last executing test programs: 11m45.04555842s ago: executing program 1 (id=618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newsa={0x188, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e21, 0x0, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x87}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, @in6=@remote, {0x80000001, 0x502c080c, 0x0, 0xb, 0x7, 0x5, 0x6, 0x7}, {0x10001, 0x3, 0xd13, 0x6}, {0x6, 0x6, 0xa5d6}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x8, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-ni\x00'}, 0x0, 0x200}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}, 0x0, 0x80}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='workqueue_queue_work\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00') syz_usb_connect(0x1, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xca, 0x93, 0x1e, 0x40, 0x2c7c, 0x191, 0xcd0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x7f, 0x10}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008060108000000000000000400000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0xb}, 0x4}}}, 0x7) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000007c0)=""/216, 0xd8}], 0x1, 0x2, 0x3, 0x32) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r1}, 0x18) 11m41.17446167s ago: executing program 1 (id=626): r0 = socket(0x22, 0x2, 0x24) getpeername$unix(r0, 0x0, &(0x7f0000000c80)) 11m40.831386065s ago: executing program 1 (id=628): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) unshare(0x22020400) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 11m40.483479001s ago: executing program 1 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/76, &(0x7f0000000480)=""/69, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r2, 0x402, 0x8000002b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100dd"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 11m40.074825539s ago: executing program 1 (id=632): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}], [], 0x6b}}) 11m25.011970448s ago: executing program 32 (id=632): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}], [], 0x6b}}) 7m8.24832789s ago: executing program 0 (id=1773): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) sendmmsg$unix(r1, &(0x7f0000002500)=[{{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000880)="d9db4b8200700dabfa87a1623aace7c358aa90a1cc51c0e737551c09bb6d21423cd7dac00b71e4e3e6b58e4b78bd5f6604c6cd92ddd51c3aa9f7ecaf15c685ea4a250b132b80a10d504e126e345d0f617ec066b4d15a23bb639995318fa201c36f198a08bce4c6d40750d3d4c095b41e9f27f7cb75aacf044defa01da5", 0x7d}, {&(0x7f0000000a00)="2f2008d69562abdf87cc3f9ce44591bea65a773d6d5a7d0eab85c26ca03f334cf629a785b908123cdbf318ec3ad0ae1564e0670feecf16f6a0f71c0bb4eba2c1d5e0f12ad554516a180e929dd99cd33ed1aebc43be1c6d7003f9a543c4a6422cddcb305db5e530674413a811e93c02cf501e3d2883fab528637f833e8be556c328a7560a7eb9f7641b9512735c3049008133a81a0fe9f3d28d68dfed192a61707a8ea057c003383a17bca031940d0336657a148a66fcc053e0bbd68131d9ef0cdf65fcb15b5911c41182eba3c8fc5363", 0xd0}, {&(0x7f0000000900)="f5444dca9436994349f178bf157190432076bb600fe6f531bcb348d6654b277635ca605a35ccec52ed1f5a83f2591cffdc54161e53e20d66205454f7aa37099383ce17baea697075aeb2f77e11e29066bf9714d88cd1ba374132a8994a9126d30c41f12a748c2b8c98931270c66d1f2173a86799dcbb67e90ce5", 0x7a}, {&(0x7f0000000b00)="e1b39595a9516ef05a06e62d6851ed185481760c4950ada6afcb5726ae881c8465a2512e26c22f31558d5538d221d915643feb918a5ccbd9e458cadc7d47e883e2655bbfb7c6d6dc3224e419e8807248792d698f68f2504b83d5cbb99e680d878b6b2c94ba4da945bffb09c03aa23d3d5e040860a212a34d060cd514f892c5255749bfa6b58956f2407177a29267792c3f93c37a6551f8c51bd7fb7df6d93b18c00231", 0xa3}], 0x4, 0x0, 0x0, 0x4011}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="88b927aedcb27151c74bcebc7be6d93f41d0421dbe0470240b397cdfaa0cc158fcd14945371abbd03c2667ecc6e3336b08641c2e8ff008c631c55f004d2e47300fed65eb961d786be7cb5b848e2ca2e2e4c4e98a2bf85531f5bc9aa3ca73f90f9372cbbee466c65e592b7138f766e2d513ae0d280b3739fe0b256e79900980363ef6cb4fda61a0526cd000647ec81f09bd64d49031140831eeebc5c1beb5bbbf43f7357128acd663534428188f5fe194eb52bcc9e279eab5ee59680df2fd3d728e", 0xc1}, {&(0x7f0000000980)="8c5a583a07cc894a61f94f55eeccae543e60aced728752e4d3d3db67fb5fe7add3645924862efbc415a8574a", 0x2c}, {&(0x7f0000000d40)="5af113aa70ba54043493fa2d0bf08d51af4e7d670223fbc1dc6aa49a8ba0edb5d90a36c435624a367285773a3d87834b38610ccf055aa47cc6d023cbd7ca8d146abbf37acab63157249f0fba99b630da51f8f04a3d921d174c20a8b13a8a2cec41", 0x61}], 0x3, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18, 0x24048004}}], 0x2, 0x0) 6m35.459629673s ago: executing program 0 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000280)=@arm64) (fail_nth: 4) 6m34.637171909s ago: executing program 0 (id=1856): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc7301274d126fd4b) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000850087ed6d000000950000000000000000005c53671ce6dfcc2ab3b0b8ebc6da3f021697face670ef12000addf85c4fe0fbdb40feea9218c6e1c6e10dea2d26525eb8feafc36feca954268227b5516e6b24397a48fcb3ca9996cb99a4c1a9a1b80d3eea4404f2c08825945a54aef6fe4055b2e656489c2c8d0ecdd6dc359ed35a16e48ce36528d43be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9122}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x3, 0x2, 0x100, 0xc2}) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000340)={{0x6, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) prlimit64(r4, 0x4, &(0x7f00000002c0)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0x48) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200), 0x0) socket$inet(0x2b, 0xe, 0x80000000) 6m34.499951119s ago: executing program 0 (id=1857): r0 = socket(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x8}]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x9, @empty, 0xfffffe01}}}, 0x108) r1 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000005000/0xd000)=nil, 0xd000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x20ac00) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f000000b000/0x1000)=nil}) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = socket(0x2, 0x2, 0x0) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x1021, &(0x7f0000000540), 0x0) shmctl$IPC_RMID(r4, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x7899, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x20000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xfffe, 0x5, 0x3, 0x1, 0x100}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) socket(0xa, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x8}]}) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x9, @empty, 0xfffffe01}}}, 0x108) (async) socket(0x10, 0x3, 0x0) (async) mprotect(&(0x7f0000005000/0xd000)=nil, 