last executing test programs: 27m44.380718348s ago: executing program 2 (id=670): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x80044100, 0x800000000000000) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x101000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x11, 0x3, 0x7, [{@remote, 0x6}]}, @generic={0x94, 0xe, "6bd93d6116f39ef525f4feb0"}]}}, @address_request}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x40, 0x6, 0x7ff, 0xb55, 0x1a, "f09fb9148bfc320d"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1156, &(0x7f00000000c0)={0x0, 0x8cae, 0x100, 0x2, 0x7e}, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xa}], 0x20}, 0xfc00) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x3545, 0x0, 0x0, 0x5c}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000800)={0x6, 0x1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/216, 0xd8}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x4000000000000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') 27m44.226101737s ago: executing program 2 (id=672): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x40000000000) 27m43.8671728s ago: executing program 2 (id=673): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r1, 0x25085000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xa, 0xd, 0x20000000, 0xa, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000100)="38e5157c877cb5634684269c7bdca8e84b386caeb93e93d3199632054a9a65d7813b347c6ee020044a1e7518", 0x2c}, {&(0x7f0000000140)="c5c32d233832083c6361412e5b7a8162cfdb2c73f3039a60c6974108319dfdbdeb8edbb207f41be3353e365419f2f102aff58746b061e45bf36567bfc1eb73a89ceda92da25d30b5a49ec1f96b3a4f65c5c05dd04571bff2cca571153e5ef0c4300f939f9ce128e9a8c01ab54d45340be1876cdc5950572cae396c0bb17b775ce4e118ac4e84f612f44a1b6eaa9d512a776df56311f256fc621bc147e00260494c47a24b0d662b18a59f24483141ec241a6ee275be5f88d67f98cb5ec2205592720151f2750c1e290232c3a2bdf50fe1ef9cdf463d117740a4536eae9b", 0xdd}, {&(0x7f0000000280)="a5a03094f34632f489e78466605775afb8448942bd4813e853e0526364a806470a48", 0x22}, {&(0x7f00000002c0)="fab07a7a30e4ef9451d84d325b6620e943bc500202500a871500ebf9e3f3549f", 0x20}, {&(0x7f0000000380)="213b676413db497555f6f45e2e04f3aa743c21aabb825c0364b990f581d38d60547fb00e88a7c8c10b2e4f092778ae388afb33963ff7502c70d643b14e3b137ed642dff53d479daa7509f2ae54d0f8fa9b66ffd80d9a9f62bb23d23dac58f9c06ab962557e7da4dfe8f0e9bded69479392edbcac54b4eb4d4c3f68360de997108139c06c19f21394bc755808b379e5a2", 0x90}, {&(0x7f00000004c0)="0642479d1cbee8225fb14f213be57b46e37246a057b4ea7df5ae28c1174ef7dc693c88b1cf51c900d4177882b5eb2084492652fd639c4babfcd1a28b5ca93307baed51b41b50143881386e55852a593608fc82fb0e59b476c37360dd05d46d1100e25b6d087669c89f68a640cdfc5dc1f01c31202c24def86fdc1cb5c2d6a56203dff08332c18d62a3186d97c6c30a6e27f456e833859fee0c6461f391ab73f4c90f2b858d843852873b30b41299cc298f10c15920079c4936b4e89bd916184b10933b04883850bcfaa270b32d39d2ba18cbfe9d4f57436a839e90b3ed26d1792440f22541cc911d8c1b1e1feb3153e7", 0xf0}], 0x6, 0x5) 27m43.850042995s ago: executing program 2 (id=675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r4}, 0x10) mlockall(0x2) read$FUSE(r3, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000001240)={0x50, 0x0, r5, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r6, 0x2202, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3da71, 0x51a23}, [@IFLA_NET_NS_PID={0x0, 0x13, r7}]}, 0xfffffffffffffc9e}}, 0x20040040) setuid(0xee00) syz_pidfd_open(r9, 0x0) 27m43.637412338s ago: executing program 2 (id=676): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x10037f}, 0xffffffff, 0x7}) 27m42.929705972s ago: executing program 2 (id=682): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 27m42.350734971s ago: executing program 32 (id=682): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 24m50.722097422s ago: executing program 4 (id=1252): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001800)={{0x12, 0x1, 0x141, 0x14, 0xdf, 0x51, 0x20, 0x46d, 0x8dd, 0xd579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x20, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x4d, 0x8, 0x0, 0x3e, 0xcf, 0xec, 0x10}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = socket(0x28, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@loopback, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000001c0)=0xe8) r8 = socket$inet(0xa, 0x801, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="f00d34fb2af7900425e916a4f59f3adcf6181b14e13cf3ad195aac0ac5a38f62af2d4b0f02c306380bfbdf9ea70464b8dd7065f69986cb4f15fa1c3321331a6468ddea951d3706ebb2d5a0d1542316d5e90143826a2b14f4eaef3d2bae948b61e3d8dc9f43352122eec012aa7a10fd164b099bdc26ffca632a39b4c0bd", 0x7d}, {&(0x7f0000000500)="c6a33d4a117359abcd5f9cc4c30a6c03f11d8afe7062723e291ebfd72b4d1ef57e9b36464dd04136b36eaffe21ec71eaafb92258e6d0b904ff0ad05269cfc6c852d6c51d0cb4879b4ba5727005aaa858fb065e86d4fbf43e113e842e42023c3b90bae8fcba0a8393ecf38ea790c9fdc8c394933ba26745a14e85ae9632f5714666a6e3e43a54a687c74cb5090d49d674345a19b22f2b0b6a8924deaa5fc4574e4d09df27b2824ba6676eef1d2ef0d7e57aa4126e05", 0xb5}, {&(0x7f0000000600)="b5b7990c3bcc2132ec19a5340867b8f342838330f790548b199c34a649f9ed5d6ee3c64172dafa26a8148e08ea2722ae7c41fca8b63ce3124ff6eaa90a05156e0614d493ef881970af1a73cf4af4b41d665162de9dea08558f745ff5debc2a6aa244a52c9ae3ed07e4107ee3a615ef7679e560c5dffcd1cfdafe5a9a9cd346008bf662d0391f82955828f8748d73e9d6182dc35a4a3205a3e3bfa682d1c2b932bb0e666457da0ee5fe846a7421", 0xad}, {&(0x7f0000000480)="6ffaecbcfd277068866538d3b00753f138d7", 0x12}, {&(0x7f00000006c0)="4236fc64e3013773a655502685ff6fdb84938c93ed571f4c124b64cf4f704e0afbac7d47589f157149e08b4a0a12d9101598332df558b23387eb18b48634c1c79d2283043c0bb913a50e2ba4ced2aeee78c0ce4c47", 0x55}, {&(0x7f0000000740)="f61ba370ce9232ba978c97147bd24d4d5ea63adf49bddbf9a54a3ca231c22a1d418616592c91c5ee42cfc52497bcfd2e1beb57075756fe1b9c0d5b9f589e7ddf7f15013e2e0122d30c2b434f860970eeb941b6abdf82529aad51321ec43ea10b85cc3c1d23aad752567d9d3a9a1f5da74049f1a98061419b91c0be76e8cf9fdb91de55b4640aa81b743b57516fa4a4be34a4e17430be4a279413e50954bddef1e7e56546bf09c8b1ae0bb3", 0xab}, {&(0x7f0000000800)="d95bb0acec3e35b6755237740da2682f7976e391e1e16efc29e5072678867bffb0160f132763e2acf171414ecccd06364867bb26f2f0edf61365bb20fa79ab62c07c5e5f4d0e9fe7f1f3a88d0d291bb618d8fc5d79adaef96070c36736ba36e2deea83db9547823d987479e9235e727840c149362dfee6d4962492be908226", 0x7f}, {&(0x7f00000008c0)="c778f6cf035e4b28257ced525c4dc05666c126af66c3b9010e38c5dae7ba64a57388e3a52473", 0x26}, {&(0x7f0000000900)="c63d70e95a0c41db314532c354f8f830b79202f5b07103afb7464d60cf28d6e887a1caa2382f792363ecfbd2ce6761cbc60c9e069a8189090dc5747d205b3ca24f0f6fd5f8e78f9d0616f6a3634cfbbea43cb92e2e88eae61f094cc16a48", 0x5e}], 0xa}, 0x0) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xe3e5625455e07f5}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x4) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000a40)="00d236422857657a2b21deadea1e84cd4185334d5b6a146d96377db0f62a28ef0d710f608e5d6e2822e2781c897ef4fd56548dda83f5294f522a06968d3945f2c041c374e3c1204c93403fd8f6e92f57bfb4e9355a7d67dd9641bb9ebe6e46c8d1d2cf9356419f78809f759f020be3ed9ad1ecb1ce0cfb5175326817a1e02803f63a434a441d610486076f39c84c0198fcf9978451cca84acf5b3aca8bc82a8a29ca0b44e1d33f5f6d4db51d3b8b866867e133d0c312436afa365eb8b5d501dcb45336c0b63b1911de82c809f365", 0xce}], 0x1) 24m47.579216105s ago: executing program 4 (id=1266): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd91f0dc", @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}], 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24m46.098399121s ago: executing program 4 (id=1271): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b0001000940"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f0000000140)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24m44.522461293s ago: executing program 4 (id=1278): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000003, 0x2010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) unshare(0x2a020400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x40000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) close(r5) fsopen(&(0x7f00000000c0)='hfs\x00', 0x1) membarrier(0x10, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0) 24m41.832790229s ago: executing program 4 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m40.884422954s ago: executing program 4 (id=1289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001e00438b0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028001700"], 0x7c}}, 0x20000880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioperm(0x84, 0x9, 0xffffffff) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c1", 0x19}], 0x3}}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x7, 0xf0, 0x8, 0x4}, {0x7, 0x6, 0xb6, 0x81}, {0x9, 0x9, 0x81, 0x9}, {0x1, 0x8, 0x1, 0x4}, {0x81, 0x1, 0x7, 0x6}, {0x4c, 0x53, 0x2, 0x9}, {0x9, 0xf, 0x6, 0xffffffff}, {0x5, 0x81, 0x7, 0xc}]}) 24m25.765181154s ago: executing program 33 (id=1289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001e00438b0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028001700"], 0x7c}}, 0x20000880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioperm(0x84, 0x9, 0xffffffff) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c1", 0x19}], 0x3}}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x7, 0xf0, 0x8, 0x4}, {0x7, 0x6, 0xb6, 0x81}, {0x9, 0x9, 0x81, 0x9}, {0x1, 0x8, 0x1, 0x4}, {0x81, 0x1, 0x7, 0x6}, {0x4c, 0x53, 0x2, 0x9}, {0x9, 0xf, 0x6, 0xffffffff}, {0x5, 0x81, 0x7, 0xc}]}) 2m39.809764028s ago: executing program 1 (id=6145): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100000000000000008b000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b94"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040450c0b760000000000010902240001000000000904000001030000000921fcff0001220700090581030000fe0000639fa1"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) 2m36.588418184s ago: executing program 1 (id=6159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}}, 0x0) 2m36.467095933s ago: executing program 1 (id=6161): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x24}}, 0x4004094) io_uring_enter(r0, 0x3516, 0x0, 0xff00, 0x0, 0x0) 2m36.388761176s ago: executing program 1 (id=6162): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x201, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8040001}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x6, 0xe0, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x8000, 0x9, 0x14ca}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x8000, 0x10, {{0x1c, 0x4, 0x1, 0x7, 0x70, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2b}, {[@cipso={0x86, 0x38, 0x0, [{0x2, 0xb, "d709d3104376ad1948"}, {0x2, 0x8, "d78760393982"}, {0x0, 0xc, "f18d0bebbb26adfbfdba"}, {0x1, 0x6, "76a538b2"}, {0x5, 0x4, "a305"}, {0x2, 0x4, "8533"}, {0x7, 0x5, "1db87d"}]}, @rr={0x7, 0xb, 0x42, [@multicast1, @dev={0xac, 0x14, 0x14, 0x25}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x7673}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) (async) getpeername$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8d1}, 0x1) (async) sendmsg$xdp(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, 0x0, r4, 0x2c}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="aae096f26dd54ca696b955b423f82aa95db40cac93b5413d55a4f0177228d3cc90039257954cbf84924c9102cf499d3c9395d936c60dededecf1ca9d6515a5df28b0701e851061a5a43189e84bcf99a3c19e5b42fd326d73625af0426e594edc5ca002d476467b3cf0fe2043f6e35e73aa759189595509ee78be71fa56a5e7651993d700d9d1fcb65dfc18e48427bf8b00d37c94540c12ff7552893c75fe792f00fa1597c40c13a1a8dce1aa2c169c66518e281fc97b", 0xb6}], 0x1, 0x0, 0x0, 0x4000800}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000900)={0x80000004}) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x202, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r8, 0x4010e501, &(0x7f00000009c0)={r9}) pipe2$9p(&(0x7f0000000a00), 0x0) (async) bind(r0, &(0x7f0000000a40)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000ac0)=[{}], 0x1, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b40)={[0xff]}, 0x8) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (async) write$tcp_mem(r9, &(0x7f0000000b80)={0x9, 0x20, 0xca, 0x20, 0x100000001}, 0x48) (async) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000c00)={{0x1, 0x0, 0x80, {0xdddd1000, 0x4000}}, "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", "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"}) (async) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r11, 0x8010671f, &(0x7f0000002d00)={&(0x7f0000002cc0)=""/61, 0x3d}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r10, {r1}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_RES_CTX(r9, 0xc0106426, &(0x7f0000002dc0)={0x5, &(0x7f0000002d80)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r12, 0xc0406429, &(0x7f0000002f00)={r13, 0x1, &(0x7f0000002e00)=[0xffffffff], &(0x7f0000002e40)=[0x2, 0x4, 0x2, 0xd, 0x383eff16, 0x4], 0x0, 0x6, 0x9, &(0x7f0000002e80)=[0x2, 0x2, 0xfffffffa, 0x4, 0x0, 0x7], &(0x7f0000002ec0)=[0x8]}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x48, 0x1406, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r14 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r14, 0x2, &(0x7f0000003080)) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000003180)={0x0, 0x81}, 0x8) 2m36.170744134s ago: executing program 1 (id=6164): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000440)={0x2, @vbi={0x2, 0xffffffff, 0x31384142, 0x4c314356, [0xdf88, 0x6], [0xfffffffa, 0x8012], 0x1}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x1e, 0xa, 0x7ffd) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bind$inet(r7, &(0x7f0000000c80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 2m35.247905004s ago: executing program 1 (id=6167): socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m19.93806653s ago: executing program 34 (id=6167): socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 17.311804325s ago: executing program 5 (id=6571): socket$packet(0x11, 0x2, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x8014) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffce3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e53100406c256d000000b45c000109022400010000000009040000000001"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 14.111970065s ago: executing program 5 (id=6580): syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000119078000000000000000000004e22009c90780100000000000000000000000000000000000000000000000000000000000000000000000a00"/190], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000005980)={0x0, 0x0, &(0x7f0000005940)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e00010077697265677561726400000000200280"], 0x44}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11.22935087s ago: executing program 3 (id=6588): ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x44001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x7dc, 0x410}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x7, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x400000bce) read$qrtrtun(0xffffffffffffffff, &(0x7f00000003c0)=""/82, 0x52) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x1, 0x5, [0x9, 0x1612, 0x101, 0x3b, 0x7]}, &(0x7f0000000740)=0x12) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x1, [0xa24]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000540)={0xa8d, 0x200, 0x5, 0x304e1986, r3}, &(0x7f0000000580)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 11.181791306s ago: executing program 5 (id=6589): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x8014) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffce3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e53100406c256d000000b45c000109022400010000000009040000000001"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 10.304708267s ago: executing program 6 (id=6590): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r2 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) 9.990458021s ago: executing program 0 (id=6591): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='objagg_obj_destroy\x00', r3, 0x0, 0x8}, 0x18) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8.836251205s ago: executing program 3 (id=6592): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) 8.121826502s ago: executing program 0 (id=6593): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x30) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r5, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x43c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x185e, 0x7, 0xa0, 0x8, 0x0, 0x1, 0x2, 0xfffffffa, 0x40, 0x1, 0x7fffffff, 0xa0000, 0x8, 0x1, 0x1, 0x10001, 0x101, 0x2, 0x6, 0x3, 0x6, 0x8, 0x0, 0x3, 0xc9da, 0xe7a, 0x1b92, 0xff, 0x3, 0x3, 0x110, 0x4, 0xf36d, 0x30b, 0x2, 0x46, 0x6, 0x8, 0xc2b, 0x2, 0x8, 0x8, 0x8, 0x4, 0x0, 0x6a3, 0x8, 0xd, 0x4, 0x5, 0xffffffa4, 0x8, 0x6, 0x8, 0x7, 0x100, 0xd8, 0x5, 0x3e, 0x5, 0x4, 0x101, 0x2, 0xffffff80, 0x0, 0x1, 0x6, 0x480, 0x0, 0xfe, 0x6, 0x9, 0x9, 0x2, 0x4e, 0x8, 0x983, 0x200, 0x0, 0x8, 0x7ff, 0x5, 0x633ee1ca, 0x7f, 0x5b2, 0x0, 0xf1, 0x7, 0x5, 0x5, 0x3, 0xc2, 0x7, 0x2, 0x8, 0x4, 0x0, 0x9, 0x6, 0x45, 0x64, 0xea, 0x4, 0x1, 0x8f6d, 0xfffffff2, 0x8, 0x2, 0x40, 0x7, 0xdf, 0x10, 0x3, 0x1, 0x788ceffb, 0x7fffffff, 0x6, 0xffff, 0xfff, 0x5, 0x4, 0x5, 0xca8, 0xfffff2a2, 0xffffffff, 0x0, 0x81, 0x4, 0xe, 0x800, 0x25, 0x8, 0xfffffff9, 0x81, 0x4924, 0x0, 0x7fffffff, 0x6, 0x1, 0x2, 0xfc43, 0x8, 0x400, 0x9, 0x6, 0xb1, 0x60000, 0x7, 0x400, 0xb68, 0xf, 0x0, 0x6, 0x10001, 0x2aa, 0xfff, 0x77, 0x5, 0x3fc, 0x1ff, 0x0, 0x7f, 0x7, 0x401, 0xdb29, 0xffffd26e, 0xa6, 0x80, 0x80000000, 0x6, 0x5, 0x1897, 0x0, 0x70, 0x1, 0x4f873fba, 0x0, 0x9, 0x1000, 0xf825, 0x8, 0x4, 0x3, 0x3, 0x0, 0x7, 0xfff, 0x400, 0x61d8aa85, 0x7fc000, 0x1, 0x4, 0x2, 0x0, 0x2, 0xe, 0x5, 0x8a02, 0x3, 0x7f, 0x803c, 0xb, 0x9, 0x40ab, 0xc, 0xb, 0x2, 0x280000, 0x2, 0x0, 0x9, 0x1, 0x7, 0x200, 0x9, 0x53, 0xfffffff8, 0x60f00, 0x8, 0x800, 0x101, 0xf09d, 0x7, 0x6, 0xff, 0xffff, 0xa, 0xfc4, 0x0, 0xa, 0x81, 0x1400, 0x2, 0x0, 0x6, 0xfffffff9, 0x658, 0x81, 0x8, 0x0, 0x5, 0x8, 0x2, 0x7fff, 0x8, 0x0, 0x4, 0x8e, 0xba, 0x7fff, 0x6, 0xc99f, 0x2, 0x493e, 0xffffff81]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) syz_usb_connect$cdc_ncm(0x2, 0x96, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "6fa5"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x3ff, 0x80}, {0x6, 0x24, 0x1a, 0x4, 0x33}, [@mbim={0xc, 0x24, 0x1b, 0xfff7, 0x6, 0xab, 0x4, 0xa1, 0x3}, @obex={0x5, 0x24, 0x15, 0xfffe}, @mdlm={0x15, 0x24, 0x12, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x5, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xcc, 0x2, 0xa}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x51, 0x6, 0x0, 0xe0}, 0x2f, &(0x7f0000000080)={0x5, 0xf, 0x2f, 0x4, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x0, 0xf000, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "8e758ac9ddfa3e8425b3da6cb3eae7d8"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5, 