.157363][ T5908] usb 3-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 110.157374][ T5908] usb 3-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 110.157385][ T5908] usb 3-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 110.157396][ T5908] usb 3-1: config 6 interface 190 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 110.157410][ T5908] usb 3-1: config 6 interface 190 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 110.157422][ T5908] usb 3-1: config 6 interface 190 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 110.157435][ T5908] usb 3-1: config 6 interface 71 has no altsetting 0 [ 110.157444][ T5908] usb 3-1: config 6 interface 68 has no altsetting 0 [ 110.157453][ T5908] usb 3-1: config 6 interface 162 has no altsetting 0 [ 110.157461][ T5908] usb 3-1: config 6 interface 190 has no altsetting 0 [ 110.189341][ T5908] usb 3-1: New USB device found, idVendor=0a5c, idProduct=bd1e, bcdDevice=df.15 [ 110.189367][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.189386][ T5908] usb 3-1: Product: 暠㘞쿳⦜䠩翡൸䨐増蕨䲔뿞쳸葻梬ꊊﵨ嶟榿䪸諝랏䖩ܹᷬ￪눇Ⅽ垰뀊尺ﭞ￾홖캂ᒎ翕搲䒃≅࿺桦貙⣝忪軶⚎煕駱瘀拏ꪓ憐챛✘슷䨏⪞姼榥୕ඃ孹⬼⋏檚ੈ嶶篘ğ୰䢅 [ 110.189411][ T5908] usb 3-1: Manufacturer: ఌ [ 110.189424][ T5908] usb 3-1: SerialNumber: Ⰺ [ 110.266591][ T6293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.271899][ T6293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.615858][ T5908] usbhid 3-1:6.190: couldn't find an input interrupt endpoint [ 111.769817][ T5908] usb 3-1: USB disconnect, device number 7 [ 111.807962][ T824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.957976][ T824] usb 2-1: Using ep0 maxpacket: 16 [ 111.966819][ T824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 111.966851][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.001481][ T824] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.001515][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.001708][ T824] usb 2-1: Product: syz [ 112.001974][ T824] usb 2-1: Manufacturer: syz [ 112.002272][ T824] usb 2-1: SerialNumber: syz [ 112.064645][ T824] usb 2-1: config 0 descriptor?? [ 112.080318][ T824] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.080352][ T824] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 112.686154][ T824] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 112.686757][ T824] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 112.886982][ T6327] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.123'. [ 112.895528][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 112.908925][ T824] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 112.908936][ T824] em28xx 2-1:0.0: No AC97 audio processor [ 114.186015][ T1236] usb 2-1: USB disconnect, device number 4 [ 114.187476][ T1236] em28xx 2-1:0.0: Disconnecting em28xx [ 114.273250][ T1236] em28xx 2-1:0.0: Freeing device [ 114.472056][ T6355] FAULT_INJECTION: forcing a failure. [ 114.472056][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 114.472089][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.472108][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.472118][ T6355] Call Trace: [ 114.472125][ T6355] [ 114.472132][ T6355] dump_stack_lvl+0xe8/0x150 [ 114.472162][ T6355] should_fail_ex+0x46b/0x600 [ 114.472191][ T6355] should_failslab+0xa8/0x100 [ 114.472210][ T6355] __kmalloc_cache_noprof+0x84/0x690 [ 114.472234][ T6355] ? alloc_pipe_info+0xe8/0x4d0 [ 114.472255][ T6355] alloc_pipe_info+0xe8/0x4d0 [ 114.472273][ T6355] splice_direct_to_actor+0xa19/0xc80 [ 114.472304][ T6355] ? __pfx_direct_splice_actor+0x10/0x10 [ 114.472328][ T6355] ? get_pid_task+0x20/0x1f0 [ 114.472349][ T6355] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 114.472368][ T6355] ? __lock_acquire+0x6b5/0x2cf0 [ 114.472388][ T6355] do_splice_direct+0x19b/0x2a0 [ 114.472402][ T6355] ? __pfx_do_splice_direct+0x10/0x10 [ 114.472415][ T6355] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 114.472432][ T6355] ? rw_verify_area+0x25b/0x4e0 [ 114.472448][ T6355] do_sendfile+0x547/0x7e0 [ 114.472466][ T6355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.472484][ T6355] ? __pfx_do_sendfile+0x10/0x10 [ 114.472501][ T6355] __se_sys_sendfile64+0x144/0x1a0 [ 114.472513][ T6355] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 114.472528][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.472538][ T6355] do_syscall_64+0x15f/0xf80 [ 114.472551][ T6355] ? trace_irq_disable+0x3b/0x150 [ 114.472563][ T6355] ? clear_bhb_loop+0x40/0x90 [ 114.472575][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.472585][ T6355] RIP: 0033:0x7f94fb4dc819 [ 114.472595][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.472603][ T6355] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 114.472615][ T6355] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 114.472622][ T6355] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 114.472627][ T6355] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 114.472633][ T6355] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 114.472639][ T6355] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 114.472654][ T6355] [ 115.749669][ T1236] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 116.838892][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 117.236724][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 118.358536][ T1236] usb 2-1: device descriptor read/all, error -71 [ 118.742302][ T6378] batadv0: entered promiscuous mode [ 118.744214][ T6378] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.766683][ T6378] hsr1: entered allmulticast mode [ 118.766702][ T6378] batadv0: entered allmulticast mode [ 118.766724][ T6378] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 120.010087][ T6387] FAULT_INJECTION: forcing a failure. [ 120.010087][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 120.010130][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.4.142 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 120.010160][ T6387] Tainted: [L]=SOFTLOCKUP [ 120.010166][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.010182][ T6387] Call Trace: [ 120.010190][ T6387] [ 120.010197][ T6387] dump_stack_lvl+0xe8/0x150 [ 120.010235][ T6387] should_fail_ex+0x46b/0x600 [ 120.010266][ T6387] should_failslab+0xa8/0x100 [ 120.010286][ T6387] __kmalloc_noprof+0xdf/0x7b0 [ 120.010311][ T6387] ? kfree+0x4d/0x6c0 [ 120.010331][ T6387] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.010360][ T6387] tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.010394][ T6387] ? tomoyo_path_number_perm+0x219/0x630 [ 120.010413][ T6387] tomoyo_path_number_perm+0x246/0x630 [ 120.010436][ T6387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.010458][ T6387] ? __lock_acquire+0x6b5/0x2cf0 [ 120.010516][ T6387] ? __fget_files+0x2a/0x420 [ 120.010541][ T6387] ? __fget_files+0x2a/0x420 [ 120.010562][ T6387] ? __fget_files+0x3a6/0x420 [ 120.010582][ T6387] ? __fget_files+0x2a/0x420 [ 120.010607][ T6387] security_file_ioctl+0xc3/0x2a0 [ 120.010630][ T6387] __se_sys_ioctl+0x47/0x170 [ 120.010654][ T6387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.010674][ T6387] do_syscall_64+0x15f/0xf80 [ 120.010697][ T6387] ? trace_irq_disable+0x3b/0x150 [ 120.010718][ T6387] ? clear_bhb_loop+0x40/0x90 [ 120.010740][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.010758][ T6387] RIP: 0033:0x7f1d5497c819 [ 120.010783][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.010798][ T6387] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.010824][ T6387] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 120.010837][ T6387] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 120.010848][ T6387] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 120.010859][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.010869][ T6387] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 120.010899][ T6387] [ 120.011541][ T6387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.279986][ T6408] Invalid source name [ 124.080942][ T6422] batadv0: entered promiscuous mode [ 124.082461][ T6422] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 124.083741][ T6422] debugfs: 'hsr1' already exists in 'hsr' [ 124.083765][ T6422] Cannot create hsr debugfs directory [ 124.083931][ T6422] hsr1: entered allmulticast mode [ 124.083945][ T6422] batadv0: entered allmulticast mode [ 124.083966][ T6422] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 124.321271][ T36] audit: type=1326 audit(1776201842.042:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.321318][ T36] audit: type=1326 audit(1776201842.042:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.321356][ T36] audit: type=1326 audit(1776201842.042:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.327448][ T36] audit: type=1326 audit(1776201842.042:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.327495][ T36] audit: type=1326 audit(1776201842.042:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.327533][ T36] audit: type=1326 audit(1776201842.042:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.327571][ T36] audit: type=1326 audit(1776201842.042:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.327609][ T36] audit: type=1326 audit(1776201842.042:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.389665][ T36] audit: type=1326 audit(1776201842.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 124.392257][ T36] audit: type=1326 audit(1776201842.112:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3b95c819 code=0x7ffc0000 [ 125.504942][ T6440] FAULT_INJECTION: forcing a failure. [ 125.504942][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.504976][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.3.159 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 125.505001][ T6440] Tainted: [L]=SOFTLOCKUP [ 125.505007][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.505018][ T6440] Call Trace: [ 125.505024][ T6440] [ 125.505042][ T6440] dump_stack_lvl+0xe8/0x150 [ 125.505072][ T6440] should_fail_ex+0x46b/0x600 [ 125.505102][ T6440] _copy_from_user+0x2d/0xb0 [ 125.505122][ T6440] ___sys_recvmsg+0x175/0x590 [ 125.505152][ T6440] ? __pfx____sys_recvmsg+0x10/0x10 [ 125.505199][ T6440] ? __fget_files+0x3a6/0x420 [ 125.505232][ T6440] do_recvmmsg+0x33a/0x800 [ 125.505265][ T6440] ? __pfx_do_recvmmsg+0x10/0x10 [ 125.505301][ T6440] ? rt_mutex_slowunlock+0x1cb/0x300 [ 125.505337][ T6440] __x64_sys_recvmmsg+0x198/0x250 [ 125.505364][ T6440] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 125.505397][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.505417][ T6440] do_syscall_64+0x15f/0xf80 [ 125.505439][ T6440] ? trace_irq_disable+0x3b/0x150 [ 125.505461][ T6440] ? clear_bhb_loop+0x40/0x90 [ 125.505483][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.505501][ T6440] RIP: 0033:0x7ff1a912c819 [ 125.505517][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.505531][ T6440] RSP: 002b:00007ff1a737e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 125.505551][ T6440] RAX: ffffffffffffffda RBX: 00007ff1a93a5fa0 RCX: 00007ff1a912c819 [ 125.505564][ T6440] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003 [ 125.505576][ T6440] RBP: 00007ff1a737e090 R08: 0000000000000000 R09: 0000000000000000 [ 125.505587][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.505598][ T6440] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 125.505627][ T6440] [ 126.000844][ T6445] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 126.538314][ T6451] Invalid source name [ 131.305212][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.307553][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.322974][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.336150][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.337134][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.281925][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.692813][ T6512] FAULT_INJECTION: forcing a failure. [ 132.692813][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.692846][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.3.180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 132.692871][ T6512] Tainted: [L]=SOFTLOCKUP [ 132.692876][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.692886][ T6512] Call Trace: [ 132.692893][ T6512] [ 132.692901][ T6512] dump_stack_lvl+0xe8/0x150 [ 132.692930][ T6512] should_fail_ex+0x46b/0x600 [ 132.692960][ T6512] _copy_from_user+0x2d/0xb0 [ 132.692979][ T6512] do_sock_getsockopt+0x165/0x3f0 [ 132.693005][ T6512] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 132.693028][ T6512] ? __fget_files+0x3a6/0x420 [ 132.693049][ T6512] ? __fget_files+0x2a/0x420 [ 132.693076][ T6512] __x64_sys_getsockopt+0x1aa/0x250 [ 132.693104][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.693123][ T6512] do_syscall_64+0x15f/0xf80 [ 132.693146][ T6512] ? trace_irq_disable+0x3b/0x150 [ 132.693167][ T6512] ? clear_bhb_loop+0x40/0x90 [ 132.693188][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.693206][ T6512] RIP: 0033:0x7ff1a912c819 [ 132.693221][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.693235][ T6512] RSP: 002b:00007ff1a737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 132.693254][ T6512] RAX: ffffffffffffffda RBX: 00007ff1a93a5fa0 RCX: 00007ff1a912c819 [ 132.693267][ T6512] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 132.693277][ T6512] RBP: 00007ff1a737e090 R08: 0000200000000100 R09: 0000000000000000 [ 132.693288][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.693299][ T6512] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 132.693336][ T6512] [ 132.958719][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959993][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286042][ T806] IPVS: starting estimator thread 0... [ 133.379276][ T6517] IPVS: using max 15 ests per chain, 36000 per kthread [ 133.396003][ T5805] Bluetooth: hci0: command tx timeout [ 133.505022][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.565610][ T6494] wg1 speed is unknown, defaulting to 1000 [ 133.638783][ T6524] cgroup: fork rejected by pids controller in /syz1 [ 133.688933][ T806] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.776528][ T6628] program syz.3.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.848040][ T806] usb 3-1: config 0 has an invalid interface number: 80 but max is 2 [ 133.848068][ T806] usb 3-1: config 0 has an invalid interface number: 58 but max is 2 [ 133.848135][ T806] usb 3-1: config 0 has an invalid interface number: 172 but max is 2 [ 133.848164][ T806] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 133.848180][ T806] usb 3-1: config 0 has no interface number 0 [ 133.848196][ T806] usb 3-1: config 0 has no interface number 1 [ 133.848211][ T806] usb 3-1: config 0 has no interface number 2 [ 133.848276][ T806] usb 3-1: config 0 interface 80 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 133.848301][ T806] usb 3-1: config 0 interface 80 altsetting 129 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 133.848326][ T806] usb 3-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 133.848346][ T806] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 133.848370][ T806] usb 3-1: config 0 interface 80 altsetting 129 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 133.848395][ T806] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 133.848416][ T806] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 133.848437][ T806] usb 3-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 133.848469][ T806] usb 3-1: config 0 interface 172 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 133.848490][ T806] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 133.848515][ T806] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0x8 has an invalid bInterval 102, changing to 7 [ 133.848539][ T806] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 133.848561][ T806] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 133.848584][ T806] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 133.848606][ T806] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 133.848626][ T806] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 133.848646][ T806] usb 3-1: config 0 interface 80 has no altsetting 0 [ 133.848663][ T806] usb 3-1: config 0 interface 58 has no altsetting 0 [ 133.848679][ T806] usb 3-1: config 0 interface 172 has no altsetting 0 [ 133.853088][ T806] usb 3-1: New USB device found, idVendor=12d1, idProduct=d66f, bcdDevice=4b.39 [ 133.853114][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.853134][ T806] usb 3-1: Product: ᰉ [ 133.853148][ T806] usb 3-1: SerialNumber: syz [ 135.133090][ T806] usb 3-1: config 0 descriptor?? [ 135.134137][ T806] usb 3-1: Interface #172 referenced by multiple IADs [ 135.134855][ T6519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.197891][ T5805] Bluetooth: hci0: command tx timeout [ 136.286053][ T806] option 3-1:0.80: GSM modem (1-port) converter detected [ 136.374981][ T806] usb 3-1: USB disconnect, device number 8 [ 136.409242][ T806] option 3-1:0.80: device disconnected [ 136.554579][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.905210][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.973280][ T6658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.309374][ T5805] Bluetooth: hci0: command tx timeout [ 138.859300][ T806] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 139.154069][ T806] usb 5-1: not running at top speed; connect to a high speed hub [ 139.155403][ T806] usb 5-1: config 6 has an invalid interface number: 71 but max is 2 [ 139.155428][ T806] usb 5-1: config 6 has an invalid interface number: 68 but max is 2 [ 139.155447][ T806] usb 5-1: config 6 has an invalid interface number: 162 but max is 2 [ 139.155466][ T806] usb 5-1: config 6 has an invalid interface number: 190 but max is 2 [ 139.155483][ T806] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 139.155493][ T806] usb 5-1: config 6 has no interface number 0 [ 139.155501][ T806] usb 5-1: config 6 has no interface number 1 [ 139.155508][ T806] usb 5-1: config 6 has no interface number 2 [ 139.155516][ T806] usb 5-1: config 6 has no interface number 3 [ 139.155558][ T806] usb 5-1: config 6 interface 71 altsetting 86 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 139.155570][ T806] usb 5-1: config 6 interface 71 altsetting 86 endpoint 0x8F has invalid maxpacket 18135, setting to 64 [ 139.155584][ T806] usb 5-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 139.155596][ T806] usb 5-1: config 6 interface 71 altsetting 86 has an invalid descriptor for endpoint zero, skipping [ 139.155607][ T806] usb 5-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 139.155618][ T806] usb 5-1: config 6 interface 71 altsetting 86 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 139.155632][ T806] usb 5-1: config 6 interface 71 altsetting 86 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 139.155645][ T806] usb 5-1: config 6 interface 71 altsetting 86 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 139.155659][ T806] usb 5-1: too many endpoints for config 6 interface 68 altsetting 186: 69, using maximum allowed: 30 [ 139.155677][ T806] usb 5-1: config 6 interface 68 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 139.155703][ T806] usb 5-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 139.155715][ T806] usb 5-1: config 6 interface 190 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 139.155726][ T806] usb 5-1: config 6 interface 190 altsetting 9 endpoint 0xE has an invalid bInterval 178, changing to 4 [ 139.155739][ T806] usb 5-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 139.155750][ T806] usb 5-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 139.155761][ T806] usb 5-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 139.155772][ T806] usb 5-1: config 6 interface 190 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 139.155787][ T806] usb 5-1: config 6 interface 190 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 139.155799][ T806] usb 5-1: config 6 interface 190 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 139.155812][ T806] usb 5-1: config 6 interface 71 has no altsetting 0 [ 139.155820][ T806] usb 5-1: config 6 interface 68 has no altsetting 0 [ 139.155829][ T806] usb 5-1: config 6 interface 162 has no altsetting 0 [ 139.155838][ T806] usb 5-1: config 6 interface 190 has no altsetting 0 [ 139.158213][ T806] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd1e, bcdDevice=df.15 [ 139.158236][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.158246][ T806] usb 5-1: Product: 暠㘞쿳⦜䠩翡൸䨐増蕨䲔뿞쳸葻梬ꊊﵨ嶟榿䪸諝랏䖩ܹᷬ￪눇Ⅽ垰뀊尺ﭞ￾홖캂ᒎ翕搲䒃≅࿺桦貙⣝忪軶⚎煕駱瘀拏ꪓ憐챛✘슷䨏⪞姼榥୕ඃ孹⬼⋏檚ੈ嶶篘ğ୰䢅 [ 139.158259][ T806] usb 5-1: Manufacturer: ఌ [ 139.158266][ T806] usb 5-1: SerialNumber: Ⰺ [ 139.289578][ T13] bridge_slave_1: left allmulticast mode [ 139.294090][ T13] bridge_slave_1: left promiscuous mode [ 139.309920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.991360][ T6662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.991686][ T6662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.050528][ T13] bridge_slave_0: left allmulticast mode [ 140.050545][ T13] bridge_slave_0: left promiscuous mode [ 140.051870][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.304343][ T806] usbhid 5-1:6.190: couldn't find an input interrupt endpoint [ 140.333700][ T806] usb 5-1: USB disconnect, device number 10 [ 140.347900][ T5805] Bluetooth: hci0: command tx timeout [ 140.976694][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.028993][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.090966][ T13] bond0 (unregistering): Released all slaves [ 141.131585][ T6690] program syz.3.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.280079][ T6696] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 141.282873][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 141.348809][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.358088][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.359296][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.363809][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.364476][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.798518][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.123461][ T5908] usb 4-1: config 0 has an invalid interface number: 80 but max is 2 [ 142.123489][ T5908] usb 4-1: config 0 has an invalid interface number: 58 but max is 2 [ 142.123508][ T5908] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 142.123528][ T5908] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 142.123552][ T5908] usb 4-1: config 0 has no interface number 0 [ 142.123567][ T5908] usb 4-1: config 0 has no interface number 1 [ 142.123582][ T5908] usb 4-1: config 0 has no interface number 2 [ 142.123661][ T5908] usb 4-1: config 0 interface 80 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 142.123686][ T5908] usb 4-1: config 0 interface 80 altsetting 129 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 142.123711][ T5908] usb 4-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 142.123731][ T5908] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 142.123753][ T5908] usb 4-1: config 0 interface 80 altsetting 129 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 142.123778][ T5908] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 142.123799][ T5908] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 142.123819][ T5908] usb 4-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 142.123852][ T5908] usb 4-1: config 0 interface 172 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 142.123871][ T5908] usb 4-1: config 0 interface 172 