last executing test programs: 22m27.738609601s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0xc8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000240000000500110003000031dc0000110300000000000000fcffffff00000004000000000000000001000084a8ed00000000000002000000020000000000002e00"], 0x0, 0x51, 0x0, 0x1}, 0x28) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r8 = socket(0x1e, 0x2, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendfile(r7, r7, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) 22m25.032826996s ago: executing program 1 (id=10): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30) r4 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) shmctl$SHM_UNLOCK(r4, 0xc) r5 = getpid() setpgid(0xffffffffffffffff, r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) ptrace(0x10, r6) ptrace$getenv(0x4201, r6, 0x7, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) 22m20.324583983s ago: executing program 1 (id=14): r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000002000/0x3000)=nil, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f000001b000)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540000000070800024000000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c080004"], 0xcc}, 0x1, 0x0, 0x0, 0x80c6}, 0x24000840) 22m5.048094543s ago: executing program 32 (id=14): r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000002000/0x3000)=nil, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f000001b000)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540000000070800024000000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c080004"], 0xcc}, 0x1, 0x0, 0x0, 0x80c6}, 0x24000840) 17m41.348207135s ago: executing program 0 (id=623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) 17m39.828793004s ago: executing program 0 (id=627): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="b40500000000002071108e00000000006600000000000000950000000000000067d1944f053370da04b16689f23f715b692099f08bb62f66abfc2cfed2a8ff3d93464584e233595810796c6b0b4dd6c3d801c70729f99de2e79cce91ff01164c4966c44bea42d35e691291b71c524c1d0814aabec93fc8aed1a75683fb15dc3f37c9a0eb533fe0a5d62a89a303113ee1356444e6b8a55b4beece394905ff99e8fc8ef43c5922cf00e47e69e3750c283f62487b83aff86d5f761bebdc80faffffffe19b28a366bd77f1963d18aa7bd0210e0bdaf4cd77f3fe55f17e38aa39b6f619c600d58080203b2c4c59db9e47f4c26dfe0453a723c6369d8af16f677b2cea661a889da97bd02241e8f625dd82dfc50cdaf7cfba33ddba75222a6346d613044df0632d8d7b1b7e72a04e914bf751d9dd738ab5fae531884d930223fdaff291d7aba67beaeee0ed36687dc9b6327e300ec861086d3b0800d2363f54828ae7507fd8c53904a6181799a108507e11e898f4110430b7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000001000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000280)=[{&(0x7f00000002c0)="202e1156267b41b9fbffffff9bf7b3c04fc8fae8ff8f5443235ae975c859a02cab1339ff41895ae8aa8d34d1f22186590a1cbeabd6527d78d607661796cd331b961c1db76883cd7f4892b5cd1d14d11a99601720f52eb21af4e2374375036c8d4adcb91f1fbb7b883da8ea54f5814ee339f85fb3f5981c1b52fb148da7ea85dbbd2fef2fe6624c5a570895d1fbc825d504bf8115df6ac4d5b9a868ad6b86fc69f51385633efa23e003e66175fc6f662fe0b7cd900a9a08a402f231c6872bd37e2bb00a97b97f31d65ff6c7e5caf1b1f591dae6185bcce3c366a916dee6261a9e6fc03b04542cce761b5d3100", 0xec}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x13b2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 17m37.18573814s ago: executing program 0 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x81, 0x5, 0x18, @dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x8, 0xd, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000f00)={'gretap0\x00', &(0x7f0000000e00)={'gre0\x00', r5, 0x8000, 0x8000, 0x6, 0x6, {{0x2e, 0x4, 0x1, 0x3a, 0xb8, 0x64, 0x0, 0x2e, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x9, [{@broadcast, 0x8}, {@empty, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0xb5, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x3ff}, {@broadcast, 0x7f}, {@broadcast, 0x40}, {@multicast2, 0x4}, {@empty, 0x5}, {@multicast1, 0x9d5e}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x400}, {@multicast1, 0xfffffffc}]}, @generic={0x82, 0x7, "61bbbf04da"}, @timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0xd, [{@rand_addr=0x64010100, 0x10000}]}, @timestamp={0x44, 0x10, 0x74, 0x0, 0x0, [0x5, 0xe, 0x0]}, @timestamp_addr={0x44, 0x24, 0x75, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x3000000}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x23fca5f9}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@ipv4_delrule={0x4c, 0x21, 0x1, 0x70bd2e, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x81, 0x9, 0x0, 0x0, 0x2, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffff3bb}, @FRA_FLOW={0x8, 0xb, 0x1}, @FRA_FLOW={0x8, 0xb, 0xa}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xa9f}, @FRA_FLOW={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x24040854) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000703af7346a7ae909e615000005000006060008006f750000090008"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x480d0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) syz_usb_connect$uac1(0x0, 0x105, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x21, 0xa0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3f}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x4, 0xd3, '}#'}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x8, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x4, 0x1, 0xe}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x9, "06c48244"}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x1, 0x0, "99d3b01798"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x9, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x3, 0x1, "d33f", "e5"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x4, "844d1ad6626a92"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x60, 0x2, 0x5, {0x7, 0x25, 0x1, 0xc, 0xdb, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x0, 0x9, 0xec}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xf, 0x0, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffd, 0x5, 0x0, 0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x80, "420b9a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7, 0x7a}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf7, 0x2, 0xb, 0x5, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x5, 0x7, {0x7, 0x25, 0x1, 0xc, 0x81, 0xffff}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xe, 0xfa, 0x1, 0xff, 0x5}, 0x28, &(0x7f0000000800)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x17, 0x5, 0x401, 0xf00f, 0xffa8, [0xc000, 0x3f00, 0x0, 0x3fcf, 0xc0]}]}, 0x9, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1404}}, {0xea, &(0x7f0000000b00)=@string={0xea, 0x3, "8fe3bcf474b826ba8a544d6b4ad8b87da3ea98d215e723a217113a00b78b5c2fe22a0f7f2bf82c295ea8d824f69d087083005e2001c510d4dd7e3f8eb615ffb7af46230189a49d51ece750a1dfcf617a415f42e3ba4d116bd39cd9c6a56d1881d9759d9917bf1c5ecc66b4b919fabe5726b8238c2798d9b35881d65477d0d279f67f280e7102c01a9601840037ab5892d034113277e33d77cbad459c0f5e95c2f270716d15242ee5817b06528048dd3123045a70f2b5a734921d143f6742f317d8b59bcc3f19ff8e161629c1034ff2e47918d6367d34569ab9a64314e977ffab04b5b8dac1b5a146"}}, {0xac, &(0x7f0000000c00)=@string={0xac, 0x3, "3ad8e26bc176f7945e2b83b2bdfd5a2d4ea24e24c5898a2533c04a234844906ba8f7ca3b452c905cf8ed28937241a6723a9dc4e007479d0a7df6f40e43f2fe059a6af7282b3f02d684698cb9ba4095e1b1c835468949525a7bb4fd58d854cb5202e047d4f10ca285386a88e42a952322539911c5d2585c25c5e80058c28f0d5a3e92d04069db37ee2e7319ea267ef9b1ae150c6eed587503304105f34f4604efc70647ec30d358e540f7"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x81a}}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000440)={r7, 0xf4, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x22, @mcast2, 0x800}, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xfffffffc}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x310}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0xc5}, 0xfffffffa}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xb, @private0, 0x8}, @in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x3, @empty, 0x7}]}, &(0x7f0000000580)=0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 17m33.066339198s ago: executing program 0 (id=643): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x800, 0x20}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="240d51ce20d14eb7dca18b31b6f68533", 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb81001d0008"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000004000000", 0xba06555678d158f5) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f0000000100)) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 17m32.249525607s ago: executing program 0 (id=646): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x12c93000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x181002, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) inotify_init() getpid() r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0xfd}, 0x8000008, 0x0, 0xfd}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000080)=0x568e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) io_submit(0x0, 0x0, &(0x7f0000000540)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) 17m30.692704748s ago: executing program 0 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 17m29.316774013s ago: executing program 33 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 13m2.741338547s ago: executing program 4 (id=1261): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000000c0)={r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000200)={0x1, 0x1}) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x1000, &(0x7f0000fd6000/0x1000)=nil, 0x3f000000, r5}) close(r5) 13m1.408640469s ago: executing program 4 (id=1267): r0 = syz_open_dev$sndctrl(&(0x7f00000047c0), 0xab, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000004880)={{0x6, 0x4, 0xcdc, 0xb97, 'syz1\x00', 0x6}, 0x4, 0x20000000, 0xc1a, 0x0, 0x0, 0x5, 'syz0\x00', 0x0}) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000019200)) write$binfmt_format(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {0x0, 0x1}, {0xe, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x11e, 0x1, &(0x7f0000000000)=0x2, 0x4) listen(r1, 0x80000f5f) socket$netlink(0x10, 0x3, 0x0) 13m0.541353715s ago: executing program 4 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0xc8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x51, 0x0, 0x1}, 0x28) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001dc0)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r9 = socket(0x1e, 0x2, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) 12m56.31294519s ago: executing program 4 (id=1275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000b0000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000040)=""/252, 0xfc}], 0x1) 12m55.651127409s ago: executing program 4 (id=1279): prlimit64(0x0, 0xa, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240062585c314f944c8b00ae7f", @ANYRES16=r3, @ANYBLOB="acc826bd7000ffdbdf2519000000090000007b4d158290e5272ea7495cf58c98ab80e4", @ANYRES32=r4, @ANYBLOB="05001e0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a1", 0x6e, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1fe78000) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffffffffff, 0xa401) r7 = getpid() syz_pidfd_open(r7, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000100)={r7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) 12m54.329303665s ago: executing program 5 (id=1283): unshare(0x20000400) r0 = fanotify_init(0x200, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdbdf25027c000008000180080000001000028008000180a664f7feda247668"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e5", 0x2000, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r8, 0x0, r9, 0x0, 0x200006, 0x0) write(r7, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x7, 0x2, &(0x7f00000192c0)=ANY=[@ANYBLOB="850000000000000000000000b676ce6b64fbbfc9661ba77d1ebeb900000000"], &(0x7f00000190c0)='GPL\x00', 0x1, 0x10, &(0x7f0000019140)=""/16, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000019180)={0x4, 0xf, 0xe, 0x8}, 0x10, 0x0, r5, 0x0, &(0x7f00000191c0)=[r2], 0x0, 0x10, 0x2}, 0x94) renameat2(r1, &(0x7f0000000280)='./cgroup\x00', r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r10 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r10, &(0x7f0000000300)="2906797ae333dad1f96ad9e2bee1e519152ebd7ae61e05437ee7ecee28c7b40affae69d0d235658d", 0x28) fanotify_mark(r0, 0x2, 0x50000010, 0xffffffffffffffff, 0x0) 12m53.205022149s ago: executing program 5 (id=1292): r0 = syz_open_dev$sndctrl(&(0x7f00000047c0), 0xab, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000004880)={{0x6, 0x4, 0xcdc, 0xb97, 'syz1\x00', 0x6}, 0x4, 0x20000000, 0xc1a, 0x0, 0x0, 0x5, 'syz0\x00', 0x0}) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000019200)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {0x0, 0x1}, {0xe, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x11e, 0x1, &(0x7f0000000000)=0x2, 0x4) listen(r1, 0x80000f5f) socket$netlink(0x10, 0x3, 0x0) 12m51.158926535s ago: executing program 5 (id=1295): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) 12m49.463557275s ago: executing program 5 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) 12m49.071674101s ago: executing program 5 (id=1301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 12m47.759157665s ago: executing program 4 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x68, 0xa5, 0x47, 0x40, 0x1a0a, 0x104, 0xb6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x40, 0x2, "", [{{0x9, 0x4, 0x6, 0x9, 0x0, 0x46, 0x79, 0xa0, 0x9}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0xd, 0xb, {0xb, 0x21, "94db23d0601a6c8ca3"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x40, 0x1, 0x36, "9674fa06404a2299851379a86a53be9ed991b74d7b4fb38c3af2976041eee70b7b6828f856850ed289ec00f77f4a7cae3b4ad39b33e1"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x6}}) 12m47.573321247s ago: executing program 5 (id=1305): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa90009053780c09e"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x10000, &(0x7f0000000080)='norecovery') 12m32.253787375s ago: executing program 34 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x68, 0xa5, 0x47, 0x40, 0x1a0a, 0x104, 0xb6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x40, 0x2, "", [{{0x9, 0x4, 0x6, 0x9, 0x0, 0x46, 0x79, 0xa0, 0x9}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0xd, 0xb, {0xb, 0x21, "94db23d0601a6c8ca3"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x40, 0x1, 0x36, "9674fa06404a2299851379a86a53be9ed991b74d7b4fb38c3af2976041eee70b7b6828f856850ed289ec00f77f4a7cae3b4ad39b33e1"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x6}}) 12m31.903233392s ago: executing program 35 (id=1305): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa90009053780c09e"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x10000, &(0x7f0000000080)='norecovery') 17.319625283s ago: executing program 6 (id=2627): mkdirat(0xffffffffffffff9c, 0x0, 0x32) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0xb19af21b0cc9c515) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x1100}, 0x18, 0x0) 14.476456174s ago: executing program 6 (id=2638): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f027, 0x100003}) 13.957834118s ago: executing program 6 (id=2641): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)={0x10}, 0x10) write$char_usb(r4, &(0x7f0000000b40)="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", 0x516) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1000, 0x4, 0x101, 0x10001, 0x10001, r0}) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0xa, @raw_data="a1ba13f40f2cfef6b97d8a203e4d114241a6f78b54f6440c83671937d5bb2d580f44e694c0b465ca5c8b8dbf57495c7b90537dbb42ca0360cfc94ee7db341d31935c6a1295ae04f40059ed100a0ce351732349d1f9863b5037c81b158dde58944b212c341fce3e4f824540180c7743be650a8fa1687274f883f237e0a0781178b33e7d5607531cb1ff6c193a7de21aec1c60b6f7723f0e3e014ec1ed68f5389a5a0b2e8468fde885f99d72fcde51ec5d95e12ec4c90f691b0eeb89fdbda449a479dd2581442ef67e"}) 13.306274392s ago: executing program 6 (id=2644): mount(&(0x7f0000000140)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='minix\x00', 0x10000, &(0x7f0000000200)='\x00') 12.644951301s ago: executing program 6 (id=2648): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 12.122989745s ago: executing program 6 (id=2651): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newtaction={0x48, 0x1c, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x0) (fail_nth: 5) 10.884137757s ago: executing program 2 (id=2661): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0xc09db000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xfd4, 0x200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x1, 0x7827, 0x7fffffff, 0x7, {{0x24, 0x4, 0x0, 0x6, 0x90, 0x66, 0x0, 0xe1, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x34, 0x1, 0x2, [{@empty, 0x7}, {@loopback, 0x3111}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf72}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f}, {@multicast2, 0x3}]}, @generic={0x94, 0x11, "3dd6b1b4593ea8db2349b2b299cd14"}, @timestamp={0x44, 0x24, 0xc7, 0x0, 0x3, [0x2c81, 0x6, 0x4db1, 0x1, 0x8, 0x4, 0x5, 0x8]}]}}}}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x18, r1}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x14, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ldst={0x0, 0x2, 0x0, 0x8, 0x7, 0x30, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000280)='syzkaller\x00', 0xd220, 0x0, 0x0, 0x41000, 0x68, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[r6, r7, r8, r9, 0x1, r10, r11], &(0x7f0000000700)=[{0x1, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x7, 0x3}, {0x0, 0x3, 0xa, 0x6}, {0x5, 0x4, 0x5, 0x1}, {0x2, 0x4, 0x1, 0x2}, {0x3, 0x1, 0xa, 0x2}, {0x5, 0x4, 0xb, 0x9}, {0x0, 0x3, 0x10, 0xb}], 0x10, 0x93ec}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r10) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x4040081) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5e2e}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040840}, 0x80) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/vmallocinfo\x00', 0x0, 0x0) connect$inet6(r10, &(0x7f0000000b40)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x7}, 0x1c) r13 = openat$cgroup_ro(r4, &(0x7f0000000b80)='cpuacct.stat\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r13, 0x40085203, &(0x7f0000000bc0)={0x7, 0xda, "b3f9d8269d99e03256fc4aab9e9dd39920619f0671e0cc9b213338cf42e488b29694d76b4c5b90c0ac270b95e88647da1159856e99065df38cba8e4d211e4f277b850479955bf9beb7aa8d52192fc22c190b08664e41089974ddafa5ae4abbbed15b8db92d0af5b21e02c8baaae418d038965a1393c7ec85c874a7749786dd300718fefa01d7f4f108b389cdd0aa75e5e1d37fce905d78946f6b4d88a5e72590327222320f6969ab1f7912ebaf57787e2a64b9b90df2f3a9c3b2a34355762eef6f05e122ddb61a9caf7a9f5244cee2d3117ca40eec60f29dba84"}) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000cc0)={0xc}) ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000d00)={0x8, 0x6, 0xf6, 0x1, 0x4, 0x8}) sendmsg$NL80211_CMD_GET_INTERFACE(r12, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x300008}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x200, 0x70bd2b, 0x6, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x60480c0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000e40)=0x90000) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000e80)) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f0000000ec0)=""/101) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000f40)=r13, 0x4) 10.865545208s ago: executing program 2 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x84000}) 10.78912025s ago: executing program 2 (id=2663): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/79, 0x4f) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) pread64(r0, &(0x7f0000000140)=""/20, 0x14, 0x0) r3 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x600008c0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000200000024000480200001800e000100627974656f726465720000000c000280080001400000000b0900010073797a30100000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) readv(r6, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 10.699879213s ago: executing program 2 (id=2664): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x1e, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921182c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r1, &(0x7f0000000080)="0b000300", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x108, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x108}], 0x1}, 0x0) 10.455080406s ago: executing program 2 (id=2665): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x103441) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0xa, 0x3, 0x80000000, 0xef8, 'syz0\x00', 0x2}, 0x5, 0x20, 0x0, r5, 0x1, 0xee6, 'syz1\x00', &(0x7f0000000080)=['-.