0x7}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x843}}, {0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="8403c5351bc2a12ec9e998c52132f7baccbda24d2a9b4c0b91fd393a8bc7a3882230206ea7bfa78014f0efdd36a8afbe387e1b8ca4bf1210c3ee3054399bc1833ab21d59a304c34d8919ba13f4f95436d9f19a38eceba028658e2bc919570128f3d1b696e4d90142c9f029845a5abadf178d5ef820342000e30e84218400000000000000"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x2e, &(0x7f00000003c0)=@string={0x2e, 0x3, "c0e5fd4f6c9d7c1f893b1209eadc35bdbe572e9327ce0ccfa151ca355185a69bf0298724a951582ec9d5bf33"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x380a}}, {0x14, &(0x7f0000000440)=@string={0x14, 0x3, "313a9f455fa6c33031928294511a0904fd76"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io(r0, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x2, "d0"}, @main=@item_4={0x3, 0x0, 0x9, "71612d13"}, @local=@item_4={0x3, 0x2, 0x8, "8087ab3e"}]}}, 0x0}, 0x0) 7.922739094s ago: executing program 3 (id=6594): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) listen(r2, 0x1cd) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/198) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) getpid() ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 7.791298138s ago: executing program 5 (id=6595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f000000b280), 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x3, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x7992, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0xb97, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0xd, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x3, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x4, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002, 0x20}, 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/22, 0x54) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe80000000000000bbfe8000000000000000000000000000aa0600ffff00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c0000090780000"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r7 = fcntl$dupfd(r6, 0x0, r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/92, 0x5c, 0x0, 0x0}, &(0x7f0000000240)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) 7.695753898s ago: executing program 7 (id=6597): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xffffffffffffffee, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 6.716885642s ago: executing program 7 (id=6598): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) acct(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f000000ae80)={0x2020}, 0x2020) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) 6.710986506s ago: executing program 6 (id=6599): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f2a, 0x7, 0x10000, 0x5, 0x1000, 0xcc7, 0x8, 0x7, 0x200000a, 0x6, 0x2, 0x0, 0x1, 0x22, 0x6, 0x101, 0x4, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x4, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]}) 5.868767853s ago: executing program 3 (id=6600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1a, 0x0, &(0x7f0000000d00)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000480)=""/116, 0x74}], 0x3, &(0x7f0000000500)=""/57, 0x39}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a5}, 0x0, &(0x7f0000000200)) getegid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 5.807418906s ago: executing program 6 (id=6601): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x1000) readlinkat(r3, 0x0, &(0x7f00000001c0)=""/5, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000700), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYBLOB], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a000000000000080000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000003c0)={'wg0\x00', &(0x7f0000000300)=@ethtool_channels={0x3c, 0x8001, 0x1, 0x4, 0x7, 0x80000001, 0x106, 0x80004, 0x7}}) 4.94681095s ago: executing program 0 (id=6602): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffe, 0x0, 0xa40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "10f8b00f37651afa3619457e9e16eb9a2732bd7ca767a320c4c57e2370e6e4ac36d5cd133c26f88778b60974c73dc649dc65676cea8fc6ebfe50a657648e37bd", 0x20}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000380)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) 4.66676413s ago: executing program 3 (id=6603): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='objagg_obj_destroy\x00', r3, 0x0, 0x8}, 0x18) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.847042857s ago: executing program 6 (id=6604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r2, r3}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syslog(0x2, &(0x7f0000000080)=""/162, 0xfffffffffffffce9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xf400) 3.789438402s ago: executing program 5 (id=6605): syz_open_dev$evdev(&(0x7f0000000400), 0x409, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000f2020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) open(0x0, 0x400149042, 0x100) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r7, &(0x7f0000001f00)=""/4111, 0x100f) memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x1) 2.930976603s ago: executing program 0 (id=6606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x36}, "f7ecac395ddc958808faa96765ab694340529e8177e2e8f2e6ad6b545d671faa400bda022d86d4f798bb25f144dc0e3ababe14f06df8"}, 0x3a) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) 2.730132482s ago: executing program 6 (id=6607): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0301"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 2.41646785s ago: executing program 7 (id=6608): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0) (fail_nth: 2) 1.883776223s ago: executing program 7 (id=6609): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000090601060000000000000000004000000900020073797a31000000004a0d8727070000001c0007800c00018008000140ff0000ff0c000280080001fd7f001bd733d7f0e3181ba95a9412f061799391402fde1994db794d86ede20aa5b14be67a7c2b5cdd125233202bd9ca6197abfb9e6912f95dbf0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10048057}, 0x24000854) 1.70398919s ago: executing program 0 (id=6610): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x80000000, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.677888081s ago: executing program 3 (id=6611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0xf0f000, 0x2}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x7fb240, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000fc030100c0"]) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r6, &(0x7f0000000000)="9882e70131b512e63686ac1bbdd3a351e8247a1dd5d23b46bd2d3693c93c8482b998977f64868edc9c6c9dab0db4ea64a176f96e0f15fc4365969b0bfc85c0516060c1bdd5e0a8230406c3b2a637577ffe3607fcb7ac7cdb8f642361249819d1c0c24464960b41c80b604ed619922900000000000000", 0x76) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000980)=""/194, 0x2c, 0xc2, 0x1}, 0x28) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=@delchain={0x1614, 0x65, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xb}, {0x10, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x918, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc3e}]}, @TCA_CGROUP_POLICE={0x478, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0xe, 0x3, 0xfffffff7, 0xaff, 0xdb1, 0x8, 0x2, 0x2, 0xc295, 0x1ff, 0xffff, 0x5, 0x6, 0x9, 0x2400, 0x5, 0x0, 0x9, 0x81, 0xfffffff7, 0x80, 0x1, 0xf12, 0x1, 0xd, 0x3, 0x3, 0x7, 0xa5, 0xfffffff9, 0x8, 0x3, 0x300, 0x3c, 0x3, 0x3, 0xc0b, 0x255, 0xfffffffc, 0x4, 0x8, 0x3, 0x6, 0xd, 0x2, 0x8001, 0xfd, 0xd9faddaf, 0x2, 0x3, 0x3, 0xfb6d, 0x7, 0xaad, 0x7, 0x9, 0xe, 0x0, 0x3, 0x7fffffff, 0x21c, 0xfff, 0x7, 0xa5, 0x7, 0x7, 0x5, 0x8, 0x10, 0xfffffffc, 0x80000001, 0x2, 0xfffeffff, 0x4, 0xd6e, 0x2, 0x92, 0x3, 0x8, 0x9, 0xc, 0x0, 0x81, 0x4, 0x8, 0x624, 0x80000000, 0x10001, 0x9, 0x8, 0xfffff000, 0x10000, 0x5, 0xffffff81, 0x80000000, 0xd, 0x2, 0x0, 0x6, 0x6a27, 0x2, 0xbd9, 0x8, 0x89, 0x7fff, 0x5, 0x1, 0x7, 0x7ff, 0xffff, 0x2, 0x200, 0x80000001, 0xff, 0x7fff, 0x0, 0x2, 0x6, 0x4, 0x4, 0x0, 0x81, 0x4, 0x5, 0x8, 0x4, 0x64, 0x7437, 0x0, 0x1, 0x800005, 0x40, 0x77de02be, 0x40, 0x4, 0x6, 0x101, 0x0, 0xf, 0x62b, 0x6, 0x2, 0x1, 0xb, 0x2, 0x8, 0x8c000000, 0x3, 0x80000001, 0x3, 0x2, 0x1, 0x195, 0x4, 0x3, 0xfffffffa, 0x9, 0x2, 0x2, 0x1, 0x8, 0x1, 0x6, 0xfffffffe, 0xffff, 0x7a7a, 0x10, 0x2, 0x2, 0xf, 0x0, 0x5, 0x2e5, 0x0, 0x5, 0x2, 0xbd, 0x0, 0x383, 0x6, 0x8, 0x5, 0x2307, 0x0, 0x0, 0x6, 0x81, 0x30c4, 0xe1a, 0x6, 0x4, 0x800, 0x6, 0x3f, 0x9, 0x8, 0x8, 0x3, 0x2, 0xfffffff7, 0x1, 0x7, 0xfffffff7, 0x2, 0x1b1, 0x80000001, 0x4, 0xffff, 0x7, 0x8, 0x5, 0x0, 0x2, 0x3, 0xe9f6, 0x2, 0x40, 0xfffffffd, 0x8, 0xffffffff, 0xc17, 0x2000, 0x0, 0x5, 0xa0, 0xffffffff, 0x8, 0x3, 0x3, 0x80, 0xffff8000, 0xd0ff, 0x9, 0x1000, 0x3, 0x3, 0x7, 0x2e2, 0x1fc, 0xd8, 0x5, 0x3ff, 0x0, 0x78c9, 0x1ff, 0x6, 0x0, 0x0, 0x5, 0x3, 0x8, 0x10, 0x0, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x1, 0x0, 0xfffffff7, {0x7, 0x0, 0x4, 0x1, 0x2, 0x401}, {0x0, 0x0, 0x9, 0xe, 0x7, 0x81}, 0x4, 0x62, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xce}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x52}]}, @TCA_CGROUP_EMATCHES={0x48c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x200, 0x0, 0x6}, "d4ac0c800cb077a79b4931ff098b140e14c6140f490faf636e7a309efccb09c8d97417fef1980f85b1ec63d0f5251edb2781bc228662f0d5eb793b47ed2a55e198e4f899353afcdc3387fb54305e55f68b3d68d3a6f0284d2979a1f0d19439b40a82fee53d10bf0d3bf1f17904b4468ccaa026a6fc29c14549fa94efa9d59ee94953b2dfabd09359de201744f0ccbb29fdf51a5ae5305b5f7f7a6d154f8e650110c4b623cd6777a125c7c965a1deedb62dcef3ac0ee80d4993662548907f06b6"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x2}, {0x3ff, 0xbcd, 0x7, 0x0, 0x2, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x2}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x258, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0xff, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x2}, {0x3, 0x6}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9fa7dbe7"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xed, 0x2}, {0x800, 0x2}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0d0e5d91bf86dc66", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="db0b6e", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x8}, {0x1000, 0x34, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CONTAINER={0xf4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7}, "95a0510d6eb9dfdd2a8bb2e87ead323f3f9f694421e7a11dfd00794659a03ef4c22d3ed88a3b95e0db04ab3ace21d93ee3dd078f5485b53f2549f4adb9a437b4234d29d8db7771f3755d65dcb46512132f0db6ca2c48004e0ac33a23f23eca9a2a49dc69b2c194f6cbb544db499538d297cb8a4fffa5aa8e8eb3783669d68e0099f43d652c468e5b399bfa5e0c2e84e2f07e532c5f101bcee5efe4447c1b727115fb94635f0e940cb2c87cceb45fcbd40e93ade1d91e8507458da71caabdec94780bc7ffbcb13d1a2681df3f947732a7c9766eda3e64fbd99ef02cb0b9ab7a5114fc2c3f8dda"}}, @TCF_EM_CONTAINER={0xb4, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x1000}, "f03ca8a71d277604445a8b9b31bee0b58407ba507b928951668b41380c59b4606f533c8764f6e8072ba98ab8d1a1961801f18af60b242324878c0e5a88d63e29d7eeb07a0dcfabe7951ef9f6af13058b2a8df68157743d880400db53133a9bdca6c0e464a9ec7fe6750ba33141b2e02bdd727612fe2c855755aa76afa1cdd08fe0e0a02a44dc7d4376c324e6769230b526363948818b5e7fca1b2cdc9c55ef21785487fb9d603abc"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x40}, {0x4186, 0xa, 0x2, "b590fcfba282d88d14aa"}}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9a44, 0x40}, {0x3, 0xf1, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0xd4, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x96, 0x5, "e7cd1ce6604ea8cbd42003730b1c779a521f1fa0a0b4eb89671b3730ae21e96feeaacec4bea7ba986232839c0c19942f36686a498363205c03cf733f7991b851bb0134a8613ec6c9a93b0bac9e8fe648963a8ccb0801251cce91b7b456bfcb705feca7afb71718391915def6fc2cf73856449095efdfe705d3a3060f26817e992c84a13563e6aa93694a11c838c23b3235c6"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x800, 0x1, 0x9}, {0x9, 0x1, 0x0, 0x5, 0xd}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa40, 0x8, 0x82ef}, {0x2, 0x5, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xe92ad27f5b36c72e}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0xc70, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2b}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6b}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x79}}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x3}}, @TCA_U32_HASH={0x8}, @TCA_U32_SEL={0x7e4, 0x5, {0xf, 0x1, 0x6, 0x2, 0x7, 0x9, 0x5, 0x2, [{0xefc, 0x8, 0xc, 0xffffffff}, {0x7, 0x3, 0xfffffffb, 0xb10}, {0x1000, 0x5, 0x2, 0x8000}, {0x4, 0x0, 0xffff8000, 0x8}, {0x6, 0x3, 0x7, 0x6}, {0xb07, 0x1, 0xffffff00}, {0xfffffffa, 0x5fd4, 0x7}, {0x5, 0x0, 0xc0, 0x10001}, {0x71, 0x240000, 0x7f, 0x1}, {0x2, 0x4, 0x4, 0x6}, {0x0, 0x5, 0x6, 0x8}, {0x9, 0xa38, 0x6, 0x7fffffff}, {0xb2, 0x4, 0xb327, 0x9}, {0x7ff, 0x401, 0x8, 0x6f15f9e5}, {0x3, 0x4, 0x1, 0x9}, {0x0, 0x2, 0x81, 0x7}, {0x4, 0x10000, 0x10000, 0x8001}, {0x9, 0x0, 0x7ff, 0x2}, {0x8, 0x0, 0x2, 0x6f}, {0x0, 0x9, 0x47a8}, {0x81, 0xb, 0x6, 0x6534}, {0x7, 0x80000001, 0x7, 0x6}, {0x3, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x100, 0x6}, {0x3, 0x5, 0xffff0000, 0x3}, {0x400, 0x9, 0xde8, 0x3}, {0xd1d, 0x7, 0x1, 0xc8a2}, {0x0, 0xf, 0xfffffff7, 0xffff}, {0xffffffff, 0x4, 0x8, 0x5}, {0x5589f00, 0x0, 0x1, 0x1}, {0x6, 0x8000, 0x5, 0x5}, {0x0, 0x0, 0x4, 0x5}, {0x1ff, 0x9, 0x431, 0xffffff18}, {0x0, 0x10001, 0x34, 0x8}, {0xb, 0xafa, 0x3, 0xfffffffd}, {0x1, 0xfffffffa, 0x8, 0xd3}, {0x0, 0x1000, 0x8b9, 0x6}, {0x3, 0x8, 0x6, 0xff}, {0x4b1, 0x6, 0x5, 0xffff}, {0x100, 0x6, 0xfffffff0, 0x10}, {0x5, 0xfffffff8, 0x4, 0x3}, {0x7, 0x8, 0x32}, {0x572b, 0x38b, 0x0, 0x10000}, {0x5fcb, 0x4, 0x9, 0x9}, {0x2e5, 0x4, 0x5, 0x2}, {0x4, 0x7, 0x8, 0xffffffff}, {0x9, 0x40, 0x4, 0x7}, {0x5, 0x6, 0x5, 0x7}, {0x4, 0x7, 0x6, 0x6}, {0x4, 0xa42, 0x0, 0x101}, {0x8, 0x3}, {0x7, 0x1be, 0x9, 0x1}, {0xff, 0x8, 0x10, 0x8}, {0x9, 0x1, 0x8, 0x8}, {0xfffffffd, 0x6, 0x30e, 0x1f}, {0x1, 0x0, 0x7f, 0x3}, {0x8, 0x35a0f13, 0x6cd, 0x10001}, {0x10000, 0x9, 0x15d, 0x8000}, {0x5, 0x7, 0x200, 0x401}, {0x6, 0xffffff81, 0x8c8, 0x6}, {0x8, 0xffffffff, 0x80000000, 0x2}, {0x829, 0x6, 0x100, 0xa}, {0x4, 0x2, 0x0, 0xfffffbff}, {0x6, 0x3, 0x5, 0x9}, {0x400, 0x23, 0xaf3a, 0x7}, {0x0, 0x5, 0x2, 0x4db1}, {0xffff, 0xfffffffb, 0x1, 0x1a75}, {0x7, 0x2, 0x7, 0x81}, {0x7fffffff, 0xf, 0x3b26a5d8, 0x6}, {0x3, 0x8, 0x7, 0x4}, {0x5, 0x4, 0x1f, 0x7}, {0x528, 0x4, 0x1000, 0x25a5}, {0x9, 0x7, 0x0, 0xfffffff7}, {0xfffffff8, 0x7fffffff, 0x0, 0x9}, {0xffffffff, 0x8, 0x3ff, 0x5}, {0x6, 0x7, 0x4, 0x8}, {0x7155, 0x520, 0x84, 0x2}, {0x4, 0x149, 0x7, 0x3}, {0x200, 0xd, 0xa4dc, 0x400}, {0x7f, 0x4, 0x0, 0x2}, {0x0, 0x5, 0x2, 0x10}, {0x9, 0x0, 0xfff, 0x2}, {0x3ff, 0x3, 0x7, 0x2}, {0x3, 0x1ff, 0x3, 0x5}, {0x9, 0x7, 0x2f9e, 0x6}, {0x1, 0xf, 0x7e, 0x8}, {0xb, 0x7, 0x7, 0x20}, {0x1937, 0x2, 0x9000, 0x9}, {0xc, 0xf, 0xf848, 0x9}, {0x5, 0x0, 0xe, 0x2}, {0x8, 0x3, 0x8, 0x6}, {0x1, 0x1ff, 0x10, 0x6}, {0xff, 0x3, 0x100000, 0xd}, {0x5, 0xffff, 0xffff, 0x3}, {0x9, 0x3, 0x841, 0x7ff}, {0x2, 0x7, 0x8, 0x1}, {0x101, 0x2, 0x0, 0x800}, {0x3, 0x2, 0xc, 0x4}, {0x1798, 0x947, 0x1, 0x5}, {0x1, 0x77a3, 0x4, 0x6}, {0x3, 0xffffffff, 0x401, 0x4}, {0x4, 0x3, 0x4, 0xca0}, {0xa2, 0x3, 0x80, 0x6}, {0x1, 0x0, 0x4, 0x5}, {0x4, 0xfffffffe, 0x8, 0x6}, {0x5, 0x9, 0x4, 0xfffffff9}, {0x9, 0x972b, 0xfffffffd}, {0x1, 0xe, 0x3, 0x1}, {0x7, 0x7, 0x10001, 0x8}, {0x8001, 0x4, 0xffff0001, 0x8}, {0xc000, 0x5, 0x9, 0xb}, {0x0, 0x9, 0xe876, 0x9}, {0x1ff, 0x81, 0xfffffff2, 0x4}, {0x8001, 0x3, 0x3, 0x5}, {0x3, 0xbb, 0x2, 0x3}, {0x4, 0x5, 0x6ef, 0xffffffff}, {0xfffffffa, 0xc2, 0x4, 0x1d}, {0x220, 0x7, 0x1ff, 0x3}, {0x5, 0xf, 0x81, 0x80}, {0x4, 0x6, 0x7ff, 0x4707}, {0xfff, 0x2, 0x101, 0x1}, {0x7, 0x1000, 0xccaf, 0x2}, {0x4, 0x3, 0x8, 0x4}, {0xffffff7f, 0x7, 0x9, 0x40}, {0x8001, 0x101, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0xcc5f, 0x6}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}, @TCA_U32_SEL={0x424, 0x5, {0xf, 0x9, 0x85, 0x7a, 0x8, 0x5, 0x3, 0x1, [{0x9, 0x5, 0x8, 0x270}, {0x401, 0x2, 0x3, 0x8}, {0x9, 0x7fff, 0x6, 0x7}, {0x3ff, 0xfffffffd, 0x0, 0x3}, {0x4, 0x3, 0x2, 0x3}, {0x5, 0xf, 0x0, 0x1c}, {0x0, 0x6, 0x8001, 0x7}, {0xf, 0xc, 0x28d, 0x10}, {0x5, 0x9, 0x9ae, 0x6}, {0x4, 0xd, 0x2, 0xebb}, {0x1, 0x5, 0x200, 0x3ff}, {0x9c, 0x313, 0xd58, 0x7}, {0x5, 0x0, 0x2, 0xcb0}, {0x5, 0x8, 0x8, 0x8}, {0x262, 0x5, 0x8001, 0x5}, {0x7, 0x3, 0x200, 0x80000000}, {0xfffffffd, 0xbc, 0xfff, 0x6}, {0x9, 0x9, 0x8, 0x6}, {0x1, 0x486f4bd, 0x0, 0x8}, {0x81, 0x3, 0xe9, 0x58000000}, {0xb2, 0xfffffff0, 0x0, 0xe}, {0x4, 0x3, 0xfffffffb, 0x8}, {0xf, 0x2, 0x8e, 0x7}, {0x1, 0x80, 0x3}, {0x2, 0x2, 0x4, 0x8}, {0x0, 0x0, 0x3289, 0xff}, {0xc4ec, 0xe1f9, 0x5, 0x7}, {0x100, 0x8, 0xff, 0x3ff}, {0x3, 0x9, 0x7, 0x80000001}, {0x60, 0x5, 0xfff, 0x10}, {0x7f35, 0xbf, 0xeb3, 0x6}, {0x9, 0xc5, 0x8, 0x4}, {0x6, 0x87ec, 0x0, 0x3}, {0x4, 0x8, 0x9, 0x9}, {0x3, 0x6, 0x80000000, 0x4e}, {0x0, 0x6, 0xa, 0x9}, {0xd416, 0x7fff, 0x5, 0x401}, {0xffffff58, 0x7f, 0x1, 0x8}, {0x1, 0x2, 0x1, 0x2}, {0x200, 0x1000, 0x3}, {0x4, 0x9, 0x4, 0x1}, {0x2, 0x3, 0x2, 0x6}, {0x0, 0x8, 0x3, 0x8}, {0x2a800, 0x4, 0x0, 0x7ff}, {0x3ff, 0xffff4ff9, 0x5, 0x80000000}, {0xffffff80, 0x1, 0x5, 0x81}, {0x8, 0x7f15, 0x6, 0x6}, {0x9, 0xe, 0x7, 0x7}, {0x3, 0xffff, 0x3aa4, 0x4}, {0x200, 0xff, 0xfffffff9, 0x101}, {0xf673, 0x432194b6, 0x2, 0x8}, {0x7, 0x7, 0x6, 0x7fff}, {0xc79, 0x5, 0x0, 0x7}, {0x3, 0x8, 0x80000000, 0xc}, {0x0, 0x11c00, 0xe, 0x6}, {0x7fff, 0x8, 0x5, 0x8}, {0x5, 0xffff, 0x5286, 0xd24}, {0x9, 0x0, 0x7, 0x5}, {0xee, 0xffff71f8, 0xfd}, {0x80000000, 0x3, 0x8000, 0x40}, {0xfffffffd, 0x401, 0x5, 0x9}, {0x7, 0xfffffffb, 0x3ff, 0x6}, {0x8, 0x9, 0x8001, 0x5}, {0xeee1, 0x7, 0x2, 0x7fffffff}, {0x8, 0x8, 0x80000000, 0xb}]}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0xffff}}]}}]}, 0x1614}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) 1.622783186s ago: executing program 7 (id=6612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x2, 0x80805, 0x0) unshare(0x400) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000006200)={r4}, 0x8) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0x500}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.60445552s ago: executing program 5 (id=6613): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201160000000040f30455070000000000010902240001000040b1090400000103000100092101010001220500090581010000000000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) unlink(&(0x7f0000000040)='.