0xd000, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x20ac00) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f000000b000/0x1000)=nil}) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) (async) socket(0x2, 0x2, 0x0) (async) dup(r5) (async) setsockopt$inet_opts(r6, 0x0, 0x1021, &(0x7f0000000540), 0x0) (async) shmctl$IPC_RMID(r4, 0x0) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x7899, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x20000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xfffe, 0x5, 0x3, 0x1, 0x100}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) (async) 6m33.035302197s ago: executing program 0 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) rt_sigtimedwait(&(0x7f0000000100)={[0x8d21]}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x20000, 0x80) 6m32.70284739s ago: executing program 0 (id=1865): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/tcp\x00') lseek(r0, 0xfffd, 0x0) (async) pread64(r0, &(0x7f0000000080)=""/145, 0x91, 0x8) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) getdents(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003"], 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) fdatasync(r2) (async) ftruncate(r2, 0x5) (async) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000040)) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) 6m16.889009806s ago: executing program 33 (id=1865): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/tcp\x00') lseek(r0, 0xfffd, 0x0) (async) pread64(r0, &(0x7f0000000080)=""/145, 0x91, 0x8) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) getdents(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003"], 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) fdatasync(r2) (async) ftruncate(r2, 0x5) (async) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000040)) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) 2m46.317579299s ago: executing program 2 (id=2475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001200)=ANY=[@ANYBLOB="1401000020000186ec0aac0000000b000101"], 0x114}], 0x1}, 0x0) (fail_nth: 2) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001000090500000000000000000ee22b92069b2a2dfaa46c88eda90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f3728290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d8f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6810000001400f900200100000000000000000000000000020000002ae0da684dd5e65316"], 0xe0}], 0x1}, 0x40040) 2m45.157868888s ago: executing program 2 (id=2478): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10V\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x8a\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q\x00\x00\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf\x1c\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\r\x1b3C.`.\f&=\xd3\xde\x81\x80\xca\xbb\\U0B\xf0\x83*\xffB\xbd\xffp\x00\x9f\x92\xabj\x18\xe1}D\xd8\x9ab2\xc4_\xc8\xb2X\xedz\xed\xc5O\x0e\a\x1c\xcf\xa6P\xe4\xb4\xdc\xd4\xbaX;3.\xc5\xba\\\x8b_U\xb1\xb9\xba\a}\xba\xb9\xa7\x8e\xf6=\xe6\xb1\xf0\x0e\xe9\xe0\x91\x11\x80/\xa1^z\xa5\xac\x903\x8d\xf3a\xad\xf8\xeb\x182I\xe1%\xa8\xb0&\x06sd\xf98f\x16\xe9\xf8wO~L\xa3kF%\xdfW4\xb3\x9d\x89`\xda\x90)8jtJH\xa2w\xec\x10z\x85N\x9b\xe8\xde9JX\xc7|\x1ba(\xe2h\xd9m\xc3\xf4\xde8\xc2\xdd\x86\x14_u\xab\xc0\xc2\x96\x1a85\x9f\x99H]\x03\xef\xb7U>\xf3\xf1\xf7.\xa6\xc5\x8fQ\xdc/\xbf\xf7\x9f\xbe\xcf\x8b\xde\xcb\x93\xdc\x12\x0f\x14\x18\xba\xe0\xd0\xa98\xa1\xe4$\xe2\xdcwN(\x9d\xedp \xcfB\xa0\xf9\xeefo\xa3\x10\xac\xd7\xa9A\r\x9f\x16\xd3\xf7?\xe2^(c$\b\x1a:\xaf\xb8\x92c\xf1X\xb3\xfd%\xe2\xb1CS\x80\xa3\xf9I!L\xdb\xc2', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = dup(r1) write$binfmt_elf32(r5, 0x0, 0x64) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffcfd) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') 2m43.898901172s ago: executing program 2 (id=2480): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400299b9f7533c2de9362d72442dd61bd70", @ANYRES32=0x0, @ANYBLOB="0c0099000900000062000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 2m41.819369596s ago: executing program 2 (id=2486): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfffffffb, 0x2, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x80, 0x2, 0x4, 0x4, 0x7, {0x0, 0xea60}, {0x3, 0x1, 0xf9, 0x8, 0x0, 0x3, "fb0bbfbb"}, 0x4, 0x1, {}, 0x7fff, 0x0, r2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, 0x0, 0x0, 0x40801) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x547, &(0x7f0000000680)={@multicast, @local, @void, {@mpls_uc={0x8847, {[{0x1}, {0xc55, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0xff4c1}, {0x5, 0x0, 0x1}, {0xfffc0, 0x0, 0x1}, {0x9, 0x0, 0x1}], @ipv6=@gre_packet={0xd, 0x6, "4dbd94", 0x4e9, 0x2f, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, {[@routing={0x32, 0xa, 0x0, 0x5, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2]}, @hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8000}]}, @dstopts={0x32, 0x40, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xe, 0xc, [0x5, 0x0, 0x3]}}, @generic={0x3, 0xf3, "5a0ab9b51bcf98336a37846f65e19f5a227c00749a14adaa0db464195693dfce9eb1924ee5f8f64ac08cd848bf3451d4691b628cb39ee4f3cc7bb9aa0eeacb24e13fbe4276d78e5e037bfd72e97fc597f9d8caf1ebbdd12d91949338dc6e89d31b4ebdb49ba56cce1309ed82e6e7ccd94eba481d2771cadf4b03665f16207344835709cf6c6941be76949a3142fc106b7ff93fd316e01b1f650e100933fe1c9f5a8a2d7ba613499aa69919cb4e98169ce4266687bf48db1157526d9623ebae5151e238af173cc9b0795327cee37cbf7484248c2beb2e0f44f9feac3d2e38dbe6f3f36ec7468845f778c1b2175d6a41dee5ae95"}, @jumbo, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xad, 0xd3, "8ddb30c8eee04fea488cf1f2a4b7dd0050aee4f47efd87e789e225375397985c00a807dbdc7651ad74a1bbdcd47fdac6408e465aec332aceededb04911e16b90826d5a130e22140cddbee206725277e044fbcdfdd255bd85a96f9b28e09b2b6da126d34b48381d42e045225421e54e76988077a092dfffc7d1d2e97bc850546e36c78b27dca7c218f2447fe5e98a8ef31ac1444c414a15d270b8918babcec5e56d5e1c96b5d3d3719f95b9bad1105a95da310c0dd65796dd615e4c81d8e0c5ed019df0445abb2f486b1e1ab2306747a309f41d"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x81, 0x1, [0x0], "1ca0af54970774837a2c871ea73a7f6aeea7182e81b8b36d10882f52d017e581a95ce999f1d77bb8209ab1c05979d8daedc337d9b811a50199664457d9397b33c12b3e88ae3d67006e9b7b2abb41751c1af129acdfafb8c977f69ba4733449b256d810f13f125875c765ccc43de3a511291a8be2b7597f9f1e49fd47efd133547d"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "83c76de993021e929dabc59f6434725e3f3a5aa8cae61f1d99a75147fbe35b730db9b2ba1c173336d3a39d4a251fe3aa346f41796b54696f78de6ea9c2a853f74161b380c756f47e07a840aa50e838f7e6604521484d292899892a94ae4d62aa43b3747417d6d3ff1994c828dac31e400b268fb8ebe2bc9d79480928b6b97ba22f1d1067a1930fddef1690c14114af526c6704bff3c1de690de196fafd83b77d6d96ef3d"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xd8c6, 0x1, 