}\'\'\\:\x00'], 0x8}) 10.414995215s ago: executing program 2 (id=2666): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (fail_nth: 4) 4.09297505s ago: executing program 3 (id=2669): socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000050000000000000000000000711000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r2, &(0x7f0000000400)=ANY=[], 0xfffffeff) r3 = userfaultfd(0x1) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000007700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/90, 0x5a}, 0x4}], 0x1, 0x20, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x9186b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "f24accb19ff365b46c70043771d6fc1e049cb846"}, 0x15, 0x1) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000340)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0x3, @remote, 0xfffffffc}}, 0x8001, 0x98d6}, &(0x7f0000000540)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000580)={r8, 0xf, 0x30}, &(0x7f00000005c0)=0xc) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'macvlan1\x00'}}, 0x1e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 3.06094952s ago: executing program 3 (id=2670): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 3.000356057s ago: executing program 3 (id=2671): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000780)={0xe000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone3(0x0, 0x0) capget(&(0x7f0000002900)={0x20071026, r3}, &(0x7f0000000180)={0x1e, 0x2, 0x3, 0x6, 0xcdfa, 0x7ffffffe}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x4f, 0x0, 0xc5}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r4, &(0x7f00000006c0), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x604600, 0x0) r7 = dup(r6) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)={0x0, 0x722}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1}) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x20000810) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'macvlan1\x00'}}, 0x1e) writev(r10, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x5ea}], 0x1) setreuid(0x0, 0xee00) 2.904267145s ago: executing program 3 (id=2672): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x2002, 0x0, &(0x7f0000000040)=0x1, 0x86000005) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, r3, 0xd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x46}, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0x56, 0x4a23, 0x0, 0x2, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff83}, 0x4, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x2, @in6=@local, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) memfd_create(0x0, 0x4) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x20000842) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') 2.000608952s ago: executing program 3 (id=2673): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x7801, 0xfffffffe) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2674): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x103441) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0xa, 0x3, 0x80000000, 0xef8, 'syz0\x00', 0x2}, 0x5, 0x20, 0x0, r5, 0x1, 0xee6, 'syz1\x00', &(0x7f0000000080)=['-.}\'\'\\:\x00'], 0x8}) kernel console output (not intermixed with test programs): 3][T15573] RIP: 0033:0x7fd246dccdd9 [ 1299.441995][T15573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.442016][T15573] RSP: 002b:00007fd244fe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1299.442041][T15573] RAX: ffffffffffffffda RBX: 00007fd247046180 RCX: 00007fd246dccdd9 [ 1299.442058][T15573] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 1299.442074][T15573] RBP: 00007fd244fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.442089][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.442103][T15573] R13: 00007fd247046218 R14: 00007fd247046180 R15: 00007ffce515a618 [ 1299.442139][T15573] [ 1300.237932][T15317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.237952][T15317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.237984][T15317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.372701][T15581] FAULT_INJECTION: forcing a failure. [ 1300.372701][T15581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.372744][T15581] CPU: 0 UID: 0 PID: 15581 Comm: syz.2.2362 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1300.372775][T15581] Tainted: [L]=SOFTLOCKUP [ 1300.372784][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.372797][T15581] Call Trace: [ 1300.372806][T15581] [ 1300.372816][T15581] dump_stack_lvl+0xe8/0x150 [ 1300.372850][T15581] should_fail_ex+0x46b/0x600 [ 1300.372893][T15581] _copy_from_iter+0x1d3/0x1670 [ 1300.372939][T15581] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1300.372965][T15581] ? __alloc_skb+0x27d/0x7d0 [ 1300.372990][T15581] ? __pfx__copy_from_iter+0x10/0x10 [ 1300.373025][T15581] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1300.373051][T15581] ? __alloc_skb+0x27d/0x7d0 [ 1300.373081][T15581] ? netlink_sendmsg+0x650/0xb40 [ 1300.373106][T15581] ? skb_put+0x11b/0x210 [ 1300.373135][T15581] netlink_sendmsg+0x6c0/0xb40 [ 1300.373171][T15581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.373206][T15581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1300.373235][T15581] ____sys_sendmsg+0x94c/0x9c0 [ 1300.373269][T15581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1300.373308][T15581] ? import_iovec+0x73/0xa0 [ 1300.373338][T15581] ___sys_sendmsg+0x2a5/0x360 [ 1300.373369][T15581] ? __lock_acquire+0x6b5/0x2cf0 [ 1300.373406][T15581] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.373440][T15581] ? kstrtouint+0x6e/0xe0 [ 1300.373501][T15581] ? __fget_files+0x2a/0x420 [ 1300.373537][T15581] ? __fget_files+0x3a6/0x420 [ 1300.373584][T15581] __sys_sendmmsg+0x282/0x4e0 [ 1300.373618][T15581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1300.373657][T15581] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1300.373711][T15581] ? ksys_write+0x248/0x270 [ 1300.373742][T15581] ? __pfx_ksys_write+0x10/0x10 [ 1300.373776][T15581] __x64_sys_sendmmsg+0xa0/0xc0 [ 1300.373804][T15581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.373830][T15581] do_syscall_64+0x15f/0xf80 [ 1300.373852][T15581] ? trace_irq_disable+0x3b/0x140 [ 1300.373881][T15581] ? clear_bhb_loop+0x40/0x90 [ 1300.373910][T15581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.373934][T15581] RIP: 0033:0x7fa0478bcdd9 [ 1300.373955][T15581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.373976][T15581] RSP: 002b:00007fa045b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1300.374001][T15581] RAX: ffffffffffffffda RBX: 00007fa047b35fa0 RCX: 00007fa0478bcdd9 [ 1300.374019][T15581] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 1300.374034][T15581] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.374049][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.374063][T15581] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1300.374099][T15581] [ 1300.770635][T15584] FAULT_INJECTION: forcing a failure. [ 1300.770635][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.770677][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.2.2363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1300.770708][T15584] Tainted: [L]=SOFTLOCKUP [ 1300.770716][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.770730][T15584] Call Trace: [ 1300.770739][T15584] [ 1300.770749][T15584] dump_stack_lvl+0xe8/0x150 [ 1300.770799][T15584] should_fail_ex+0x46b/0x600 [ 1300.770859][T15584] should_failslab+0xa8/0x100 [ 1300.770890][T15584] __kmalloc_cache_noprof+0x84/0x690 [ 1300.770918][T15584] ? drm_crtc_queue_sequence_ioctl+0x212/0x870 [ 1300.770946][T15584] ? drm_dev_enter+0x49/0x150 [ 1300.770983][T15584] drm_crtc_queue_sequence_ioctl+0x212/0x870 [ 1300.771026][T15584] drm_ioctl_kernel+0x2e2/0x3b0 [ 1300.771059][T15584] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 1300.771087][T15584] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1300.771128][T15584] drm_ioctl+0x6c0/0xb80 [ 1300.771155][T15584] ? smk_tskacc+0x311/0x3a0 [ 1300.771183][T15584] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 1300.771217][T15584] ? __pfx_drm_ioctl+0x10/0x10 [ 1300.771258][T15584] ? __fget_files+0x2a/0x420 [ 1300.771298][T15584] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1300.771327][T15584] ? __pfx_drm_ioctl+0x10/0x10 [ 1300.771356][T15584] __se_sys_ioctl+0xff/0x170 [ 1300.771383][T15584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.771409][T15584] do_syscall_64+0x15f/0xf80 [ 1300.771431][T15584] ? trace_irq_disable+0x3b/0x140 [ 1300.771459][T15584] ? clear_bhb_loop+0x40/0x90 [ 1300.771488][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.771511][T15584] RIP: 0033:0x7fa0478bcdd9 [ 1300.771532][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.771552][T15584] RSP: 002b:00007fa045b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.771577][T15584] RAX: ffffffffffffffda RBX: 00007fa047b35fa0 RCX: 00007fa0478bcdd9 [ 1300.771594][T15584] RDX: 0000200000000300 RSI: 00000000c00c643c RDI: 0000000000000003 [ 1300.771609][T15584] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.771633][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.771647][T15584] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1300.771683][T15584] [ 1301.768847][T15590] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1302.563893][T12424] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1302.739017][T12424] usb 7-1: Using ep0 maxpacket: 32 [ 1302.747061][T12424] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1302.747103][T12424] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1302.747132][T12424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.830181][T12424] usb 7-1: config 0 descriptor?? [ 1302.994209][T15317] hsr_slave_0: entered promiscuous mode [ 1303.012754][T15317] hsr_slave_1: entered promiscuous mode [ 1303.020670][T15317] debugfs: 'hsr0' already exists in 'hsr' [ 1303.020703][T15317] Cannot create hsr debugfs directory [ 1303.546162][T12424] thrustmaster 0003:044F:B323.000A: unexpected long global item [ 1303.565009][T12424] thrustmaster 0003:044F:B323.000A: parse failed [ 1303.565094][T12424] thrustmaster 0003:044F:B323.000A: probe with driver thrustmaster failed with error -22 [ 1303.917913][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1304.158678][T15564] syz.3.2358 (15564): drop_caches: 2 [ 1304.283231][T15621] FAULT_INJECTION: forcing a failure. [ 1304.283231][T15621] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.283260][T15621] CPU: 1 UID: 0 PID: 15621 Comm: syz.3.2372 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1304.283283][T15621] Tainted: [L]=SOFTLOCKUP [ 1304.283289][T15621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1304.283299][T15621] Call Trace: [ 1304.283305][T15621] [ 1304.283313][T15621] dump_stack_lvl+0xe8/0x150 [ 1304.283337][T15621] should_fail_ex+0x46b/0x600 [ 1304.283368][T15621] should_failslab+0xa8/0x100 [ 1304.283389][T15621] kmem_cache_alloc_noprof+0x87/0x680 [ 1304.283407][T15621] ? sk_prot_alloc+0x57/0x210 [ 1304.283429][T15621] sk_prot_alloc+0x57/0x210 [ 1304.283445][T15621] ? sk_alloc+0x27/0x390 [ 1304.283464][T15621] sk_alloc+0x3a/0x390 [ 1304.283484][T15621] inet_create+0x7a0/0x1010 [ 1304.283505][T15621] ? inet_create+0x9c/0x1010 [ 1304.283527][T15621] __sock_create+0x4b2/0x9d0 [ 1304.283558][T15621] mptcp_subflow_create_socket+0xfb/0x800 [ 1304.283584][T15621] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1304.283611][T15621] __mptcp_nmpc_sk+0x14e/0x790 [ 1304.283633][T15621] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1304.283658][T15621] mptcp_connect+0x71/0x830 [ 1304.283686][T15621] __inet_stream_connect+0x25a/0xdd0 [ 1304.283713][T15621] ? __pfx___inet_stream_connect+0x10/0x10 [ 1304.283729][T15621] ? __local_bh_enable+0x1e1/0x2f0 [ 1304.283751][T15621] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1304.283769][T15621] ? lockdep_hardirqs_on+0x7a/0x110 [ 1304.283799][T15621] inet_stream_connect+0x66/0xa0 [ 1304.283819][T15621] __sys_connect+0x315/0x450 [ 1304.283837][T15621] ? __pfx___sys_connect+0x10/0x10 [ 1304.283862][T15621] ? __pfx_ksys_write+0x10/0x10 [ 1304.283884][T15621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.283903][T15621] __x64_sys_connect+0x7a/0x90 [ 1304.283919][T15621] do_syscall_64+0x15f/0xf80 [ 1304.283934][T15621] ? trace_irq_disable+0x3b/0x140 [ 1304.283954][T15621] ? clear_bhb_loop+0x40/0x90 [ 1304.283974][T15621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.283990][T15621] RIP: 0033:0x7fa77c17cdd9 [ 1304.284006][T15621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.284020][T15621] RSP: 002b:00007fa77a3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1304.284038][T15621] RAX: ffffffffffffffda RBX: 00007fa77c3f5fa0 RCX: 00007fa77c17cdd9 [ 1304.284059][T15621] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 1304.284070][T15621] RBP: 00007fa77a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.284083][T15621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.284093][T15621] R13: 00007fa77c3f6038 R14: 00007fa77c3f5fa0 R15: 00007ffe0d21f828 [ 1304.284118][T15621] [ 1304.624547][T13089] usb 7-1: USB disconnect, device number 71 [ 1304.732102][T15624] FAULT_INJECTION: forcing a failure. [ 1304.732102][T15624] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.732142][T15624] CPU: 0 UID: 0 PID: 15624 Comm: syz.3.2374 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1304.732174][T15624] Tainted: [L]=SOFTLOCKUP [ 1304.732183][T15624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1304.732197][T15624] Call Trace: [ 1304.732206][T15624] [ 1304.732216][T15624] dump_stack_lvl+0xe8/0x150 [ 1304.732249][T15624] should_fail_ex+0x46b/0x600 [ 1304.732292][T15624] should_failslab+0xa8/0x100 [ 1304.732322][T15624] kmem_cache_alloc_noprof+0x87/0x680 [ 1304.732347][T15624] ? __netlink_lookup+0xc6/0x8b0 [ 1304.732374][T15624] ? skb_clone+0x212/0x3a0 [ 1304.732407][T15624] skb_clone+0x212/0x3a0 [ 1304.732438][T15624] __netlink_deliver_tap+0x404/0x850 [ 1304.732476][T15624] ? netlink_deliver_tap+0x2e/0x1b0 [ 1304.732505][T15624] netlink_deliver_tap+0x19c/0x1b0 [ 1304.732531][T15624] netlink_unicast+0x754/0x920 [ 1304.732579][T15624] netlink_sendmsg+0x813/0xb40 [ 1304.732616][T15624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.732647][T15624] ? unwind_get_return_address+0x4d/0x90 [ 1304.732683][T15624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1304.732712][T15624] ____sys_sendmsg+0x94c/0x9c0 [ 1304.732745][T15624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.732784][T15624] ? import_iovec+0x73/0xa0 [ 1304.732814][T15624] ___sys_sendmsg+0x2a5/0x360 [ 1304.732840][T15624] ? __lock_acquire+0x6b5/0x2cf0 [ 1304.732876][T15624] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.732941][T15624] ? __fget_files+0x2a/0x420 [ 1304.732975][T15624] ? __fget_files+0x3a6/0x420 [ 1304.733021][T15624] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1304.733053][T15624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1304.733099][T15624] ? __pfx_ksys_write+0x10/0x10 [ 1304.733133][T15624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.733159][T15624] do_syscall_64+0x15f/0xf80 [ 1304.733181][T15624] ? trace_irq_disable+0x3b/0x140 [ 1304.733208][T15624] ? clear_bhb_loop+0x40/0x90 [ 1304.733237][T15624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.733261][T15624] RIP: 0033:0x7fa77c17cdd9 [ 1304.733283][T15624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.733302][T15624] RSP: 002b:00007fa77a3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.733327][T15624] RAX: ffffffffffffffda RBX: 00007fa77c3f5fa0 RCX: 00007fa77c17cdd9 [ 1304.733345][T15624] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1304.733359][T15624] RBP: 00007fa77a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.733374][T15624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.733388][T15624] R13: 00007fa77c3f6038 R14: 00007fa77c3f5fa0 R15: 00007ffe0d21f828 [ 1304.733425][T15624] [ 1307.928541][T12424] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1308.372836][T12424] usb 4-1: Using ep0 maxpacket: 8 [ 1308.570134][T12424] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1308.571293][T12424] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1308.571331][T12424] usb 4-1: can't read configurations, error -71 [ 1310.652394][T15651] openvswitch: netlink: IPv4 tun info is not correct [ 1313.140281][T15667] FAULT_INJECTION: forcing a failure. [ 1313.140281][T15667] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.140345][T15667] CPU: 1 UID: 0 PID: 15667 Comm: syz.6.2386 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1313.140376][T15667] Tainted: [L]=SOFTLOCKUP [ 1313.140385][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1313.140398][T15667] Call Trace: [ 1313.140407][T15667] [ 1313.140418][T15667] dump_stack_lvl+0xe8/0x150 [ 1313.140449][T15667] should_fail_ex+0x46b/0x600 [ 1313.140491][T15667] should_failslab+0xa8/0x100 [ 1313.140521][T15667] __kmalloc_noprof+0xdf/0x7b0 [ 1313.140544][T15667] ? kfree+0x4d/0x6c0 [ 1313.140564][T15667] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1313.140605][T15667] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1313.140643][T15667] ? tomoyo_domain+0xd8/0x130 [ 1313.140689][T15667] ? tomoyo_path_number_perm+0x219/0x630 [ 1313.140719][T15667] tomoyo_path_number_perm+0x246/0x630 [ 1313.140764][T15667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1313.140793][T15667] ? __lock_acquire+0x6b5/0x2cf0 [ 1313.140829][T15667] ? do_raw_spin_lock+0x12b/0x2f0 [ 1313.140891][T15667] ? __fget_files+0x2a/0x420 [ 1313.140930][T15667] ? __fget_files+0x2a/0x420 [ 1313.140964][T15667] ? __fget_files+0x3a6/0x420 [ 1313.140998][T15667] ? __fget_files+0x2a/0x420 [ 1313.141039][T15667] security_file_ioctl+0xc3/0x2a0 [ 1313.141073][T15667] __se_sys_ioctl+0x47/0x170 [ 1313.141105][T15667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.141131][T15667] do_syscall_64+0x15f/0xf80 [ 1313.141153][T15667] ? trace_irq_disable+0x3b/0x140 [ 1313.141183][T15667] ? clear_bhb_loop+0x40/0x90 [ 1313.141211][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.141232][T15667] RIP: 0033:0x7fd246dccdd9 [ 1313.141254][T15667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.141274][T15667] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.141298][T15667] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1313.141315][T15667] RDX: 0000200000000140 RSI: 00000000c0505350 RDI: 0000000000000003 [ 1313.141338][T15667] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.141352][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.141365][T15667] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1313.141399][T15667] [ 1313.160376][T15667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1313.269969][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.270060][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1313.303903][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1313.585904][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1313.592242][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1313.596066][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.631590][ T9] usb 4-1: New USB device found, idVendor=bdb8, idProduct=f3ff, bcdDevice=ff.c2 [ 1313.631625][ T9] usb 4-1: New USB device strings: Mfr=248, Product=2, SerialNumber=3 [ 1313.631647][ T9] usb 4-1: Product: syz [ 1313.631662][ T9] usb 4-1: Manufacturer: syz [ 1313.631678][ T9] usb 4-1: SerialNumber: syz [ 1315.178717][T10341] usb 4-1: USB disconnect, device number 84 [ 1315.394610][T15692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2392'. [ 1316.363160][T11440] bridge_slave_1: left allmulticast mode [ 1316.363200][T11440] bridge_slave_1: left promiscuous mode [ 1316.363479][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.565199][ T8086] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1316.778414][T11440] bridge_slave_0: left allmulticast mode [ 1316.778478][T11440] bridge_slave_0: left promiscuous mode [ 1316.778764][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.826362][ T8086] usb 3-1: Using ep0 maxpacket: 32 [ 1316.829923][ T8086] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1316.829965][ T8086] usb 3-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1316.829992][ T8086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.868456][ T8086] usb 3-1: config 0 descriptor?? [ 1317.212485][T15715] FAULT_INJECTION: forcing a failure. [ 1317.212485][T15715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.212529][T15715] CPU: 1 UID: 0 PID: 15715 Comm: syz.6.2397 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1317.212561][T15715] Tainted: [L]=SOFTLOCKUP [ 1317.212570][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.212583][T15715] Call Trace: [ 1317.212593][T15715] [ 1317.212603][T15715] dump_stack_lvl+0xe8/0x150 [ 1317.212636][T15715] should_fail_ex+0x46b/0x600 [ 1317.212681][T15715] _copy_to_user+0x31/0xb0 [ 1317.212710][T15715] sock_getbindtodevice+0x196/0x360 [ 1317.212741][T15715] ? __pfx_sock_getbindtodevice+0x10/0x10 [ 1317.212782][T15715] sk_getsockopt+0x1915/0x2790 [ 1317.212817][T15715] ? __pfx_sk_getsockopt+0x10/0x10 [ 1317.212857][T15715] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.212895][T15715] ? __might_fault+0xaf/0x130 [ 1317.212924][T15715] ? __might_fault+0xaf/0x130 [ 1317.212981][T15715] do_sock_getsockopt+0x2bd/0x7e0 [ 1317.213016][T15715] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1317.213061][T15715] ? __fget_files+0x3a6/0x420 [ 1317.213094][T15715] ? __fget_files+0x2a/0x420 [ 1317.213135][T15715] __x64_sys_getsockopt+0x1aa/0x250 [ 1317.213173][T15715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.213200][T15715] do_syscall_64+0x15f/0xf80 [ 1317.213222][T15715] ? trace_irq_disable+0x3b/0x140 [ 1317.213250][T15715] ? clear_bhb_loop+0x40/0x90 [ 1317.213278][T15715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.213301][T15715] RIP: 0033:0x7fd246dccdd9 [ 1317.213323][T15715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.213343][T15715] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1317.213368][T15715] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1317.213386][T15715] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000004 [ 1317.213401][T15715] RBP: 00007fd245026090 R08: 0000200000000280 R09: 0000000000000000 [ 1317.213417][T15715] R10: 0000200000006080 R11: 0000000000000246 R12: 0000000000000001 [ 1317.213432][T15715] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1317.213468][T15715] [ 1318.304801][ T8086] thrustmaster 0003:044F:B323.000B: unexpected long global item [ 1318.305646][ T8086] thrustmaster 0003:044F:B323.000B: parse failed [ 1318.305728][ T8086] thrustmaster 0003:044F:B323.000B: probe with driver thrustmaster failed with error -22 [ 1318.380878][T15723] program syz.6.2400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1320.686212][ T8086] usb 3-1: USB disconnect, device number 109 [ 1320.762988][T15741] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1320.763037][T15741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.938117][T11440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.977848][T11440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.002006][T11440] bond0 (unregistering): Released all slaves [ 1321.879840][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1322.055855][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2407'. [ 1322.093478][T11440] hsr_slave_0: left promiscuous mode [ 1322.153030][T11440] hsr_slave_1: left promiscuous mode [ 1322.154127][T11440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.194202][T11440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.231743][ T8086] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1323.404853][ T8086] usb 4-1: Using ep0 maxpacket: 8 [ 1323.597348][ T8086] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1323.598522][ T8086] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1323.598570][ T8086] usb 4-1: can't read configurations, error -71 [ 1323.598578][T11440] team0 (unregistering): Port device team_slave_1 removed [ 1323.676664][T11440] team0 (unregistering): Port device team_slave_0 removed [ 1326.851353][T10341] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1327.086999][T10341] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.087034][T10341] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.087059][T10341] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.087087][T10341] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1327.087120][T10341] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1327.087146][T10341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.163631][T10341] usb 3-1: config 0 descriptor?? [ 1327.233606][T15810] FAULT_INJECTION: forcing a failure. [ 1327.233606][T15810] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.233638][T15810] CPU: 1 UID: 0 PID: 15810 Comm: syz.6.2420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1327.233660][T15810] Tainted: [L]=SOFTLOCKUP [ 1327.233667][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1327.233676][T15810] Call Trace: [ 1327.233683][T15810] [ 1327.233690][T15810] dump_stack_lvl+0xe8/0x150 [ 1327.233717][T15810] should_fail_ex+0x46b/0x600 [ 1327.233747][T15810] should_failslab+0xa8/0x100 [ 1327.233769][T15810] __kmalloc_cache_noprof+0x84/0x690 [ 1327.233789][T15810] ? __se_sys_fspick+0x204/0x400 [ 1327.233813][T15810] __se_sys_fspick+0x204/0x400 [ 1327.233842][T15810] ? __pfx___se_sys_fspick+0x10/0x10 [ 1327.233899][T15810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.233927][T15810] do_syscall_64+0x15f/0xf80 [ 1327.233943][T15810] ? trace_irq_disable+0x3b/0x140 [ 1327.233972][T15810] ? clear_bhb_loop+0x40/0x90 [ 1327.233991][T15810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.234008][T15810] RIP: 0033:0x7fd246dccdd9 [ 1327.234023][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.234037][T15810] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 1327.234055][T15810] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1327.234067][T15810] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1327.234079][T15810] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.234089][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.234100][T15810] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1327.234125][T15810] [ 1327.831648][T10341] holtek 0003:1241:5015.000C: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 1327.831688][T10341] holtek 0003:1241:5015.000C: no inputs found [ 1328.181561][T10341] usb 3-1: USB disconnect, device number 110 [ 1328.361551][T15808] bridge1: entered allmulticast mode [ 1331.349708][T10341] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1331.516970][T10341] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1331.521577][T10341] usb 7-1: not running at top speed; connect to a high speed hub [ 1331.534405][T10341] usb 7-1: config 1 has an invalid interface number: 64 but max is 0 [ 1331.534457][T10341] usb 7-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1331.534514][T10341] usb 7-1: config 1 has no interface number 0 [ 1331.534603][T10341] usb 7-1: too many endpoints for config 1 interface 64 altsetting 130: 203, using maximum allowed: 30 [ 1331.534787][T10341] usb 7-1: config 1 interface 64 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 1331.534880][T10341] usb 7-1: config 1 interface 64 has no altsetting 0 [ 1331.636287][T10341] usb 7-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1331.636322][T10341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.636346][T10341] usb 7-1: Product: syz [ 1331.636363][T10341] usb 7-1: Manufacturer: syz [ 1331.636380][T10341] usb 7-1: SerialNumber: syz [ 1332.507665][T10341] ums-usbat 7-1:1.64: USB Mass Storage device detected [ 1332.570394][T10341] ums-usbat 7-1:1.64: This device (03f0,0307,0001 S d9 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1332.570394][T10341] Please send a copy of this message to and [ 1332.758928][T10341] usb 7-1: USB disconnect, device number 72 [ 1333.350501][T15878] FAULT_INJECTION: forcing a failure. [ 1333.350501][T15878] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.350542][T15878] CPU: 0 UID: 0 PID: 15878 Comm: syz.6.2432 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1333.350574][T15878] Tainted: [L]=SOFTLOCKUP [ 1333.350582][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1333.350595][T15878] Call Trace: [ 1333.350605][T15878] [ 1333.350615][T15878] dump_stack_lvl+0xe8/0x150 [ 1333.350649][T15878] should_fail_ex+0x46b/0x600 [ 1333.350692][T15878] should_failslab+0xa8/0x100 [ 1333.350724][T15878] __kmalloc_cache_noprof+0x84/0x690 [ 1333.350753][T15878] ? genl_start+0x1c9/0x6c0 [ 1333.350791][T15878] genl_start+0x1c9/0x6c0 [ 1333.350832][T15878] __netlink_dump_start+0x469/0x7e0 [ 1333.350867][T15878] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1333.350911][T15878] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1333.350952][T15878] ? rcu_is_watching+0x15/0xb0 [ 1333.350986][T15878] ? __pfx_genl_start+0x10/0x10 [ 1333.351015][T15878] ? __pfx_genl_dumpit+0x10/0x10 [ 1333.351044][T15878] ? __pfx_genl_done+0x10/0x10 [ 1333.351080][T15878] ? bpf_lsm_capable+0x9/0x20 [ 1333.351109][T15878] ? security_capable+0x7e/0x2c0 [ 1333.351152][T15878] genl_rcv_msg+0x5e8/0x7a0 [ 1333.351191][T15878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.351222][T15878] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 1333.351295][T15878] netlink_rcv_skb+0x232/0x4b0 [ 1333.351321][T15878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.351355][T15878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1333.351395][T15878] ? netlink_deliver_tap+0x2e/0x1b0 [ 1333.351420][T15878] ? netlink_deliver_tap+0x2e/0x1b0 [ 1333.351450][T15878] genl_rcv+0x28/0x40 [ 1333.351479][T15878] netlink_unicast+0x780/0x920 [ 1333.351529][T15878] netlink_sendmsg+0x813/0xb40 [ 1333.351566][T15878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.351595][T15878] ? unwind_get_return_address+0x4d/0x90 [ 1333.351633][T15878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1333.351662][T15878] ____sys_sendmsg+0x94c/0x9c0 [ 1333.351698][T15878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.351737][T15878] ? import_iovec+0x73/0xa0 [ 1333.351768][T15878] ___sys_sendmsg+0x2a5/0x360 [ 1333.351793][T15878] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.351830][T15878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.351908][T15878] ? __fget_files+0x2a/0x420 [ 1333.351943][T15878] ? __fget_files+0x3a6/0x420 [ 1333.351991][T15878] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1333.352023][T15878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.352063][T15878] ? __pfx_ksys_write+0x10/0x10 [ 1333.352100][T15878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.352127][T15878] do_syscall_64+0x15f/0xf80 [ 1333.352149][T15878] ? trace_irq_disable+0x3b/0x140 [ 1333.352177][T15878] ? clear_bhb_loop+0x40/0x90 [ 1333.352206][T15878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.352230][T15878] RIP: 0033:0x7fd246dccdd9 [ 1333.352253][T15878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.352274][T15878] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.352300][T15878] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1333.352318][T15878] RDX: 0000000002000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1333.352333][T15878] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.352348][T15878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.352363][T15878] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1333.352401][T15878] [ 1334.084294][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1334.176355][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1334.189704][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1334.215554][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1334.216505][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1334.435761][T15889] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2434'. [ 1335.953729][ T8086] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1336.139238][ T8086] usb 4-1: Using ep0 maxpacket: 8 [ 1336.145616][ T8086] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1336.145651][ T8086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.145676][ T8086] usb 4-1: Product: syz [ 1336.145694][ T8086] usb 4-1: Manufacturer: syz [ 1336.145710][ T8086] usb 4-1: SerialNumber: syz [ 1336.215989][ T8086] usb 4-1: config 0 descriptor?? [ 1336.526140][ T8086] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1337.595135][T13018] Bluetooth: hci2: command tx timeout [ 1338.938877][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1339.006957][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1339.014964][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1339.081522][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1339.102764][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1339.853743][T13018] Bluetooth: hci2: command tx timeout [ 1341.186244][ T8086] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1341.234952][ T5603] usb 4-1: USB disconnect, device number 87 [ 1341.780855][T15958] 9pnet_fd: p9_fd_create_unix (15958): problem connecting socket: ./file0: -111 [ 1341.840057][T13018] Bluetooth: hci3: command tx timeout [ 1342.101265][T13018] Bluetooth: hci2: command tx timeout [ 1343.310461][T15973] FAULT_INJECTION: forcing a failure. [ 1343.310461][T15973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.310504][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.3.2448 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1343.310536][T15973] Tainted: [L]=SOFTLOCKUP [ 1343.310545][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1343.310558][T15973] Call Trace: [ 1343.310568][T15973] [ 