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 142.123896][ T5908] usb 4-1: config 0 interface 172 altsetting 7 endpoint 0x8 has an invalid bInterval 102, changing to 7 [ 142.123919][ T5908] usb 4-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 142.123942][ T5908] usb 4-1: config 0 interface 172 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 142.123968][ T5908] usb 4-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 142.123989][ T5908] usb 4-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 142.124010][ T5908] usb 4-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 142.124030][ T5908] usb 4-1: config 0 interface 80 has no altsetting 0 [ 142.124047][ T5908] usb 4-1: config 0 interface 58 has no altsetting 0 [ 142.124063][ T5908] usb 4-1: config 0 interface 172 has no altsetting 0 [ 142.126656][ T5908] usb 4-1: New USB device found, idVendor=12d1, idProduct=d66f, bcdDevice=4b.39 [ 142.126683][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.126701][ T5908] usb 4-1: Product: ᰉ [ 142.126714][ T5908] usb 4-1: SerialNumber: syz [ 142.391124][ T5908] usb 4-1: config 0 descriptor?? [ 142.391320][ T5908] usb 4-1: Interface #172 referenced by multiple IADs [ 142.391978][ T6702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.616096][ T5908] option 4-1:0.80: GSM modem (1-port) converter detected [ 142.704472][ T5908] usb 4-1: USB disconnect, device number 3 [ 142.741032][ T5908] option 4-1:0.80: device disconnected [ 142.748323][ T6695] wg1 speed is unknown, defaulting to 1000 [ 143.075423][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.075549][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.075718][ T6494] bridge_slave_0: entered allmulticast mode [ 143.083209][ T6494] bridge_slave_0: entered promiscuous mode [ 143.118130][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.120879][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.121070][ T6494] bridge_slave_1: entered allmulticast mode [ 143.136873][ T6494] bridge_slave_1: entered promiscuous mode [ 143.347138][ T6731] program syz.3.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.467941][ T5805] Bluetooth: hci4: command tx timeout [ 144.513991][ T6747] FAULT_INJECTION: forcing a failure. [ 144.513991][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 144.514026][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 144.514061][ T6747] Tainted: [L]=SOFTLOCKUP [ 144.514067][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.514078][ T6747] Call Trace: [ 144.514085][ T6747] [ 144.514093][ T6747] dump_stack_lvl+0xe8/0x150 [ 144.514123][ T6747] should_fail_ex+0x46b/0x600 [ 144.514155][ T6747] should_failslab+0xa8/0x100 [ 144.514174][ T6747] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 144.514199][ T6747] ? __alloc_skb+0x1d0/0x7d0 [ 144.514218][ T6747] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.514247][ T6747] __alloc_skb+0x1d0/0x7d0 [ 144.514268][ T6747] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 144.514293][ T6747] tcp_send_active_reset+0x8a/0x5d0 [ 144.514312][ T6747] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 144.514342][ T6747] __tcp_close+0x4c5/0x1010 [ 144.514377][ T6747] tcp_close+0x28/0x110 [ 144.514401][ T6747] inet_release+0x143/0x190 [ 144.514426][ T6747] sock_close+0xc3/0x240 [ 144.514444][ T6747] ? __pfx_sock_close+0x10/0x10 [ 144.514461][ T6747] __fput+0x461/0xa70 [ 144.514494][ T6747] fput_close_sync+0x11f/0x240 [ 144.514516][ T6747] ? __pfx_fput_close_sync+0x10/0x10 [ 144.514542][ T6747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.514564][ T6747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.514583][ T6747] __x64_sys_close+0x7e/0x110 [ 144.514606][ T6747] do_syscall_64+0x15f/0xf80 [ 144.514628][ T6747] ? trace_irq_disable+0x3b/0x150 [ 144.514649][ T6747] ? clear_bhb_loop+0x40/0x90 [ 144.514672][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.514690][ T6747] RIP: 0033:0x7ff1a912c819 [ 144.514707][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.514722][ T6747] RSP: 002b:00007ff1a737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 144.514741][ T6747] RAX: ffffffffffffffda RBX: 00007ff1a93a5fa0 RCX: 00007ff1a912c819 [ 144.514754][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.514764][ T6747] RBP: 00007ff1a737e090 R08: 0000000000000000 R09: 0000000000000000 [ 144.514775][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.514786][ T6747] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 144.514817][ T6747] [ 145.383217][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.479697][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.550937][ T5805] Bluetooth: hci4: command tx timeout [ 145.669209][ T6764] program syz.2.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.777324][ T13] hsr_slave_0: left promiscuous mode [ 145.958061][ T13] hsr_slave_1: left promiscuous mode [ 145.959409][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.959490][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.324768][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.338652][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.898205][ T13] veth1_macvtap: left promiscuous mode [ 146.898442][ T13] veth0_macvtap: left promiscuous mode [ 146.898713][ T13] veth1_vlan: left promiscuous mode [ 146.898994][ T13] veth0_vlan: left promiscuous mode [ 148.103296][ T5805] Bluetooth: hci4: command tx timeout [ 149.620526][ T13] team0 (unregistering): Port device team_slave_1 removed [ 149.649001][ T13] team0 (unregistering): Port device team_slave_0 removed [ 149.825110][ T6794] dummy0: entered promiscuous mode [ 149.825168][ T6794] macsec1: entered promiscuous mode [ 149.878290][ T6794] dummy0: left promiscuous mode [ 149.944938][ T6494] team0: Port device team_slave_0 added [ 150.107995][ T5814] Bluetooth: hci4: command tx timeout [ 150.162048][ T6494] team0: Port device team_slave_1 added [ 150.184952][ T6797] program syz.4.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.246128][ T6800] FAULT_INJECTION: forcing a failure. [ 150.246128][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.246157][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.4.235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 150.246175][ T6800] Tainted: [L]=SOFTLOCKUP [ 150.246180][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.246188][ T6800] Call Trace: [ 150.246193][ T6800] [ 150.246199][ T6800] dump_stack_lvl+0xe8/0x150 [ 150.246223][ T6800] should_fail_ex+0x46b/0x600 [ 150.246248][ T6800] _copy_from_user+0x2d/0xb0 [ 150.246263][ T6800] ___sys_sendmsg+0x1c6/0x360 [ 150.246287][ T6800] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.246333][ T6800] ? __fget_files+0x2a/0x420 [ 150.246350][ T6800] ? __fget_files+0x3a6/0x420 [ 150.246372][ T6800] __x64_sys_sendmsg+0x1c3/0x2a0 [ 150.246391][ T6800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.246416][ T6800] ? __pfx_ksys_write+0x10/0x10 [ 150.246451][ T6800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.246468][ T6800] do_syscall_64+0x15f/0xf80 [ 150.246488][ T6800] ? trace_irq_disable+0x3b/0x150 [ 150.246506][ T6800] ? clear_bhb_loop+0x40/0x90 [ 150.246524][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.246537][ T6800] RIP: 0033:0x7f1d5497c819 [ 150.246552][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.246564][ T6800] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.246580][ T6800] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 150.246591][ T6800] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 150.246601][ T6800] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 150.246611][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.246620][ T6800] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 150.246644][ T6800] [ 150.365769][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.365836][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.365860][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.392638][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.392652][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.392684][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.551055][ T6802] FAULT_INJECTION: forcing a failure. [ 150.551055][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.551153][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.2.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 150.551179][ T6802] Tainted: [L]=SOFTLOCKUP [ 150.551186][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.551195][ T6802] Call Trace: [ 150.551202][ T6802] [ 150.551210][ T6802] dump_stack_lvl+0xe8/0x150 [ 150.551240][ T6802] should_fail_ex+0x46b/0x600 [ 150.551270][ T6802] _copy_from_user+0x2d/0xb0 [ 150.551290][ T6802] ___sys_sendmsg+0x1c6/0x360 [ 150.551320][ T6802] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.551376][ T6802] ? __fget_files+0x2a/0x420 [ 150.551398][ T6802] ? __fget_files+0x3a6/0x420 [ 150.551428][ T6802] __x64_sys_sendmsg+0x1c3/0x2a0 [ 150.551454][ T6802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.551487][ T6802] ? __pfx_ksys_write+0x10/0x10 [ 150.551521][ T6802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.551540][ T6802] do_syscall_64+0x15f/0xf80 [ 150.551564][ T6802] ? trace_irq_disable+0x3b/0x150 [ 150.551585][ T6802] ? clear_bhb_loop+0x40/0x90 [ 150.551607][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.551625][ T6802] RIP: 0033:0x7f94fb4dc819 [ 150.551641][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.551660][ T6802] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.551679][ T6802] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 150.551692][ T6802] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000009 [ 150.551704][ T6802] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 150.551715][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.551726][ T6802] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 150.551755][ T6802] [ 151.172512][ T6494] hsr_slave_0: entered promiscuous mode [ 151.188419][ T6494] hsr_slave_1: entered promiscuous mode [ 151.189263][ T6494] debugfs: 'hsr0' already exists in 'hsr' [ 151.189285][ T6494] Cannot create hsr debugfs directory [ 151.276895][ T6831] FAULT_INJECTION: forcing a failure. [ 151.276895][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.276929][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.2.240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 151.276954][ T6831] Tainted: [L]=SOFTLOCKUP [ 151.276959][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.276969][ T6831] Call Trace: [ 151.276977][ T6831] [ 151.276985][ T6831] dump_stack_lvl+0xe8/0x150 [ 151.277014][ T6831] should_fail_ex+0x46b/0x600 [ 151.277045][ T6831] _copy_from_user+0x2d/0xb0 [ 151.277065][ T6831] ___sys_sendmsg+0x1c6/0x360 [ 151.277095][ T6831] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.277152][ T6831] ? __fget_files+0x2a/0x420 [ 151.277174][ T6831] ? __fget_files+0x3a6/0x420 [ 151.277205][ T6831] __x64_sys_sendmsg+0x1c3/0x2a0 [ 151.277231][ T6831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.277264][ T6831] ? __pfx_ksys_write+0x10/0x10 [ 151.277295][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.277315][ T6831] do_syscall_64+0x15f/0xf80 [ 151.277339][ T6831] ? trace_irq_disable+0x3b/0x150 [ 151.277360][ T6831] ? clear_bhb_loop+0x40/0x90 [ 151.277383][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.277400][ T6831] RIP: 0033:0x7f94fb4dc819 [ 151.277417][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.277432][ T6831] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.277451][ T6831] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 151.277464][ T6831] RDX: 0000000000008000 RSI: 0000200000001640 RDI: 0000000000000003 [ 151.277475][ T6831] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 151.277487][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.277497][ T6831] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 151.277527][ T6831] [ 151.504807][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 151.711184][ T6836] NILFS (nullb0): couldn't find nilfs on the device [ 152.274934][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 152.274957][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 152.388999][ T6842] program syz.3.