0x7], "31505360ca36f23425f5491e433969996ed42b91ca3ffe1cc13ec5ccee"}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x6, 0x1, 0x0, 0x1, 0x0, 0x6}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0xd, 0x2, 0x6, 0x1, 0x1, 0x3, 0x3, 0x4}, 0x2, {0x7f, 0xcda, 0x0, 0x1f, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "56c505f8c1b661eba670d22554d3a88803ae6943256ebfb52e3c0f02c4f9c613107d602a1e3ef929ec3f4d63129a22da9c530a574919aff127d52bfb482b64cb5b8662b3853e2d6054554a54cee8f77d7ff64f4d4036833b0a0ce49a135cd7765d5b9cf9736d3bd88ad2cbb9dd0a62a7adfd8c54c299eb3fec1112749be7b6b31540850e23ee779f9487615d5a3ba68a7a8809a1cbd8f321beaaad7684c9599662bdf2d5f0c7cbb770baaed2e630870eb7e8af8804637b3b613532e1341fa384b35b5674f93a7b2aded10c81a3e29d05b4bc5727d0add461a6ec33"}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0x800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) 2m39.87092592s ago: executing program 2 (id=2498): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) chmod(&(0x7f0000000300)='./file0\x00', 0x104) r1 = gettid() sched_setscheduler(r1, 0x5, &(0x7f0000000100)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m39.650127016s ago: executing program 2 (id=2499): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, &(0x7f0000000080)={[{0x3, 0x4e00, "03c95e"}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0e81000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1000007) r1 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) fallocate(r1, 0x11, 0x0, 0x100000000200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x7, &(0x7f00000000c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) lsetxattr(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)=@random={'security.', 'GPL\x00'}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x2, 0x9, 0x7, 0x8, 0x0, 0x0}) ioprio_get$pid(0x1, r5) 2m24.559601476s ago: executing program 34 (id=2499): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, &(0x7f0000000080)={[{0x3, 0x4e00, "03c95e"}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0e81000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1000007) r1 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) fallocate(r1, 0x11, 0x0, 0x100000000200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x7, &(0x7f00000000c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) lsetxattr(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)=@random={'security.', 'GPL\x00'}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x2, 0x9, 0x7, 0x8, 0x0, 0x0}) ioprio_get$pid(0x1, r5) 1m59.462979281s ago: executing program 7 (id=2599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) unshare(0x22020600) recvmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000180)=""/40, 0x28}], 0x2}, 0x141) 1m57.274621879s ago: executing program 7 (id=2606): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x2000, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r4], [0x2b8, 0x0, 0x0, 0xfffffffc], [0x1], [0x0, 0x3]}) 1m56.022982783s ago: executing program 7 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(0x0, 0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_pidfd_open(r5, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010049429bf2000000000500000a20000000000a03000000000000000000070000040900010073797a300000000078000000090a010400000000000000000700000808000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d34001280300001800e000100636f6e6e6c696d69740000001c00028008000140003000000800024000000000080001400000000308000340000001", @ANYRESHEX=r0], 0xc0}}, 0x20050800) 1m53.912297188s ago: executing program 7 (id=2613): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000080)=@nfc_llcp={0x27, r2, 0x1, 0x6, 0x9, 0x8, "8cd3a87eb9b2b9b88fbc1f1af8c53877a8c00c66cd86139f9c8fe7dcedee387afcb0ff5a25f6c4d69fb075b2049e99dcbe063ec9ec024ee2e06a44f044bb77", 0x36}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="7c865d474fadf4404a23a675f959caa2aa94c6aa72cb855629b73637f0552f8306fd03586ccd61ed83e23ea21c2c422f579e34f6f8cd7b8924a8f76595", 0x3d}, {&(0x7f0000000140)="f03ccd39d96f3e13a97848391e711002f0303082c5fd2985c2e9a9b75b29c165c97b3e4a9a7643943a263d2a7c579b177ab45f45807335be1eba4c9aeddf1193a8f5514d3dcfa0fba0610793956254d95b5bbd49d46d7310032ea70a4e972af02b01b3d563cc6cb2cab6b5c94e478d868ad99020e76eff1d36b9b656181b58729125734e9f7e6b980918672d03f8dfbfaa711417c957f5", 0x97}, {&(0x7f0000000200)="2b51b224d679c96915736be19cd484e61308143bf9f3f684fb8433ddea8715e11035bcc64fa8b49c28a345f7d1419d6050e4e3f84503dd61360991b9eaea089a0599aa9c4446b0989361180e262d54620ae71ab81db84ace61244a873a38426f643712cf16fe0b34d94602615e1887e61b6799f63331f724b6ffafb22586a5de8f50d2aa59dbc7bb4ed7cb121cc1db00", 0x90}, {&(0x7f0000000340)="f7fee20198fed6fab4badf178e833285219e7b8a650d656c9352cff7cb896c538a16cc4bc397a54754d027fc80d4916accfac05e60c2866fb300a42484a8455e138c9c6d291590730584fea400b66cbc3d97fdbf72f0b83688a213ddcc5cd4d386675859ed6efce3aca51bee222c700f509e9aa88853cd712cc629e5bbac1c6c0f7d18e8bd3865cb65a664ecb078710a18a5890108a94af7789e362d1f98", 0x9e}], 0x4}, 0x4000021) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0059cfbeb968936b4f6cfb00098d78012f71b31af2395aee50ef50a24dd2651879fc4ec20633abb8546b00"/56, @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000140000000000000000000000070000008802000000000000"], 0x38}, 0x20002880) 1m53.748880158s ago: executing program 7 (id=2614): r0 = socket$inet6(0xa, 0x1, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x0, 0x8001}}) 1m53.371889561s ago: executing program 7 (id=2617): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000140) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default '], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40054) setrlimit(0x7, &(0x7f0000000040)={0xfffffffffffffffb, 0x6}) recvmmsg(r3, &(0x7f0000002800)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/25}, {&(0x7f0000000400)=""/29}, {&(0x7f0000000440)=""/4096}, {&(0x7f0000001440)=""/189}], 0x0, &(0x7f0000001580)}, 0x5b3}, {{&(0x7f00000015c0)=@nfc_llcp, 0x0, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096}, {&(0x7f0000002640)=""/206}], 0x0, &(0x7f0000002780)=""/96}, 0x800}], 0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000001580)=[0xffffffffffffffff, r0], 0x2) socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m38.016256227s ago: executing program 35 (id=2617): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000140) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default '], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40054) setrlimit(0x7, &(0x7f0000000040)={0xfffffffffffffffb, 0x6}) recvmmsg(r3, &(0x7f0000002800)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/25}, {&(0x7f0000000400)=""/29}, {&(0x7f0000000440)=""/4096}, {&(0x7f0000001440)=""/189}], 0x0, &(0x7f0000001580)}, 0x5b3}, {{&(0x7f00000015c0)=@nfc_llcp, 