\x00') mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200a07000000070f00f4000000156bfe3e89dab34771d2ac7c97a384ca491f5d01203263d68798ba9460cd6c0134b8597dbd289726c6d005df3a509f492a155164eed8cfb3719b166e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="2b36207f3a9e", 0x6}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xac}}, 0x0) 696.694522ms ago: executing program 7 (id=6614): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) 639.037956ms ago: executing program 0 (id=6615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 6 (id=6616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a77d400", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0xfffffffffffffc84, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r8, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x2000c000}}], 0x2, 0x88) r9 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000901, 0xee00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x4, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) kernel console output (not intermixed with test programs): 294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.010018][ T30] audit: type=1326 audit(1760110139.187:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.316738][ T30] audit: type=1326 audit(1760110139.187:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.584804][ T30] audit: type=1326 audit(1760110139.187:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.702761][ T30] audit: type=1326 audit(1760110139.187:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.819336][ T30] audit: type=1326 audit(1760110139.187:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.843014][T22268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1789.886660][T28849] /dev/nullb0: Can't open blockdev [ 1789.898209][ T30] audit: type=1326 audit(1760110139.187:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.937921][ T30] audit: type=1326 audit(1760110139.187:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1789.974631][ T30] audit: type=1326 audit(1760110139.187:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1790.060739][T28850] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1790.530135][ T30] audit: type=1326 audit(1760110139.187:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1790.644971][ T30] audit: type=1326 audit(1760110139.187:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1790.668421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1790.796918][T27651] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1790.836519][ T30] audit: type=1326 audit(1760110139.187:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1791.086978][ T30] audit: type=1326 audit(1760110139.187:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28835 comm="syz.1.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f401318eec9 code=0x7ffc0000 [ 1791.088367][T27651] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1791.185788][T28859] netlink: 'syz.5.6170': attribute type 1 has an invalid length. [ 1791.193738][T28859] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6170'. [ 1791.439345][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.516035][T27651] usb 7-1: config 8 has no interface number 0 [ 1791.523059][T27651] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 1791.547143][T27651] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 1791.558411][T27651] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1791.568738][T27651] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1791.575522][T27651] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1791.585029][T27651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.598315][T28852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1791.821932][T27651] usb 7-1: string descriptor 0 read error: -71 [ 1791.841567][T27651] ir_toy 7-1:8.177: required endpoints not found [ 1791.907818][T27651] usb 7-1: USB disconnect, device number 89 [ 1792.272888][T28869] netlink: 360 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1792.578221][T28875] syzkaller1: entered promiscuous mode [ 1792.583702][T28875] syzkaller1: entered allmulticast mode [ 1793.257207][T28444] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1793.418512][T28444] usb 1-1: Using ep0 maxpacket: 32 [ 1793.446444][T28444] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1793.527252][T28444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.529676][T28444] usb 1-1: config 0 descriptor?? [ 1793.627648][T11468] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1793.790291][T11468] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.828274][T28444] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1793.840648][T11468] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1793.890558][T28444] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1793.909845][T11468] usb 4-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 1793.922823][T11468] usb 4-1: Product: syz [ 1793.943197][T28444] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1793.953016][T11468] usb 4-1: Manufacturer: syz [ 1793.961757][T28444] usb 1-1: media controller created [ 1793.973638][T11468] usb 4-1: config 0 descriptor?? [ 1794.019091][T28444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1794.074834][T28898] input: syz1 as /devices/virtual/input/input215 [ 1794.223045][T28444] DVB: Unable to find symbol dib7000p_attach() [ 1794.271172][T28444] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1794.486212][T28444] rc_core: IR keymap rc-dib0700-rc5 not found [ 1794.512065][T28444] Registered IR keymap rc-empty [ 1794.513687][T28909] input: syz1 as /devices/virtual/input/input217 [ 1794.517247][T28444] dvb-usb: could not initialize remote control. [ 1794.529770][T28444] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1794.561515][T28444] usb 1-1: USB disconnect, device number 15 [ 1794.836299][T28912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6185'. [ 1795.561021][T28444] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1796.671942][T28919] block device autoloading is deprecated and will be removed. [ 1796.769884][T28444] usb 4-1: USB disconnect, device number 19 [ 1797.195198][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6188'. [ 1797.350008][T28931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1797.903491][T28933] overlay: ./file0 is not a directory [ 1797.943630][T28931] netlink: 'syz.6.6191': attribute type 4 has an invalid length. [ 1797.952061][T28931] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6191'. [ 1797.952541][T28935] FAULT_INJECTION: forcing a failure. [ 1797.952541][T28935] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.998648][T28935] CPU: 1 UID: 0 PID: 28935 Comm: syz.3.6192 Not tainted syzkaller #0 PREEMPT(full) [ 1797.998673][T28935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1797.998683][T28935] Call Trace: [ 1797.998688][T28935] [ 1797.998695][T28935] dump_stack_lvl+0x16c/0x1f0 [ 1797.998723][T28935] should_fail_ex+0x512/0x640 [ 1797.998743][T28935] ? fs_reclaim_acquire+0xae/0x150 [ 1797.998766][T28935] should_failslab+0xc2/0x120 [ 1797.998788][T28935] __kmalloc_noprof+0xdd/0x880 [ 1797.998813][T28935] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1797.998844][T28935] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1797.998863][T28935] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1797.998886][T28935] ? tomoyo_profile+0x47/0x60 [ 1797.998910][T28935] tomoyo_path_number_perm+0x245/0x580 [ 1797.998926][T28935] ? tomoyo_path_number_perm+0x237/0x580 [ 1797.998946][T28935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1797.998965][T28935] ? find_held_lock+0x2b/0x80 [ 1797.999010][T28935] ? find_held_lock+0x2b/0x80 [ 1797.999032][T28935] ? hook_file_ioctl_common+0x145/0x410 [ 1797.999061][T28935] ? __fget_files+0x20e/0x3c0 [ 1797.999084][T28935] security_file_ioctl+0x9b/0x240 [ 1797.999106][T28935] __x64_sys_ioctl+0xb7/0x210 [ 1797.999136][T28935] do_syscall_64+0xcd/0x4e0 [ 1797.999159][T28935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.999177][T28935] RIP: 0033:0x7fa07d38eec9 [ 1797.999191][T28935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.999207][T28935] RSP: 002b:00007fa07e2af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.999223][T28935] RAX: ffffffffffffffda RBX: 00007fa07d5e5fa0 RCX: 00007fa07d38eec9 [ 1797.999235][T28935] RDX: 0000200000000080 RSI: 000000004020565a RDI: 0000000000000003 [ 1797.999245][T28935] RBP: 00007fa07e2af090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.999255][T28935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.999264][T28935] R13: 00007fa07d5e6038 R14: 00007fa07d5e5fa0 R15: 00007ffdc3f489d8 [ 1797.999288][T28935] [ 1798.057793][T28935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1798.274780][T28931] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1798.281302][T28931] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1798.289753][T28931] vhci_hcd vhci_hcd.0: Device attached [ 1798.303698][T28933] vhci_hcd vhci_hcd.0: port 0 already used [ 1798.356691][T28945] input: syz1 as /devices/virtual/input/input218 [ 1798.446505][T28936] vhci_hcd: connection closed [ 1798.446726][ T6026] vhci_hcd: stop threads [ 1798.462900][ T6026] vhci_hcd: release socket [ 1798.472318][ T6026] vhci_hcd: disconnect device [ 1798.617887][T28444] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1798.780903][T28444] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1798.828722][T28444] usb 1-1: config 8 has an invalid interface number: 92 but max is 0 [ 1798.836796][T28444] usb 1-1: config 8 has no interface number 0 [ 1798.847896][T28444] usb 1-1: config 8 interface 92 has no altsetting 0 [ 1798.856461][T28444] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 1798.865633][T28444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.873735][T28444] usb 1-1: Product: syz [ 1798.878009][T28444] usb 1-1: Manufacturer: syz [ 1798.882599][T28444] usb 1-1: SerialNumber: syz [ 1799.159755][T28444] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1799.181326][T28959] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6199'. [ 1799.308089][T28444] usb 1-1: USB disconnect, device number 16 [ 1800.168149][T28444] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1800.329824][T28444] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.358695][T28444] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1800.382549][T28444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.430125][T28444] usb 1-1: config 0 descriptor?? [ 1800.586198][T28444] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 1800.598700][T28444] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1800.693901][T19647] usb 1-1: USB disconnect, device number 17 [ 1800.938783][T28981] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1800.960535][T28981] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1801.552231][T28990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1802.118670][T19647] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1802.278382][T19647] usb 7-1: Using ep0 maxpacket: 32 [ 1802.339479][T29005] netlink: 'syz.5.6214': attribute type 1 has an invalid length. [ 1802.347257][T29005] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6214'. [ 1802.500602][T19647] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1802.509777][T19647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.520399][T19647] usb 7-1: config 0 descriptor?? [ 1802.918440][T19647] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1802.960210][T19647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1802.998902][T19647] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1803.006278][T19647] usb 7-1: media controller created [ 1803.055662][T19647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1803.092353][T29012] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6217'. [ 1803.265422][T27441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1803.276259][T27441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1803.288506][T27441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1803.299315][T27441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1803.309971][T27441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1803.476796][T19647] DVB: Unable to find symbol dib7000p_attach() [ 1803.495482][T19647] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1803.598388][T19647] rc_core: IR keymap rc-dib0700-rc5 not found [ 1803.625945][T19647] Registered IR keymap rc-empty [ 1803.668679][T19647] dvb-usb: could not initialize remote control. [ 1803.675163][T19647] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1803.687548][T19647] usb 7-1: USB disconnect, device number 90 [ 1803.720394][T19647] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1803.805510][T29013] chnl_net:caif_netlink_parms(): no params data found [ 1803.943523][ T36] macvlan2: left allmulticast mode [ 1803.963138][ T36] macvlan2: left promiscuous mode [ 1803.998681][ T36] bridge0: port 3(macvlan2) entered disabled state [ 1804.051159][ T36] bridge_slave_1: left allmulticast mode [ 1804.080031][ T36] bridge_slave_1: left promiscuous mode [ 1804.085799][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.115817][ T36] bridge_slave_0: left allmulticast mode [ 1804.134892][ T36] bridge_slave_0: left promiscuous mode [ 1804.150975][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.670401][T29036] FAULT_INJECTION: forcing a failure. [ 1804.670401][T29036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.728526][T29036] CPU: 0 UID: 0 PID: 29036 Comm: syz.0.6222 Not tainted syzkaller #0 PREEMPT(full) [ 1804.728554][T29036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1804.728564][T29036] Call Trace: [ 1804.728570][T29036] [ 1804.728579][T29036] dump_stack_lvl+0x16c/0x1f0 [ 1804.728606][T29036] should_fail_ex+0x512/0x640 [ 1804.728632][T29036] _copy_from_user+0x2e/0xd0 [ 1804.728656][T29036] io_submit_one+0xbb/0x1df0 [ 1804.728684][T29036] ? __lock_acquire+0xb97/0x1ce0 [ 1804.728708][T29036] ? __pfx_io_submit_one+0x10/0x10 [ 1804.728739][T29036] ? __might_fault+0xe3/0x190 [ 1804.728754][T29036] ? __might_fault+0x13b/0x190 [ 1804.728775][T29036] ? __x64_sys_io_submit+0x1a9/0x350 [ 1804.728797][T29036] __x64_sys_io_submit+0x1a9/0x350 [ 1804.728822][T29036] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1804.728855][T29036] do_syscall_64+0xcd/0x4e0 [ 1804.728878][T29036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.728896][T29036] RIP: 0033:0x7f380f58eec9 [ 1804.728910][T29036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.728927][T29036] RSP: 002b:00007f3810433038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1804.728945][T29036] RAX: ffffffffffffffda RBX: 00007f380f7e5fa0 RCX: 00007f380f58eec9 [ 1804.728957][T29036] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f3810412000 [ 1804.728967][T29036] RBP: 00007f3810433090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.728978][T29036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.728988][T29036] R13: 00007f380f7e6038 R14: 00007f380f7e5fa0 R15: 00007ffc41fc90d8 [ 1804.729012][T29036] [ 1804.933315][T27441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1804.958118][T27441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1804.966993][T27441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1804.998058][T27441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1805.024093][T27441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1805.339975][T22268] Bluetooth: hci0: command tx timeout [ 1805.698155][T29054] input: syz1 as /devices/virtual/input/input220 [ 1805.788442][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6229'. [ 1806.170334][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.182272][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.192087][ T36] bond0 (unregistering): Released all slaves [ 1806.742536][ T36] tipc: Left network mode [ 1806.742652][T29013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.755417][T29013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.762696][T29013] bridge_slave_0: entered allmulticast mode [ 1806.778990][T29013] bridge_slave_0: entered promiscuous mode [ 1806.848901][T19647] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1806.894638][T29013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.912173][T29013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.921594][T29013] bridge_slave_1: entered allmulticast mode [ 1806.946642][T29013] bridge_slave_1: entered promiscuous mode [ 1807.018829][T19647] usb 1-1: Using ep0 maxpacket: 32 [ 1807.026642][T19647] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1807.051346][T19647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.091910][T19647] usb 1-1: config 0 descriptor?? [ 1807.100112][T22268] Bluetooth: hci5: command tx timeout [ 1807.166644][T29013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.274929][T29013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.319689][ T36] hsr_slave_0: left promiscuous mode [ 1807.331133][ T36] hsr_slave_1: left promiscuous mode [ 1807.353687][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.377710][T19647] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1807.385200][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.414403][T19647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1807.423767][T22268] Bluetooth: hci0: command tx timeout [ 1807.430815][T19647] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1807.448882][T19647] usb 1-1: media controller created [ 1807.463021][T19647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1807.573947][T19647] DVB: Unable to find symbol dib7000p_attach() [ 1807.580321][T19647] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1807.720267][T19647] rc_core: IR keymap rc-dib0700-rc5 not found [ 1807.726483][T19647] Registered IR keymap rc-empty [ 1807.731553][T19647] dvb-usb: could not initialize remote control. [ 1807.738331][T19647] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1808.116695][ T36] team_slave_1 (unregistering): left allmulticast mode [ 1808.136994][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1808.193115][ T36] team_slave_0 (unregistering): left allmulticast mode [ 1808.202404][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1808.418952][ T42] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1808.611179][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 1808.621032][ T42] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1808.641919][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.690499][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.700620][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1808.726786][ T42] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1808.778236][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.800879][ T42] usb 7-1: config 0 descriptor?? [ 1809.123906][T29013] team0: Port device team_slave_0 added [ 1809.154243][T29013] team0: Port device team_slave_1 added [ 1809.182410][T22268] Bluetooth: hci5: command tx timeout [ 1809.295682][T29013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.309068][T29013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.334969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1809.349696][T29013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.501259][T22268] Bluetooth: hci0: command tx timeout [ 1809.641001][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 1809.649733][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1809.660645][ T42] usb 7-1: USB disconnect, device number 91 [ 1809.688311][T29013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.696806][T29013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.724112][T29013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.761509][T19647] usb 1-1: USB disconnect, device number 18 [ 1809.810152][ T36] IPVS: stop unused estimator