1343.310578][T15973] dump_stack_lvl+0xe8/0x150 [ 1343.310611][T15973] should_fail_ex+0x46b/0x600 [ 1343.310654][T15973] _copy_to_user+0x31/0xb0 [ 1343.310683][T15973] generic_map_lookup_batch+0xa39/0xeb0 [ 1343.310746][T15973] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1343.310787][T15973] ? __fget_files+0x2a/0x420 [ 1343.310827][T15973] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1343.310867][T15973] bpf_map_do_batch+0x28e/0x630 [ 1343.310898][T15973] ? security_bpf+0x7e/0x2d0 [ 1343.310933][T15973] __sys_bpf+0x6b4/0x950 [ 1343.310964][T15973] ? __pfx___sys_bpf+0x10/0x10 [ 1343.310988][T15973] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1343.311036][T15973] ? ksys_write+0x248/0x270 [ 1343.311066][T15973] ? __pfx_ksys_write+0x10/0x10 [ 1343.311097][T15973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.311123][T15973] __x64_sys_bpf+0x7c/0x90 [ 1343.311149][T15973] do_syscall_64+0x15f/0xf80 [ 1343.311171][T15973] ? trace_irq_disable+0x3b/0x140 [ 1343.311198][T15973] ? clear_bhb_loop+0x40/0x90 [ 1343.311227][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.311250][T15973] RIP: 0033:0x7fa77c17cdd9 [ 1343.311271][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.311291][T15973] RSP: 002b:00007fa77a3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1343.311316][T15973] RAX: ffffffffffffffda RBX: 00007fa77c3f5fa0 RCX: 00007fa77c17cdd9 [ 1343.311333][T15973] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 1343.311349][T15973] RBP: 00007fa77a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.311364][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.311376][T15973] R13: 00007fa77c3f6038 R14: 00007fa77c3f5fa0 R15: 00007ffe0d21f828 [ 1343.311410][T15973] [ 1343.988933][T10341] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1344.083249][T13018] Bluetooth: hci3: command tx timeout [ 1345.372714][T13018] Bluetooth: hci2: command tx timeout [ 1345.495075][T10341] usb 3-1: Using ep0 maxpacket: 8 [ 1345.498390][T10341] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1345.500063][T10341] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 1345.500084][T10341] usb 3-1: config 5 has no interface number 0 [ 1345.500109][T10341] usb 3-1: config 5 interface 246 has no altsetting 0 [ 1345.502659][T10341] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=94.6c [ 1345.502680][T10341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.502695][T10341] usb 3-1: Product: syz [ 1345.502706][T10341] usb 3-1: Manufacturer: syz [ 1345.502717][T10341] usb 3-1: SerialNumber: syz [ 1345.868764][ T5603] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1346.064406][T10341] hso 3-1:5.246: Not our interface [ 1346.073197][ T5603] usb 7-1: Using ep0 maxpacket: 32 [ 1346.075244][ T5603] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1346.075264][ T5603] usb 7-1: config 0 has no interface number 0 [ 1346.099822][ T5603] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1346.099853][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.099878][ T5603] usb 7-1: Product: syz [ 1346.099889][ T5603] usb 7-1: Manufacturer: syz [ 1346.099901][ T5603] usb 7-1: SerialNumber: syz [ 1346.154433][ T5603] usb 7-1: config 0 descriptor?? [ 1346.217960][T10341] usb 3-1: USB disconnect, device number 111 [ 1346.277213][ T5603] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1346.277246][ T5603] usb 7-1: selecting invalid altsetting 1 [ 1346.277264][ T5603] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1346.339993][T13018] Bluetooth: hci3: command tx timeout [ 1346.360432][ T5603] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1346.362738][ T5603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1346.362799][ T5603] usb 7-1: media controller created [ 1346.461536][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.559922][T15985] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1347.589482][ T5603] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1347.589543][ T5603] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1347.706159][ T5603] usb 7-1: USB disconnect, device number 73 [ 1348.000688][T16003] overlayfs: missing 'workdir' [ 1348.593722][T13018] Bluetooth: hci3: command tx timeout [ 1349.130907][T16019] FAULT_INJECTION: forcing a failure. [ 1349.130907][T16019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.130948][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.2.2460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1349.130979][T16019] Tainted: [L]=SOFTLOCKUP [ 1349.130988][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.131002][T16019] Call Trace: [ 1349.131010][T16019] [ 1349.131020][T16019] dump_stack_lvl+0xe8/0x150 [ 1349.131055][T16019] should_fail_ex+0x46b/0x600 [ 1349.131097][T16019] _copy_from_user+0x2d/0xb0 [ 1349.131133][T16019] ___sys_sendmsg+0x1c6/0x360 [ 1349.131169][T16019] ? __lock_acquire+0x6b5/0x2cf0 [ 1349.131206][T16019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.131289][T16019] ? __fget_files+0x2a/0x420 [ 1349.131323][T16019] ? __fget_files+0x3a6/0x420 [ 1349.131370][T16019] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1349.131402][T16019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1349.131441][T16019] ? __pfx_ksys_write+0x10/0x10 [ 1349.131483][T16019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.131510][T16019] do_syscall_64+0x15f/0xf80 [ 1349.131539][T16019] ? trace_irq_disable+0x3b/0x140 [ 1349.131566][T16019] ? clear_bhb_loop+0x40/0x90 [ 1349.131594][T16019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.131616][T16019] RIP: 0033:0x7fa0478bcdd9 [ 1349.131637][T16019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.131659][T16019] RSP: 002b:00007fa045b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.131684][T16019] RAX: ffffffffffffffda RBX: 00007fa047b35fa0 RCX: 00007fa0478bcdd9 [ 1349.131702][T16019] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1349.131716][T16019] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.131731][T16019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.131745][T16019] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1349.131780][T16019] [ 1350.393486][T16037] overlayfs: missing 'lowerdir' [ 1351.317959][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.318181][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.318411][T15883] bridge_slave_0: entered allmulticast mode [ 1351.321461][T15883] bridge_slave_0: entered promiscuous mode [ 1351.396535][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.396695][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.396905][T15883] bridge_slave_1: entered allmulticast mode [ 1351.406757][T15883] bridge_slave_1: entered promiscuous mode [ 1352.775314][ T3961] bridge_slave_1: left allmulticast mode [ 1352.775355][ T3961] bridge_slave_1: left promiscuous mode [ 1352.775643][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.874549][ T3961] bridge_slave_0: left allmulticast mode [ 1352.874581][ T3961] bridge_slave_0: left promiscuous mode [ 1352.874809][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.296221][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.396952][T16071] program syz.3.2475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1353.681731][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.780450][ T3961] bond0 (unregistering): Released all slaves [ 1353.925932][T15933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.926062][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.926324][T15933] bridge_slave_0: entered allmulticast mode [ 1353.929336][T15933] bridge_slave_0: entered promiscuous mode [ 1357.362516][T16065] gretap0: entered promiscuous mode [ 1357.377304][T16065] vlan3: entered promiscuous mode [ 1358.189556][T15883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.194211][T15933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.194488][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.195060][T15933] bridge_slave_1: entered allmulticast mode [ 1358.215860][T15933] bridge_slave_1: entered promiscuous mode [ 1358.292729][T15883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.909606][ T3961] hsr_slave_0: left promiscuous mode [ 1358.971741][ T3961] hsr_slave_1: left promiscuous mode [ 1358.973077][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.024594][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.051449][T16101] FAULT_INJECTION: forcing a failure. [ 1359.051449][T16101] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.051488][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.2.2486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.051518][T16101] Tainted: [L]=SOFTLOCKUP [ 1359.051526][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.051540][T16101] Call Trace: [ 1359.051549][T16101] [ 1359.051559][T16101] dump_stack_lvl+0xe8/0x150 [ 1359.051592][T16101] should_fail_ex+0x46b/0x600 [ 1359.051643][T16101] should_failslab+0xa8/0x100 [ 1359.051677][T16101] __kmalloc_noprof+0xdf/0x7b0 [ 1359.051705][T16101] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1359.051747][T16101] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1359.051789][T16101] genl_family_rcv_msg_doit+0xd9/0x330 [ 1359.051828][T16101] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1359.051858][T16101] ? rcu_is_watching+0x15/0xb0 [ 1359.051895][T16101] ? rcu_is_watching+0x15/0xb0 [ 1359.051929][T16101] ? cap_capable+0x123/0x460 [ 1359.051958][T16101] ? safesetid_security_capable+0xa9/0x1a0 [ 1359.051990][T16101] ? bpf_lsm_capable+0x9/0x20 [ 1359.052019][T16101] ? security_capable+0x7e/0x2c0 [ 1359.052059][T16101] genl_rcv_msg+0x61c/0x7a0 [ 1359.052096][T16101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1359.052124][T16101] ? ref_tracker_free+0x673/0x820 [ 1359.052145][T16101] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1359.052173][T16101] ? __pfx_nl80211_new_key+0x10/0x10 [ 1359.052204][T16101] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1359.052235][T16101] ? __pfx_ref_tracker_free+0x10/0x10 [ 1359.052269][T16101] netlink_rcv_skb+0x232/0x4b0 [ 1359.052295][T16101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1359.052327][T16101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1359.052383][T16101] ? netlink_deliver_tap+0x2e/0x1b0 [ 1359.052409][T16101] ? netlink_deliver_tap+0x2e/0x1b0 [ 1359.052439][T16101] genl_rcv+0x28/0x40 [ 1359.052468][T16101] netlink_unicast+0x780/0x920 [ 1359.052516][T16101] netlink_sendmsg+0x813/0xb40 [ 1359.052553][T16101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.052582][T16101] ? unwind_get_return_address+0x4d/0x90 [ 1359.052618][T16101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1359.052655][T16101] ____sys_sendmsg+0x94c/0x9c0 [ 1359.052692][T16101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.052731][T16101] ? import_iovec+0x73/0xa0 [ 1359.052761][T16101] ___sys_sendmsg+0x2a5/0x360 [ 1359.052786][T16101] ? __lock_acquire+0x6b5/0x2cf0 [ 1359.052823][T16101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.052892][T16101] ? __fget_files+0x2a/0x420 [ 1359.052927][T16101] ? __fget_files+0x3a6/0x420 [ 1359.052974][T16101] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1359.053006][T16101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1359.053045][T16101] ? __pfx_ksys_write+0x10/0x10 [ 1359.053081][T16101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.053108][T16101] do_syscall_64+0x15f/0xf80 [ 1359.053133][T16101] ? clear_bhb_loop+0x40/0x90 [ 1359.053162][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.053187][T16101] RIP: 0033:0x7fa0478bcdd9 [ 1359.053208][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.053229][T16101] RSP: 002b:00007fa045b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.053254][T16101] RAX: ffffffffffffffda RBX: 00007fa047b35fa0 RCX: 00007fa0478bcdd9 [ 1359.053271][T16101] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1359.053286][T16101] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.053301][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.053315][T16101] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1359.053351][T16101] [ 1359.104406][T10341] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1359.277771][T10341] usb 4-1: Using ep0 maxpacket: 32 [ 1359.287545][T10341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1359.287592][T10341] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1359.287619][T10341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.497201][T10341] usb 4-1: config 0 descriptor?? [ 1361.248002][T16113] FAULT_INJECTION: forcing a failure. [ 1361.248002][T16113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.248177][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.2.2491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1361.248216][T16113] Tainted: [L]=SOFTLOCKUP [ 1361.248225][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1361.248240][T16113] Call Trace: [ 1361.248249][T16113] [ 1361.248258][T16113] dump_stack_lvl+0xe8/0x150 [ 1361.248291][T16113] should_fail_ex+0x46b/0x600 [ 1361.248331][T16113] strncpy_from_user+0x36/0x2b0 [ 1361.248370][T16113] do_getname+0x77/0x250 [ 1361.248408][T16113] path_setxattrat+0x32d/0x440 [ 1361.248453][T16113] ? __pfx_path_setxattrat+0x10/0x10 [ 1361.248508][T16113] ? ksys_write+0x248/0x270 [ 1361.248536][T16113] ? __pfx_ksys_write+0x10/0x10 [ 1361.248569][T16113] __x64_sys_lsetxattr+0xbf/0xe0 [ 1361.248595][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.248620][T16113] do_syscall_64+0x15f/0xf80 [ 1361.248645][T16113] ? clear_bhb_loop+0x40/0x90 [ 1361.248672][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.248693][T16113] RIP: 0033:0x7fa0478bcdd9 [ 1361.248714][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.248735][T16113] RSP: 002b:00007fa045af5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1361.248760][T16113] RAX: ffffffffffffffda RBX: 00007fa047b36090 RCX: 00007fa0478bcdd9 [ 1361.248778][T16113] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000000 [ 1361.248794][T16113] RBP: 00007fa045af5090 R08: 0000000000000001 R09: 0000000000000000 [ 1361.248807][T16113] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1361.248820][T16113] R13: 00007fa047b36128 R14: 00007fa047b36090 R15: 00007fffd0a0e3b8 [ 1361.248853][T16113] [ 1361.886763][T10341] thrustmaster 0003:044F:B323.000D: unexpected long global item [ 1361.894606][T10341] thrustmaster 0003:044F:B323.000D: parse failed [ 1361.894689][T10341] thrustmaster 0003:044F:B323.000D: probe with driver thrustmaster failed with error -22 [ 1363.408067][ T5724] usb 4-1: USB disconnect, device number 88 [ 1363.863994][ T3961] team0 (unregistering): Port device team_slave_1 removed [ 1363.933864][ T3961] team0 (unregistering): Port device team_slave_0 removed [ 1364.357300][T15933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.357407][T16094] FAULT_INJECTION: forcing a failure. [ 1364.357407][T16094] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.357444][T16094] CPU: 1 UID: 0 PID: 16094 Comm: syz.6.2482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1364.357476][T16094] Tainted: [L]=SOFTLOCKUP [ 1364.357490][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1364.357503][T16094] Call Trace: [ 1364.357512][T16094] [ 1364.357522][T16094] dump_stack_lvl+0xe8/0x150 [ 1364.357556][T16094] should_fail_ex+0x46b/0x600 [ 1364.357599][T16094] should_failslab+0xa8/0x100 [ 1364.357629][T16094] __kmalloc_node_noprof+0xe7/0x7f0 [ 1364.357659][T16094] ? qdisc_alloc+0x92/0x9f0 [ 1364.357725][T16094] qdisc_alloc+0x92/0x9f0 [ 1364.357768][T16094] ? rt_read_unlock+0x16d/0x220 [ 1364.357804][T16094] qdisc_create+0x12c/0xf20 [ 1364.357847][T16094] tc_modify_qdisc+0x16f0/0x2290 [ 1364.357880][T16094] ? lockdep_hardirqs_on+0x7a/0x110 [ 1364.357926][T16094] ? rt_mutex_slowlock+0x420/0x780 [ 1364.357966][T16094] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1364.358016][T16094] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 1364.358066][T16094] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1364.358100][T16094] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1364.358134][T16094] ? kasan_save_track+0x3e/0x80 [ 1364.358157][T16094] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1364.358185][T16094] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1364.358220][T16094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1364.358256][T16094] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.358302][T16094] netlink_rcv_skb+0x232/0x4b0 [ 1364.358327][T16094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1364.358370][T16094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1364.358409][T16094] ? netlink_deliver_tap+0x2e/0x1b0 [ 1364.358433][T16094] ? netlink_deliver_tap+0x2e/0x1b0 [ 1364.358461][T16094] netlink_unicast+0x780/0x920 [ 1364.358509][T16094] netlink_sendmsg+0x813/0xb40 [ 1364.358542][T16094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1364.358569][T16094] ? unwind_get_return_address+0x4d/0x90 [ 1364.358602][T16094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1364.358630][T16094] ____sys_sendmsg+0x94c/0x9c0 [ 1364.358662][T16094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1364.358701][T16094] ? import_iovec+0x73/0xa0 [ 1364.358729][T16094] ___sys_sendmsg+0x2a5/0x360 [ 1364.358755][T16094] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.358790][T16094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1364.358855][T16094] ? __fget_files+0x2a/0x420 [ 1364.358888][T16094] ? __fget_files+0x3a6/0x420 [ 1364.359004][T16094] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1364.359035][T16094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1364.359074][T16094] ? __pfx_ksys_write+0x10/0x10 [ 1364.359109][T16094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.359135][T16094] do_syscall_64+0x15f/0xf80 [ 1364.359155][T16094] ? trace_irq_disable+0x3b/0x140 [ 1364.359181][T16094] ? clear_bhb_loop+0x40/0x90 [ 1364.359208][T16094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.359232][T16094] RIP: 0033:0x7fd246dccdd9 [ 1364.359254][T16094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.359273][T16094] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1364.359298][T16094] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1364.359316][T16094] RDX: 0000000000008010 RSI: 