0x0, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096}, {&(0x7f0000002640)=""/206}], 0x0, &(0x7f0000002780)=""/96}, 0x800}], 0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000001580)=[0xffffffffffffffff, r0], 0x2) socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m23.929100355s ago: executing program 4 (id=2691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}], 0x1, 0xa841) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async, rerun: 32) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xb2}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x2, 0x3, {0x80}}, 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r6) (rerun: 32) 1m23.731011348s ago: executing program 4 (id=2692): socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x25d98dad66f9d269) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd60fd736fded6ff794ff30000000000000000000000000001fe8000000000000000000000000000aa8300"/71], 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1m22.069482242s ago: executing program 4 (id=2695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="0522e80000000000"], 0x2c}}, 0x4000080) 1m21.795461443s ago: executing program 4 (id=2699): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x2a, &(0x7f0000001640)=ANY=[@ANYBLOB="49c5951fdc17ebee29ea3e90df9625bf0c4fb30b14398c57560c3725ca76de262b0280416105801b77a5e1d5ca0a5a1b120f9753a70ced265eba2c8bb40bbd86779e7f9bb1337ff94b0758deaf3a73842dd92f2414c6083f7b6749f74df85a7f126ee5bfd3ec32a1c18f71b2fb689cb4acd3f764723b50d6b0d30dd67ab49d8403d206af5ac286cdfc80aae9097abfcfdf6da35577e2dead8f51d9394989c3a74e13ac95ea4c5349c798b5270a19775dc8ee07b5b5b7f956d4de780ca6eed553c88f82666175d61d686160d2f387ae61002737c6111a2cffc46c0f1748c94bfc3f7eec19aa532ed52546effb4c01a82ddca465ab15e8da1180ae2edbb64fde2d", @ANYBLOB, @ANYBLOB="000000000000fa00b703000000010000850000000c000000b700000000000000184200000800000000000000000000008520000005000200b7080000000080007a8af8ff00000000b7080000000140007b8af0ff00000000bfa100000000ef6a68220000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b705000052b6956e44104f4579a53427e5ac0800000085000000a5000000950000000000000018fd00000200000000000000000000008500000064000000b7080000000000007b8af8ff000000b860c874a340ff59007b8af0ff00000000bfa10000000000000701", @ANYRES8=r1, @ANYRES16=r3], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f00000000c0)="e300dde148f063096244fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea5349ff567ea8f6264df25f2d09a83b2f37d2381e5e303d9fad5bc8f12167ff01cef6a3d03506c5", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) 1m18.715488228s ago: executing program 4 (id=2710): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x40000000, 0x119}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) 1m18.391894354s ago: executing program 4 (id=2711): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x72000) (fail_nth: 9) 1m15.408615021s ago: executing program 8 (id=2651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00003e0cf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000005968ce2f7bcb3aa5008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@dev, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x24, 0x18, 0x100, 0x70bd29, 0x1ffffffc, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0xf1}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004404}, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m15.166969045s ago: executing program 8 (id=2724): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000080) fallocate(r3, 0x10, 0x0, 0x72000) 1m2.914634283s ago: executing program 36 (id=2711): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x72000) (fail_nth: 9) 58.698164619s ago: executing program 37 (id=2724): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000080) fallocate(r3, 0x10, 0x0, 0x72000) 26.623663025s ago: executing program 5 (id=2825): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x800) geteuid() getgroups(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x24004005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0d6892c45f0c3317d34b06dbba695748fff7c19f3e8c03cd2e57", 0x1a}, {0x0}], 0x2) 25.464551484s ago: executing program 5 (id=2827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000002b40)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbfbbbbbbbb88a830008123030088ca757b35a9ab871d"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "ae9754434fa75b99cf0dc45f0aab6f37224a7ee82dcd4dbe823301339fb2b241", 0x6, 0xfffffffffffffffc, 0x0, 0x66, 0x781f, 0x3, 0x3, 0x0, [0x2, 0x7a4c, 0x6, 0xa3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc], 0x2, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x3, 0x0, 0xf]}}]}}]}, 0x8c}}, 0x48004) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'pimreg0\x00'}) 22.26255028s ago: executing program 5 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x16, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x4, 0x100220}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000400), &(0x7f0000000240)=@tcp6, 0x2}, 0x20) 21.700869555s ago: executing program 5 (id=2836): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x208002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x10) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.400658175s ago: executing program 5 (id=2838): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2d}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x10, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="8eaf", 0x2}, {0x0}], 0x2}, 0x8c90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6020480) 19.218746104s ago: executing program 5 (id=2840): openat$kvm(0xffffffffffffff9c, 0x0, 0x3c000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x14, r5, 0xa29}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x608f) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 13.329326679s ago: executing program 6 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x54000, 0x40000, 0x54000, 0x200000], 0x4, 0x141, 0x6}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0a010100000000000000020a000009"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0) 10.516514241s ago: executing program 6 (id=2851): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)={0x4, {{0xa, 0x4e22, 0x0, @private2, 0xf490}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x80000001, @local, 0x2}}, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x8}}, {{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x177}}, {{0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00', 0x2}}]}, 0x290) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001200)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x10}, {0x3, 0xadbb}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0xffffffff, 0x9}, 0x28) 