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.439787][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 152.461439][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 153.121387][ T6850] dummy0: entered promiscuous mode [ 153.124879][ T6850] macsec1: entered promiscuous mode [ 153.362178][ T6850] dummy0: left promiscuous mode [ 153.450582][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.593910][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.020367][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.329715][ T5908] usb 3-1: config 0 has an invalid interface number: 80 but max is 2 [ 154.329745][ T5908] usb 3-1: config 0 has an invalid interface number: 58 but max is 2 [ 154.329764][ T5908] usb 3-1: config 0 has an invalid interface number: 172 but max is 2 [ 154.329786][ T5908] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 154.329803][ T5908] usb 3-1: config 0 has no interface number 0 [ 154.329819][ T5908] usb 3-1: config 0 has no interface number 1 [ 154.329834][ T5908] usb 3-1: config 0 has no interface number 2 [ 154.329901][ T5908] usb 3-1: config 0 interface 80 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 154.329926][ T5908] usb 3-1: config 0 interface 80 altsetting 129 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 154.329951][ T5908] usb 3-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 154.329972][ T5908] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 154.329994][ T5908] usb 3-1: config 0 interface 80 altsetting 129 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 154.330019][ T5908] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 154.330039][ T5908] usb 3-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 154.330059][ T5908] usb 3-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 154.330092][ T5908] usb 3-1: config 0 interface 172 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 154.330112][ T5908] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 154.330138][ T5908] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0x8 has an invalid bInterval 102, changing to 7 [ 154.330162][ T5908] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 154.330184][ T5908] usb 3-1: config 0 interface 172 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 154.330210][ T5908] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 154.330230][ T5908] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 154.330258][ T5908] usb 3-1: config 0 interface 172 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 154.330278][ T5908] usb 3-1: config 0 interface 80 has no altsetting 0 [ 154.330295][ T5908] usb 3-1: config 0 interface 58 has no altsetting 0 [ 154.330312][ T5908] usb 3-1: config 0 interface 172 has no altsetting 0 [ 154.628292][ T5908] usb 3-1: New USB device found, idVendor=12d1, idProduct=d66f, bcdDevice=4b.39 [ 154.628323][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.628342][ T5908] usb 3-1: Product: ᰉ [ 154.628356][ T5908] usb 3-1: SerialNumber: syz [ 154.634393][ T5908] usb 3-1: config 0 descriptor?? [ 154.634593][ T5908] usb 3-1: Interface #172 referenced by multiple IADs [ 154.635218][ T6858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.283701][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 155.490871][ T5908] option 3-1:0.80: GSM modem (1-port) converter detected [ 155.542483][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.542580][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.542730][ T6695] bridge_slave_0: entered allmulticast mode [ 155.544157][ T6879] program syz.3.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.596496][ T6695] bridge_slave_0: entered promiscuous mode [ 155.626309][ T5908] usb 3-1: USB disconnect, device number 9 [ 155.659889][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.665654][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.665869][ T6695] bridge_slave_1: entered allmulticast mode [ 155.721830][ T5908] option 3-1:0.80: device disconnected [ 155.729686][ T6695] bridge_slave_1: entered promiscuous mode [ 155.954712][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.970580][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.082454][ T6887] FAULT_INJECTION: forcing a failure. [ 156.082454][ T6887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.082484][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.3.260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.082507][ T6887] Tainted: [L]=SOFTLOCKUP [ 156.082512][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.082521][ T6887] Call Trace: [ 156.082528][ T6887] [ 156.082535][ T6887] dump_stack_lvl+0xe8/0x150 [ 156.082565][ T6887] should_fail_ex+0x46b/0x600 [ 156.082595][ T6887] _copy_to_user+0x31/0xb0 [ 156.082616][ T6887] simple_read_from_buffer+0xe1/0x170 [ 156.082645][ T6887] proc_fail_nth_read+0x1be/0x230 [ 156.082671][ T6887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.082696][ T6887] ? rw_verify_area+0x2ac/0x4e0 [ 156.082720][ T6887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.082743][ T6887] vfs_read+0x212/0xa80 [ 156.082774][ T6887] ? __pfx_vfs_read+0x10/0x10 [ 156.082815][ T6887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.082845][ T6887] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.082867][ T6887] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.082889][ T6887] ? mutex_lock_nested+0x152/0x1d0 [ 156.082908][ T6887] ? fdget_pos+0x252/0x320 [ 156.082938][ T6887] ksys_read+0x156/0x270 [ 156.082963][ T6887] ? __pfx_ksys_read+0x10/0x10 [ 156.082996][ T6887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.083015][ T6887] do_syscall_64+0x15f/0xf80 [ 156.083035][ T6887] ? trace_irq_disable+0x3b/0x150 [ 156.083056][ T6887] ? clear_bhb_loop+0x40/0x90 [ 156.083077][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.083095][ T6887] RIP: 0033:0x7ff1a90ed04e [ 156.083112][ T6887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.083125][ T6887] RSP: 002b:00007ff1a737dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.083143][ T6887] RAX: ffffffffffffffda RBX: 00007ff1a737e6c0 RCX: 00007ff1a90ed04e [ 156.083155][ T6887] RDX: 000000000000000f RSI: 00007ff1a737e0a0 RDI: 0000000000000005 [ 156.083166][ T6887] RBP: 00007ff1a737e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.083176][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.083186][ T6887] R13: 00007ff1a93a6038 R14: 00007ff1a93a5fa0 R15: 00007fffa6372b18 [ 156.083215][ T6887] [ 156.126422][ T36] kauditd_printk_skb: 153 callbacks suppressed [ 156.126439][ T36] audit: type=1800 audit(1776201873.832:165): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.260" name="/" dev="fuse" ino=4 res=0 errno=0 [ 156.444936][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 156.650984][ T6905] program syz.2.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.707216][ T6695] team0: Port device team_slave_0 added [ 156.712513][ T6907] FAULT_INJECTION: forcing a failure. [ 156.712513][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 156.712544][ T6907] CPU: 0 UID: 0 PID: 6907 Comm: syz.2.267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.712569][ T6907] Tainted: [L]=SOFTLOCKUP [ 156.712575][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.712585][ T6907] Call Trace: [ 156.712592][ T6907] [ 156.712599][ T6907] dump_stack_lvl+0xe8/0x150 [ 156.712629][ T6907] should_fail_ex+0x46b/0x600 [ 156.712660][ T6907] should_failslab+0xa8/0x100 [ 156.712679][ T6907] __kmalloc_noprof+0xdf/0x7b0 [ 156.712703][ T6907] ? kfree+0x4d/0x6c0 [ 156.712728][ T6907] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.712761][ T6907] tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.712791][ T6907] ? tomoyo_path_number_perm+0x219/0x630 [ 156.712811][ T6907] tomoyo_path_number_perm+0x246/0x630 [ 156.712831][ T6907] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.712851][ T6907] ? __lock_acquire+0x6b5/0x2cf0 [ 156.712909][ T6907] ? __fget_files+0x2a/0x420 [ 156.712932][ T6907] ? __fget_files+0x2a/0x420 [ 156.712951][ T6907] ? __fget_files+0x3a6/0x420 [ 156.712971][ T6907] ? __fget_files+0x2a/0x420 [ 156.712995][ T6907] security_file_ioctl+0xc3/0x2a0 [ 156.713017][ T6907] __se_sys_ioctl+0x47/0x170 [ 156.713033][ T6907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.713052][ T6907] do_syscall_64+0x15f/0xf80 [ 156.713075][ T6907] ? trace_irq_disable+0x3b/0x150 [ 156.713095][ T6907] ? clear_bhb_loop+0x40/0x90 [ 156.713117][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.713133][ T6907] RIP: 0033:0x7f94fb4dc819 [ 156.713150][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.713163][ T6907] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.713182][ T6907] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 156.713195][ T6907] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 156.713206][ T6907] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 156.713217][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.713227][ T6907] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 156.713255][ T6907] [ 156.713347][ T6907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.030427][ T6916] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 157.030460][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.068490][ T6916] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 157.068522][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.166491][ T6924] FAULT_INJECTION: forcing a failure. [ 157.166491][ T6924] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.166525][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.4.269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 157.166550][ T6924] Tainted: [L]=SOFTLOCKUP [ 157.166556][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.166566][ T6924] Call Trace: [ 157.166573][ T6924] [ 157.166580][ T6924] dump_stack_lvl+0xe8/0x150 [ 157.166610][ T6924] should_fail_ex+0x46b/0x600 [ 157.166640][ T6924] get_futex_key+0x1ac/0x1690 [ 157.166676][ T6924] ? __pfx_get_futex_key+0x10/0x10 [ 157.166698][ T6924] ? kstrtouint+0x6e/0xe0 [ 157.166730][ T6924] futex_wake_op+0x156/0xdd0 [ 157.166751][ T6924] ? __lock_acquire+0x6b5/0x2cf0 [ 157.166782][ T6924] ? __pfx_futex_wake_op+0x10/0x10 [ 157.166811][ T6924] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.166844][ T6924] do_futex+0x3bd/0x420 [ 157.166868][ T6924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.166896][ T6924] ? __pfx_do_futex+0x10/0x10 [ 157.166918][ T6924] ? rt_mutex_slowunlock+0x1cb/0x300 [ 157.166938][ T6924] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.166969][ T6924] __se_sys_futex+0x3a8/0x450 [ 157.166996][ T6924] ? ksys_write+0x248/0x270 [ 157.167019][ T6924] ? __pfx___se_sys_futex+0x10/0x10 [ 157.167044][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 157.167072][ T6924] ? __x64_sys_futex+0x21/0xf0 [ 157.167098][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.167117][ T6924] do_syscall_64+0x15f/0xf80 [ 157.167140][ T6924] ? trace_irq_disable+0x3b/0x150 [ 157.167161][ T6924] ? clear_bhb_loop+0x40/0x90 [ 157.167182][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.167199][ T6924] RIP: 0033:0x7f1d5497c819 [ 157.167216][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.167231][ T6924] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.167250][ T6924] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 157.167262][ T6924] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000 [ 157.167273][ T6924] RBP: 00007f1d52bce090 R08: 0000200000000000 R09: 00000000a5023fff [ 157.167284][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.167295][ T6924] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 157.167324][ T6924] [ 157.179020][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.596472][ T6695] team0: Port device team_slave_1 added [ 158.794550][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 158.913249][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.962783][ T6949] program syz.3.