thread 0... [ 1809.849766][T19647] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1809.874626][T29039] chnl_net:caif_netlink_parms(): no params data found [ 1809.931810][T29013] hsr_slave_0: entered promiscuous mode [ 1809.948308][T29013] hsr_slave_1: entered promiscuous mode [ 1810.089368][T29039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.099757][T29039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.107002][T29039] bridge_slave_0: entered allmulticast mode [ 1810.113957][T29039] bridge_slave_0: entered promiscuous mode [ 1810.141478][T29039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.149720][T29039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.156948][T29039] bridge_slave_1: entered allmulticast mode [ 1810.166362][T29039] bridge_slave_1: entered promiscuous mode [ 1810.276272][T29039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.320489][T29039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.351737][T29090] input: syz1 as /devices/virtual/input/input222 [ 1810.460303][T29039] team0: Port device team_slave_0 added [ 1810.500105][T29039] team0: Port device team_slave_1 added [ 1810.655930][T29039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.697646][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.725278][T29039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.884817][T29039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.899254][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.926538][T29039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.142823][T29039] hsr_slave_0: entered promiscuous mode [ 1811.149078][T29039] hsr_slave_1: entered promiscuous mode [ 1811.182653][T29039] debugfs: 'hsr0' already exists in 'hsr' [ 1811.189897][T29039] Cannot create hsr debugfs directory [ 1811.199306][T29013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1811.247868][T29013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1811.259340][T22268] Bluetooth: hci5: command tx timeout [ 1811.312748][T29013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1811.371957][T29013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1811.581487][T22268] Bluetooth: hci0: command tx timeout [ 1811.703334][T29013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.115302][T29039] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1812.181998][T29013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.200899][T29117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1812.273917][T29039] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1812.328689][T29039] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1812.381258][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.388340][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.417853][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.425025][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.435557][T29039] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1812.679761][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1812.702339][T19650] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1812.829910][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1812.851227][ T42] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 1812.860203][T19650] usb 7-1: Using ep0 maxpacket: 8 [ 1812.865103][T29039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.874263][ T42] usb 1-1: config 0 has no interface number 1 [ 1812.880546][ T42] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1812.882000][T19650] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1812.893152][ T42] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1812.924545][T29039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.952135][T18525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.959252][T18525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.979866][T19650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.982102][T18525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.997822][T18525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.009576][ T42] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1813.019444][T19650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.021233][ T42] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1813.059629][ T42] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1813.063410][T19650] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1813.082760][T29039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1813.096391][T29039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1813.107291][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1813.126419][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1813.139612][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1813.146681][T19650] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1813.153523][ T42] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1813.169324][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.189760][ T42] usb 1-1: Product: syz [ 1813.193959][ T42] usb 1-1: Manufacturer: syz [ 1813.198561][ T42] usb 1-1: SerialNumber: syz [ 1813.203426][T19650] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.222553][ T42] usb 1-1: config 0 descriptor?? [ 1813.243714][T19650] usb 7-1: config 0 descriptor?? [ 1813.243727][T29128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1813.246034][ T42] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1813.313472][ T42] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1813.349766][T22268] Bluetooth: hci5: command tx timeout [ 1813.368444][T29013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.492792][T29013] veth0_vlan: entered promiscuous mode [ 1813.545506][T29013] veth1_vlan: entered promiscuous mode [ 1813.606048][ T42] usb 1-1: USB disconnect, device number 19 [ 1813.627529][T29039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.956648][T29013] veth0_macvtap: entered promiscuous mode [ 1813.965752][T19650] usbhid 7-1:0.0: can't add hid device: -71 [ 1813.987043][T19650] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1814.011793][T29013] veth1_macvtap: entered promiscuous mode [ 1814.036259][T19650] usb 7-1: USB disconnect, device number 92 [ 1814.068530][T29013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.081862][T29013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.108977][T18525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.170331][T18525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.226787][T18525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.257829][T29153] Bluetooth: MGMT ver 1.23 [ 1814.267965][T18525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.423911][T18525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.438601][T18525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.495167][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.506577][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.527486][T29039] veth0_vlan: entered promiscuous mode [ 1814.557237][T29039] veth1_vlan: entered promiscuous mode [ 1814.624342][T29039] veth0_macvtap: entered promiscuous mode [ 1814.645500][T29039] veth1_macvtap: entered promiscuous mode [ 1814.706777][T29039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.727780][T29039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.742733][T27714] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.760848][T27714] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.796072][T27714] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.889892][T27714] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.008387][ T42] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1815.459299][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1815.506074][ T42] usb 4-1: not running at top speed; connect to a high speed hub [ 1815.541145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.581615][ T42] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 1815.911606][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.912580][ T42] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.939426][ T42] usb 4-1: config 129 has no interface number 0 [ 1816.399998][ T42] usb 4-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1816.449986][ T42] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1816.460885][T27642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.499735][T27642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.504430][ T42] usb 4-1: config 129 interface 28 has no altsetting 0 [ 1816.509564][T29171] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6251'. [ 1816.516085][ T42] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1816.595067][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.608129][ T42] usb 4-1: Product: syz [ 1816.613017][ T42] usb 4-1: Manufacturer: syz [ 1816.618102][ T42] usb 4-1: SerialNumber: syz [ 1816.821388][T29178] input: syz1 as /devices/virtual/input/input223 [ 1816.837292][T29177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1816.947233][ T42] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 1816.973469][ T42] etas_es58x 4-1:129.28: could not retrieve the product info string [ 1817.153883][ T42] usb 4-1: USB disconnect, device number 20 [ 1817.195706][ T42] etas_es58x 4-1:129.28: Disconnecting syz syz [ 1817.860758][T19650] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1818.058529][T19650] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.065061][T29195] binder_alloc: 29194: binder_alloc_buf size 1024 failed, no address space [ 1818.077464][T29195] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 1818.119090][T29196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6257'. [ 1818.165004][T19650] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1818.189674][T19650] usb 7-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 1818.250115][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1818.260573][T19650] usb 7-1: Product: syz [ 1818.270586][T19650] usb 7-1: Manufacturer: syz [ 1818.329647][T19650] usb 7-1: config 0 descriptor?? [ 1818.450134][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 1818.503863][ T42] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1818.637977][ T42] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1818.713391][ T42] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1818.730212][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.750633][ T42] usb 8-1: Product: syz [ 1818.804907][ T42] usb 8-1: Manufacturer: syz [ 1818.826167][ T42] usb 8-1: SerialNumber: syz [ 1818.944267][T27441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1818.954748][T27441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1818.964186][T27441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1818.971796][T27441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1818.979227][T27441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1819.320291][ T42] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 1819.575461][T29211] netlink: 'syz.3.6263': attribute type 2 has an invalid length. [ 1819.597326][T29211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1819.646915][T29203] chnl_net:caif_netlink_parms(): no params data found [ 1819.665264][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1819.708627][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1819.949693][T29203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.969173][T29203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.987880][T29203] bridge_slave_0: entered allmulticast mode [ 1820.012667][T29203] bridge_slave_0: entered promiscuous mode [ 1820.047652][T27642] macvlan2: left allmulticast mode [ 1820.060462][T27642] macvlan2: left promiscuous mode [ 1820.080678][T27642] bridge0: port 3(macvlan2) entered disabled state [ 1820.104622][T27642] bridge_slave_1: left allmulticast mode [ 1820.122064][T27642] bridge_slave_1: left promiscuous mode [ 1820.140019][ T42] usb 8-1: current rate 9306882 is different from the runtime rate 9338507 [ 1820.159512][T27642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.236842][T27642] bridge_slave_0: left allmulticast mode [ 1820.246561][T29165] usb 7-1: USB disconnect, device number 93 [ 1820.274829][T27642] bridge_slave_0: left promiscuous mode [ 1820.282232][T27642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.461405][ T42] usb 8-1: USB disconnect, device number 2 [ 1821.087550][T21712] Bluetooth: hci2: command tx timeout [ 1821.181903][T27642] dvmrp0 (unregistering): left allmulticast mode [ 1821.222512][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'. [ 1821.379925][T29231] FAULT_INJECTION: forcing a failure. [ 1821.379925][T29231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1821.395825][T29231] CPU: 1 UID: 0 PID: 29231 Comm: syz.7.6268 Not tainted syzkaller #0 PREEMPT(full) [ 1821.395850][T29231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1821.395861][T29231] Call Trace: [ 1821.395868][T29231] [ 1821.395875][T29231] dump_stack_lvl+0x16c/0x1f0 [ 1821.395901][T29231] should_fail_ex+0x512/0x640 [ 1821.395925][T29231] _copy_from_user+0x2e/0xd0 [ 1821.395948][T29231] copy_msghdr_from_user+0x98/0x160 [ 1821.395969][T29231] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1821.396001][T29231] ___sys_sendmsg+0xfe/0x1d0 [ 1821.396023][T29231] ? __pfx____sys_sendmsg+0x10/0x10 [ 1821.396070][T29231] __sys_sendmsg+0x16d/0x220 [ 1821.396091][T29231] ? __pfx___sys_sendmsg+0x10/0x10 [ 1821.396119][T29231] ? fput+0x9b/0xd0 [ 1821.396146][T29231] do_syscall_64+0xcd/0x4e0 [ 1821.396169][T29231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.396186][T29231] RIP: 0033:0x7fc1f5f8eec9 [ 1821.396200][T29231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1821.396216][T29231] RSP: 002b:00007fc1f6e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1821.396232][T29231] RAX: ffffffffffffffda RBX: 00007fc1f61e5fa0 RCX: 00007fc1f5f8eec9 [ 1821.396243][T29231] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000005 [ 1821.396253][T29231] RBP: 00007fc1f6e52090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.396264][T29231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.396274][T29231] R13: 00007fc1f61e6038 R14: 00007fc1f61e5fa0 R15: 00007fffab002f98 [ 1821.396296][T29231] [ 1821.768614][T27642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.783391][T27642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.795501][T27642] bond0 (unregistering): Released all slaves [ 1821.813488][T27642] bond1 (unregistering): Released all slaves [ 1821.836441][T29203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.850045][T29203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.880659][T29203] bridge_slave_1: entered allmulticast mode [ 1821.928752][T29203] bridge_slave_1: entered promiscuous mode [ 1822.014372][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6265'. [ 1822.058172][T27642] : left promiscuous mode [ 1822.566747][T29203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.585319][T29203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.729001][T27642] tipc: Left network mode [ 1822.735450][T29203] team0: Port device team_slave_0 added [ 1822.745194][T29203] team0: Port device team_slave_1 added [ 1823.061825][T29203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.149166][T21712] Bluetooth: hci2: command tx timeout [ 1823.250686][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.361061][T29203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.372811][T29203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.416647][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.447356][T29262] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6276'. [ 1823.562798][T29203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.654343][T29203] hsr_slave_0: entered promiscuous mode [ 1823.669762][T29203] hsr_slave_1: entered promiscuous mode [ 1823.683414][T29203] debugfs: 'hsr0' already exists in 'hsr' [ 1823.695371][T29203] Cannot create hsr debugfs directory [ 1823.723919][T27642] hsr_slave_0: left promiscuous mode [ 1824.170903][T27642] hsr_slave_1: left promiscuous mode [ 1824.180497][T27642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.263651][T27642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.518248][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6278'. [ 1825.441199][T21712] Bluetooth: hci2: command tx timeout [ 1827.521572][T21712] Bluetooth: hci2: command tx timeout [ 1828.504901][T27642] team_slave_1 (unregistering): left allmulticast mode [ 1828.532070][T27642] team0 (unregistering): Port device team_slave_1 removed [ 1828.711625][T27642] team_slave_0 (unregistering): left allmulticast mode [ 1828.734191][T27642] team0 (unregistering): Port device team_slave_0 removed [ 1829.794333][T29279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1831.989830][ T5871] IPVS: starting estimator thread 0... [ 1832.006268][T29318] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1832.013626][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1832.251846][T29320] IPVS: using max 36 ests per chain, 86400 per kthread [ 1832.469559][T29323] tipc: Enabled bearer , priority 0 [ 1832.498486][T29323] syzkaller0: entered promiscuous mode [ 1832.508493][T29323] syzkaller0: entered allmulticast mode [ 1832.589839][T29323] tipc: Resetting bearer [ 1832.660776][T29317] tipc: Resetting bearer [ 1832.682327][ T5871] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1832.740554][T29317] tipc: Disabling bearer [ 1832.833558][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1832.860288][ T5871] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 1832.881328][ T5871] usb 4-1: config 0 has no interface number 0 [ 1832.923754][ T5871] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1832.979315][ T5871] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1832.995844][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.039563][ T5871] usb 4-1: Product: syz [ 1833.074289][ T5871] usb 4-1: Manufacturer: syz [ 1833.093070][ T5871] usb 4-1: SerialNumber: syz [ 1833.119908][ T5871] usb 4-1: config 0 descriptor?? [ 1833.139271][ T5871] redrat3 4-1:0.83: Couldn't find all endpoints [ 1833.150678][T29203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1833.183650][T29203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1833.455165][T29203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1833.524963][T29203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1833.778477][T29203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.818310][T29203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.833277][T27642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.840383][T27642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.868379][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.875483][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.899615][T29203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1833.920104][T29203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1834.104234][ T42] usb 4-1: USB disconnect, device number 21 [ 1834.172941][T29203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1834.320296][T29203] veth0_vlan: entered