9.057445223s ago: executing program 9 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_macvtap\x00', {0x3}, 0xd}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000000c0)={0x1, 0x0, 0x3001, 0x3, 0x1, 0xff, 0x7}) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f3, 0x0, 0x1}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'pim6reg\x00', {0x2}, 0xfff9}) 7.990814988s ago: executing program 6 (id=2853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040d62017cb00000000000109022400010000000009040000020328000009210000000122070009058103"], 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002b07000000070b392c55c64ae434ee5a80a7f1da1f8ceabcf1346d8a5930a7d2ca654fad0abbd0ccd0738f9480f9e598c66bd818ccb4c5bf41c368ae2b38178a756aca633fa2d72d1f28aa017b2568deb37dd22697ae9b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.79352316s ago: executing program 9 (id=2854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x24}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0x1783}, {0x10, 0x0, 0x3fb}]}) 6.078935393s ago: executing program 9 (id=2855): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x800) geteuid() getgroups(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x24004005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0d6892c45f0c3317d34b06dbba695748fff7c19f3e8c03cd2e5755e28fde8db9b74d154987d325", 0x27}, {0x0}], 0x2) 4.979263528s ago: executing program 3 (id=2856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2009a3, 0x0, 0x0, 0x0, 0xc6c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="34060a48fde1eced1b63fb5f8a21144b7cd6443ff1bcd63245710e33f3486baf1c5d69708dd7a979063c5c89d4a78a6acc0d2828279ab251e3e3edf033886a83c4593f6ca037514df14628d7ca265dc5d8d2304fbb24fac5973b7345b7914c203a5bffc37ca0871c372ce34d3d4b61e11b17205699ad66eddbb741f04a06752b0b3520a20ce57bff20fb94d2de73717aa7ba1bf2aba261754301da8a941f281257db3662c2571a2992a5cbb3921072a13a180a96b3925e2b79b11b9f5d7f06ca2d6cf91d01f60aa64220f2d2823b3bec7482f79a987fab16b370917aaa012015a5c5c522a9c31865061b55b8a20fbd", 0xef}, {&(0x7f0000000600)}, {&(0x7f0000000640)="740eb3c48347b55b0af70b133fcf9fb6ab114b2b69e3cc68c526629751f225500f90899475e6e54bb68d5e618d9e8d636d2f8fa7206b754eab7f47d0c4ea533c9c78b9d6735e2d7ad56a2d474e18ef728aeb5a76daa994e11feaefd80b37136281c67521af0d89b55c6c348d", 0x6c}], 0x3, 0x0, 0x0, 0x40009}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x1a, {0x2, "65cb0629f5a3e37d035000ed1ea2"}}]}, 0x30}}, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xbd4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x63, 0x2, 0x6, 0x0, 0x2, 0x8000000, 0x1, 0x4, 0x7ffffffc}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x37, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x31, 0x8, 0x1, 0x8000, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x1, 0x6, 0x3, 0x6, 0xffffffffffffffbe, 0x10}, @jmp={0x5, 0x0, 0x7, 0xf, 0x2, 0x8, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x4, 0x0, 0xa, 0xffffffffffffffff, 0xfffffffffffffff0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.91186247s ago: executing program 6 (id=2857): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x208002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x10) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.767800876s ago: executing program 3 (id=2858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x54000, 0x40000, 0x54000, 0x200000], 0x4, 0x141, 0x6}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0a010100000000000000020a000009"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 4.72291445s ago: executing program 9 (id=2859): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x40000000, 0x119}, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) 3.175699753s ago: executing program 38 (id=2840): openat$kvm(0xffffffffffffff9c, 0x0, 0x3c000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x14, r5, 0xa29}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x608f) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 3.119148617s ago: executing program 3 (id=2861): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) 2.9954733s ago: executing program 6 (id=2862): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x11) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfa9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x6c}) ppoll(&(0x7f0000000200)=[{r7, 0x260}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="75737271756f743e6000f06539b4d233a9b8354d37c5615f696ef41c"]) 2.85016095s ago: executing program 3 (id=2863): r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?2\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 2.746921366s ago: executing program 9 (id=2864): socket$nl_route(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, &(0x7f0000000640), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0], 0x41c) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xfff1, 0xc}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x8, 0x804}, 0x50) 2.595230509s ago: executing program 3 (id=2865): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f0000000000080005", @ANYRES32=r1], 0x4c}}, 0x0) 731.158065ms ago: executing program 9 (id=2866): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x40000000, 0x119}, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) 196.364551ms ago: executing program 6 (id=2867): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040d62017cb00000000000109022400010000000009040000020328000009210000000122070009058103"], 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) socket$tipc(0x1e, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002b07000000070b392c55c64ae434ee5a80a7f1da1f8ceabcf1346d8a5930a7d2ca654fad0abbd0ccd0738f9480f9e598c66bd818ccb4c5bf41c368ae2b38178a756aca633fa2d72d1f28aa017b2568deb37dd22697ae9b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 134.555312ms ago: executing program 1 (id=2777): r0 = openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0d6892c45f0c3317d34b06dbba695748fff7c19f3e8c03cd2e5755e28fde8db9b74d154987d325da01f2544e661c96b0f70c41", 0x33}], 0x1) 0s ago: executing program 3 (id=2868): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x800) geteuid() getgroups(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x24004005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0d6892c45f0c3317d34b06dbba695748fff7c19f3e8c03cd2e5755e28fde8db9b74d154987d325", 0x27}, {0x0}], 0x2) kernel console output (not intermixed with test programs): truncated [ 813.520374][T13291] loop5: p1 start 1601398130 is beyond EOD, truncated [ 813.520391][T13291] loop5: p2 start 1702059890 is beyond EOD, truncated [ 813.895764][ T6016] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 813.895968][ T6005] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 814.091031][ T6016] usb 