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.128841][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.128856][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.128880][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.339994][ T6953] bridge0: entered promiscuous mode [ 159.340204][ T6953] macsec1: entered promiscuous mode [ 159.352791][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.352806][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.352830][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.314521][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.408027][ T6494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.444445][ T6494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.607605][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 162.617929][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 162.620144][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.721027][ T6494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.781040][ T6997] program syz.4.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.797674][ T6494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.133833][ T6695] hsr_slave_0: entered promiscuous mode [ 163.134594][ T6695] hsr_slave_1: entered promiscuous mode [ 163.135098][ T6695] debugfs: 'hsr0' already exists in 'hsr' [ 163.135113][ T6695] Cannot create hsr debugfs directory [ 164.367696][ T7023] FAULT_INJECTION: forcing a failure. [ 164.367696][ T7023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.367725][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.2.293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 164.367745][ T7023] Tainted: [L]=SOFTLOCKUP [ 164.367751][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.367759][ T7023] Call Trace: [ 164.367765][ T7023] [ 164.367777][ T7023] dump_stack_lvl+0xe8/0x150 [ 164.367804][ T7023] should_fail_ex+0x46b/0x600 [ 164.367831][ T7023] _copy_from_user+0x2d/0xb0 [ 164.367849][ T7023] ___sys_sendmsg+0x1c6/0x360 [ 164.367876][ T7023] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.367898][ T7023] ? kstrtouint+0x6e/0xe0 [ 164.367934][ T7023] ? __fget_files+0x2a/0x420 [ 164.367952][ T7023] ? __fget_files+0x3a6/0x420 [ 164.367989][ T7023] __sys_sendmmsg+0x282/0x4e0 [ 164.368012][ T7023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.368038][ T7023] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 164.368066][ T7023] ? ksys_write+0x248/0x270 [ 164.368091][ T7023] ? __pfx_ksys_write+0x10/0x10 [ 164.368116][ T7023] __x64_sys_sendmmsg+0xa0/0xc0 [ 164.368134][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.368147][ T7023] do_syscall_64+0x15f/0xf80 [ 164.368164][ T7023] ? trace_irq_disable+0x3b/0x150 [ 164.368180][ T7023] ? clear_bhb_loop+0x40/0x90 [ 164.368196][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.368210][ T7023] RIP: 0033:0x7f94fb4dc819 [ 164.368225][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.368236][ T7023] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.368252][ T7023] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 164.368262][ T7023] RDX: 0000000000000001 RSI: 00002000000028c0 RDI: 0000000000000003 [ 164.368270][ T7023] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 164.368279][ T7023] R10: 646d72a34fa74021 R11: 0000000000000246 R12: 0000000000000001 [ 164.368288][ T7023] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 164.368313][ T7023] [ 164.437915][ T806] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.607921][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 164.613361][ T806] usb 4-1: config 9 has an invalid interface number: 216 but max is 3 [ 164.613388][ T806] usb 4-1: config 9 has an invalid interface number: 37 but max is 3 [ 164.613408][ T806] usb 4-1: config 9 has an invalid interface number: 141 but max is 3 [ 164.613428][ T806] usb 4-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 164.613447][ T806] usb 4-1: config 9 has 3 interfaces, different from the descriptor's value: 4 [ 164.613467][ T806] usb 4-1: config 9 has no interface number 0 [ 164.613482][ T806] usb 4-1: config 9 has no interface number 1 [ 164.613498][ T806] usb 4-1: config 9 has no interface number 2 [ 164.613569][ T806] usb 4-1: config 9 interface 216 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 164.613603][ T806] usb 4-1: config 9 interface 37 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 164.613622][ T806] usb 4-1: config 9 interface 37 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 164.613645][ T806] usb 4-1: config 9 interface 37 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 164.613664][ T806] usb 4-1: config 9 interface 37 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 164.613682][ T806] usb 4-1: config 9 interface 37 altsetting 64 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 164.613702][ T806] usb 4-1: config 9 interface 37 altsetting 64 has a duplicate endpoint with address 0x87, skipping [ 164.613724][ T806] usb 4-1: config 9 interface 37 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 164.613760][ T806] usb 4-1: config 9 interface 141 altsetting 227 has a duplicate endpoint with address 0x2, skipping [ 164.613783][ T806] usb 4-1: config 9 interface 141 altsetting 227 has a duplicate endpoint with address 0x3, skipping [ 164.613807][ T806] usb 4-1: config 9 interface 141 altsetting 227 has a duplicate endpoint with address 0xA, skipping [ 164.613829][ T806] usb 4-1: config 9 interface 141 altsetting 227 has a duplicate endpoint with address 0x3, skipping [ 164.613849][ T806] usb 4-1: config 9 interface 141 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 164.613870][ T806] usb 4-1: config 9 interface 141 altsetting 227 endpoint 0x5 has an invalid bInterval 254, changing to 7 [ 164.613898][ T806] usb 4-1: config 9 interface 141 altsetting 227 bulk endpoint 0x9 has invalid maxpacket 16 [ 164.613921][ T806] usb 4-1: config 9 interface 141 altsetting 227 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 164.613956][ T806] usb 4-1: config 9 interface 216 has no altsetting 0 [ 164.613970][ T806] usb 4-1: config 9 interface 37 has no altsetting 0 [ 164.613985][ T806] usb 4-1: config 9 interface 141 has no altsetting 0 [ 164.617335][ T806] usb 4-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=61.6b [ 164.617351][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.617361][ T806] usb 4-1: Product: syz [ 164.617368][ T806] usb 4-1: Manufacturer: syz [ 164.617375][ T806] usb 4-1: SerialNumber: syz [ 165.009783][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.010325][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.431987][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.432540][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.487937][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.332538][ T806] usb 4-1: USB disconnect, device number 4 [ 166.351915][ T13] bridge_slave_1: left allmulticast mode [ 166.351941][ T13] bridge_slave_1: left promiscuous mode [ 166.352358][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.745443][ T13] bridge_slave_0: left allmulticast mode [ 166.745609][ T13] bridge_slave_0: left promiscuous mode [ 166.930877][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.529558][ T7045] FAULT_INJECTION: forcing a failure. [ 167.529558][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 167.529591][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz.4.298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.529617][ T7045] Tainted: [L]=SOFTLOCKUP [ 167.529623][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.529634][ T7045] Call Trace: [ 167.529642][ T7045] [ 167.529650][ T7045] dump_stack_lvl+0xe8/0x150 [ 167.529681][ T7045] should_fail_ex+0x46b/0x600 [ 167.529719][ T7045] should_failslab+0xa8/0x100 [ 167.529740][ T7045] __kmalloc_noprof+0xdf/0x7b0 [ 167.529766][ T7045] ? iter_file_splice_write+0x1dd/0x10f0 [ 167.529796][ T7045] iter_file_splice_write+0x1dd/0x10f0 [ 167.529830][ T7045] ? kstrtouint+0x6e/0xe0 [ 167.529862][ T7045] ? __pfx_iter_file_splice_write+0x10/0x10 [ 167.529905][ T7045] ? __pfx_iter_file_splice_write+0x10/0x10 [ 167.529929][ T7045] do_splice+0xef8/0x1940 [ 167.529976][ T7045] ? __pfx_do_splice+0x10/0x10 [ 167.530008][ T7045] __se_sys_splice+0x353/0x490 [ 167.530038][ T7045] ? __pfx___se_sys_splice+0x10/0x10 [ 167.530063][ T7045] ? __x64_sys_splice+0x21/0xf0 [ 167.530080][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.530096][ T7045] do_syscall_64+0x15f/0xf80 [ 167.530119][ T7045] ? trace_irq_disable+0x3b/0x150 [ 167.530139][ T7045] ? clear_bhb_loop+0x40/0x90 [ 167.530162][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.530180][ T7045] RIP: 0033:0x7f1d5497c819 [ 167.530196][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.530211][ T7045] RSP: 002b:00007f1d52bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 167.530231][ T7045] RAX: ffffffffffffffda RBX: 00007f1d54bf6090 RCX: 00007f1d5497c819 [ 167.530244][ T7045] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008 [ 167.530255][ T7045] RBP: 00007f1d52bad090 R08: 0000000000001000 R09: 0800000000000000 [ 167.530267][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.530278][ T7045] R13: 00007f1d54bf6128 R14: 00007f1d54bf6090 R15: 00007fff38c557c8 [ 167.530308][ T7045] [ 167.578908][ T7044] program syz.3.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.260581][ T5909] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.538562][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 168.654685][ T5909] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 168.654843][ T5909] usb 3-1: config 2 has no interface number 0 [ 168.655879][ T5909] usb 3-1: config 2 interface 45 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 168.656134][ T5909] usb 3-1: config 2 interface 45 altsetting 6 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 168.656246][ T5909] usb 3-1: config 2 interface 45 altsetting 6 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.656317][ T5909] usb 3-1: config 2 interface 45 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 0 [ 168.656462][ T5909] usb 3-1: config 2 interface 45 has no altsetting 0 [ 169.115512][ T5909] usb 3-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=c1.07 [ 169.115545][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.115564][ T5909] usb 3-1: Product: syz [ 169.115578][ T5909] usb 3-1: Manufacturer: syz [ 169.115591][ T5909] usb 3-1: SerialNumber: syz [ 169.879734][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.972600][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.020564][ T13] bond0 (unregistering): Released all slaves [ 170.197381][ T7068] FAULT_INJECTION: forcing a failure. [ 170.197381][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.197418][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.307 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 170.197446][ T7068] Tainted: [L]=SOFTLOCKUP [ 170.197453][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.197464][ T7068] Call Trace: [ 170.197471][ T7068] [ 170.197479][ T7068] dump_stack_lvl+0xe8/0x150 [ 170.197511][ T7068] should_fail_ex+0x46b/0x600 [ 170.197542][ T7068] _copy_to_user+0x31/0xb0 [ 170.197565][ T7068] simple_read_from_buffer+0xe1/0x170 [ 170.197593][ T7068] proc_fail_nth_read+0x1be/0x230 [ 