promiscuous mode [ 1834.780928][T29203] veth1_vlan: entered promiscuous mode [ 1834.938616][T29203] veth0_macvtap: entered promiscuous mode [ 1835.051390][T29203] veth1_macvtap: entered promiscuous mode [ 1835.395236][T29203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.420773][T29203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.457907][T15191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.494546][T15191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.528694][T27642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.562966][T27642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.639952][T29273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.752752][T29273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.942590][T27651] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1835.969385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.006743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.132120][T27651] usb 4-1: Using ep0 maxpacket: 8 [ 1836.143978][T27651] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1836.176493][T27651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.218134][T27651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.816461][T27651] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1837.091048][T27651] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1837.138552][T27651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.157883][T27651] usb 4-1: config 0 descriptor?? [ 1837.204738][T29389] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6309'. [ 1837.793785][T27651] usbhid 4-1:0.0: can't add hid device: -71 [ 1837.805447][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1837.805465][ T30] audit: type=1400 audit(1760110188.441:4669): avc: denied { listen } for pid=29392 comm="syz.5.6310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1837.835927][T27651] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1837.853467][ T30] audit: type=1326 audit(1760110188.471:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1837.883772][T28444] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1837.914344][ T30] audit: type=1326 audit(1760110188.471:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1837.914504][T27651] usb 4-1: USB disconnect, device number 22 [ 1837.939105][ T30] audit: type=1326 audit(1760110188.481:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1837.994394][ T30] audit: type=1326 audit(1760110188.481:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.062801][ T30] audit: type=1326 audit(1760110188.481:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.086580][ T30] audit: type=1326 audit(1760110188.481:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.123987][ T30] audit: type=1326 audit(1760110188.481:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.149694][T28444] usb 8-1: Using ep0 maxpacket: 8 [ 1838.155022][ T30] audit: type=1326 audit(1760110188.481:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.178774][ T30] audit: type=1326 audit(1760110188.481:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.5.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1838.203846][T28444] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1838.215012][T28444] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.231439][T28444] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.242514][T28444] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1838.255734][T28444] usb 8-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1838.285887][T28444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.323185][T28444] usb 8-1: config 0 descriptor?? [ 1838.416075][T29405] netlink: 'syz.6.6314': attribute type 1 has an invalid length. [ 1838.464439][T29405] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6314'. [ 1838.526624][T29407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1838.545585][T29407] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 1838.553950][T29407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1838.570720][T29407] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 1838.577782][T29407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1838.590956][T29407] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1838.602582][T29407] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1838.625123][T29407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1839.909751][T27441] Bluetooth: hci6: command 0x1003 tx timeout [ 1839.913754][T21712] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1840.368007][T29405] syz.6.6314 (29405): drop_caches: 2 [ 1840.468386][T28444] usbhid 8-1:0.0: can't add hid device: -71 [ 1840.488158][T28444] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1840.517327][T28444] usb 8-1: USB disconnect, device number 3 [ 1840.574296][T29418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1840.664806][T29423] netlink: 'syz.6.6319': attribute type 1 has an invalid length. [ 1840.673244][T29423] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6319'. [ 1840.932739][ T42] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1841.764231][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.797487][ T42] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1841.850535][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.948778][ T42] usb 7-1: config 0 descriptor?? [ 1842.073340][T29437] input: syz1 as /devices/virtual/input/input224 [ 1842.406976][T27714] Bluetooth: hci6: Frame reassembly failed (-84) [ 1843.673462][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 1843.683818][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1843.710157][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1843.710174][ T30] audit: type=1400 audit(1760110194.341:4713): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=5444 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1843.789380][ T42] usb 7-1: USB disconnect, device number 94 [ 1843.853886][ T30] audit: type=1400 audit(1760110194.341:4714): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5444 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1843.938989][T29446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1844.113115][ T30] audit: type=1400 audit(1760110194.341:4715): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5444 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1844.137385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.162915][ T30] audit: type=1326 audit(1760110194.791:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1844.186427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.412726][T29466] input: syz1 as /devices/virtual/input/input225 [ 1844.435843][ T30] audit: type=1326 audit(1760110194.791:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1844.471555][T27441] Bluetooth: hci6: command 0x1003 tx timeout [ 1844.483153][T21712] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1844.570234][ T30] audit: type=1326 audit(1760110194.791:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1844.594226][ T30] audit: type=1326 audit(1760110194.791:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1844.617689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.653150][ T30] audit: type=1326 audit(1760110194.791:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1845.152566][ T30] audit: type=1326 audit(1760110194.791:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1845.363343][ T30] audit: type=1326 audit(1760110194.791:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.5.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48d18eec9 code=0x7ffc0000 [ 1845.386856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1845.632064][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1846.078220][T29485] 9pnet_fd: Insufficient options for proto=fd [ 1846.385321][T29497] macvlan2: left allmulticast mode [ 1846.847342][T29497] macvlan2: left promiscuous mode [ 1846.877797][T29497] bridge0: port 3(macvlan2) entered disabled state [ 1847.635312][T29497] bridge_slave_1: left allmulticast mode [ 1847.642919][T29497] bridge_slave_1: left promiscuous mode [ 1847.648985][T29497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.850373][T29497] bridge_slave_0: left allmulticast mode [ 1847.856253][T29497] bridge_slave_0: left promiscuous mode [ 1847.863135][T29497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.187009][T16697] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1848.558114][T16697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1848.578524][T16697] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.621082][T16697] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1848.669580][T16697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.686585][T16697] usb 4-1: Product: syz [ 1848.704780][T16697] usb 4-1: Manufacturer: syz [ 1848.760907][T16697] usb 4-1: SerialNumber: syz [ 1849.053128][T29542] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6348'. [ 1850.259454][T16697] usb 4-1: USB disconnect, device number 23 [ 1850.633790][T29562] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1850.641181][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1850.797563][T27651] IPVS: starting estimator thread 0... [ 1850.993825][T29563] IPVS: using max 72 ests per chain, 172800 per kthread [ 1851.511142][T21712] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 1851.521193][T29571] netlink: 'syz.6.6359': attribute type 3 has an invalid length. [ 1852.844121][T27651] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1852.891305][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.016667][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6363'. [ 1853.084331][T27651] usb 8-1: Using ep0 maxpacket: 16 [ 1853.385056][T27651] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1853.405276][T27651] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1853.427068][T27651] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1853.442486][T27651] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.458713][T27651] usb 8-1: Product: syz [ 1853.467031][T27651] usb 8-1: Manufacturer: syz [ 1853.478039][T27651] usb 8-1: SerialNumber: syz [ 1853.925247][T27651] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 1853.992860][T29594] comedi comedi3: comedi_config --init_data is deprecated [ 1854.000265][T29595] comedi comedi3: comedi_config --init_data is deprecated [ 1854.174202][ T42] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1854.585689][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 1854.604716][ T42] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1854.629808][ T42] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1854.662776][ T42] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.672175][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.680373][ T42] usb 7-1: Product: syz [ 1854.684867][ T42] usb 7-1: Manufacturer: syz [ 1854.689518][ T42] usb 7-1: SerialNumber: syz [ 1854.895890][T27651] usb 8-1: current rate 9306882 is different from the runtime rate 9338507 [ 1855.905328][ T42] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1855.919602][T27651] usb 8-1: USB disconnect, device number 4 [ 1856.949349][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1857.091826][ T42] usb 7-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1857.620362][ T42] usb 7-1: USB disconnect, device number 95 [ 1857.691277][T29618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6372'. [ 1857.713077][T29618] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6372'. [ 1857.964714][T11468] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1858.247074][T29627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6375'. [ 1858.350801][T11468] usb 1-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f [ 1858.874787][T11468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.779983][T11468] usb 1-1: string descriptor 0 read error: -71 [ 1859.801360][T11468] usb 1-1: NDI device with a latency value of 1 [ 1859.957893][T11468] ftdi_sio 1-1:129.0: FTDI USB Serial Device converter detected [ 1859.995700][T11468] ftdi_sio ttyUSB0: unknown device type: 0x357f [ 1860.335904][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1861.215191][T11468] usb 1-1: USB disconnect, device number 20 [ 1861.345654][T11468] ftdi_sio 1-1:129.0: device disconnected [ 1862.162692][T28444] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1862.310247][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6383'. [ 1862.395557][T28444] usb 8-1: Using ep0 maxpacket: 32 [ 1863.375468][T28444] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1863.608799][T28444] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.660813][T28444] usb 8-1: config 0 has no interface number 0 [ 1863.685663][T28444] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1863.783374][T28444] usb 8-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1863.792628][T28444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.822582][T28444] usb 8-1: config 0 descriptor?? [ 1863.925419][ T42] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1864.052032][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1864.826569][T28444] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1864.988685][ T42] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1865.023443][ T42] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1865.437643][T28444] snd-usb-audio 8-1:0.8: probe with driver snd-usb-audio failed with error -2 [ 1865.455350][ T42] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1865.464545][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.529218][T29663] FAULT_INJECTION: forcing a failure. [ 1865.529218][T29663] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.542565][T29663] CPU: 0 UID: 0 PID: 29663 Comm: syz.3.6387 Not tainted syzkaller #0 PREEMPT(full) [ 1865.542590][T29663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1865.542601][T29663] Call Trace: [ 1865.542610][T29663] [ 1865.542618][T29663] dump_stack_lvl+0x16c/0x1f0 [ 1865.542641][T29663] should_fail_ex+0x512/0x640 [ 1865.542655][T29663] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1865.542668][T29663] should_failslab+0xc2/0x120 [ 1865.542689][T29663] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1865.542707][T29663] ? alloc_empty_file+0x55/0x1e0 [ 1865.542735][T29663] ? alloc_empty_file+0x55/0x1e0 [ 1865.542756][T29663] ? _raw_spin_unlock+0x28/0x50 [ 1865.542769][T29663] alloc_empty_file+0x55/0x1e0 [ 1865.542785][T29663] alloc_file_pseudo+0x13a/0x230 [ 1865.542802][T29663] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1865.542824][T29663] __shmem_file_setup+0x1a3/0x330 [ 1865.542852][T29663] newseg+0x3b2/0xe60 [ 1865.542877][T29663] ? __pfx_newseg+0x10/0x10 [ 1865.542899][T29663] ? ksys_write+0x190/0x250 [ 1865.542914][T29663] ipcget+0xec/0xda0 [ 1865.542928][T29663] ? lockdep_hardirqs_on+0x7c/0x110 [ 1865.542942][T29663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1865.542959][T29663] ? __pfx_ipcget+0x10/0x10 [ 1865.542985][T29663] __x64_sys_shmget+0x13b/0x1b0 [ 1865.543006][T29663] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1865.543037][T29663] ? rcu_is_watching+0x12/0xc0 [ 1865.543057][T29663] do_syscall_64+0xcd/0x4e0 [ 1865.543072][T29663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.543084][T29663] RIP: 0033:0x7f6cd678eec9 [ 1865.543094][T29663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1865.543105][T29663] RSP: 002b:00007f6cd7582038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1865.543121][T29663] RAX: ffffffffffffffda RBX: 00007f6cd69e6090 RCX: 00007f6cd678eec9 [ 1865.543133][T29663] RDX: 0000000000000080 RSI: 0000000000002000 RDI: 0000000000000000 [ 1865.543143][T29663] RBP: 00007f6cd7582090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.543153][T29663] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 1865.543163][T29663] R13: 00007f6cd69e6128 R14: 00007f6cd69e6090 R15: 00007ffea615d998 [ 1865.543186][T29663] [ 1865.982365][ T5871] usb 8-1: USB disconnect, device number 5 [ 1866.094060][ T42] usb 1-1: usb_control_msg returned -32 [ 1866.126412][ T42] usbtmc 1-1:16.0: can't read capabilities [ 1866.545871][T29671] netlink: 260 bytes leftover after parsing attributes in process `syz.7.6390'. [ 1866.568417][T29673] afs: Unknown parameter 'dynd0' [ 1867.610486][T28444] usb 1-1: USB disconnect, device number 21 [ 1867.630865][T29686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6393'. [ 1867.642665][T29677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1867.662998][T29677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1867.692487][T29677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1867.713009][T29677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1867.719850][T29677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1867.840217][T29677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1867.859635][T29677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1867.866049][T29677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1868.028833][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1868.833143][T29677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1868.841681][T29677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1868.847706][T29677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1868.854274][T29677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1868.866412][T21712] Bluetooth: hci1: command 0x0c1a tx timeout [ 1869.271419][T29701] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1869.443211][T19650] IPVS: starting estimator thread 0... [ 1869.505213][T29700] syzkaller0: entered promiscuous mode [ 1869.530180][T29700] syzkaller0: entered allmulticast mode [ 1869.616046][T29702] IPVS: using max 46 ests per chain, 110400 per kthread [ 1869.665955][T21712] Bluetooth: hci3: command 0x0419 tx timeout [ 1869.747120][T27441] Bluetooth: hci4: command 0x0c1a tx timeout [ 1869.753568][T21712] Bluetooth: hci0: command 0x0c1a tx timeout [ 1869.906710][T21712] Bluetooth: hci5: command 0x0c1a tx timeout [ 1870.260356][T29715] ieee802154 phy1 wpan1: encryption failed: -90 [ 1870.566082][T16697] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1870.721088][T29722] FAULT_INJECTION: forcing a failure. [ 1870.721088][T29722] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.767325][T16697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1870.780992][T29722] CPU: 1 UID: 0 PID: 29722 Comm: syz.7.6403 Not tainted syzkaller #0 PREEMPT(full) [ 1870.781019][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1870.781030][T29722] Call Trace: [ 1870.781036][T29722] [ 1870.781043][T29722] dump_stack_lvl+0x16c/0x1f0 [ 1870.781072][T29722] should_fail_ex+0x512/0x640 [ 1870.781094][T29722] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1870.781125][T29722] should_failslab+0xc2/0x120 [ 1870.781148][T29722] __kmalloc_cache_noprof+0x72/0x780 [ 1870.781176][T29722] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1870.781197][T29722] ? fuse_lookup_name+0x19f/0x780 [ 1870.781228][T29722] ? fuse_lookup_name+0x19f/0x780 [ 1870.781251][T29722] fuse_lookup_name+0x19f/0x780 [ 