7-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 814.091081][ T6016] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.092919][ T6016] usb 7-1: New USB device found, idVendor=1d6b, idProduct=5401, bcdDevice= 0.7f [ 814.092935][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.092946][ T6016] usb 7-1: Product: syz [ 814.092953][ T6016] usb 7-1: Manufacturer: syz [ 814.092961][ T6016] usb 7-1: SerialNumber: syz [ 814.110488][ T6005] usb 3-1: config 237 has an invalid interface number: 158 but max is 0 [ 814.110514][ T6005] usb 3-1: config 237 has an invalid descriptor of length 0, skipping remainder of the config [ 814.110533][ T6005] usb 3-1: config 237 has no interface number 0 [ 814.110576][ T6005] usb 3-1: config 237 interface 158 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 814.110599][ T6005] usb 3-1: config 237 interface 158 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 814.110624][ T6005] usb 3-1: config 237 interface 158 has no altsetting 0 [ 814.110655][ T6005] usb 3-1: New USB device found, idVendor=07d1, idProduct=3a07, bcdDevice=5d.55 [ 814.110677][ T6005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.126051][T13297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 814.138033][ T6005] usb 3-1: Could not find all expected endpoints [ 814.343260][ T6016] usb 7-1: 0:2 : does not exist [ 814.389756][ T6016] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 814.473140][ T6016] usb 7-1: USB disconnect, device number 4 [ 815.286158][ T9469] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 816.325927][ T5815] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 816.586201][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 817.391150][ T5815] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 817.391193][ T5815] usb 4-1: too many endpoints for config 0 interface 0 altsetting 231: 229, using maximum allowed: 30 [ 817.391249][ T5815] usb 4-1: config 0 interface 0 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 817.391277][ T5815] usb 4-1: config 0 interface 0 has no altsetting 1 [ 817.436508][ T5815] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=97.0d [ 817.436525][ T5815] usb 4-1: New USB device strings: Mfr=99, Product=242, SerialNumber=132 [ 817.436536][ T5815] usb 4-1: Product: syz [ 817.436544][ T5815] usb 4-1: Manufacturer: syz [ 817.436551][ T5815] usb 4-1: SerialNumber: syz [ 817.442551][ T5815] usb 4-1: config 0 descriptor?? [ 817.487865][ T5815] usb-storage 4-1:0.0: USB Mass Storage device detected [ 817.563574][ T6005] usb 3-1: USB disconnect, device number 76 [ 817.707986][ T5815] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 817.708088][ T5815] gspca_stv06xx: st6422 sensor detected [ 818.003921][ T6016] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 818.277725][ T6016] usb 6-1: Using ep0 maxpacket: 8 [ 818.324940][ T6005] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 818.558027][ T6005] usb 3-1: Using ep0 maxpacket: 8 [ 818.764327][ T6005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.764387][ T6005] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 818.764414][ T6005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 818.764487][ T6005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 818.764510][ T6005] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 818.769039][ T6005] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 818.769067][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 818.769149][ T6005] usb 3-1: Product: syz [ 818.769164][ T6005] usb 3-1: Manufacturer: syz [ 818.769178][ T6005] usb 3-1: SerialNumber: syz [ 818.881763][ T6005] usb 3-1: config 0 descriptor?? [ 818.883307][ T6016] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 818.883384][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.000255][ T6016] pvrusb2: Hardware description: Terratec Grabster AV400 [ 819.000275][ T6016] pvrusb2: ********** [ 819.000283][ T6016] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 819.000295][ T6016] pvrusb2: Important functionality might not be entirely working. [ 819.000304][ T6016] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 819.000315][ T6016] pvrusb2: ********** [ 819.138549][ T6005] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 819.138766][ T6005] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 819.187519][ T2358] pvrusb2: Invalid write control endpoint [ 820.664389][ T6005] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 820.664425][ T6005] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 820.664696][ T6005] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 820.792442][T13354] CUSE: info not properly terminated [ 820.876103][ T6002] usb 3-1: USB disconnect, device number 77 [ 820.895825][ T5815] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 821.006103][ T5815] usb 4-1: USB disconnect, device number 66 [ 821.010286][ T6016] usb 6-1: USB disconnect, device number 46 [ 821.170711][ T2358] pvrusb2: Invalid write control endpoint [ 821.170728][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 821.170739][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 821.203636][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 821.203653][ T2358] pvrusb2: Device being rendered inoperable [ 821.235991][ T2358] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 821.236123][ T2358] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 821.301363][ T2358] pvrusb2: Attached sub-driver cx25840 [ 821.301380][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 821.301391][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 821.445768][ T5807] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 821.495723][ T5815] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 821.625774][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 821.643879][ T5807] usb 7-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 821.643897][ T5807] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 821.643918][ T5807] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 821.643930][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.648181][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 821.650474][ T5815] usb 4-1: not running at top speed; connect to a high speed hub [ 821.651763][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 821.651790][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 821.651816][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 821.651841][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.651863][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 821.651884][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 821.656964][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 821.656992][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.657011][ T5815] usb 4-1: Product: syz [ 821.657025][ T5815] usb 4-1: Manufacturer: syz [ 821.657039][ T5815] usb 4-1: SerialNumber: syz [ 821.698129][ T5807] usb 7-1: config 0 descriptor?? [ 821.707782][ T5815] usb 4-1: config 0 descriptor?? [ 821.709682][T13365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.710107][T13365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 823.112020][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 823.160449][ T5815] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 823.608743][ T5815] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 823.641636][ T5815] usb 4-1: USB disconnect, device number 67 [ 824.285716][ T5815] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 825.175763][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 825.175793][ T5815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 825.175816][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 825.175837][ T5815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 825.175875][ T5815] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 825.175897][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.250559][ T5815] usb 5-1: config 0 descriptor?? [ 825.347709][ T5973] usb 7-1: USB disconnect, device number 5 [ 825.753337][ T37] audit: type=1326 audit(825.565:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 825.754255][ T37] audit: type=1326 audit(825.565:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 825.798850][ T37] audit: type=1326 audit(825.565:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 825.800879][ T37] audit: type=1326 audit(825.615:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 825.801287][ T37] audit: type=1326 audit(825.615:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 825.802321][ T37] audit: type=1326 audit(825.615:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13398 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 826.456038][ T5973] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 826.580130][T13412] tmpfs: Bad value for 'mpol' [ 826.616436][ T5973] usb 7-1: Using ep0 maxpacket: 8 [ 826.626148][ T5973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.632690][ T5973] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 826.632718][ T5973] usb 7-1: config 1 has no interface number 1 [ 826.632979][ T5973] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 826.644451][ T5973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.644483][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.644712][ T5973] usb 7-1: Product: syz [ 826.644727][ T5973] usb 7-1: Manufacturer: syz [ 826.644742][ T5973] usb 7-1: SerialNumber: syz [ 826.776997][T13412] (syz.3.2336,13412,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 826.777026][T13412] (syz.3.2336,13412,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 826.777037][T13412] (syz.3.2336,13412,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 826.777048][T13412] (syz.3.2336,13412,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 826.885372][ T5815] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 826.885397][ T5815] hdpvr 5-1:0.0: device init failed [ 826.885533][ T5815] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 826.937371][ T5815] usb 5-1: USB disconnect, device number 73 [ 828.608496][ T5973] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 828.608525][ T5973] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 828.625721][ T5815] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 828.640232][ T5973] usb 7-1: USB disconnect, device number 6 [ 828.767247][ T5815] usb 3-1: device descriptor read/64, error -71 [ 829.005879][ T5815] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 829.135685][ T5815] usb 3-1: device descriptor read/64, error -71 [ 829.246307][ T5815] usb usb3-port1: attempt power cycle [ 829.596289][ T5815] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 829.618260][ T5815] usb 3-1: device descriptor read/8, error -71 [ 829.827271][T13451] (syz.6.2349,13451,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 829.827302][T13451] (syz.6.2349,13451,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 829.827323][T13451] (syz.6.2349,13451,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 829.827343][T13451] (syz.6.2349,13451,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 829.876762][ T5815] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 829.906426][ T5815] usb 3-1: device descriptor read/8, error -71 [ 830.045684][ T5815] usb usb3-port1: unable to enumerate USB device [ 832.815720][ T6002] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 832.902745][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 832.904108][T13480] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 832.967173][ T6002] usb 6-1: Using ep0 maxpacket: 8 [ 832.971979][T13484] FAULT_INJECTION: forcing a failure. [ 832.971979][T13484] name failslab, interval 1, probability 0, space 0, times 0 [ 832.972014][T13484] CPU: 1 UID: 0 PID: 13484 Comm: syz.3.2361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 832.972042][T13484] Tainted: [L]=SOFTLOCKUP [ 832.972049][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.972060][T13484] Call Trace: [ 832.972068][T13484] [ 832.972077][T13484] dump_stack_lvl+0xe8/0x150 [ 832.972108][T13484] should_fail_ex+0x46c/0x600 [ 832.972138][T13484] ? skb_clone+0x212/0x3a0 [ 832.972162][T13484] should_failslab+0xa8/0x100 [ 832.972183][T13484] ? skb_clone+0x212/0x3a0 [ 832.972205][T13484] kmem_cache_alloc_noprof+0x84/0x6c0 [ 832.972248][T13484] skb_clone+0x212/0x3a0 [ 832.972272][T13484] ? ip6_finish_output2+0x426/0x13c0 [ 832.972303][T13484] ip6_finish_output2+0x435/0x13c0 [ 832.972339][T13484] ? ip6_finish_output+0x2ef/0x4e0 [ 832.972364][T13484] ? ip6_output+0x126/0x550 [ 832.972390][T13484] ip6_output+0x340/0x550 [ 832.972419][T13484] ip6_mr_output+0x4e9/0x1100 [ 832.972454][T13484] ? __ip6_local_out+0x609/0x870 [ 832.972473][T13484] ? ip6_mr_output+0x1ca/0x1100 [ 832.972504][T13484] ? __pfx_ip6_mr_output+0x10/0x10 [ 832.972536][T13484] ? __ip6_local_out+0x609/0x870 [ 832.972561][T13484] ? __ip6_local_out+0x82c/0x870 [ 832.972591][T13484] ? __ip6_local_out+0x609/0x870 [ 832.972612][T13484] ? __pfx___ip6_local_out+0x10/0x10 [ 832.972645][T13484] ? skb_dst+0x4f/0xd0 [ 832.972667][T13484] ? dst_output+0x17b/0x1c0 [ 832.972686][T13484] ? ip6_send_skb+0x10f/0x390 [ 832.972715][T13484] ip6_send_skb+0x1d5/0x390 [ 832.972745][T13484] udp_v6_send_skb+0xc17/0x1830 [ 832.972791][T13484] udp_v6_push_pending_frames+0x130/0x220 [ 832.972827][T13484] udpv6_sendmsg+0xf2e/0x2510 [ 832.972864][T13484] ? __pfx_udplite_getfrag+0x10/0x10 [ 832.972897][T13484] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 