0000200000001200 RDI: 0000000000000003 [ 1364.359331][T16094] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.359345][T16094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.359359][T16094] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1364.359396][T16094] [ 1364.816263][T15883] team0: Port device team_slave_0 added [ 1364.851034][T15933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.869527][T15883] team0: Port device team_slave_1 added [ 1365.108593][ T5724] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1365.520981][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 1365.529283][ T5724] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1365.529313][ T5724] usb 4-1: config 0 has no interface number 0 [ 1365.562908][ T5724] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1365.562940][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.562962][ T5724] usb 4-1: Product: syz [ 1365.562979][ T5724] usb 4-1: Manufacturer: syz [ 1365.562995][ T5724] usb 4-1: SerialNumber: syz [ 1365.635065][ T5724] usb 4-1: config 0 descriptor?? [ 1365.685655][T15933] team0: Port device team_slave_0 added [ 1365.691035][ T5724] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1365.691066][ T5724] usb 4-1: selecting invalid altsetting 1 [ 1365.691110][ T5724] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1365.744126][ T5724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1365.752339][ T5724] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1365.752497][ T5724] usb 4-1: media controller created [ 1365.779817][T15883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.779846][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.779877][T15883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.826039][T15933] team0: Port device team_slave_1 added [ 1365.827602][T15883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.827618][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.827649][T15883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.226951][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1367.109008][T16123] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1367.146519][ T5724] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1367.146577][ T5724] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1367.147080][ T5724] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1367.178930][T15933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.178986][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.179076][T15933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.564371][T15933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.564392][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.564424][T15933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.848793][ T5724] usb 4-1: USB disconnect, device number 89 [ 1367.902777][T15883] hsr_slave_0: entered promiscuous mode [ 1367.952978][T15883] hsr_slave_1: entered promiscuous mode [ 1367.957529][T15883] debugfs: 'hsr0' already exists in 'hsr' [ 1367.957551][T15883] Cannot create hsr debugfs directory [ 1369.755779][T15933] hsr_slave_0: entered promiscuous mode [ 1369.756770][T15933] hsr_slave_1: entered promiscuous mode [ 1369.758262][T15933] debugfs: 'hsr0' already exists in 'hsr' [ 1369.758290][T15933] Cannot create hsr debugfs directory [ 1370.182481][ T5603] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1371.140554][ T5603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.140592][ T5603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.142192][ T5603] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1371.142225][ T5603] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1371.142247][ T5603] usb 7-1: Manufacturer: syz [ 1371.201177][ T5603] usb 7-1: config 0 descriptor?? [ 1374.634423][ T5603] usbhid 7-1:0.0: can't add hid device: -71 [ 1374.634588][ T5603] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1374.731516][ T5603] usb 7-1: USB disconnect, device number 74 [ 1374.906599][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1375.438380][ T10] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1375.458698][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1375.625025][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1375.627895][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1375.627922][ T10] usb 7-1: config 0 has no interface number 0 [ 1375.653262][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1375.653296][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.653341][ T10] usb 7-1: Product: syz [ 1375.653357][ T10] usb 7-1: Manufacturer: syz [ 1375.653374][ T10] usb 7-1: SerialNumber: syz [ 1375.730082][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1375.732729][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1375.732756][ T9] usb 4-1: config 0 has no interface number 0 [ 1375.738279][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1375.738310][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.738333][ T9] usb 4-1: Product: syz [ 1375.738350][ T9] usb 4-1: Manufacturer: syz [ 1375.738372][ T9] usb 4-1: SerialNumber: syz [ 1375.817524][ T10] usb 7-1: config 0 descriptor?? [ 1375.819916][ T9] usb 4-1: config 0 descriptor?? [ 1375.877874][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1375.877904][ T10] usb 7-1: selecting invalid altsetting 1 [ 1375.877923][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1375.893945][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1375.893973][ T9] usb 4-1: selecting invalid altsetting 1 [ 1375.893989][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1375.945849][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1375.946389][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1375.946447][ T10] usb 7-1: media controller created [ 1375.978452][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1376.016505][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.019823][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1376.019899][ T9] usb 4-1: media controller created [ 1376.143518][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1377.262452][T16193] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1377.281327][T16191] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1377.408111][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1377.408168][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1377.408673][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1377.557547][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1377.557607][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1377.558110][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1378.095962][T16197] macvlan3: entered promiscuous mode [ 1378.095987][T16197] bond0: entered promiscuous mode [ 1378.096004][T16197] bond_slave_0: entered promiscuous mode [ 1378.096265][T16197] bridge0: entered promiscuous mode [ 1378.228053][T16197] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1378.447357][ T9] usb 4-1: USB disconnect, device number 90 [ 1378.616980][ T10] usb 7-1: USB disconnect, device number 75 [ 1378.881249][ T5724] IPVS: starting estimator thread 0... [ 1379.002548][T16217] IPVS: using max 9 ests per chain, 21600 per kthread [ 1379.807317][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1379.807391][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.118892][ T5594] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1380.281487][ T5594] usb 7-1: Using ep0 maxpacket: 32 [ 1380.284181][ T5594] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1380.284245][ T5594] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1380.284273][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.334961][ T5594] usb 7-1: config 0 descriptor?? [ 1380.368425][T13089] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1380.542969][T13089] usb 3-1: Using ep0 maxpacket: 32 [ 1380.546713][T13089] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1380.546741][T13089] usb 3-1: config 0 has no interface number 0 [ 1380.568459][ T5603] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1380.600067][T13089] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1380.600166][T13089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.600191][T13089] usb 3-1: Product: syz [ 1380.600208][T13089] usb 3-1: Manufacturer: syz [ 1380.600224][T13089] usb 3-1: SerialNumber: syz [ 1380.757455][T13089] usb 3-1: config 0 descriptor?? [ 1380.772500][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 1380.841125][ T5603] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1380.841160][ T5603] usb 4-1: config 0 has no interface number 0 [ 1380.871025][ T5603] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1380.871134][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.871158][ T5603] usb 4-1: Product: syz [ 1380.871175][ T5603] usb 4-1: Manufacturer: syz [ 1380.871192][ T5603] usb 4-1: SerialNumber: syz [ 1380.973359][T13089] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1380.973390][T13089] usb 3-1: selecting invalid altsetting 1 [ 1380.973408][T13089] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1381.090533][ T5594] thrustmaster 0003:044F:B323.000E: unexpected long global item [ 1381.091160][ T5594] thrustmaster 0003:044F:B323.000E: parse failed [ 1381.091223][ T5594] thrustmaster 0003:044F:B323.000E: probe with driver thrustmaster failed with error -22 [ 1381.176632][ T5603] usb 4-1: config 0 descriptor?? [ 1381.228942][ T5603] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1381.228971][ T5603] usb 4-1: selecting invalid altsetting 1 [ 1381.228988][ T5603] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1381.317233][ T5603] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1381.328743][ T5603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1381.328911][ T5603] usb 4-1: media controller created [ 1381.350571][T13089] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1381.351106][T13089] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1381.351173][T13089] usb 3-1: media controller created [ 1381.419877][T16231] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1381.445588][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1381.493118][T13089] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1381.591789][ T5603] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1381.591848][ T5603] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1381.649972][ T5603] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1381.658356][T13089] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1381.658415][T13089] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1381.658961][T13089] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1381.810823][T13089] usb 3-1: USB disconnect, device number 112 [ 1381.813129][ T5594] usb 7-1: USB disconnect, device number 76 [ 1381.899104][ T5603] usb 4-1: USB disconnect, device number 91 [ 1384.883909][T16249] gfs2: error -5 reading superblock [ 1385.203690][T16254] FAULT_INJECTION: forcing a failure. [ 1385.203690][T16254] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.203734][T16254] CPU: 1 UID: 0 PID: 16254 Comm: syz.6.2526 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1385.203766][T16254] Tainted: [L]=SOFTLOCKUP [ 1385.203775][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1385.203788][T16254] Call Trace: [ 1385.203798][T16254] [ 1385.203808][T16254] dump_stack_lvl+0xe8/0x150 [ 1385.203843][T16254] should_fail_ex+0x46b/0x600 [ 1385.203887][T16254] should_failslab+0xa8/0x100 [ 1385.203919][T16254] kmem_cache_alloc_noprof+0x87/0x680 [ 1385.203945][T16254] ? security_inode_alloc+0x39/0x310 [ 1385.203976][T16254] security_inode_alloc+0x39/0x310 [ 1385.204003][T16254] inode_init_always_gfp+0x99a/0xd50 [ 1385.204045][T16254] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1385.204071][T16254] alloc_inode+0x82/0x1b0 [ 1385.204106][T16254] new_inode+0x22/0x170 [ 1385.204139][T16254] ? get_pid_task+0x20/0x1f0 [ 1385.204174][T16254] proc_pid_make_inode+0x21/0x130 [ 1385.204206][T16254] proc_ns_dir_lookup+0x697/0x7c0 [ 1385.204234][T16254] __lookup_slow+0x2d2/0x440 [ 1385.204264][T16254] ? __pfx___lookup_slow+0x10/0x10 [ 1385.204316][T16254] ? down_read+0x156/0x200 [ 1385.204340][T16254] ? __pfx_down_read+0x10/0x10 [ 1385.204366][T16254] ? lookup_fast+0x192/0x5b0 [ 1385.204394][T16254] lookup_slow+0x53/0x70 [ 1385.204443][T16254] path_lookupat+0x3f5/0x8c0 [ 1385.204496][T16254] filename_lookup+0x256/0x5d0 [ 1385.204538][T16254] ? __pfx_filename_lookup+0x10/0x10 [ 1385.204603][T16254] ? strncpy_from_user+0x150/0x2b0 [ 1385.204641][T16254] ? do_getname+0x151/0x250 [ 1385.204678][T16254] __se_sys_name_to_handle_at+0x183/0x910 [ 1385.204719][T16254] ? __pfx___se_sys_name_to_handle_at+0x10/0x10 [ 1385.204750][T16254] ? ksys_write+0x248/0x270 [ 1385.204791][T16254] ? __x64_sys_name_to_handle_at+0x20/0xc0 [ 1385.204823][T16254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.204850][T16254] do_syscall_64+0x15f/0xf80 [ 1385.204871][T16254] ? trace_irq_disable+0x3b/0x140 [ 1385.204900][T16254] ? clear_bhb_loop+0x40/0x90 [ 1385.204929][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.204954][T16254] RIP: 0033:0x7fd246dccdd9 [ 1385.204976][T16254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.204997][T16254] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 1385.205022][T16254] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1385.205040][T16254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1385.205055][T16254] RBP: 00007fd245026090 R08: 0000000000000600 R09: 0000000000000000 [ 1385.205070][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.205084][T16254] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1385.205122][T16254] [ 1385.460951][ T6760] kworker/u8:19 (6760) used greatest stack depth: 16032 bytes left [ 1386.339674][ T5594] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1386.524189][ T5594] usb 4-1: Using ep0 maxpacket: 32 [ 1386.526977][ T5594] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1386.527006][ T5594] usb 4-1: config 0 has no interface number 0 [ 1386.529909][ T5594] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1386.529936][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.529954][ T5594] usb 4-1: Product: syz [ 1386.529966][ T5594] usb 4-1: Manufacturer: syz [ 1386.529979][ T5594] usb 4-1: SerialNumber: syz [ 1386.605541][ T5594] usb 4-1: config 0 descriptor?? [ 1386.643944][ T5594] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1386.643974][ T5594] usb 4-1: selecting invalid altsetting 1 [ 1386.643992][ T5594] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1386.681573][ T5594] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1386.681966][ T5594] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1386.682016][ T5594] usb 4-1: media controller created [ 1386.775560][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1386.794827][ T9] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1386.992526][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1386.999245][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1386.999275][ T9] usb 7-1: config 0 has no interface number 0 [ 1387.006053][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1387.006087][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.006112][ T9] usb 7-1: Product: syz [ 1387.006160][ T9] usb 7-1: Manufacturer: syz [ 1387.006213][ T9] usb 7-1: SerialNumber: syz [ 1387.284813][ T9] usb 7-1: config 0 descriptor?? [ 1387.641393][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1387.641425][ T9] usb 7-1: selecting invalid altsetting 1 [ 1387.641445][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1387.680473][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1387.681303][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1387.681401][ T9] usb 7-1: media controller created [ 1387.784382][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1387.954816][T16261] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1387.983259][ T5594] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1387.983337][ T5594] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1387.984114][ T5594] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1387.998250][T16265] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1388.160448][ T5594] usb 4-1: USB disconnect, device number 92 [ 1388.314937][ T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1388.314997][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1388.315501][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1389.475685][ T9] usb 7-1: USB disconnect, device number 77 [ 1393.381719][ T5603] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1393.471767][ T5724] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1394.164535][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 1394.167516][ T5724] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.167545][ T5724] usb 3-1: config 0 has no interface number 0 [ 1394.171307][ T5724] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1394.171338][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.171370][ T5724] usb 3-1: Product: syz [ 1394.171387][ T5724] usb 3-1: Manufacturer: syz [ 1394.171404][ T5724] usb 3-1: SerialNumber: syz [ 1394.236829][ T5724] usb 3-1: config 0 descriptor?? [ 1394.261791][ T5724] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1394.261824][ T5724] usb 3-1: selecting invalid altsetting 1 [ 1394.261848][ T5724] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1394.289914][ T5724] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1394.291334][ T5724] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1394.291398][ T5724] usb 3-1: media controller created [ 1394.333102][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1394.438109][ T5603] usb 7-1: Using ep0 maxpacket: 32 [ 1394.463418][ T5603] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.463448][ T5603] usb 7-1: config 0 has no interface number 0 [ 1395.898814][ T5603] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1395.898849][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.898872][ T5603] usb 7-1: Product: syz [ 1395.898889][ T5603] usb 7-1: Manufacturer: syz [ 1395.898906][ T5603] usb 7-1: SerialNumber: syz [ 1395.915963][ T5603] usb 7-1: config 0 descriptor?? [ 