170.197621][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.197648][ T7068] ? rw_verify_area+0x2ac/0x4e0 [ 170.197672][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.197704][ T7068] vfs_read+0x212/0xa80 [ 170.197737][ T7068] ? __pfx_vfs_read+0x10/0x10 [ 170.197764][ T7068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.197787][ T7068] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.197811][ T7068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.197832][ T7068] ? mutex_lock_nested+0x152/0x1d0 [ 170.197850][ T7068] ? fdget_pos+0x252/0x320 [ 170.197879][ T7068] ksys_read+0x156/0x270 [ 170.197900][ T7068] ? __fget_files+0x2a/0x420 [ 170.197922][ T7068] ? __pfx_ksys_read+0x10/0x10 [ 170.197943][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.197966][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.197985][ T7068] do_syscall_64+0x15f/0xf80 [ 170.198005][ T7068] ? trace_irq_disable+0x3b/0x150 [ 170.198027][ T7068] ? clear_bhb_loop+0x40/0x90 [ 170.198050][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.198068][ T7068] RIP: 0033:0x7f1d5493d04e [ 170.198084][ T7068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.198097][ T7068] RSP: 002b:00007f1d52bacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.198116][ T7068] RAX: ffffffffffffffda RBX: 00007f1d52bad6c0 RCX: 00007f1d5493d04e [ 170.198129][ T7068] RDX: 000000000000000f RSI: 00007f1d52bad0a0 RDI: 0000000000000004 [ 170.198140][ T7068] RBP: 00007f1d52bad090 R08: 0000000000000000 R09: 0000000000000000 [ 170.198150][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.198161][ T7068] R13: 00007f1d54bf6128 R14: 00007f1d54bf6090 R15: 00007fff38c557c8 [ 170.198191][ T7068] [ 171.408880][ T5909] sierra 3-1:2.45: Sierra USB modem converter detected [ 171.448766][ T5909] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 171.472303][ T5909] usb 3-1: USB disconnect, device number 11 [ 171.501972][ T5909] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 171.506886][ T5909] sierra 3-1:2.45: device disconnected [ 172.028091][ T13] batadv0: left promiscuous mode [ 172.091793][ T7077] program syz.2.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.199488][ T13] hsr_slave_0: left promiscuous mode [ 172.262272][ T13] hsr_slave_1: left promiscuous mode [ 172.262933][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.262948][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.319610][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.319628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.409155][ T13] veth1_macvtap: left promiscuous mode [ 172.409212][ T13] veth0_macvtap: left promiscuous mode [ 172.409352][ T13] veth1_vlan: left promiscuous mode [ 172.409455][ T13] veth0_vlan: left promiscuous mode [ 175.048623][ T13] team0 (unregistering): Port device team_slave_1 removed [ 175.118615][ T13] team0 (unregistering): Port device team_slave_0 removed [ 175.575910][ T7105] FAULT_INJECTION: forcing a failure. [ 175.575910][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 175.575946][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.4.319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.575972][ T7105] Tainted: [L]=SOFTLOCKUP [ 175.575979][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.575990][ T7105] Call Trace: [ 175.575998][ T7105] [ 175.576005][ T7105] dump_stack_lvl+0xe8/0x150 [ 175.576037][ T7105] should_fail_ex+0x46b/0x600 [ 175.576070][ T7105] should_failslab+0xa8/0x100 [ 175.576091][ T7105] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 175.576117][ T7105] ? __alloc_skb+0x1d0/0x7d0 [ 175.576137][ T7105] ? __pfx_tcp_current_mss+0x10/0x10 [ 175.576162][ T7105] __alloc_skb+0x1d0/0x7d0 [ 175.576189][ T7105] tcp_stream_alloc_skb+0x3f/0x5c0 [ 175.576218][ T7105] tcp_sendmsg_locked+0x137b/0x5490 [ 175.576241][ T7105] ? __lock_acquire+0x6b5/0x2cf0 [ 175.576290][ T7105] ? __lock_acquire+0x6b5/0x2cf0 [ 175.576343][ T7105] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 175.576377][ T7105] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 175.576401][ T7105] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.576426][ T7105] ? __pfx_inet_sendmsg+0x10/0x10 [ 175.576451][ T7105] tcp_sendmsg+0x2f/0x50 [ 175.576475][ T7105] __sys_sendto+0x5f1/0x710 [ 175.576504][ T7105] ? __pfx___sys_sendto+0x10/0x10 [ 175.576553][ T7105] ? ksys_write+0x248/0x270 [ 175.576581][ T7105] ? __pfx_ksys_write+0x10/0x10 [ 175.576611][ T7105] __x64_sys_sendto+0xde/0x100 [ 175.576635][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.576655][ T7105] do_syscall_64+0x15f/0xf80 [ 175.576680][ T7105] ? clear_bhb_loop+0x40/0x90 [ 175.576703][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.576721][ T7105] RIP: 0033:0x7f1d5497c819 [ 175.576738][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.576760][ T7105] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.576780][ T7105] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 175.576794][ T7105] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.576806][ T7105] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 175.576818][ T7105] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 175.576830][ T7105] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 175.576861][ T7105] [ 175.920526][ T7108] program syz.2.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.080119][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.158517][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.200875][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.201011][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.206985][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.216726][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.275291][ T1236] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 176.436992][ T1236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.437539][ T1236] usb 4-1: not running at top speed; connect to a high speed hub [ 176.439249][ T1236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.439271][ T1236] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.442963][ T1236] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 176.442988][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.443007][ T1236] usb 4-1: Product: syz [ 176.443020][ T1236] usb 4-1: Manufacturer: syz [ 176.443034][ T1236] usb 4-1: SerialNumber: syz [ 176.685343][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.705325][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.755998][ T1236] usb 4-1: 0:1 : does not exist [ 176.994679][ T6695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.060851][ T1236] usb 4-1: USB disconnect, device number 5 [ 177.079179][ T6695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.140645][ T6695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.220296][ T6695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.682597][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.687994][ T7152] netlink: 72 bytes leftover after parsing attributes in process `syz.4.326'. [ 178.727979][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 179.924981][ T7171] FAULT_INJECTION: forcing a failure. [ 179.924981][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.925025][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.4.330 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 179.925050][ T7171] Tainted: [L]=SOFTLOCKUP [ 179.925057][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.925071][ T7171] Call Trace: [ 179.925078][ T7171] [ 179.925094][ T7171] dump_stack_lvl+0xe8/0x150 [ 179.925124][ T7171] should_fail_ex+0x46b/0x600 [ 179.925153][ T7171] _copy_from_user+0x2d/0xb0 [ 179.925172][ T7171] ___sys_sendmsg+0x1c6/0x360 [ 179.925202][ T7171] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.925231][ T7171] ? kstrtouint+0x6e/0xe0 [ 179.925278][ T7171] ? __fget_files+0x2a/0x420 [ 179.925299][ T7171] ? __fget_files+0x3a6/0x420 [ 179.925331][ T7171] __sys_sendmmsg+0x282/0x4e0 [ 179.925360][ T7171] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.925392][ T7171] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.925426][ T7171] ? ksys_write+0x248/0x270 [ 179.925454][ T7171] ? __pfx_ksys_write+0x10/0x10 [ 179.925485][ T7171] __x64_sys_sendmmsg+0xa0/0xc0 [ 179.925510][ T7171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.925536][ T7171] do_syscall_64+0x15f/0xf80 [ 179.925560][ T7171] ? trace_irq_disable+0x3b/0x150 [ 179.925582][ T7171] ? clear_bhb_loop+0x40/0x90 [ 179.925605][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.925623][ T7171] RIP: 0033:0x7f1d5497c819 [ 179.925643][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.925658][ T7171] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.925679][ T7171] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 179.925693][ T7171] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 179.925705][ T7171] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 179.925717][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.925728][ T7171] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 179.925758][ T7171] [ 180.184680][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.293929][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.391642][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.391715][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.517565][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.547955][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.503333][ T6494] veth0_vlan: entered promiscuous mode [ 184.546319][ T6494] veth1_vlan: entered promiscuous mode [ 185.100555][ T6494] veth0_macvtap: entered promiscuous mode [ 185.118832][ T6494] veth1_macvtap: entered promiscuous mode [ 185.170994][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.175627][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.314288][ T7226] FAULT_INJECTION: forcing a failure. [ 185.314288][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.314316][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.4.342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.314336][ T7226] Tainted: [L]=SOFTLOCKUP [ 185.314341][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.314350][ T7226] Call Trace: [ 185.314356][ T7226] [ 185.314362][ T7226] dump_stack_lvl+0xe8/0x150 [ 185.314387][ T7226] should_fail_ex+0x46b/0x600 [ 185.314412][ T7226] _copy_from_user+0x2d/0xb0 [ 185.314429][ T7226] do_sock_getsockopt+0x165/0x3f0 [ 185.314453][ T7226] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 185.314472][ T7226] ? __fget_files+0x3a6/0x420 [ 185.314492][ T7226] ? __fget_files+0x2a/0x420 [ 185.314517][ T7226] __x64_sys_getsockopt+0x1aa/0x250 [ 185.314543][ T7226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.314559][ T7226] do_syscall_64+0x15f/0xf80 [ 185.314578][ T7226] ? trace_irq_disable+0x3b/0x150 [ 185.314595][ T7226] ? clear_bhb_loop+0x40/0x90 [ 185.314612][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.314627][ T7226] RIP: 0033:0x7f1d5497c819 [ 185.314643][ T7226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.314656][ T7226] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 185.314672][ T7226] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 185.314683][ T7226] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 185.314691][ T7226] RBP: 00007f1d52bce090 R08: 0000200000000900 R09: 0000000000000000 [ 185.314702][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.314712][ T7226] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 185.314747][ T7226] [ 185.361671][ T4212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.362698][ T4212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.365716][ T4212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.374351][ T4212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.420786][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.424681][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.424702][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.516582][ T6695] veth0_vlan: entered promiscuous mode [ 187.555407][ T7248] batadv0: entered promiscuous mode [ 187.562923][ T7248] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 187.564427][ T7248] hsr1: entered allmulticast mode [ 187.564442][ T7248] batadv0: entered allmulticast mode [ 187.564463][ T7248] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 187.592688][ T7251] FAULT_INJECTION: forcing a failure. [ 187.592688][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.592720][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.2.349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 187.592746][ T7251] Tainted: [L]=SOFTLOCKUP [ 187.592752][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.592763][ T7251] Call Trace: [ 187.592769][ T7251] [ 187.592777][ T7251] dump_stack_lvl+0xe8/0x150 [ 187.592808][ T7251] should_fail_ex+0x46b/0x600 [ 187.592839][ T7251] _copy_from_user+0x2d/0xb0 [ 187.592858][ T7251] sk_setsockopt+0x2b3/0x2bb0 [ 187.592889][ T7251] ? __pfx_sk_setsockopt+0x10/0x10 [ 187.592914][ T7251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.592938][ T7251] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.592975][ T7251] ? __fget_files+0x2a/0x420 [ 187.592999][ T7251] ? __fget_files+0x2a/0x420 [ 187.593020][ T7251] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.593049][ T7251] do_sock_setsockopt+0x11b/0x1b0 [ 187.593076][ T7251] __x64_sys_setsockopt+0x143/0x1b0 [ 187.593102][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.593123][ T7251] do_syscall_64+0x15f/0xf80 [ 187.593145][ T7251] ? trace_irq_disable+0x3b/0x150 [ 187.593167][ T7251] ? clear_bhb_loop+0x40/0x90 [ 187.593189][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.593207][ T7251] RIP: 0033:0x7f94fb4dc819 [ 187.593224][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.593240][ T7251] RSP: 002b:00007f94f9736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.593259][ T7251] RAX: ffffffffffffffda RBX: 00007f94fb755fa0 RCX: 00007f94fb4dc819 [ 187.593274][ T7251] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 187.593285][ T7251] RBP: 00007f94f9736090 R08: 0000000000000010 R09: 0000000000000000 [ 187.593297][ T7251] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.593309][ T7251] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 187.593339][ T7251] [ 187.848264][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.848283][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.860722][ T6695] veth1_vlan: entered promiscuous mode [ 187.978172][ T7255] FAULT_INJECTION: forcing a failure. [ 187.978172][ T7255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.978206][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: syz.2.351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 187.978231][ T7255] Tainted: [L]=SOFTLOCKUP [ 187.978238][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.978249][ T7255] Call Trace: [ 187.978256][ T7255] [ 187.978264][ T7255] dump_stack_lvl+0xe8/0x150 [ 187.978295][ T7255] should_fail_ex+0x46b/0x600 [ 187.978325][ T7255] _copy_to_user+0x31/0xb0 [ 187.978346][ T7255] simple_read_from_buffer+0xe1/0x170 [ 187.978373][ T7255] proc_fail_nth_read+0x1be/0x230 [ 187.978401][ T7255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.978427][ T7255] ? rw_verify_area+0x2ac/0x4e0 [ 187.978451][ T7255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.978475][ T7255] vfs_read+0x212/0xa80 [ 187.978506][ T7255] ? __pfx_vfs_read+0x10/0x10 [ 187.978531][ T7255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.978556][ T7255] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.978578][ T7255] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 187.978601][ T7255] ? mutex_lock_nested+0x152/0x1d0 [ 187.978619][ T7255] ? fdget_pos+0x252/0x320 [ 187.978650][ T7255] ksys_read+0x156/0x270 [ 187.978677][ T7255] ? __pfx_ksys_read+0x10/0x10 [ 187.978709][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.978739][ T7255] do_syscall_64+0x15f/0xf80 [ 187.978760][ T7255] ? trace_irq_disable+0x3b/0x150 [ 187.978782][ T7255] ? clear_bhb_loop+0x40/0x90 [ 187.978804][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.978822][ T7255] RIP: 0033:0x7f94fb49d04e [ 187.978839][ T7255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.978854][ T7255] RSP: 002b:00007f94f9735fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.978873][ T7255] RAX: ffffffffffffffda RBX: 00007f94f97366c0 RCX: 00007f94fb49d04e [ 187.978887][ T7255] RDX: 000000000000000f RSI: 00007f94f97360a0 RDI: 0000000000000003 [ 187.978898][ T7255] RBP: 00007f94f9736090 R08: 0000000000000000 R09: 0000000000000000 [ 187.978910][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.978921][ T7255] R13: 00007f94fb756038 R14: 00007f94fb755fa0 R15: 00007ffce7bf2a48 [ 187.978951][ T7255] [ 188.041237][ T6695] veth0_macvtap: entered promiscuous mode [ 188.062663][ T6695] veth1_macvtap: entered promiscuous mode [ 189.037184][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.087194][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.143438][ T7263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.143889][ T7263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.169171][ T7263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.177887][ T7263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.218622][ T7267] FAULT_INJECTION: forcing a failure. [ 189.218622][ T7267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.218655][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.4.355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.218681][ T7267] Tainted: [L]=SOFTLOCKUP [ 189.218688][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.218698][ T7267] Call Trace: [ 189.218705][ T7267] [ 189.218713][ T7267] dump_stack_lvl+0xe8/0x150 [ 189.218743][ T7267] should_fail_ex+0x46b/0x600 [ 189.218774][ T7267] _copy_from_user+0x2d/0xb0 [ 189.218794][ T7267] __se_sys_sendfile64+0xac/0x1a0 [ 189.218818][ T7267] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 189.218846][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.218866][ T7267] do_syscall_64+0x15f/0xf80 [ 189.218889][ T7267] ? trace_irq_disable+0x3b/0x150 [ 189.218908][ T7267] ? clear_bhb_loop+0x40/0x90 [ 189.218930][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.218948][ T7267] RIP: 0033:0x7f1d5497c819 [ 189.218964][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.218979][ T7267] RSP: 002b:00007f1d52bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 189.218998][ T7267] RAX: ffffffffffffffda RBX: 00007f1d54bf5fa0 RCX: 00007f1d5497c819 [ 189.219011][ T7267] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 189.219022][ T7267] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 189.219032][ T7267] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 189.219040][ T7267] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 189.219055][ T7267] [ 190.436885][ T7274] batadv0: entered promiscuous mode [ 190.447334][ T7274] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 190.458845][ T7274] debugfs: 'hsr1' already exists in 'hsr' [ 190.458871][ T7274] Cannot create hsr debugfs directory [ 190.459049][ T7274] hsr1: entered allmulticast mode [ 190.459064][ T7274] batadv0: entered allmulticast mode [ 190.459085][ T7274] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 192.278239][ T7290] openvswitch: netlink: IP tunnel dst address not specified [ 192.837250][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.837269][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.523017][ T36] audit: type=1326 audit(1776202167.245:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7300 comm="syz.2.362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94fb4dc819 code=0x0 [ 193.619067][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.619087][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.555574][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.555641][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.731234][ T7311] ip6gretap0: entered promiscuous mode [ 196.623896][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 196.625666][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 196.854881][ T7341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.371'. [ 196.855280][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 197.579578][ T7359] dummy0: entered promiscuous mode [ 197.579677][ T7359] macsec1: entered promiscuous mode [ 199.093375][ T7359] dummy0: left promiscuous mode [ 201.128463][ T7371] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.128967][ T7373] IPVS: length: 139 != 24 [ 201.457947][ T31] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 201.630632][ T7377] bridge0: entered promiscuous mode [ 201.630730][ T7377] macsec1: entered promiscuous mode [ 201.634410][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 201.755469][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.379'. [ 201.988478][ T31] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 202.391732][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 202.409462][ T31] usb usb4-port1: attempt power cycle [ 202.947883][ T31] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 202.968682][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 205.266725][ T31] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 205.467870][ T31] usb 4-1: device not accepting address 9, error -71 [ 205.468860][ T31] usb usb4-port1: unable to enumerate USB device [ 205.500401][ T7415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.386'. [ 205.505381][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 207.028047][ T5809] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.690926][ T5809] usb 4-1: config 0 has an invalid interface number: 80 but max is 2 [ 207.690956][ T5809] usb 4-1: config 0 has an invalid interface number: 58 but max is 2 [ 207.690976][ T5809] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 207.690995][ T5809] usb 4-1: config 0 has no interface number 0 [ 207.691011][ T5809] usb 4-1: config 0 has no interface number 1 [ 207.691026][ T5809] usb 4-1: config 0 has no interface number 2 [ 207.691091][ T5809] usb 4-1: config 0 interface 80 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 207.691117][ T5809] usb 4-1: config 0 interface 80 altsetting 129 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 207.691143][ T5809] usb 4-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 207.691164][ T5809] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 207.691189][ T5809] usb 4-1: config 0 interface 80 altsetting 129 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 207.691215][ T5809] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 207.691238][ T5809] usb 4-1: config 0 interface 80 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 207.691259][ T5809] usb 4-1: config 0 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 207.691282][ T5809] usb 4-1: config 0 interface 80 has no altsetting 0 [ 207.691299][ T5809] usb 4-1: config 0 interface 58 has no altsetting 0 [ 207.691317][ T5809] usb 4-1: config 0 interface 172 has no altsetting 0 [ 207.696234][ T5809] usb 4-1: New USB device found, idVendor=12d1, idProduct=d66f, bcdDevice=4b.39 [ 207.696261][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.696281][ T5809] usb 4-1: Product: ᰉ [ 207.696294][ T5809] usb 4-1: SerialNumber: syz [ 207.875441][ T7435] 9p: Could not find request transport: fd0x000000000000000a!rp[QrUJ)/Ϣ EB [ 207.903220][ T5809] usb 4-1: config 0 descriptor?? [ 207.904095][ T7423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 208.303599][ T5809] option 4-1:0.80: GSM modem (1-port) converter detected [ 209.266527][ T5809] usb 4-1: USB disconnect, device number 10 [ 209.330728][ T7446] FAULT_INJECTION: forcing a failure. [ 209.330728][ T7446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.330752][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.2.395 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.330767][ T7446] Tainted: [L]=SOFTLOCKUP [ 209.330770][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.330778][ T7446] Call Trace: [ 209.330783][ T7446] [ 209.330787][ T7446] dump_stack_lvl+0xe8/0x150 [ 209.330806][ T7446] should_fail_ex+0x46b/0x600 [ 209.330824][ T7446] _copy_to_user+0x31/0xb0 [ 209.330836][ T7446] simple_read_from_buffer+0xe1/0x170 [ 209.330853][ T7446] proc_fail_nth_read+0x1be/0x230 [ 209.330868][ T7446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.330883][ T7446] ? rw_verify_area+0x2ac/0x4e0 [ 209.330897][ T7446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.330910][ T7446] vfs_read+0x212/0xa80 [ 209.330928][ T7446] ? __pfx_vfs_read+0x10/0x10 [ 209.330943][ T7446] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.330957][ T7446] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.330971][ T7446] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.330984][ T7446] ? mutex_lock_nested+0x152/0x1d0 [ 209.330994][ T7446] ? fdget_pos+0x252/0x320 [ 209.331010][ T7446] ksys_read+0x156/0x270 [ 209.331026][ T7446] ? __pfx_ksys_read+0x10/0x10 [ 209.331044][ T7446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.331054][ T7446] do_syscall_64+0x15f/0xf80 [ 209.331067][ T7446] ? trace_irq_disable+0x3b/0x150 [ 209.331080][ T7446] ? clear_bhb_loop+0x40/0x90 [ 209.331092][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.331101][ T7446] RIP: 0033:0x7f94fb49d04e [ 209.331112][ T7446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.331121][ T7446] RSP: 002b:00007f94f9714fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.331133][ T7446] RAX: ffffffffffffffda RBX: 00007f94f97156c0 RCX: 00007f94fb49d04e [ 209.331140][ T7446] RDX: 000000000000000f RSI: 00007f94f97150a0 RDI: 0000000000000003 [ 209.331146][ T7446] RBP: 00007f94f9715090 R08: 0000000000000000 R09: 0000000000000000 [ 209.331152][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.331158][ T7446] R13: 00007f94fb756128 R14: 00007f94fb756090 R15: 00007ffce7bf2a48 [ 209.331174][ T7446] [ 209.586132][ T5809] option 4-1:0.80: device disconnected [ 210.016458][ T7443] FAULT_INJECTION: forcing a failure. [ 210.016458][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.016494][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.4.394 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 210.016520][ T7443] Tainted: [L]=SOFTLOCKUP [ 210.016526][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.016537][ T7443] Call Trace: [ 210.016545][ T7443] [ 210.016553][ T7443] dump_stack_lvl+0xe8/0x150 [ 210.016585][ T7443] should_fail_ex+0x46b/0x600 [ 210.016616][ T7443] _copy_to_user+0x31/0xb0 [ 210.016638][ T7443] simple_read_from_buffer+0xe1/0x170 [ 210.016666][ T7443] proc_fail_nth_read+0x1be/0x230 [ 210.016695][ T7443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.016721][ T7443] ? rw_verify_area+0x2ac/0x4e0 [ 210.016746][ T7443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.016771][ T7443] vfs_read+0x212/0xa80 [ 210.016804][ T7443] ? __pfx_vfs_read+0x10/0x10 [ 210.016831][ T7443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.016856][ T7443] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.016880][ T7443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 210.016904][ T7443] ? mutex_lock_nested+0x152/0x1d0 [ 210.016922][ T7443] ? fdget_pos+0x252/0x320 [ 210.016953][ T7443] ksys_read+0x156/0x270 [ 210.016981][ T7443] ? __pfx_ksys_read+0x10/0x10 [ 210.017010][ T7443] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 210.017031][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.017050][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.017070][ T7443] do_syscall_64+0x15f/0xf80 [ 210.017107][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.017126][ T7443] ? clear_bhb_loop+0x40/0x90 [ 210.017148][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.017166][ T7443] RIP: 0033:0x7f1d5493d04e [ 210.017184][ T7443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.017199][ T7443] RSP: 002b:00007f1d52bcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.017220][ T7443] RAX: ffffffffffffffda RBX: 00007f1d52bce6c0 RCX: 00007f1d5493d04e [ 210.017234][ T7443] RDX: 000000000000000f RSI: 00007f1d52bce0a0 RDI: 0000000000000003 [ 210.017245][ T7443] RBP: 00007f1d52bce090 R08: 0000000000000000 R09: 0000000000000000 [ 210.017257][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.017268][ T7443] R13: 00007f1d54bf6038 R14: 00007f1d54bf5fa0 R15: 00007fff38c557c8 [ 210.017299][ T7443] [ 211.566991][ T982] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.416036][ T7458] dummy0: entered promiscuous mode [ 212.416132][ T7458] macsec3: entered promiscuous mode [ 212.460503][ T7458] dummy0: left promiscuous mode [ 212.552696][ T7460] netlink: 72 bytes leftover after parsing attributes in process `syz.4.400'. [ 212.553038][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 212.722923][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.745608][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.746597][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.747501][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.768922][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.235601][ T982] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.369357][ T7465] wg1 speed is unknown, defaulting to 1000 [ 214.691295][ T982] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.844321][ T5816] Bluetooth: hci0: command tx timeout [ 216.210478][ T982] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 216.212398][ T982] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.400194][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 216.559625][ T31] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 216.559653][ T31] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 216.560579][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.560594][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.560604][ T31] usb 4-1: SerialNumber: syz [ 216.865013][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.866838][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.905850][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.906317][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.907570][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.917940][ T5816] Bluetooth: hci0: command tx timeout [ 216.954839][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.956010][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.956497][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.957655][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.999245][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.158098][ T7465] chnl_net:caif_netlink_parms(): no params data found [ 217.178739][ T31] rndis_host 4-1:253.0: skipping garbage [ 217.178760][ T31] usb 4-1: bad CDC descriptors [ 217.263099][ T31] usb 4-1: USB disconnect, device number 11 [ 217.282271][ T7527] misc userio: Can't change port type on an already running userio instance [ 217.284012][ T7527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.397850][ T1418] ================================================================== [ 217.397865][ T1418] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 217.397897][ T1418] Read of size 8 at addr ffffc90005fb9008 by task kworker/u8:11/1418 [ 217.397913][ T1418] [ 217.397925][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.397952][ T1418] Tainted: [L]=SOFTLOCKUP [ 217.397958][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.397970][ T1418] Workqueue: events_unbound cfg80211_wiphy_work [ 217.397992][ T1418] Call Trace: [ 217.397999][ T1418] [ 217.398006][ T1418] dump_stack_lvl+0xe8/0x150 [ 217.398032][ T1418] print_report+0xba/0x230 [ 217.398054][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.398073][ T1418] kasan_report+0x117/0x150 [ 217.398088][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.398112][ T1418] __list_del_entry_valid_or_report+0xb5/0x190 [ 217.398136][ T1418] kcov_remote_start+0x2af/0x710 [ 217.398158][ T1418] ieee80211_iface_work+0x211/0x1340 [ 217.398180][ T1418] cfg80211_wiphy_work+0x2ab/0x4a0 [ 217.398197][ T1418] ? process_scheduled_works+0xa8d/0x18c0 [ 217.398221][ T1418] process_scheduled_works+0xb6e/0x18c0 [ 217.398255][ T1418] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.398281][ T1418] ? assign_work+0x3d5/0x5e0 [ 217.398305][ T1418] worker_thread+0xa53/0xfc0 [ 217.398337][ T1418] kthread+0x388/0x470 [ 217.398352][ T1418] ? __pfx_worker_thread+0x10/0x10 [ 217.398373][ T1418] ? __pfx_kthread+0x10/0x10 [ 217.398390][ T1418] ret_from_fork+0x514/0xb70 [ 217.398414][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 217.398440][ T1418] ? __switch_to+0xc7d/0x1450 [ 217.398461][ T1418] ? __pfx_kthread+0x10/0x10 [ 217.398477][ T1418] ret_from_fork_asm+0x1a/0x30 [ 217.398499][ T1418] [ 217.398506][ T1418] [ 217.398510][ T1418] The buggy address belongs to a vmalloc virtual mapping [ 217.398527][ T1418] Memory state around the buggy address: [ 217.398535][ T1418] ffffc90005fb8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 217.398547][ T1418] ffffc90005fb8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 217.398558][ T1418] >ffffc90005fb9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 217.398567][ T1418] ^ [ 217.398576][ T1418] ffffc90005fb9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 217.398593][ T1418] ffffc90005fb9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 217.398601][ T1418] ================================================================== [ 217.398728][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 217.398745][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.398770][ T1418] Tainted: [L]=SOFTLOCKUP [ 217.398777][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.398788][ T1418] Workqueue: events_unbound cfg80211_wiphy_work [ 217.398808][ T1418] Call Trace: [ 217.398818][ T1418] [ 217.398825][ T1418] vpanic+0x56c/0xa60 [ 217.398850][ T1418] ? __pfx_vpanic+0x10/0x10 [ 217.398873][ T1418] ? __pfx___schedule+0x10/0x10 [ 217.398898][ T1418] panic+0xc5/0xd0 [ 217.398917][ T1418] ? __pfx_panic+0x10/0x10 [ 217.398942][ T1418] ? preempt_schedule_common+0x82/0xd0 [ 217.398965][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.398988][ T1418] check_panic_on_warn+0x89/0xb0 [ 217.399007][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.399029][ T1418] end_report+0x73/0x180 [ 217.399045][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.399067][ T1418] kasan_report+0x128/0x150 [ 217.399084][ T1418] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 217.399111][ T1418] __list_del_entry_valid_or_report+0xb5/0x190 [ 217.399135][ T1418] kcov_remote_start+0x2af/0x710 [ 217.399156][ T1418] ieee80211_iface_work+0x211/0x1340 [ 217.399179][ T1418] cfg80211_wiphy_work+0x2ab/0x4a0 [ 217.399198][ T1418] ? process_scheduled_works+0xa8d/0x18c0 [ 217.399220][ T1418] process_scheduled_works+0xb6e/0x18c0 [ 217.399256][ T1418] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.399282][ T1418] ? assign_work+0x3d5/0x5e0 [ 217.399305][ T1418] worker_thread+0xa53/0xfc0 [ 217.399338][ T1418] kthread+0x388/0x470 [ 217.399356][ T1418] ? __pfx_worker_thread+0x10/0x10 [ 217.399376][ T1418] ? __pfx_kthread+0x10/0x10 [ 217.399393][ T1418] ret_from_fork+0x514/0xb70 [ 217.399417][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 217.399440][ T1418] ? __switch_to+0xc7d/0x1450 [ 217.399460][ T1418] ? __pfx_kthread+0x10/0x10 [ 217.399478][ T1418] ret_from_fork_asm+0x1a/0x30 [ 217.399502][ T1418] [ 217.399820][ T1418] Kernel Offset: disabled