1870.781281][T29722] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1870.781332][T29722] fuse_lookup+0x26a/0x560 [ 1870.781360][T29722] ? __pfx_fuse_lookup+0x10/0x10 [ 1870.781401][T29722] ? lockdep_init_map_type+0x5c/0x280 [ 1870.781427][T29722] __lookup_slow+0x251/0x460 [ 1870.781455][T29722] ? __pfx___lookup_slow+0x10/0x10 [ 1870.781498][T29722] ? lookup_fast+0x156/0x610 [ 1870.781520][T29722] walk_component+0x353/0x5b0 [ 1870.781540][T29722] path_lookupat+0x142/0x6d0 [ 1870.781558][T29722] ? kasan_save_stack+0x33/0x60 [ 1870.781581][T29722] filename_lookup+0x224/0x5f0 [ 1870.781603][T29722] ? __pfx_filename_lookup+0x10/0x10 [ 1870.781654][T29722] do_linkat+0x14c/0x5a0 [ 1870.781680][T29722] ? __pfx_do_linkat+0x10/0x10 [ 1870.781701][T29722] ? strncpy_from_user+0x203/0x2e0 [ 1870.781725][T29722] ? getname_flags.part.0+0x1c5/0x550 [ 1870.781756][T29722] __x64_sys_link+0x7d/0xa0 [ 1870.781779][T29722] do_syscall_64+0xcd/0x4e0 [ 1870.781805][T29722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.781823][T29722] RIP: 0033:0x7fc1f5f8eec9 [ 1870.781838][T29722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1870.781855][T29722] RSP: 002b:00007fc1f6e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1870.781873][T29722] RAX: ffffffffffffffda RBX: 00007fc1f61e6090 RCX: 00007fc1f5f8eec9 [ 1870.781885][T29722] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1870.781896][T29722] RBP: 00007fc1f6e31090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.781907][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.781918][T29722] R13: 00007fc1f61e6128 R14: 00007fc1f61e6090 R15: 00007fffab002f98 [ 1870.781943][T29722] [ 1870.783002][T16697] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.936107][T21712] Bluetooth: hci2: command 0x0c1a tx timeout [ 1870.940388][T16697] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1871.210782][T29727] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6404'. [ 1871.286210][T16697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.307036][T16697] usb 4-1: Product: syz [ 1871.311276][T16697] usb 4-1: Manufacturer: syz [ 1871.321430][T16697] usb 4-1: SerialNumber: syz [ 1871.587239][T29719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.601753][T29719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.836181][T21712] Bluetooth: hci0: command 0x0c1a tx timeout [ 1871.844162][T29737] FAULT_INJECTION: forcing a failure. [ 1871.844162][T29737] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.870451][T29737] CPU: 1 UID: 0 PID: 29737 Comm: syz.0.6407 Not tainted syzkaller #0 PREEMPT(full) [ 1871.870478][T29737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1871.870488][T29737] Call Trace: [ 1871.870495][T29737] [ 1871.870501][T29737] dump_stack_lvl+0x16c/0x1f0 [ 1871.870521][T29737] should_fail_ex+0x512/0x640 [ 1871.870536][T29737] ? __kmalloc_noprof+0xca/0x880 [ 1871.870554][T29737] should_failslab+0xc2/0x120 [ 1871.870569][T29737] __kmalloc_noprof+0xdd/0x880 [ 1871.870586][T29737] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1871.870609][T29737] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1871.870626][T29737] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1871.870648][T29737] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1871.870666][T29737] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1871.870688][T29737] ? bpf_lsm_capable+0x9/0x10 [ 1871.870701][T29737] ? security_capable+0x7e/0x260 [ 1871.870715][T29737] ? ns_capable+0xd7/0x110 [ 1871.870732][T29737] genl_rcv_msg+0x55c/0x800 [ 1871.870750][T29737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1871.870767][T29737] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 1871.870789][T29737] netlink_rcv_skb+0x158/0x420 [ 1871.870804][T29737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1871.870821][T29737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1871.870842][T29737] ? netlink_deliver_tap+0x1ae/0xd30 [ 1871.870858][T29737] genl_rcv+0x28/0x40 [ 1871.870873][T29737] netlink_unicast+0x5a7/0x870 [ 1871.870890][T29737] ? __pfx_netlink_unicast+0x10/0x10 [ 1871.870905][T29737] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1871.870926][T29737] netlink_sendmsg+0x8c8/0xdd0 [ 1871.870943][T29737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1871.870963][T29737] ____sys_sendmsg+0xa98/0xc70 [ 1871.870981][T29737] ? copy_msghdr_from_user+0x10a/0x160 [ 1871.870995][T29737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1871.871018][T29737] ___sys_sendmsg+0x134/0x1d0 [ 1871.871033][T29737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1871.871064][T29737] __sys_sendmsg+0x16d/0x220 [ 1871.871078][T29737] ? __pfx___sys_sendmsg+0x10/0x10 [ 1871.871101][T29737] do_syscall_64+0xcd/0x4e0 [ 1871.871116][T29737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.871128][T29737] RIP: 0033:0x7f8b32b8eec9 [ 1871.871138][T29737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.871149][T29737] RSP: 002b:00007f8b33ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.871166][T29737] RAX: ffffffffffffffda RBX: 00007f8b32de5fa0 RCX: 00007f8b32b8eec9 [ 1871.871173][T29737] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 1871.871180][T29737] RBP: 00007f8b33ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.871186][T29737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.871193][T29737] R13: 00007f8b32de6038 R14: 00007f8b32de5fa0 R15: 00007ffd74dd2b68 [ 1871.871206][T29737] [ 1872.156739][T21712] Bluetooth: hci5: command 0x0c1a tx timeout [ 1872.956353][T27441] Bluetooth: hci2: command 0x0c1a tx timeout [ 1873.129746][T16697] usb 4-1: USB disconnect, device number 24 [ 1873.386543][T19650] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1873.927559][T27441] Bluetooth: hci0: command 0x0c1a tx timeout [ 1874.027336][T19650] usb 8-1: not running at top speed; connect to a high speed hub [ 1874.033986][T29766] sp0: Synchronizing with TNC [ 1874.049440][T19650] usb 8-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 1874.096698][T19650] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1874.106817][T19650] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1874.129080][T19650] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1874.147145][T19650] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1874.162173][T19650] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.173316][T19650] usb 8-1: Product: syz [ 1874.178376][T19650] usb 8-1: Manufacturer: syz [ 1874.182982][T19650] usb 8-1: SerialNumber: syz [ 1874.210752][T29774] FAULT_INJECTION: forcing a failure. [ 1874.210752][T29774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.224128][T29774] CPU: 0 UID: 0 PID: 29774 Comm: syz.3.6418 Not tainted syzkaller #0 PREEMPT(full) [ 1874.224153][T29774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1874.224164][T29774] Call Trace: [ 1874.224170][T29774] [ 1874.224176][T29774] dump_stack_lvl+0x16c/0x1f0 [ 1874.224211][T29774] should_fail_ex+0x512/0x640 [ 1874.224239][T29774] strncpy_from_user+0x3b/0x2e0 [ 1874.224262][T29774] getname_flags.part.0+0x8f/0x550 [ 1874.224293][T29774] getname_flags+0x93/0xf0 [ 1874.224312][T29774] user_path_at+0x24/0x60 [ 1874.224333][T29774] __x64_sys_mount+0x1fb/0x310 [ 1874.224357][T29774] ? __pfx___x64_sys_mount+0x10/0x10 [ 1874.224387][T29774] do_syscall_64+0xcd/0x4e0 [ 1874.224411][T29774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.224429][T29774] RIP: 0033:0x7f6cd678eec9 [ 1874.224444][T29774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1874.224461][T29774] RSP: 002b:00007f6cd75a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1874.224479][T29774] RAX: ffffffffffffffda RBX: 00007f6cd69e5fa0 RCX: 00007f6cd678eec9 [ 1874.224491][T29774] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 1874.224503][T29774] RBP: 00007f6cd75a3090 R08: 0000200000000600 R09: 0000000000000000 [ 1874.224514][T29774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.224525][T29774] R13: 00007f6cd69e6038 R14: 00007f6cd69e5fa0 R15: 00007ffea615d998 [ 1874.224549][T29774] [ 1874.383750][T29775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6416'. [ 1874.394544][T29775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6416'. [ 1874.406819][T29775] netlink: 'syz.5.6416': attribute type 13 has an invalid length. [ 1874.516660][T27441] Bluetooth: hci5: command 0x0c1a tx timeout [ 1874.564447][T29778] fuse: Bad value for 'fd' [ 1874.753582][T19650] usb 8-1: 0:2 : does not exist [ 1875.043885][T27441] Bluetooth: hci2: command 0x0c1a tx timeout [ 1875.071382][T19650] usb 8-1: USB disconnect, device number 6 [ 1875.155623][T29775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1875.164587][T29775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.194480][T29775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1875.527938][T29793] input: syz1 as /devices/virtual/input/input228 [ 1875.586463][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1875.586483][ T30] audit: type=1800 audit(1760110226.187:4792): pid=29792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6423" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1876.586760][T28444] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1876.671457][T29803] syzkaller0: entered promiscuous mode [ 1876.687235][T29803] syzkaller0: entered allmulticast mode [ 1876.767376][T28444] usb 7-1: no configurations [ 1876.772014][T28444] usb 7-1: can't read configurations, error -22 [ 1876.926844][T28444] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1877.542751][T28444] usb 7-1: no configurations [ 1877.610265][T28444] usb 7-1: can't read configurations, error -22 [ 1877.620547][T28444] usb usb7-port1: attempt power cycle [ 1878.356720][T28444] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1878.387223][T28444] usb 7-1: device descriptor read/8, error -71 [ 1879.044164][T27441] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1879.244261][T27441] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1880.416825][T29841] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6436'. [ 1880.958601][T28444] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1881.188843][T28444] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1881.211824][T28444] usb 8-1: config 0 has no interface number 0 [ 1881.240722][T28444] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1881.274359][T28444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.303449][T28444] usb 8-1: config 0 descriptor?? [ 1881.319215][T28444] usb 8-1: selecting invalid altsetting 1 [ 1881.331061][T28444] dvb_ttusb_budget: ttusb_init_controller: error [ 1881.352964][T28444] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1881.544918][T28444] DVB: Unable to find symbol cx22700_attach() [ 1881.625608][T28444] DVB: Unable to find symbol tda10046_attach() [ 1881.647302][T28444] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1881.699521][T28444] usb 8-1: USB disconnect, device number 7 [ 1882.269179][ T30] audit: type=1400 audit(1760110232.886:4793): avc: denied { execute } for pid=29863 comm="syz.0.6443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=146836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1882.767599][T28444] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1882.842096][T29879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1882.967545][T28444] usb 8-1: Using ep0 maxpacket: 16 [ 1883.068772][T29884] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1883.201516][T28444] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1883.213183][T19650] IPVS: starting estimator thread 0... [ 1883.258304][T28444] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1883.268144][T28444] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1883.317673][T29885] IPVS: using max 42 ests per chain, 100800 per kthread [ 1883.332233][T28444] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1883.351586][T28444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.368060][T28444] usb 8-1: Product: syz [ 1883.382947][T28444] usb 8-1: Manufacturer: syz [ 1883.388975][T28444] usb 8-1: SerialNumber: syz [ 1883.417733][T27651] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1883.460617][T29891] input: syz1 as /devices/virtual/input/input230 [ 1884.552812][T27651] usb 7-1: Using ep0 maxpacket: 32 [ 1884.596687][T27651] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 1884.611864][T27651] usb 7-1: config 0 has no interface number 0 [ 1884.710244][T27651] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1884.730943][T27651] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1884.740123][T27651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.777959][T27651] usb 7-1: Product: syz [ 1884.795127][T27651] usb 7-1: Manufacturer: syz [ 1884.800242][T27651] usb 7-1: SerialNumber: syz [ 1884.829959][T27651] usb 7-1: config 0 descriptor?? [ 1884.882999][T27651] redrat3 7-1:0.83: Couldn't find all endpoints [ 1885.094957][T29903] FAULT_INJECTION: forcing a failure. [ 1885.094957][T29903] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.107706][T29903] CPU: 0 UID: 0 PID: 29903 Comm: syz.0.6453 Not tainted syzkaller #0 PREEMPT(full) [ 1885.107732][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1885.107741][T29903] Call Trace: [ 1885.107750][T29903] [ 1885.107758][T29903] dump_stack_lvl+0x16c/0x1f0 [ 1885.107784][T29903] should_fail_ex+0x512/0x640 [ 1885.107805][T29903] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1885.107824][T29903] should_failslab+0xc2/0x120 [ 1885.107845][T29903] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1885.107860][T29903] ? should_fail_ex+0x7a/0x640 [ 1885.107877][T29903] ? getname_flags.part.0+0x4c/0x550 [ 1885.107918][T29903] ? getname_flags.part.0+0x4c/0x550 [ 1885.107941][T29903] getname_flags.part.0+0x4c/0x550 [ 1885.107966][T29903] getname_flags+0x93/0xf0 [ 1885.107984][T29903] path_setxattrat+0x27a/0x2a0 [ 1885.108003][T29903] ? __pfx_path_setxattrat+0x10/0x10 [ 1885.108051][T29903] __x64_sys_lsetxattr+0xc9/0x140 [ 1885.108071][T29903] ? do_syscall_64+0x9a/0x4e0 [ 1885.108093][T29903] do_syscall_64+0xcd/0x4e0 [ 1885.108115][T29903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.108132][T29903] RIP: 0033:0x7f8b32b8eec9 [ 1885.108146][T29903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1885.108162][T29903] RSP: 002b:00007f8b33abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1885.108178][T29903] RAX: ffffffffffffffda RBX: 00007f8b32de6090 RCX: 00007f8b32b8eec9 [ 1885.108188][T29903] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1885.108198][T29903] RBP: 00007f8b33abf090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.108209][T29903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.108219][T29903] R13: 00007f8b32de6128 R14: 00007f8b32de6090 R15: 00007ffd74dd2b68 [ 1885.108240][T29903] [ 1885.985396][T28444] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1886.029802][T28444] usb 8-1: USB disconnect, device number 8 [ 1886.119795][T16697] usb 7-1: USB disconnect, device number 100 [ 1886.652587][T28444] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1886.898048][T28444] usb 8-1: Using ep0 maxpacket: 16 [ 1886.914088][T28444] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1886.941421][T28444] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1886.970797][T28444] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1887.074715][T28444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.083098][T28444] usb 8-1: Product: syz [ 1887.087394][T28444] usb 8-1: Manufacturer: syz [ 1887.092176][T28444] usb 8-1: SerialNumber: syz [ 1887.180713][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6457'. [ 1887.684215][T28444] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 1888.163276][T29923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6458'. [ 1888.495282][T28444] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1888.530301][T28444] usb 8-1: USB disconnect, device number 9 [ 1890.092017][T28444] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1890.248742][T28444] usb 7-1: Using ep0 maxpacket: 32 [ 1890.272891][T28444] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1890.282115][T28444] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1890.298019][T28444] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1890.339580][T28444] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1890.360661][T28444] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1890.406740][T28444] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1890.416030][T28444] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1890.438427][T28444] usb 7-1: Product: syz [ 1890.443019][T28444] usb 7-1: Manufacturer: syz [ 1890.458343][T28444] usb 7-1: SerialNumber: syz [ 1890.498930][T28444] usb 7-1: config 0 descriptor?? [ 1890.506321][T28444] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1890.523481][T28444] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1890.739002][T28444] usb 7-1: USB disconnect, device number 101 [ 1890.754394][T28444] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1891.198938][ T30] audit: type=1326 audit(1760110241.815:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1891.240444][T29273] Bluetooth: hci6: Frame reassembly failed (-84) [ 1891.268832][ T30] audit: type=1326 audit(1760110241.825:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1891.783294][ T30] audit: type=1326 audit(1760110241.845:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1891.807746][ T30] audit: type=1326 audit(1760110241.845:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.042738][ T30] audit: type=1326 audit(1760110241.845:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.110931][ T30] audit: type=1326 audit(1760110241.845:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.136193][ T30] audit: type=1326 audit(1760110241.845:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.258559][ T30] audit: type=1326 audit(1760110241.845:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.314747][ T30] audit: type=1326 audit(1760110241.855:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.315111][T29954] openvswitch: netlink: Duplicate key (type 32). [ 1892.477881][ T30] audit: type=1326 audit(1760110241.855:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.7.