1395.934804][ T5603] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1395.934836][ T5603] usb 7-1: selecting invalid altsetting 1 [ 1395.934854][ T5603] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1396.019548][ T5603] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1396.019997][ T5603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1396.020050][ T5603] usb 7-1: media controller created [ 1396.065018][ T5724] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1396.065193][ T5724] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1396.108004][ T5724] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1396.200546][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1396.327938][ T5603] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1396.327998][ T5603] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1396.329090][ T5603] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1396.638795][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1396.876184][ T5724] usb 3-1: USB disconnect, device number 113 [ 1396.915984][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1396.922541][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1396.922583][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1396.922659][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.103584][ T5603] usb 7-1: USB disconnect, device number 78 [ 1397.128844][ T10] usb 4-1: config 0 descriptor?? [ 1397.326023][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1397.481153][ T5724] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1398.075199][ T5724] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 1398.227935][ T5724] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1398.227970][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.227994][ T5724] usb 3-1: Product: syz [ 1398.228011][ T5724] usb 3-1: Manufacturer: syz [ 1398.228027][ T5724] usb 3-1: SerialNumber: syz [ 1398.511722][ T10] thrustmaster 0003:044F:B323.000F: unexpected long global item [ 1398.512515][ T10] thrustmaster 0003:044F:B323.000F: parse failed [ 1398.512590][ T10] thrustmaster 0003:044F:B323.000F: probe with driver thrustmaster failed with error -22 [ 1398.683467][ T5594] usb 4-1: USB disconnect, device number 93 [ 1399.267366][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1399.267429][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1399.449371][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1400.647637][ T5724] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1401.035785][ T5724] usb 3-1: USB disconnect, device number 114 [ 1401.480309][ T1058] bridge_slave_1: left allmulticast mode [ 1401.480349][ T1058] bridge_slave_1: left promiscuous mode [ 1401.480622][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.718122][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1402.094581][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1402.130497][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1402.215210][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1402.341524][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1402.913419][ T1058] bridge_slave_0: left allmulticast mode [ 1403.107007][ T1058] bridge_slave_0: left promiscuous mode [ 1403.107326][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.522818][T16379] FAULT_INJECTION: forcing a failure. [ 1404.522818][T16379] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.522864][T16379] CPU: 1 UID: 0 PID: 16379 Comm: syz.2.2554 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1404.522922][T16379] Tainted: [L]=SOFTLOCKUP [ 1404.522938][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1404.522964][T16379] Call Trace: [ 1404.522974][T16379] [ 1404.522984][T16379] dump_stack_lvl+0xe8/0x150 [ 1404.523019][T16379] should_fail_ex+0x46b/0x600 [ 1404.523064][T16379] should_failslab+0xa8/0x100 [ 1404.523097][T16379] __kvmalloc_node_noprof+0x170/0x8e0 [ 1404.523129][T16379] ? traverse+0xde/0x580 [ 1404.523166][T16379] traverse+0xde/0x580 [ 1404.523194][T16379] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1404.523237][T16379] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1404.523276][T16379] ? seq_read_iter+0xb8/0xe20 [ 1404.523308][T16379] seq_read_iter+0xd09/0xe20 [ 1404.523337][T16379] ? _parse_integer_limit+0x1ae/0x1f0 [ 1404.523379][T16379] ? __asan_memset+0x22/0x50 [ 1404.523420][T16379] seq_read+0x36a/0x490 [ 1404.523457][T16379] ? get_pid_task+0x20/0x1f0 [ 1404.523497][T16379] ? __pfx_seq_read+0x10/0x10 [ 1404.523542][T16379] ? __pfx_seq_read+0x10/0x10 [ 1404.523568][T16379] proc_reg_read+0x1f6/0x2f0 [ 1404.523591][T16379] ? __pfx_proc_reg_read+0x10/0x10 [ 1404.523618][T16379] vfs_read+0x212/0xa80 [ 1404.523670][T16379] ? __pfx_vfs_read+0x10/0x10 [ 1404.523697][T16379] ? __fget_files+0x2a/0x420 [ 1404.523741][T16379] ? __fget_files+0x2a/0x420 [ 1404.523790][T16379] ? __fget_files+0x3a6/0x420 [ 1404.523824][T16379] ? __fget_files+0x2a/0x420 [ 1404.523866][T16379] __x64_sys_pread64+0x19c/0x230 [ 1404.523896][T16379] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1404.523932][T16379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.523971][T16379] do_syscall_64+0x15f/0xf80 [ 1404.523991][T16379] ? trace_irq_disable+0x3b/0x140 [ 1404.524016][T16379] ? clear_bhb_loop+0x40/0x90 [ 1404.524044][T16379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.524067][T16379] RIP: 0033:0x7fa0478bcdd9 [ 1404.524088][T16379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.524107][T16379] RSP: 002b:00007fa045b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1404.524131][T16379] RAX: ffffffffffffffda RBX: 00007fa047b35fa0 RCX: 00007fa0478bcdd9 [ 1404.524147][T16379] RDX: 0000000000018fd6 RSI: 0000200000019080 RDI: 0000000000000003 [ 1404.524162][T16379] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.524176][T16379] R10: 0000000000000c2a R11: 0000000000000246 R12: 0000000000000001 [ 1404.524189][T16379] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1404.524221][T16379] [ 1404.687983][T13018] Bluetooth: hci5: command tx timeout [ 1405.278574][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1405.314466][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1405.585399][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1405.601229][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1405.626147][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1405.642904][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1405.815151][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1405.827553][ T9] usb 3-1: no configurations [ 1405.827634][ T9] usb 3-1: can't read configurations, error -22 [ 1405.992346][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1406.378657][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1406.382733][ T9] usb 3-1: no configurations [ 1406.382755][ T9] usb 3-1: can't read configurations, error -22 [ 1406.384560][ T9] usb usb3-port1: attempt power cycle [ 1406.733241][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.823048][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1406.858702][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1406.859438][ T9] usb 3-1: no configurations [ 1406.859455][ T9] usb 3-1: can't read configurations, error -22 [ 1406.869427][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.942333][ T5595] Bluetooth: hci5: command tx timeout [ 1406.978768][ T1058] bond0 (unregistering): Released all slaves [ 1407.028978][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1407.062079][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1407.068938][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1407.070429][ T9] usb 3-1: no configurations [ 1407.070449][ T9] usb 3-1: can't read configurations, error -22 [ 1407.070953][ T9] usb usb3-port1: unable to enumerate USB device [ 1408.014263][ T5595] Bluetooth: hci6: command tx timeout [ 1408.162716][T16394] FAULT_INJECTION: forcing a failure. [ 1408.162716][T16394] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.162768][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.6.2556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1408.162799][T16394] Tainted: [L]=SOFTLOCKUP [ 1408.162808][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1408.162820][T16394] Call Trace: [ 1408.162828][T16394] [ 1408.162838][T16394] dump_stack_lvl+0xe8/0x150 [ 1408.162870][T16394] should_fail_ex+0x46b/0x600 [ 1408.162913][T16394] should_failslab+0xa8/0x100 [ 1408.162941][T16394] __kmalloc_noprof+0xdf/0x7b0 [ 1408.162967][T16394] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1408.163010][T16394] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1408.163050][T16394] genl_family_rcv_msg_doit+0xd9/0x330 [ 1408.163089][T16394] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1408.163123][T16394] ? rcu_is_watching+0x15/0xb0 [ 1408.163158][T16394] ? cap_capable+0x123/0x460 [ 1408.163189][T16394] ? safesetid_security_capable+0xa9/0x1a0 [ 1408.163225][T16394] ? bpf_lsm_capable+0x9/0x20 [ 1408.163262][T16394] ? security_capable+0x7e/0x2c0 [ 1408.163303][T16394] genl_rcv_msg+0x61c/0x7a0 [ 1408.163340][T16394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1408.163369][T16394] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 1408.163452][T16394] netlink_rcv_skb+0x232/0x4b0 [ 1408.163477][T16394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1408.163509][T16394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.163548][T16394] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.163572][T16394] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.163602][T16394] genl_rcv+0x28/0x40 [ 1408.163628][T16394] netlink_unicast+0x780/0x920 [ 1408.163675][T16394] netlink_sendmsg+0x813/0xb40 [ 1408.163710][T16394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.163737][T16394] ? unwind_get_return_address+0x4d/0x90 [ 1408.163772][T16394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1408.163800][T16394] ____sys_sendmsg+0x94c/0x9c0 [ 1408.163833][T16394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.163868][T16394] ? import_iovec+0x73/0xa0 [ 1408.163898][T16394] ___sys_sendmsg+0x2a5/0x360 [ 1408.163922][T16394] ? __lock_acquire+0x6b5/0x2cf0 [ 1408.163958][T16394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.164024][T16394] ? __fget_files+0x2a/0x420 [ 1408.164057][T16394] ? __fget_files+0x3a6/0x420 [ 1408.164103][T16394] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1408.164134][T16394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.164172][T16394] ? __pfx_ksys_write+0x10/0x10 [ 1408.164208][T16394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.164234][T16394] do_syscall_64+0x15f/0xf80 [ 1408.164262][T16394] ? trace_irq_disable+0x3b/0x140 [ 1408.164290][T16394] ? clear_bhb_loop+0x40/0x90 [ 1408.164319][T16394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.164342][T16394] RIP: 0033:0x7fd246dccdd9 [ 1408.164364][T16394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.164383][T16394] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.164408][T16394] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1408.164423][T16394] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 1408.164436][T16394] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.164449][T16394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.164462][T16394] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1408.164497][T16394] [ 1408.608442][T16398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.196619][ T5595] Bluetooth: hci5: command tx timeout [ 1409.792656][ T5603] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1409.973866][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1409.973904][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.975558][ T5603] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1409.975588][ T5603] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1409.975611][ T5603] usb 4-1: Manufacturer: syz [ 1410.170672][ T5603] usb 4-1: config 0 descriptor?? [ 1410.273333][ T5595] Bluetooth: hci6: command tx timeout [ 1410.520133][ T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1410.761638][ T5603] cougar 0003:060B:700A.0010: unknown main item tag 0x0 [ 1410.761641][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1410.761680][ T5603] cougar 0003:060B:700A.0010: unknown main item tag 0x0 [ 1410.761680][ T9] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1410.761704][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.761709][ T5603] cougar 0003:060B:700A.0010: unknown main item tag 0x0 [ 1410.761738][ T5603] cougar 0003:060B:700A.0010: unknown main item tag 0x0 [ 1410.761765][ T5603] cougar 0003:060B:700A.0010: unknown main item tag 0x0 [ 1411.557017][T16410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.761303][ T9] usb 7-1: config 0 descriptor?? [ 1411.767489][T16410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.831801][ T5603] cougar 0003:060B:700A.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1411.863525][ T5595] Bluetooth: hci5: command tx timeout [ 1412.226619][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1412.491574][ T5595] Bluetooth: hci6: command tx timeout [ 1412.526555][ T1058] hsr_slave_0: left promiscuous mode [ 1413.742682][ T1058] hsr_slave_1: left promiscuous mode [ 1413.764651][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.349233][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.810473][ T5595] Bluetooth: hci6: command tx timeout [ 1417.571889][ T9] usbhid 7-1:0.0: can't add hid device: -32 [ 1417.571986][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1418.803815][T16425] syz.3.2561 (16425): drop_caches: 2 [ 1418.845339][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 1419.399659][ T1058] team0 (unregistering): Port device team_slave_0 removed [ 1420.310482][ T5594] usb 7-1: USB disconnect, device number 79 [ 1420.587728][T16384] usb 4-1: USB disconnect, device number 94 [ 1421.083995][T16450] FAULT_INJECTION: forcing a failure. [ 1421.083995][T16450] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.084039][T16450] CPU: 1 UID: 0 PID: 16450 Comm: syz.3.2565 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1421.084082][T16450] Tainted: [L]=SOFTLOCKUP [ 1421.084092][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1421.084106][T16450] Call Trace: [ 1421.084115][T16450] [ 1421.084125][T16450] dump_stack_lvl+0xe8/0x150 [ 1421.084160][T16450] should_fail_ex+0x46b/0x600 [ 1421.084203][T16450] should_failslab+0xa8/0x100 [ 1421.084235][T16450] __kmalloc_noprof+0xdf/0x7b0 [ 1421.084261][T16450] ? kfree+0x4d/0x6c0 [ 1421.084282][T16450] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1421.084327][T16450] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1421.084367][T16450] ? tomoyo_domain+0xd8/0x130 [ 1421.084399][T16450] tomoyo_path_perm+0x283/0x560 [ 1421.084430][T16450] ? tomoyo_path_perm+0x251/0x560 [ 1421.084460][T16450] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1421.084526][T16450] ? __pfx_current_check_access_path+0x10/0x10 [ 1421.084557][T16450] ? __d_lookup+0x66/0x780 [ 1421.084588][T16450] ? __d_lookup+0x66/0x780 [ 1421.084612][T16450] ? __d_lookup+0x6df/0x780 [ 1421.084641][T16450] tomoyo_path_rmdir+0xaa/0xf0 [ 1421.084666][T16450] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1421.084697][T16450] ? d_lookup+0xa0/0xc0 [ 1421.084727][T16450] security_path_rmdir+0x15f/0x330 [ 1421.084756][T16450] filename_rmdir+0x20d/0x520 [ 1421.084794][T16450] ? __pfx_filename_rmdir+0x10/0x10 [ 1421.084832][T16450] ? do_getname+0x151/0x250 [ 1421.084864][T16450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.084891][T16450] __se_sys_rmdir+0x2e/0x140 [ 1421.084921][T16450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.084946][T16450] do_syscall_64+0x15f/0xf80 [ 1421.084970][T16450] ? trace_irq_disable+0x3b/0x140 [ 1421.084997][T16450] ? clear_bhb_loop+0x40/0x90 [ 1421.085025][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.085049][T16450] RIP: 0033:0x7fa77c17cdd9 [ 1421.085078][T16450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.085100][T16450] RSP: 002b:00007fa77a38c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1421.085126][T16450] RAX: ffffffffffffffda RBX: 00007fa77c3f6180 RCX: 00007fa77c17cdd9 [ 1421.085144][T16450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1421.085158][T16450] RBP: 00007fa77a38c090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.085173][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.085187][T16450] R13: 00007fa77c3f6218 R14: 00007fa77c3f6180 R15: 00007ffe0d21f828 [ 1421.085229][T16450] [ 1421.085251][T16450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1421.294319][T16453] FAULT_INJECTION: forcing a failure. [ 1421.294319][T16453] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.294362][T16453] CPU: 1 UID: 0 PID: 16453 Comm: syz.6.2567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1421.294394][T16453] Tainted: [L]=SOFTLOCKUP [ 1421.294402][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1421.294417][T16453] Call Trace: [ 1421.294426][T16453] [ 1421.294437][T16453] dump_stack_lvl+0xe8/0x150 [ 1421.294474][T16453] should_fail_ex+0x46b/0x600 [ 1421.294517][T16453] should_failslab+0xa8/0x100 [ 1421.294549][T16453] kmem_cache_alloc_noprof+0x87/0x680 [ 1421.294574][T16453] ? rcu_is_watching+0x15/0xb0 [ 1421.294607][T16453] ? security_file_alloc+0x34/0x310 [ 1421.294643][T16453] security_file_alloc+0x34/0x310 [ 1421.294675][T16453] init_file+0x96/0x2d0 [ 1421.294710][T16453] alloc_empty_file+0x74/0x1d0 [ 1421.294746][T16453] path_openat+0x11b/0x38a0 [ 1421.294783][T16453] ? try_to_take_rt_mutex+0x840/0xb00 [ 1421.294814][T16453] ? arch_stack_walk+0xfb/0x150 [ 1421.294857][T16453] ? __lock_acquire+0x6b5/0x2cf0 [ 1421.294896][T16453] ? __pfx_path_openat+0x10/0x10 [ 1421.294926][T16453] ? kasan_save_track+0x4f/0x80 [ 1421.294949][T16453] ? kasan_save_track+0x3e/0x80 [ 1421.294970][T16453] ? __kasan_slab_alloc+0x6c/0x80 [ 1421.294993][T16453] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1421.295035][T16453] ? do_raw_spin_lock+0x12b/0x2f0 [ 1421.295072][T16453] do_file_open+0x23e/0x4a0 [ 1421.295098][T16453] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1421.295139][T16453] ? __pfx_do_file_open+0x10/0x10 [ 1421.295164][T16453] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1421.295219][T16453] ? alloc_fd+0x64e/0x6c0 [ 1421.295266][T16453] do_sys_openat2+0x113/0x200 [ 1421.295303][T16453] ? __pfx_do_sys_openat2+0x10/0x10 [ 1421.295340][T16453] ? exc_page_fault+0x6a/0xc0 [ 1421.295381][T16453] ? do_user_addr_fault+0xc6f/0x1340 [ 1421.295411][T16453] __x64_sys_openat+0x138/0x170 [ 1421.295449][T16453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.295475][T16453] do_syscall_64+0x15f/0xf80 [ 1421.295496][T16453] ? trace_irq_disable+0x3b/0x140 [ 1421.295524][T16453] ? clear_bhb_loop+0x40/0x90 [ 1421.295553][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.295577][T16453] RIP: 0033:0x7fd246d8d60e [ 1421.295598][T16453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1421.295618][T16453] RSP: 002b:00007fd245023ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1421.295643][T16453] RAX: ffffffffffffffda RBX: 00007fd2450266c0 RCX: 00007fd246d8d60e [ 1421.295661][T16453] RDX: 0000000000000002 RSI: 00007fd246e62060 RDI: ffffffffffffff9c [ 1421.295677][T16453] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.295691][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000aa [ 1421.295705][T16453] R13: 0000200000000000 R14: 0000000000000005 R15: 00007ffce515a618 [ 1421.295740][T16453] [ 1422.993225][T16384] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1423.155580][T16384] usb 7-1: Using ep0 maxpacket: 32 [ 1423.160679][T16384] usb 7-1: config 16 has an invalid descriptor of length 67, skipping remainder of the config [ 1423.160706][T16384] usb 7-1: config 16 has no interfaces? [ 1423.164066][T16384] usb 7-1: New USB device found, idVendor=0438, idProduct=9901, bcdDevice=c2.57 [ 1423.164098][T16384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.164121][T16384] usb 7-1: Product: syz [ 1423.164137][T16384] usb 7-1: Manufacturer: syz [ 1423.164164][T16384] usb 7-1: SerialNumber: syz [ 1423.482600][ T5256] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1424.309601][ T5594] usb 7-1: USB disconnect, device number 80 [ 1425.184351][T16483] FAULT_INJECTION: forcing a failure. [ 1425.184351][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.184392][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.6.2575 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1425.184423][T16483] Tainted: [L]=SOFTLOCKUP [ 1425.184431][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1425.184444][T16483] Call Trace: [ 1425.184453][T16483] [ 1425.184463][T16483] dump_stack_lvl+0xe8/0x150 [ 1425.184497][T16483] should_fail_ex+0x46b/0x600 [ 1425.184540][T16483] should_failslab+0xa8/0x100 [ 1425.184571][T16483] kmem_cache_alloc_noprof+0x87/0x680 [ 1425.184598][T16483] ? can_rx_register+0x16d/0x770 [ 1425.184653][T16483] can_rx_register+0x16d/0x770 [ 1425.184685][T16483] ? __pfx_bcm_rx_handler+0x10/0x10 [ 1425.184722][T16483] bcm_rx_setup+0x1577/0x1f20 [ 1425.184791][T16483] ? __pfx_bcm_rx_setup+0x10/0x10 [ 1425.184825][T16483] ? __local_bh_enable+0x1e1/0x2f0 [ 1425.184857][T16483] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1425.184883][T16483] ? lockdep_hardirqs_on+0x7a/0x110 [ 1425.184926][T16483] bcm_sendmsg+0x267/0x6c0 [ 1425.184971][T16483] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1425.185018][T16483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1425.185047][T16483] ____sys_sendmsg+0x94c/0x9c0 [ 1425.185081][T16483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.185120][T16483] ? import_iovec+0x73/0xa0 [ 1425.185150][T16483] ___sys_sendmsg+0x2a5/0x360 [ 1425.185177][T16483] ? __lock_acquire+0x6b5/0x2cf0 [ 1425.185214][T16483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.185249][T16483] ? kstrtouint+0x6e/0xe0 [ 1425.185311][T16483] ? __fget_files+0x2a/0x420 [ 1425.185345][T16483] ? __fget_files+0x3a6/0x420 [ 1425.185393][T16483] __sys_sendmmsg+0x282/0x4e0 [ 1425.185428][T16483] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1425.185467][T16483] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1425.185513][T16483] ? ksys_write+0x248/0x270 [ 1425.185542][T16483] ? __pfx_ksys_write+0x10/0x10 [ 1425.185576][T16483] __x64_sys_sendmmsg+0xa0/0xc0 [ 1425.185604][T16483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.185630][T16483] do_syscall_64+0x15f/0xf80 [ 1425.185651][T16483] ? trace_irq_disable+0x3b/0x140 [ 1425.185679][T16483] ? clear_bhb_loop+0x40/0x90 [ 1425.185709][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.185740][T16483] RIP: 0033:0x7fd246dccdd9 [ 1425.185763][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.185783][T16483] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1425.185808][T16483] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1425.185826][T16483] RDX: 0000000000000002 RSI: 0000200000001b00 RDI: 0000000000000003 [ 1425.185841][T16483] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.185855][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.185869][T16483] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1425.185906][T16483] [ 1429.532114][T16526] FAULT_INJECTION: forcing a failure. [ 1429.532114][T16526] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.532203][T16526] CPU: 0 UID: 0 PID: 16526 Comm: syz.6.2584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1429.532236][T16526] Tainted: [L]=SOFTLOCKUP [ 1429.532245][T16526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1429.532259][T16526] Call Trace: [ 1429.532268][T16526] [ 1429.532278][T16526] dump_stack_lvl+0xe8/0x150 [ 1429.532312][T16526] should_fail_ex+0x46b/0x600 [ 1429.532364][T16526] should_failslab+0xa8/0x100 [ 1429.532396][T16526] kmem_cache_alloc_noprof+0x87/0x680 [ 1429.532421][T16526] ? can_rx_register+0x16d/0x770 [ 1429.532455][T16526] can_rx_register+0x16d/0x770 [ 1429.532486][T16526] ? __pfx_bcm_rx_handler+0x10/0x10 [ 1429.532524][T16526] bcm_rx_setup+0x1577/0x1f20 [ 1429.532573][T16526] ? __pfx____migrate_enable+0x10/0x10 [ 1429.532609][T16526] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1429.532645][T16526] ? __pfx_bcm_rx_setup+0x10/0x10 [ 1429.532686][T16526] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1429.532713][T16526] ? lockdep_hardirqs_on+0x7a/0x110 [ 1429.532756][T16526] bcm_sendmsg+0x267/0x6c0 [ 1429.532796][T16526] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1429.532841][T16526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1429.532870][T16526] ____sys_sendmsg+0x94c/0x9c0 [ 1429.532905][T16526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.532943][T16526] ? import_iovec+0x73/0xa0 [ 1429.532974][T16526] ___sys_sendmsg+0x2a5/0x360 [ 1429.533000][T16526] ? __lock_acquire+0x6b5/0x2cf0 [ 1429.533039][T16526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1429.533072][T16526] ? kstrtouint+0x6e/0xe0 [ 1429.533134][T16526] ? __fget_files+0x2a/0x420 [ 1429.533168][T16526] ? __fget_files+0x3a6/0x420 [ 1429.533216][T16526] __sys_sendmmsg+0x282/0x4e0 [ 1429.533250][T16526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1429.533289][T16526] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1429.533336][T16526] ? ksys_write+0x248/0x270 [ 1429.533372][T16526] ? __pfx_ksys_write+0x10/0x10 [ 1429.533407][T16526] __x64_sys_sendmmsg+0xa0/0xc0 [ 1429.533435][T16526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.533460][T16526] do_syscall_64+0x15f/0xf80 [ 1429.533481][T16526] ? trace_irq_disable+0x3b/0x140 [ 1429.533509][T16526] ? clear_bhb_loop+0x40/0x90 [ 1429.533539][T16526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.533563][T16526] RIP: 0033:0x7fd246dccdd9 [ 1429.533586][T16526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.533606][T16526] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1429.533631][T16526] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1429.533648][T16526] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000003 [ 1429.533664][T16526] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.533679][T16526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.533693][T16526] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1429.533729][T16526] [ 1430.074000][T16530] program syz.2.2585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1431.056492][ T5594] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1431.220696][ T5594] usb 3-1: Using ep0 maxpacket: 16 [ 1431.225786][ T5594] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1431.227537][ T5594] usb 3-1: config 7 has an invalid interface number: 159 but max is 0 [ 1431.227565][ T5594] usb 3-1: config 7 has no interface number 0 [ 1431.227600][ T5594] usb 3-1: config 7 interface 159 has no altsetting 0 [ 1431.274293][ T5594] usb 3-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=2c.24 [ 1431.274328][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.274351][ T5594] usb 3-1: Product: syz [ 1431.274367][ T5594] usb 3-1: Manufacturer: syz [ 1431.274384][ T5594] usb 3-1: SerialNumber: syz [ 1431.760053][ T5594] usb 3-1: USB disconnect, device number 119 [ 1432.627765][ T5594] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1432.869536][ T5594] usb 4-1: Using ep0 maxpacket: 32 [ 1432.873087][ T5594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1432.874419][ T5594] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.905389][ T5594] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1432.905442][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.905465][ T5594] usb 4-1: Product: syz [ 1432.905482][ T5594] usb 4-1: Manufacturer: syz [ 1432.905499][ T5594] usb 4-1: SerialNumber: syz [ 1434.048750][ T5594] usb 4-1: Cannot retrieve CPort count: -71 [ 1434.048805][ T5594] usb 4-1: Cannot retrieve CPort count: -71 [ 1434.048894][ T5594] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1434.108442][ T5594] usb 4-1: USB disconnect, device number 95 [ 1434.817124][ T5594] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1435.025443][ T5594] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1435.025475][ T5594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.025496][ T5594] usb 4-1: config 0 has no interface number 0 [ 1435.028786][ T5594] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1435.028819][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.028842][ T5594] usb 4-1: Product: syz [ 1435.028858][ T5594] usb 4-1: Manufacturer: syz [ 1435.028875][ T5594] usb 4-1: SerialNumber: syz [ 1435.119120][ T5594] usb 4-1: config 0 descriptor?? [ 1435.156976][ T5594] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 1435.253085][T16591] FAULT_INJECTION: forcing a failure. [ 1435.253085][T16591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.253126][T16591] CPU: 0 UID: 0 PID: 16591 Comm: syz.6.2594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1435.253171][T16591] Tainted: [L]=SOFTLOCKUP [ 1435.253180][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1435.253193][T16591] Call Trace: [ 1435.253202][T16591] [ 1435.253212][T16591] dump_stack_lvl+0xe8/0x150 [ 1435.253246][T16591] should_fail_ex+0x46b/0x600 [ 1435.253288][T16591] _copy_from_iter+0x1d3/0x1670 [ 1435.253324][T16591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1435.253362][T16591] ? __pfx_policy_nodemask+0x10/0x10 [ 1435.253394][T16591] ? __pfx__copy_from_iter+0x10/0x10 [ 1435.253433][T16591] ? alloc_pages_mpol+0x2ae/0x380 [ 1435.253471][T16591] copy_page_from_iter+0x220/0x2d0 [ 1435.253501][T16591] tun_get_user+0x1bfa/0x4400 [ 1435.253528][T16591] ? is_bpf_text_address+0x292/0x2b0 [ 1435.253559][T16591] ? tun_get_user+0x8a1/0x4400 [ 1435.253606][T16591] ? __pfx_tun_get_user+0x10/0x10 [ 1435.253633][T16591] ? __lock_acquire+0x6b5/0x2cf0 [ 1435.253679][T16591] ? ref_tracker_alloc+0x332/0x4a0 [ 1435.253701][T16591] ? get_pid_task+0x20/0x1f0 [ 1435.253734][T16591] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1435.253759][T16591] ? tun_get+0x1c/0x2f0 [ 1435.253782][T16591] ? tun_get+0x1c/0x2f0 [ 1435.253811][T16591] ? tun_get+0x1c/0x2f0 [ 1435.253834][T16591] ? tun_get+0x1c/0x2f0 [ 1435.253862][T16591] tun_chr_write_iter+0x119/0x200 [ 1435.253889][T16591] vfs_write+0x629/0xba0 [ 1435.253923][T16591] ? __pfx_vfs_write+0x10/0x10 [ 1435.253959][T16591] ? __fget_files+0x2a/0x420 [ 1435.254001][T16591] ksys_write+0x156/0x270 [ 1435.254029][T16591] ? __pfx_ksys_write+0x10/0x10 [ 1435.254064][T16591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.254089][T16591] do_syscall_64+0x15f/0xf80 [ 1435.254111][T16591] ? trace_irq_disable+0x3b/0x140 [ 1435.254137][T16591] ? clear_bhb_loop+0x40/0x90 [ 1435.254173][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.254196][T16591] RIP: 0033:0x7fd246d8d60e [ 1435.254217][T16591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1435.254237][T16591] RSP: 002b:00007fd245004fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1435.254262][T16591] RAX: ffffffffffffffda RBX: 00007fd2450056c0 RCX: 00007fd246d8d60e [ 1435.254279][T16591] RDX: 0000000000000042 RSI: 0000200000000300 RDI: 00000000000000c8 [ 1435.254293][T16591] RBP: 00007fd245005090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.254307][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.254320][T16591] R13: 00007fd247046128 R14: 00007fd247046090 R15: 00007ffce515a618 [ 1435.254354][T16591] [ 1435.914215][ T5594] usb 4-1: USB disconnect, device number 96 [ 1436.428545][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.428681][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.428955][T16361] bridge_slave_0: entered allmulticast mode [ 1436.468703][T16361] bridge_slave_0: entered promiscuous mode [ 1436.663565][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.663707][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.663938][T16361] bridge_slave_1: entered allmulticast mode [ 1436.702059][T16361] bridge_slave_1: entered promiscuous mode [ 1436.824487][T16380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.824633][T16380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.825241][T16380] bridge_slave_0: entered allmulticast mode [ 1436.861181][T16380] bridge_slave_0: entered promiscuous mode [ 1436.919501][ T5594] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1436.944204][T16380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.944454][T16380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.944654][T16380] bridge_slave_1: entered allmulticast mode [ 1436.947530][T16380] bridge_slave_1: entered promiscuous mode [ 1436.990286][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.082159][ T5594] usb 7-1: Using ep0 maxpacket: 8 [ 1437.084889][ T5594] usb 7-1: config 16 has an invalid descriptor of length 150, skipping remainder of the config [ 1437.084947][ T5594] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.084994][ T5594] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1437.085021][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.274605][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.498263][T16621] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2603'. [ 1438.305268][T16380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.395159][T16638] overlayfs: failed to resolve './file0': -2 [ 1438.524293][T16380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.964255][T16361] team0: Port device team_slave_0 added [ 1440.140821][ T9] usb 7-1: USB disconnect, device number 81 [ 1440.312251][T16361] team0: Port device team_slave_1 added [ 1440.428104][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2613'. [ 1440.697784][T16380] team0: Port device team_slave_0 added [ 1440.883059][T16380] team0: Port device team_slave_1 added [ 1441.007526][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2615'. [ 1441.144285][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.144305][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.144336][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.385589][T16668] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1441.524094][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.524115][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.524146][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.697437][T16380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.697458][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.697491][T16380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.930329][T16683] netlink: 'syz.6.2620': attribute type 4 has an invalid length. [ 1442.590339][T16695] FAULT_INJECTION: forcing a failure. [ 1442.590339][T16695] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.590374][T16695] CPU: 1 UID: 0 PID: 16695 Comm: syz.6.2623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1442.590398][T16695] Tainted: [L]=SOFTLOCKUP [ 1442.590405][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1442.590416][T16695] Call Trace: [ 1442.590423][T16695] [ 1442.590430][T16695] dump_stack_lvl+0xe8/0x150 [ 1442.590458][T16695] should_fail_ex+0x46b/0x600 [ 1442.590492][T16695] should_failslab+0xa8/0x100 [ 1442.590516][T16695] __kmalloc_cache_noprof+0x84/0x690 [ 1442.590536][T16695] ? rtnl_newlink+0x136/0x1bb0 [ 1442.590557][T16695] rtnl_newlink+0x136/0x1bb0 [ 1442.590579][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.590606][T16695] ? __pfx_rtnl_newlink+0x10/0x10 [ 1442.590623][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.590651][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.590676][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.590706][T16695] ? unwind_next_frame+0xa6/0x2550 [ 1442.590735][T16695] ? unwind_next_frame+0xa6/0x2550 [ 1442.590759][T16695] ? is_bpf_text_address+0x26/0x2b0 [ 1442.590794][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.590821][T16695] ? kernel_text_address+0xa5/0xe0 [ 1442.590849][T16695] ? __kernel_text_address+0xd/0x30 [ 1442.590873][T16695] ? unwind_get_return_address+0x4d/0x90 [ 1442.590908][T16695] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1442.590929][T16695] ? arch_stack_walk+0xfb/0x150 [ 1442.590958][T16695] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1442.590997][T16695] ? __pfx_rtnl_newlink+0x10/0x10 [ 1442.591013][T16695] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1442.591039][T16695] ? kasan_save_track+0x3e/0x80 [ 1442.591056][T16695] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1442.591097][T16695] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1442.591123][T16695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1442.591151][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.591184][T16695] netlink_rcv_skb+0x232/0x4b0 [ 1442.591205][T16695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1442.591241][T16695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1442.591269][T16695] ? netlink_deliver_tap+0x2e/0x1b0 [ 1442.591287][T16695] ? netlink_deliver_tap+0x2e/0x1b0 [ 1442.591310][T16695] netlink_unicast+0x780/0x920 [ 1442.591345][T16695] netlink_sendmsg+0x813/0xb40 [ 1442.591372][T16695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.591392][T16695] ? unwind_get_return_address+0x4d/0x90 [ 1442.591418][T16695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1442.591441][T16695] ____sys_sendmsg+0x94c/0x9c0 [ 1442.591469][T16695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1442.591498][T16695] ? import_iovec+0x73/0xa0 [ 1442.591522][T16695] ___sys_sendmsg+0x2a5/0x360 [ 1442.591541][T16695] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.591568][T16695] ? __pfx____sys_sendmsg+0x10/0x10 [ 1442.591615][T16695] ? __fget_files+0x2a/0x420 [ 1442.591642][T16695] ? __fget_files+0x3a6/0x420 [ 1442.591676][T16695] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1442.591700][T16695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1442.591729][T16695] ? __pfx_ksys_write+0x10/0x10 [ 1442.591756][T16695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.591777][T16695] do_syscall_64+0x15f/0xf80 [ 1442.591795][T16695] ? trace_irq_disable+0x3b/0x140 [ 1442.591817][T16695] ? clear_bhb_loop+0x40/0x90 [ 1442.591839][T16695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.591857][T16695] RIP: 0033:0x7fd246dccdd9 [ 1442.591876][T16695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.591893][T16695] RSP: 002b:00007fd245026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.591915][T16695] RAX: ffffffffffffffda RBX: 00007fd247045fa0 RCX: 00007fd246dccdd9 [ 1442.591929][T16695] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 1442.591941][T16695] RBP: 00007fd245026090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.591953][T16695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.591964][T16695] R13: 00007fd247046038 R14: 00007fd247045fa0 R15: 00007ffce515a618 [ 1442.591992][T16695] [ 1444.604848][T16707] overlayfs: failed to resolve './file0': -2 [ 1444.803244][T16380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.803262][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.803294][T16380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.900499][T16735] FAULT_INJECTION: forcing a failure. [ 1445.900499][T16735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.900540][T16735] CPU: 1 UID: 0 PID: 16735 Comm: syz.2.2636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1445.900571][T16735] Tainted: [L]=SOFTLOCKUP [ 1445.900581][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.900595][T16735] Call Trace: [ 1445.900605][T16735] [ 1445.900615][T16735] dump_stack_lvl+0xe8/0x150 [ 1445.900649][T16735] should_fail_ex+0x46b/0x600 [ 1445.900692][T16735] _copy_to_user+0x31/0xb0 [ 1445.900721][T16735] simple_read_from_buffer+0xe1/0x170 [ 1445.900764][T16735] proc_fail_nth_read+0x1be/0x230 [ 1445.900804][T16735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.900843][T16735] ? rw_verify_area+0x2ac/0x4e0 [ 1445.900873][T16735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.900912][T16735] vfs_read+0x212/0xa80 [ 1445.900947][T16735] ? __pfx_vfs_read+0x10/0x10 [ 1445.900977][T16735] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1445.901022][T16735] ? lockdep_hardirqs_on+0x7a/0x110 [ 1445.901058][T16735] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1445.901094][T16735] ? mutex_lock_nested+0x152/0x1d0 [ 1445.901122][T16735] ? fdget_pos+0x252/0x320 [ 1445.901155][T16735] ksys_read+0x156/0x270 [ 1445.901183][T16735] ? __pfx_ksys_read+0x10/0x10 [ 1445.901218][T16735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.901245][T16735] do_syscall_64+0x15f/0xf80 [ 1445.901266][T16735] ? trace_irq_disable+0x3b/0x140 [ 1445.901294][T16735] ? clear_bhb_loop+0x40/0x90 [ 1445.901324][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.901347][T16735] RIP: 0033:0x7fa04787d60e [ 1445.901369][T16735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1445.901389][T16735] RSP: 002b:00007fa045b15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1445.901414][T16735] RAX: ffffffffffffffda RBX: 00007fa045b166c0 RCX: 00007fa04787d60e [ 1445.901432][T16735] RDX: 000000000000000f RSI: 00007fa045b160a0 RDI: 0000000000000004 [ 1445.901447][T16735] RBP: 00007fa045b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.901461][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.901475][T16735] R13: 00007fa047b36038 R14: 00007fa047b35fa0 R15: 00007fffd0a0e3b8 [ 1445.901512][T16735] [ 1446.397639][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1446.397717][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1446.549610][T16361] hsr_slave_0: entered promiscuous mode [ 1446.562811][T16361] hsr_slave_1: entered promiscuous mode [ 1446.569665][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 1446.569764][T16361] Cannot create hsr debugfs directory [ 1447.022175][T16380] hsr_slave_0: entered promiscuous mode [ 1447.032526][T16380] hsr_slave_1: entered promiscuous mode [ 1447.327125][T16380] debugfs: 'hsr0' already exists in 'hsr' [ 1447.327149][T16380] Cannot create hsr debugfs directory [ 1447.587569][T16756] MTD: Couldn't look up '/dev/sg0': -15 [ 1447.960381][T16756] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1448.188210][T16761] FAULT_INJECTION: forcing a failure. [ 1448.188210][T16761] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.188251][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.3.2647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1448.188282][T16761] Tainted: [L]=SOFTLOCKUP [ 1448.188290][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1448.188304][T16761] Call Trace: [ 1448.188312][T16761] [ 1448.188323][T16761] dump_stack_lvl+0xe8/0x150 [ 1448.188356][T16761] should_fail_ex+0x46b/0x600 [ 1448.188406][T16761] should_failslab+0xa8/0x100 [ 1448.188437][T16761] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1448.188464][T16761] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1448.188493][T16761] ? dup_task_struct+0x52/0x840 [ 1448.188527][T16761] dup_task_struct+0x52/0x840 [ 1448.188553][T16761] ? rt_spin_unlock+0x160/0x200 [ 1448.188586][T16761] copy_process+0x89b/0x4460 [ 1448.188648][T16761] ? __pfx_copy_process+0x10/0x10 [ 1448.188689][T16761] vhost_task_create+0x1f9/0x380 [ 1448.188722][T16761] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1448.188761][T16761] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1448.188796][T16761] ? __pfx_vhost_task_create+0x10/0x10 [ 1448.188839][T16761] ? __pfx_vhost_task_fn+0x10/0x10 [ 1448.188877][T16761] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1448.188914][T16761] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.188950][T16761] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1448.188987][T16761] ? mutex_lock_nested+0x152/0x1d0 [ 1448.189016][T16761] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1448.189057][T16761] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1448.189103][T16761] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1448.189182][T16761] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1448.189212][T16761] ? do_raw_spin_lock+0x12b/0x2f0 [ 1448.189254][T16761] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1448.189292][T16761] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.189327][T16761] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1448.189363][T16761] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1448.189401][T16761] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1448.189434][T16761] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1448.189470][T16761] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.189506][T16761] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1448.189543][T16761] ? rt_write_unlock+0x190/0x230 [ 1448.189577][T16761] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1448.189618][T16761] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1448.189656][T16761] ? __asan_memset+0x22/0x50 [ 1448.189691][T16761] ? smack_file_ioctl+0x331/0x360 [ 1448.189722][T16761] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1448.189763][T16761] ? __fget_files+0x2a/0x420 [ 1448.189797][T16761] ? __fget_files+0x3a6/0x420 [ 1448.189828][T16761] ? __fget_files+0x2a/0x420 [ 1448.189864][T16761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1448.189893][T16761] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1448.189926][T16761] __se_sys_ioctl+0xff/0x170 [ 1448.189956][T16761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.189982][T16761] do_syscall_64+0x15f/0xf80 [ 1448.190004][T16761] ? trace_irq_disable+0x3b/0x140 [ 1448.190031][T16761] ? clear_bhb_loop+0x40/0x90 [ 1448.190067][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.190092][T16761] RIP: 0033:0x7fa77c17cdd9 [ 1448.190114][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.190135][T16761] RSP: 002b:00007fa77a3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.190160][T16761] RAX: ffffffffffffffda RBX: 00007fa77c3f5fa0 RCX: 00007fa77c17cdd9 [ 1448.190177][T16761] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1448.190192][T16761] RBP: 00007fa77a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.190207][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.190221][T16761] R13: 00007fa77c3f6038 R14: 00007fa77c3f5fa0 R15: 00007ffe0d21f828 [ 1448.190259][T16761] [ 1450.285168][ T1058] bridge_slave_1: left allmulticast mode [ 1450.285208][ T1058] bridge_slave_1: left promiscuous mode [ 1450.285504][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.522377][ T1058] bridge_slave_0: left allmulticast mode [ 1452.522417][ T1058] bridge_slave_0: left promiscuous mode [ 1452.522716][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.328313][T16384] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1453.492059][T16384] usb 4-1: Using ep0 maxpacket: 16 [ 1453.495813][T16384] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1453.495846][T16384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.525522][T16384] usb 4-1: config 0 descriptor?? [ 1453.549274][T16384] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1456.359425][T16384] usb 4-1: USB disconnect, device number 97 [ 1457.711477][T16817] binder: 16816:16817 ioctl c0306201 0 returned -14 [ 1457.818345][T16819] overlay: ./file0 is not a directory [ 1458.963965][T16384] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1459.134416][T16384] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1459.134451][T16384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.134474][T16384] usb 4-1: Product: syz [ 1459.134490][T16384] usb 4-1: Manufacturer: syz [ 1459.134507][T16384] usb 4-1: SerialNumber: syz [ 1459.726527][T16384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1459.726596][T16384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1459.947975][T16384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1459.948041][T16384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1459.967963][T16384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1460.261801][T16384] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1460.298906][T16384] usb 4-1: USB disconnect, device number 98 [ 1463.645796][T16097] ------------[ cut here ]------------ [ 1463.645810][T16097] kcov->t != t [ 1463.645822][T16097] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: udevd/16097 [ 1463.645919][T16097] Modules linked in: [ 1463.645936][T16097] CPU: 1 UID: 0 PID: 16097 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1463.645958][T16097] Tainted: [L]=SOFTLOCKUP [ 1463.645964][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1463.645975][T16097] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1463.645994][T16097] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00 [ 1463.646008][T16097] RSP: 0018:ffffc900048c7d20 EFLAGS: 00010206 [ 1463.646022][T16097] RAX: 4f6fdc5f1a175c00 RBX: ffff88803625e400 RCX: 0000000000000000 [ 1463.646034][T16097] RDX: 00000000a9587595 RSI: ffffffff8ba74b40 RDI: 00000000ffffffff [ 1463.646045][T16097] RBP: ffffc900048c7e78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140 [ 1463.646057][T16097] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: dffffc0000000000 [ 1463.646070][T16097] R13: 0000000000000000 R14: ffff88803625e408 R15: ffff8880262f1ec0 [ 1463.646081][T16097] FS: 00007ff928567880(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 1463.646095][T16097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1463.646106][T16097] CR2: 000055d1fef28088 CR3: 000000009293e000 CR4: 00000000003526f0 [ 1463.646120][T16097] Call Trace: [ 1463.646127][T16097] [ 1463.646136][T16097] do_exit+0x150/0x22c0 [ 1463.646158][T16097] ? lockdep_hardirqs_on+0x7a/0x110 [ 1463.646185][T16097] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1463.646213][T16097] ? reacquire_held_locks+0x104/0x190 [ 1463.646238][T16097] ? rt_spin_lock+0x1e0/0x400 [ 1463.646257][T16097] ? __pfx_do_exit+0x10/0x10 [ 1463.646279][T16097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1463.646307][T16097] ? rt_spin_unlock+0x160/0x200 [ 1463.646330][T16097] do_group_exit+0x21b/0x2d0 [ 1463.646354][T16097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.646372][T16097] __x64_sys_exit_group+0x3f/0x40 [ 1463.646394][T16097] x64_sys_call+0x221a/0x2240 [ 1463.646415][T16097] do_syscall_64+0x15f/0xf80 [ 1463.646430][T16097] ? trace_irq_disable+0x3b/0x140 [ 1463.646449][T16097] ? clear_bhb_loop+0x40/0x90 [ 1463.646469][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.646497][T16097] RIP: 0033:0x7ff92869f6c5 [ 1463.646510][T16097] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1463.646524][T16097] RSP: 002b:00007ffdf5cb3418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1463.646538][T16097] RAX: ffffffffffffffda RBX: 000055d1fef7ce90 RCX: 00007ff92869f6c5 [ 1463.646550][T16097] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1463.646560][T16097] RBP: 000055d1fef1c910 R08: 0000000000000000 R09: 0000000000000000 [ 1463.646569][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.646579][T16097] R13: 00007ffdf5cb3460 R14: 0000000000000000 R15: 0000000000000000 [ 1463.646601][T16097] [ 1463.646608][T16097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1463.646621][T16097] CPU: 1 UID: 0 PID: 16097 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1463.646641][T16097] Tainted: [L]=SOFTLOCKUP [ 1463.646647][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1463.646656][T16097] Call Trace: [ 1463.646662][T16097] [ 1463.646668][T16097] vpanic+0x56c/0xa60 [ 1463.646688][T16097] ? __pfx__printk+0x10/0x10 [ 1463.646710][T16097] ? __pfx_vpanic+0x10/0x10 [ 1463.646733][T16097] ? is_bpf_text_address+0x292/0x2b0 [ 1463.646763][T16097] ? is_bpf_text_address+0x26/0x2b0 [ 1463.646807][T16097] panic+0xc5/0xd0 [ 1463.646826][T16097] ? __pfx_panic+0x10/0x10 [ 1463.646859][T16097] __warn+0x315/0x4c0 [ 1463.646877][T16097] ? kcov_task_exit+0xf5/0x160 [ 1463.646896][T16097] ? kcov_task_exit+0xf5/0x160 [ 1463.646913][T16097] __report_bug+0x29a/0x540 [ 1463.646943][T16097] ? kcov_task_exit+0xf5/0x160 [ 1463.646961][T16097] ? __pfx___report_bug+0x10/0x10 [ 1463.646987][T16097] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1463.647013][T16097] ? rt_spin_lock+0x1e0/0x400 [ 1463.647038][T16097] ? rt_spin_lock+0x1e0/0x400 [ 1463.647060][T16097] ? kcov_task_exit+0xf5/0x160 [ 1463.647076][T16097] report_bug+0x16a/0x220 [ 1463.647101][T16097] ? kcov_task_exit+0xf5/0x160 [ 1463.647116][T16097] ? kcov_task_exit+0xf7/0x160 [ 1463.647132][T16097] handle_bug+0x9c/0x200 [ 1463.647150][T16097] exc_invalid_op+0x1a/0x50 [ 1463.647167][T16097] asm_exc_invalid_op+0x1a/0x20 [ 1463.647182][T16097] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1463.647199][T16097] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00 [ 1463.647213][T16097] RSP: 0018:ffffc900048c7d20 EFLAGS: 00010206 [ 1463.647226][T16097] RAX: 4f6fdc5f1a175c00 RBX: ffff88803625e400 RCX: 0000000000000000 [ 1463.647237][T16097] RDX: 00000000a9587595 RSI: ffffffff8ba74b40 RDI: 00000000ffffffff [ 1463.647249][T16097] RBP: ffffc900048c7e78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140 [ 1463.647261][T16097] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: dffffc0000000000 [ 1463.647273][T16097] R13: 0000000000000000 R14: ffff88803625e408 R15: ffff8880262f1ec0 [ 1463.647290][T16097] ? rt_spin_lock+0x1e0/0x400 [ 1463.647317][T16097] do_exit+0x150/0x22c0 [ 1463.647338][T16097] ? lockdep_hardirqs_on+0x7a/0x110 [ 1463.647363][T16097] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1463.647390][T16097] ? reacquire_held_locks+0x104/0x190 [ 1463.647415][T16097] ? rt_spin_lock+0x1e0/0x400 [ 1463.647435][T16097] ? __pfx_do_exit+0x10/0x10 [ 1463.647457][T16097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1463.647484][T16097] ? rt_spin_unlock+0x160/0x200 [ 1463.647507][T16097] do_group_exit+0x21b/0x2d0 [ 1463.647531][T16097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.647549][T16097] __x64_sys_exit_group+0x3f/0x40 [ 1463.647572][T16097] x64_sys_call+0x221a/0x2240 [ 1463.647592][T16097] do_syscall_64+0x15f/0xf80 [ 1463.647606][T16097] ? trace_irq_disable+0x3b/0x140 [ 1463.647624][T16097] ? clear_bhb_loop+0x40/0x90 [ 1463.647644][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.647660][T16097] RIP: 0033:0x7ff92869f6c5 [ 1463.647673][T16097] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1463.647686][T16097] RSP: 002b:00007ffdf5cb3418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1463.647701][T16097] RAX: ffffffffffffffda RBX: 000055d1fef7ce90 RCX: 00007ff92869f6c5 [ 1463.647713][T16097] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1463.647762][T16097] RBP: 000055d1fef1c910 R08: 0000000000000000 R09: 0000000000000000 [ 1463.647773][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.647783][T16097] R13: 00007ffdf5cb3460 R14: 0000000000000000 R15: 0000000000000000 [ 1463.647807][T16097] [ 1463.648587][T16097] Kernel Offset: disabled