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5f8eec9 code=0x7ffc0000 [ 1892.525650][T29959] ALSA: seq fatal error: cannot create timer (-19) [ 1892.939444][T19650] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1893.282052][T27441] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1894.338827][T19650] usb 4-1: Using ep0 maxpacket: 8 [ 1894.378923][T19650] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.390831][T19650] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1894.418015][T19650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.543240][T19650] usb 4-1: config 0 descriptor?? [ 1894.580203][T19650] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1894.597804][T29993] overlayfs: failed to resolve './file1': -2 [ 1894.605442][T29993] FAULT_INJECTION: forcing a failure. [ 1894.605442][T29993] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.642933][T29994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6479'. [ 1894.651891][T28444] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1894.668833][T29993] CPU: 1 UID: 0 PID: 29993 Comm: syz.5.6480 Not tainted syzkaller #0 PREEMPT(full) [ 1894.668859][T29993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1894.668870][T29993] Call Trace: [ 1894.668877][T29993] [ 1894.668886][T29993] dump_stack_lvl+0x16c/0x1f0 [ 1894.668914][T29993] should_fail_ex+0x512/0x640 [ 1894.668934][T29993] ? __kmalloc_noprof+0xca/0x880 [ 1894.668965][T29993] should_failslab+0xc2/0x120 [ 1894.668993][T29993] __kmalloc_noprof+0xdd/0x880 [ 1894.669018][T29993] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1894.669050][T29993] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1894.669076][T29993] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1894.669103][T29993] ? kfree_skbmem+0x1a4/0x1f0 [ 1894.669131][T29993] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1894.669158][T29993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1894.669183][T29993] ? genl_get_cmd+0x194/0x580 [ 1894.669213][T29993] ? __radix_tree_lookup+0x21f/0x2c0 [ 1894.669237][T29993] genl_rcv_msg+0x55c/0x800 [ 1894.669264][T29993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1894.669290][T29993] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1894.669325][T29993] netlink_rcv_skb+0x158/0x420 [ 1894.669347][T29993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1894.669373][T29993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1894.669405][T29993] ? netlink_deliver_tap+0x1ae/0xd30 [ 1894.669430][T29993] genl_rcv+0x28/0x40 [ 1894.669452][T29993] netlink_unicast+0x5a7/0x870 [ 1894.669477][T29993] ? __pfx_netlink_unicast+0x10/0x10 [ 1894.669497][T29993] ? __asan_memset+0x23/0x50 [ 1894.669513][T29993] ? __build_skb_around+0x278/0x3b0 [ 1894.669535][T29993] netlink_sendmsg+0x8c8/0xdd0 [ 1894.669561][T29993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1894.669592][T29993] ____sys_sendmsg+0xa98/0xc70 [ 1894.669618][T29993] ? copy_msghdr_from_user+0x10a/0x160 [ 1894.669637][T29993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1894.669673][T29993] ___sys_sendmsg+0x134/0x1d0 [ 1894.669695][T29993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1894.669744][T29993] __sys_sendmsg+0x16d/0x220 [ 1894.669764][T29993] ? __pfx___sys_sendmsg+0x10/0x10 [ 1894.669801][T29993] do_syscall_64+0xcd/0x4e0 [ 1894.669824][T29993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.669841][T29993] RIP: 0033:0x7fe48d18eec9 [ 1894.669856][T29993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1894.669873][T29993] RSP: 002b:00007fe48e08a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1894.669889][T29993] RAX: ffffffffffffffda RBX: 00007fe48d3e6090 RCX: 00007fe48d18eec9 [ 1894.669900][T29993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1894.669910][T29993] RBP: 00007fe48e08a090 R08: 0000000000000000 R09: 0000000000000000 [ 1894.669926][T29993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.669936][T29993] R13: 00007fe48d3e6128 R14: 00007fe48d3e6090 R15: 00007fff1d407278 [ 1894.669959][T29993] [ 1895.448866][T28444] usb 8-1: Using ep0 maxpacket: 16 [ 1895.487345][T28444] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1895.517763][T28444] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1895.567313][T28444] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1895.577860][T28444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.630675][T28444] usb 8-1: Product: syz [ 1895.634860][T28444] usb 8-1: Manufacturer: syz [ 1895.705043][T28444] usb 8-1: SerialNumber: syz [ 1896.184514][T28444] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 1896.810868][T19650] gspca_vc032x: reg_w err -71 [ 1896.815729][T19650] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1896.841879][T19650] usb 4-1: USB disconnect, device number 25 [ 1896.876858][T28444] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1896.986819][T28444] usb 8-1: USB disconnect, device number 10 [ 1899.071758][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1899.071768][ T30] audit: type=1400 audit(1760110249.694:4816): avc: denied { append } for pid=30026 comm="syz.6.6490" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1901.261720][T30049] netlink: 'syz.7.6495': attribute type 10 has an invalid length. [ 1901.383268][T30049] veth0_vlan: left promiscuous mode [ 1901.428518][T30049] veth0_vlan: entered promiscuous mode [ 1901.487301][T30049] team0: Device veth0_vlan failed to register rx_handler [ 1901.526802][T30054] input: syz1 as /devices/virtual/input/input231 [ 1902.399660][T19650] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1903.080044][T19650] usb 7-1: Using ep0 maxpacket: 16 [ 1903.213785][T19650] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1903.446683][T19650] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1903.499006][T19650] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1903.508087][T19650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.534082][T19650] usb 7-1: Product: syz [ 1903.555936][T19650] usb 7-1: Manufacturer: syz [ 1903.582882][T19650] usb 7-1: SerialNumber: syz [ 1903.853843][T30079] lo speed is unknown, defaulting to 1000 [ 1903.867787][T30079] lo speed is unknown, defaulting to 1000 [ 1903.885760][T30079] lo speed is unknown, defaulting to 1000 [ 1903.904539][T30079] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1903.927043][T30079] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1903.934486][T16697] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1903.992938][T30079] lo speed is unknown, defaulting to 1000 [ 1904.003626][T30079] lo speed is unknown, defaulting to 1000 [ 1904.012633][T19650] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1904.013651][T30079] lo speed is unknown, defaulting to 1000 [ 1904.028219][T30079] lo speed is unknown, defaulting to 1000 [ 1904.036859][T30079] lo speed is unknown, defaulting to 1000 [ 1904.048656][T30079] lo speed is unknown, defaulting to 1000 [ 1904.057725][T30079] lo speed is unknown, defaulting to 1000 [ 1904.093099][T16697] usb 1-1: not running at top speed; connect to a high speed hub [ 1904.108589][T16697] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 1904.135032][T16697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1904.160756][T16697] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1904.179914][T16697] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1904.195307][T16697] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1904.204968][T16697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.215183][T16697] usb 1-1: Product: syz [ 1904.219401][T16697] usb 1-1: Manufacturer: syz [ 1904.225346][T16697] usb 1-1: SerialNumber: syz [ 1904.817670][T19650] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 1904.884442][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6507'. [ 1904.940923][T19650] usb 7-1: USB disconnect, device number 102 [ 1906.751857][T30102] ALSA: mixer_oss: invalid OSS volume 'DI' [ 1906.980111][T30104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6511'. [ 1907.076410][T16697] usb 1-1: 0:2 : does not exist [ 1907.203109][T16697] usb 1-1: USB disconnect, device number 22 [ 1907.338268][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1907.520373][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 1907.576081][ T42] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1907.668665][ T42] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1907.715983][ T42] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1907.749938][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.765339][T30115] vivid-001: disconnect [ 1907.850100][ T42] usb 4-1: Product: syz [ 1907.864764][ T42] usb 4-1: Manufacturer: syz [ 1907.885001][ T42] usb 4-1: SerialNumber: syz [ 1907.964855][T30113] vivid-001: reconnect [ 1908.173695][T30122] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1908.181022][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1908.540311][T27651] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1908.633781][ T42] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1908.673441][ T42] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1908.723599][ T42] usb 4-1: USB disconnect, device number 26 [ 1908.730389][T27651] usb 1-1: Using ep0 maxpacket: 32 [ 1908.894284][T27651] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 1908.920389][T27651] usb 1-1: config 0 has no interface number 0 [ 1908.926526][T27651] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.365936][T27651] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1909.387624][T27651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.403997][T27651] usb 1-1: Product: syz [ 1909.418561][T27651] usb 1-1: Manufacturer: syz [ 1909.435047][T27651] usb 1-1: SerialNumber: syz [ 1909.464947][T27651] usb 1-1: config 0 descriptor?? [ 1909.484491][T27651] redrat3 1-1:0.83: Couldn't find all endpoints [ 1910.056641][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1910.574362][T28444] usb 1-1: USB disconnect, device number 23 [ 1912.164228][T30145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.171534][T30145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.851658][T30145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1912.881166][T23531] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1912.987064][T30145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.231509][T15191] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.260851][T15191] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.296724][T15191] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.305679][T11468] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1913.331056][T23531] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1913.331363][T15191] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.532497][T11468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.624927][T23531] usb 1-1: not running at top speed; connect to a high speed hub [ 1913.634845][T11468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.645579][T23531] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 1913.676811][T11468] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1913.726814][T11468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.726820][T23531] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.726841][T23531] usb 1-1: config 129 has no interface number 0 [ 1913.826087][T11468] usb 7-1: config 0 descriptor?? [ 1913.870930][T23531] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1913.932971][T23531] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1913.993251][T23531] usb 1-1: config 129 interface 28 has no altsetting 0 [ 1914.028197][T23531] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1914.047822][T23531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.085950][T23531] usb 1-1: Product: syz [ 1914.112774][T23531] usb 1-1: Manufacturer: syz [ 1914.145875][T23531] usb 1-1: SerialNumber: syz [ 1914.155989][T30183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6532'. [ 1914.264222][T11468] hid_parser_main: 28 callbacks suppressed [ 1914.264242][T11468] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1914.295189][T11468] pyra 0003:1E7D:2CF6.0020: item fetching failed at offset 4/7 [ 1914.306731][T11468] pyra 0003:1E7D:2CF6.0020: parse failed [ 1914.322324][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.330652][T11468] pyra 0003:1E7D:2CF6.0020: probe with driver pyra failed with error -22 [ 1914.387062][T23531] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 1914.397256][T23531] etas_es58x 1-1:129.28: could not retrieve the product info string [ 1914.453062][T23531] usb 1-1: USB disconnect, device number 24 [ 1914.472547][T23531] etas_es58x 1-1:129.28: Disconnecting syz syz [ 1914.570397][T30167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=30167 comm=syz.6.6529 [ 1914.647813][T11468] usb 7-1: USB disconnect, device number 103 [ 1915.456604][T30207] netlink: 'syz.0.6537': attribute type 1 has an invalid length. [ 1916.117736][T30215] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6540'. [ 1916.886062][T21712] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1918.191480][ T42] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1918.402958][ T42] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1918.431412][ T42] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1918.469527][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1918.503625][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1918.617350][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1918.730670][ T42] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1918.751649][ T42] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1918.769031][ T42] usb 1-1: Product: syz [ 1918.831522][T19647] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1918.871830][ T42] usb 1-1: Manufacturer: syz [ 1919.133979][ T42] cdc_wdm 1-1:1.0: skipping garbage [ 1919.139213][ T42] cdc_wdm 1-1:1.0: skipping garbage [ 1919.148812][T19647] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1919.162351][ T42] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1919.177525][ T42] cdc_wdm 1-1:1.0: Unknown control protocol [ 1919.187334][T19647] usb 8-1: not running at top speed; connect to a high speed hub [ 1919.228188][T19647] usb 8-1: config 129 has an invalid interface number: 28 but max is 0 [ 1919.246742][T19647] usb 8-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.408288][T19647] usb 8-1: config 129 has no interface number 0 [ 1920.025239][T19650] usb 1-1: USB disconnect, device number 25 [ 1920.031199][T19647] usb 8-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1920.071148][T19647] usb 8-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1920.208731][T19647] usb 8-1: config 129 interface 28 has no altsetting 0 [ 1920.241282][T19647] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1920.259512][T19647] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.284618][T19647] usb 8-1: Product: syz [ 1920.288917][T19647] usb 8-1: Manufacturer: syz [ 1920.309787][T19647] usb 8-1: SerialNumber: syz [ 1920.526682][T19647] etas_es58x 8-1:129.28: Starting syz syz (Serial Number syz) [ 1920.557640][T19647] etas_es58x 8-1:129.28: could not retrieve the product info string [ 1920.696059][T19647] usb 8-1: USB disconnect, device number 11 [ 1920.704851][T19647] etas_es58x 8-1:129.28: Disconnecting syz syz [ 1921.515636][T30268] FAULT_INJECTION: forcing a failure. [ 1921.515636][T30268] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.573507][T30268] CPU: 0 UID: 0 PID: 30268 Comm: syz.7.6556 Not tainted syzkaller #0 PREEMPT(full) [ 1921.573526][T30268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1921.573533][T30268] Call Trace: [ 1921.573537][T30268] [ 1921.573542][T30268] dump_stack_lvl+0x16c/0x1f0 [ 1921.573561][T30268] should_fail_ex+0x512/0x640 [ 1921.573575][T30268] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1921.573588][T30268] should_failslab+0xc2/0x120 [ 1921.573603][T30268] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1921.573614][T30268] ? __alloc_skb+0x2b2/0x380 [ 1921.573630][T30268] ? __alloc_skb+0x2b2/0x380 [ 1921.573640][T30268] __alloc_skb+0x2b2/0x380 [ 1921.573652][T30268] ? __pfx___alloc_skb+0x10/0x10 [ 1921.573670][T30268] pfkey_sendmsg+0x470/0x850 [ 1921.573689][T30268] ____sys_sendmsg+0xa98/0xc70 [ 1921.573706][T30268] ? copy_msghdr_from_user+0x10a/0x160 [ 1921.573720][T30268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1921.573747][T30268] ___sys_sendmsg+0x134/0x1d0 [ 1921.573762][T30268] ? __pfx____sys_sendmsg+0x10/0x10 [ 1921.573790][T30268] __sys_sendmsg+0x16d/0x220 [ 1921.573804][T30268] ? __pfx___sys_sendmsg+0x10/0x10 [ 1921.573826][T30268] do_syscall_64+0xcd/0x4e0 [ 1921.573841][T30268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.573853][T30268] RIP: 0033:0x7fc1f5f8eec9 [ 1921.573862][T30268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1921.573873][T30268] RSP: 002b:00007fc1f6e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1921.573884][T30268] RAX: ffffffffffffffda RBX: 00007fc1f61e5fa0 RCX: 00007fc1f5f8eec9 [ 1921.573891][T30268] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1921.573898][T30268] RBP: 00007fc1f6e52090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.573905][T30268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.573911][T30268] R13: 00007fc1f61e6038 R14: 00007fc1f61e5fa0 R15: 00007fffab002f98 [ 1921.573924][T30268] [ 1923.044187][T30281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6559'. [ 1925.038830][ T30] audit: type=1400 audit(1760110275.662:4817): avc: denied { append } for pid=30292 comm="syz.3.6562" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1925.063411][T30293] netlink: 'syz.3.6562': attribute type 10 has an invalid length. [ 1925.308191][T30300] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6564'. [ 1925.992380][ T30] audit: type=1400 audit(1760110276.391:4818): avc: denied { getopt } for pid=30302 comm="syz.5.6565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1926.308233][T30316] fuse: Unknown parameter '' [ 1926.320313][T19650] Process accounting resumed [ 1926.808773][T19647] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1927.183908][T19647] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1927.212433][T19647] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1927.266983][T30319] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1927.274107][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1927.281690][ T42] IPVS: starting estimator thread 0... [ 1927.289536][T19647] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1927.321759][T19647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.432533][T30327] IPVS: using max 45 ests per chain, 108000 per kthread [ 1927.532488][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1927.600026][T19647] usb 1-1: usb_control_msg returned -32 [ 1927.628401][T19647] usbtmc 1-1:16.0: can't read capabilities [ 1927.702916][T16697] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1927.732602][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 1927.754087][ T42] usb 8-1: config 0 has an invalid interface number: 83 but max is 0 [ 1927.762510][ T30] audit: type=1326 audit(1760110278.381:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30303 comm="syz.3.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1927.804075][ T42] usb 8-1: config 0 has no interface number 0 [ 1927.810254][ T30] audit: type=1326 audit(1760110278.411:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30303 comm="syz.3.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1927.852930][ T42] usb 8-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1927.893914][T30332] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1927.953298][ T42] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1927.962634][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.970654][ T42] usb 8-1: Product: syz [ 1927.975134][ T42] usb 8-1: Manufacturer: syz [ 1927.981134][T16697] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1927.989822][T16697] usb 7-1: not running at top speed; connect to a high speed hub [ 1928.000496][ T42] usb 8-1: SerialNumber: syz [ 1928.028838][T16697] usb 7-1: config 129 has an invalid interface number: 28 but max is 0 [ 1928.039863][ T42] usb 8-1: config 0 descriptor?? [ 1928.076319][T16697] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.088517][ T42] redrat3 8-1:0.83: Couldn't find all endpoints [ 1928.120193][T16697] usb 7-1: config 129 has no interface number 0 [ 1928.157061][T16697] usb 7-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1928.233077][T16697] usb 7-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1928.303008][ T30] audit: type=1326 audit(1760110278.931:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30303 comm="syz.3.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1928.330265][T16697] usb 7-1: config 129 interface 28 has no altsetting 0 [ 1928.339420][T16697] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1928.348741][T16697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.387074][T16697] usb 7-1: Product: syz [ 1928.391413][T16697] usb 7-1: Manufacturer: syz [ 1928.417450][T16697] usb 7-1: SerialNumber: syz [ 1928.454138][ T30] audit: type=1326 audit(1760110278.981:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30303 comm="syz.3.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1928.537347][ T30] audit: type=1326 audit(1760110278.981:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30303 comm="syz.3.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1928.649059][T16697] etas_es58x 7-1:129.28: Starting syz syz (Serial Number syz) [ 1928.677435][T16697] etas_es58x 7-1:129.28: could not retrieve the product info string [ 1928.744578][T16697] usb 7-1: USB disconnect, device number 104 [ 1928.755161][T16697] etas_es58x 7-1:129.28: Disconnecting syz syz [ 1928.891084][ T42] usb 8-1: USB disconnect, device number 12 [ 1929.064580][T19650] usb 1-1: USB disconnect, device number 26 [ 1930.126010][T30342] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1930.570452][T30361] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1930.694546][T30360] sp0: Synchronizing with TNC [ 1930.731487][T30360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=30360 comm=syz.6.6579 [ 1931.154853][T30366] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6580'. [ 1932.443697][T30355] [U] è [ 1932.763047][T19650] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1932.933996][T21712] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1932.943267][T19650] usb 1-1: Using ep0 maxpacket: 16 [ 1932.958142][T19650] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1932.970904][T19650] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1933.093097][ T42] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 1933.095562][T19650] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1933.191157][T19650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.200725][T19650] usb 1-1: Product: syz [ 1933.205650][T19650] usb 1-1: Manufacturer: syz [ 1933.210245][T19650] usb 1-1: SerialNumber: syz [ 1933.264426][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1933.303108][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1933.330924][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1933.340710][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.450375][T30387] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6588'. [ 1933.595874][ T42] usb 7-1: usb_control_msg returned -32 [ 1933.605334][ T42] usbtmc 7-1:16.0: can't read capabilities [ 1933.678943][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1933.700148][T19650] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1933.727015][ T42] usb 7-1: USB disconnect, device number 105 [ 1933.746447][T19650] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1933.845219][T19650] usb 1-1: USB disconnect, device number 27 [ 1934.334393][T30392] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1936.665165][T30248] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1936.698796][ T30] audit: type=1326 audit(1760110287.310:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1936.734058][T30408] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6596'. [ 1936.863500][T30248] usb 1-1: Using ep0 maxpacket: 16 [ 1937.746083][ T30] audit: type=1326 audit(1760110287.310:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1937.775197][T30248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.553689][T30248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.563520][T30248] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1938.575752][T30248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.586099][ T30] audit: type=1326 audit(1760110287.310:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.610563][T30248] usb 1-1: config 0 descriptor?? [ 1938.615651][ T30] audit: type=1326 audit(1760110287.310:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.639674][ T30] audit: type=1326 audit(1760110287.310:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.664247][ T30] audit: type=1326 audit(1760110287.310:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.789640][ T30] audit: type=1326 audit(1760110287.310:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.814018][ T30] audit: type=1326 audit(1760110287.310:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1938.838166][ T30] audit: type=1326 audit(1760110287.310:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1939.457621][T30248] usbhid 1-1:0.0: can't add hid device: -71 [ 1939.463828][T30248] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1939.752520][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6601'. [ 1940.436326][ T30] audit: type=1326 audit(1760110287.310:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd678eec9 code=0x7ffc0000 [ 1940.474986][T30248] usb 1-1: USB disconnect, device number 28 [ 1941.766853][T21712] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1942.064101][T11468] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1942.173527][T30454] FAULT_INJECTION: forcing a failure. [ 1942.173527][T30454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1942.191361][T30454] CPU: 1 UID: 0 PID: 30454 Comm: syz.7.6608 Not tainted syzkaller #0 PREEMPT(full) [ 1942.191387][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1942.191398][T30454] Call Trace: [ 1942.191405][T30454] [ 1942.191412][T30454] dump_stack_lvl+0x16c/0x1f0 [ 1942.191441][T30454] should_fail_ex+0x512/0x640 [ 1942.191465][T30454] _copy_from_iter+0x29f/0x1720 [ 1942.191493][T30454] ? __pfx__copy_from_iter+0x10/0x10 [ 1942.191516][T30454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1942.191551][T30454] copy_page_from_iter+0xde/0x180 [ 1942.191577][T30454] tun_build_skb.constprop.0+0x2e8/0x1510 [ 1942.191606][T30454] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1942.191626][T30454] ? unwind_get_return_address+0x59/0xa0 [ 1942.191656][T30454] ? arch_stack_walk+0xa6/0x100 [ 1942.191695][T30454] ? _kstrtoull+0x145/0x200 [ 1942.191725][T30454] tun_get_user+0x149c/0x3cc0 [ 1942.191756][T30454] ? __pfx_tun_get_user+0x10/0x10 [ 1942.191797][T30454] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1942.191829][T30454] ? find_held_lock+0x2b/0x80 [ 1942.191856][T30454] ? tun_get+0x191/0x370 [ 1942.191880][T30454] tun_chr_write_iter+0xdc/0x210 [ 1942.191901][T30454] vfs_write+0x7d3/0x11d0 [ 1942.191922][T30454] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1942.191944][T30454] ? __pfx_vfs_write+0x10/0x10 [ 1942.191961][T30454] ? find_held_lock+0x2b/0x80 [ 1942.192001][T30454] ksys_write+0x12a/0x250 [ 1942.192019][T30454] ? __pfx_ksys_write+0x10/0x10 [ 1942.192046][T30454] do_syscall_64+0xcd/0x4e0 [ 1942.192071][T30454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.192090][T30454] RIP: 0033:0x7fc1f5f8d97f [ 1942.192106][T30454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1942.192129][T30454] RSP: 002b:00007fc1f6e52000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1942.192147][T30454] RAX: ffffffffffffffda RBX: 00007fc1f61e5fa0 RCX: 00007fc1f5f8d97f [ 1942.192159][T30454] RDX: 000000000000004a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 1942.192170][T30454] RBP: 00007fc1f6e52090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.192181][T30454] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1942.192191][T30454] R13: 00007fc1f61e6038 R14: 00007fc1f61e5fa0 R15: 00007fffab002f98 [ 1942.192215][T30454] [ 1942.434107][T11468] usb 7-1: Using ep0 maxpacket: 8 [ 1942.440436][T11468] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1942.448791][T11468] usb 7-1: config 179 has no interface number 0 [ 1942.455191][T11468] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1942.466716][T11468] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1942.479133][T11468] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1942.490519][T11468] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1942.504871][T11468] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1942.518257][T11468] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1942.528750][T11468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.538840][T30452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1942.687479][T30456] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6609'. [ 1943.055528][T30467] ieee802154 phy1 wpan1: encryption failed: -90 [ 1943.066592][T30452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.232056][T30452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.685222][T30248] usb 7-1: USB disconnect, device number 106 [ 1943.685243][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1943.699884][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1943.958390][T30474] tipc: Enabling of bearer rejected, failed to enable media [ 1944.395235][ T31] INFO: task syz.1.6167:28845 blocked for more than 143 seconds. [ 1944.443122][ T31] Not tainted syzkaller #0 [ 1944.461510][ T31] Blocked by coredump. [ 1944.466809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1944.477109][ T31] task:syz.1.6167 state:D stack:27816 pid:28845 tgid:28843 ppid:27637 task_flags:0x400548 flags:0x00080005 [ 1944.501961][ T31] Call Trace: [ 1944.505472][ T31] [ 1944.510269][ T31] __schedule+0x1190/0x5de0 [ 1944.515591][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1944.522954][ T31] ? __pfx___schedule+0x10/0x10 [ 1944.529127][ T31] ? find_held_lock+0x2b/0x80 [ 1944.534235][ T31] ? schedule+0x2d7/0x3a0 [ 1944.540788][ T31] schedule+0xe7/0x3a0 [ 1944.547867][ T31] schedule_timeout+0x257/0x290 [ 1944.558229][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1944.564892][ T31] ? rcu_is_watching+0x12/0xc0 [ 1944.570622][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1944.577910][ T31] __wait_for_common+0x2f9/0x4e0 [ 1944.584082][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1944.590743][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1944.597490][ T31] ? find_held_lock+0x2b/0x80 [ 1944.603691][ T31] ? io_wq_put_and_exit+0x22a/0x8a0 [ 1944.613196][ T31] io_wq_put_and_exit+0x271/0x8a0 [ 1944.619396][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 1944.626628][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1944.633920][ T31] ? __pfx___might_resched+0x10/0x10 [ 1944.673381][ T31] ? io_uring_del_tctx_node+0x279/0x350 [ 1944.712798][ T31] io_uring_clean_tctx+0x10d/0x190 [ 1944.733610][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1944.764433][ T31] ? percpu_counter_add_batch+0x17b/0x1f0 [ 1944.789035][ T31] io_uring_cancel_generic+0x69c/0x9a0 [ 1944.816576][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1944.854238][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1944.874591][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1944.899459][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 1944.919783][ T31] do_exit+0x2ce/0x2bf0 [ 1944.924383][ T31] ? rcu_is_watching+0x12/0xc0 [ 1944.937738][ T31] ? irqentry_exit+0x3b/0x90 [ 1944.953333][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1944.960246][ T31] ? __pfx_do_exit+0x10/0x10 [ 1944.973831][ T31] ? preempt_schedule_common+0x44/0xc0 [ 1944.979544][ T31] do_group_exit+0xd3/0x2a0 [ 1944.984409][ T31] get_signal+0x2671/0x26d0 [ 1944.994601][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1945.004375][ T31] ? __pfx_get_signal+0x10/0x10 [ 1945.019882][ T31] ? fput+0x9b/0xd0 [ 1945.033734][ T31] ? __do_sys_io_uring_enter+0x62c/0x1630 [ 1945.044968][ T31] arch_do_signal_or_restart+0x8f/0x7c0 [ 1945.065636][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1945.085524][ T31] ? xfd_validate_state+0x61/0x180 [ 1945.094460][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1945.113065][ T31] exit_to_user_mode_loop+0x85/0x130 [ 1945.131209][ T31] do_syscall_64+0x419/0x4e0 [ 1945.144557][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.164442][ T31] RIP: 0033:0x7f401318eec9 [ 1945.192302][ T31] RSP: 002b:00007f4013fed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1945.212486][ T31] RAX: 0000000000001000 RBX: 00007f40133e6090 RCX: 00007f401318eec9 [ 1945.220593][ T31] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 1945.228623][ T31] RBP: 00007f4013211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1945.237759][ T31] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1945.246652][ T31] R13: 00007f40133e6128 R14: 00007f40133e6090 R15: 00007ffedefb6728 [ 1945.254728][ T31] [ 1945.257801][ T31] [ 1945.257801][ T31] Showing all locks held in the system: [ 1945.266875][ T31] 3 locks held by rcu_exp_gp_kthr/18: [ 1945.273330][ T31] #0: ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1945.283459][ T31] #1: ffff8880b8724088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1945.292304][ T31] #2: ffff8880331e5368 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb7/0x1870 [ 1945.301585][ T31] 1 lock held by khungtaskd/31: [ 1945.306468][ T31] #0: ffffffff8e1c4120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1945.316376][ T31] 2 locks held by getty/5581: [ 1945.321055][ T31] #0: ffff88814da850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1945.330920][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1945.342309][ T31] 1 lock held by syz-executor/21733: [ 1945.347653][ T31] #0: ffffffff8e1cf6b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1945.357942][ T31] 2 locks held by syz.0.6615/30474: [ 1945.363196][ T31] [ 1945.365957][ T31] ============================================= [ 1945.365957][ T31] [ 1945.374453][ T31] NMI backtrace for cpu 0 [ 1945.374470][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1945.374491][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1945.374502][ T31] Call Trace: [ 1945.374508][ T31] [ 1945.374515][ T31] dump_stack_lvl+0x116/0x1f0 [ 1945.374543][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1945.374569][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1945.374595][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1945.374615][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1945.374645][ T31] watchdog+0xf3f/0x1170 [ 1945.374684][ T31] ? rcu_is_watching+0x12/0xc0 [ 1945.374710][ T31] ? __pfx_watchdog+0x10/0x10 [ 1945.374731][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1945.374752][ T31] ? __kthread_parkme+0x19e/0x250 [ 1945.374770][ T31] ? __pfx_watchdog+0x10/0x10 [ 1945.374792][ T31] kthread+0x3c2/0x780 [ 1945.374812][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.374832][ T31] ? rcu_is_watching+0x12/0xc0 [ 1945.374856][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.374876][ T31] ret_from_fork+0x56a/0x730 [ 1945.374893][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.374911][ T31] ret_from_fork_asm+0x1a/0x30 [ 1945.374944][ T31] [ 1945.374962][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1945.504127][ C1] NMI backtrace for cpu 1 [ 1945.504146][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1945.504163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1945.504172][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1945.504196][ C1] Code: 3e 5f 02 e9 d3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 4e 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1945.504210][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1945.504223][ C1] RAX: 000000000ac1fdd1 RBX: 0000000000000001 RCX: ffffffff8b4dba89 [ 1945.504233][ C1] RDX: 0000000000000000 RSI: ffffffff8d82662a RDI: ffffffff8bd045c0 [ 1945.504242][ C1] RBP: ffffed1003bd0490 R08: 0000000000000001 R09: ffffed10170e6655 [ 1945.504251][ C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001 [ 1945.504260][ C1] R13: ffff88801de82480 R14: ffffffff905fb390 R15: 0000000000000000 [ 1945.504269][ C1] FS: 0000000000000000(0000) GS:ffff888124f75000(0000) knlGS:0000000000000000 [ 1945.504283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1945.504292][ C1] CR2: 000055558838f5c8 CR3: 000000007df34000 CR4: 00000000003526f0 [ 1945.504301][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1945.504310][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1945.504319][ C1] Call Trace: [ 1945.504326][ C1] [ 1945.504332][ C1] default_idle+0x13/0x20 [ 1945.504350][ C1] default_idle_call+0x6c/0xb0 [ 1945.504371][ C1] do_idle+0x38d/0x500 [ 1945.504393][ C1] ? __pfx_do_idle+0x10/0x10 [ 1945.504413][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1945.504435][ C1] cpu_startup_entry+0x4f/0x60 [ 1945.504458][ C1] start_secondary+0x21d/0x2b0 [ 1945.504474][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1945.504494][ C1] common_startup_64+0x13e/0x148 [ 1945.504523][ C1] [ 1945.512123][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1945.512142][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1945.512163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1945.512174][ T31] Call Trace: [ 1945.512180][ T31] [ 1945.512188][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1945.512215][ T31] vpanic+0x640/0x6f0 [ 1945.512235][ T31] panic+0xca/0xd0 [ 1945.512252][ T31] ? __pfx_panic+0x10/0x10 [ 1945.512269][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1945.512298][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1945.512325][ T31] ? watchdog+0xe48/0x1170 [ 1945.512348][ T31] ? watchdog+0xe3b/0x1170 [ 1945.512377][ T31] watchdog+0xe59/0x1170 [ 1945.512403][ T31] ? rcu_is_watching+0x12/0xc0 [ 1945.512428][ T31] ? __pfx_watchdog+0x10/0x10 [ 1945.512450][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1945.512472][ T31] ? __kthread_parkme+0x19e/0x250 [ 1945.512491][ T31] ? __pfx_watchdog+0x10/0x10 [ 1945.512513][ T31] kthread+0x3c2/0x780 [ 1945.512533][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.512554][ T31] ? rcu_is_watching+0x12/0xc0 [ 1945.512578][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.512598][ T31] ret_from_fork+0x56a/0x730 [ 1945.512616][ T31] ? __pfx_kthread+0x10/0x10 [ 1945.512637][ T31] ret_from_fork_asm+0x1a/0x30 [ 1945.512669][ T31] [ 1945.821809][ T31] Kernel Offset: disabled [ 1945.826113][ T31] Rebooting in 86400 seconds..