832.972933][T13484] ? smack_socket_sendmsg+0x1a7/0x520 [ 832.972973][T13484] ? __lock_acquire+0x6b6/0x2cf0 [ 832.973018][T13484] ? inet_send_prepare+0x5c/0x270 [ 832.973045][T13484] ? inet6_sendmsg+0xe4/0x120 [ 832.973088][T13484] __sock_sendmsg+0xe5/0x270 [ 832.973120][T13484] ____sys_sendmsg+0x508/0x810 [ 832.973150][T13484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.973189][T13484] ? import_iovec+0x74/0xa0 [ 832.973219][T13484] ___sys_sendmsg+0x21f/0x2a0 [ 832.973245][T13484] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.973307][T13484] ? __fget_files+0x2a/0x420 [ 832.973327][T13484] ? __fget_files+0x3a6/0x420 [ 832.973354][T13484] __x64_sys_sendmsg+0x1a1/0x260 [ 832.973383][T13484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.973418][T13484] ? trace_sys_enter+0x5e/0xf0 [ 832.973444][T13484] ? rcu_is_watching+0x15/0xb0 [ 832.973462][T13484] ? trace_sys_enter+0x25/0xf0 [ 832.973493][T13484] do_syscall_64+0xec/0xf80 [ 832.973512][T13484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.973530][T13484] ? trace_irq_disable+0x37/0x100 [ 832.973556][T13484] ? clear_bhb_loop+0x60/0xb0 [ 832.973580][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.973599][T13484] RIP: 0033:0x7f9a722ef749 [ 832.973616][T13484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.973632][T13484] RSP: 002b:00007f9a70556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.973653][T13484] RAX: ffffffffffffffda RBX: 00007f9a72545fa0 RCX: 00007f9a722ef749 [ 832.973668][T13484] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 0000000000000003 [ 832.973681][T13484] RBP: 00007f9a70556090 R08: 0000000000000000 R09: 0000000000000000 [ 832.973693][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.973704][T13484] R13: 00007f9a72546038 R14: 00007f9a72545fa0 R15: 00007fff85885518 [ 832.973736][T13484] [ 832.984014][ T6002] usb 6-1: unable to get BOS descriptor or descriptor too short [ 833.003048][ T6002] usb 6-1: config 4 interface 0 has no altsetting 0 [ 833.006508][ T6002] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 833.006535][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.006555][ T6002] usb 6-1: Product: syz [ 833.006568][ T6002] usb 6-1: Manufacturer: syz [ 833.006582][ T6002] usb 6-1: SerialNumber: syz [ 833.155689][ T5815] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 833.263555][T13468] netlink: del zone limit has 8 unknown bytes [ 833.316492][ T6002] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 833.354540][T13488] rdma_op ffff888031665a70 conn xmit_rdma 0000000000000000 [ 833.379306][ T6002] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 833.379716][ T6002] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 833.379762][ T6002] usb 6-1: media controller created [ 833.432809][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.487526][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.487554][ T5815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 833.487573][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.487621][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 833.487645][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 833.493408][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.493439][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.493459][ T5815] usb 3-1: Product: syz [ 833.493474][ T5815] usb 3-1: Manufacturer: syz [ 833.595069][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 833.595089][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 833.640603][T13492] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2365'. [ 833.640629][T13492] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2365'. [ 833.664154][ T6002] zl10353_read_register: readreg error (reg=127, ret==0) [ 833.685682][ T5815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 833.685700][ T5815] cdc_wdm 3-1:1.0: Unknown control protocol [ 834.828297][ T6002] usb 6-1: USB disconnect, device number 47 [ 836.137759][ T5973] usb 3-1: USB disconnect, device number 82 [ 836.264296][T13511] netlink: 'syz.5.2370': attribute type 1 has an invalid length. [ 836.265154][T13513] netlink: 'syz.5.2370': attribute type 1 has an invalid length. [ 839.910188][ T37] audit: type=1326 audit(839.715:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910242][ T37] audit: type=1326 audit(839.725:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910283][ T37] audit: type=1326 audit(839.725:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910321][ T37] audit: type=1326 audit(839.725:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910364][ T37] audit: type=1326 audit(839.725:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910403][ T37] audit: type=1326 audit(839.725:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910441][ T37] audit: type=1326 audit(839.725:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910480][ T37] audit: type=1326 audit(839.725:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910517][ T37] audit: type=1326 audit(839.725:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 839.910557][ T37] audit: type=1326 audit(839.725:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13525 comm="syz.5.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693bdff749 code=0x7ffc0000 [ 840.588344][T13519] hfsplus: unable to find HFS+ superblock [ 840.746452][T13531] netlink: 'syz.4.2373': attribute type 9 has an invalid length. [ 840.746475][T13531] netlink: 'syz.4.2373': attribute type 11 has an invalid length. [ 840.746498][T13531] netlink: 'syz.4.2373': attribute type 12 has an invalid length. [ 840.746514][T13531] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2373'. [ 840.746646][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'. [ 840.861846][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 842.155704][ T5973] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 842.305673][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 842.309138][ T5973] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 842.309165][ T5973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.309184][ T5973] usb 6-1: config 0 has no interface number 0 [ 842.309228][ T5973] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 842.309254][ T5973] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 842.309279][ T5973] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 842.309294][ T5973] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 842.309305][ T5973] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 842.309329][ T5973] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 842.309341][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.312027][ T5973] usb 6-1: config 0 descriptor?? [ 842.312749][T13539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 842.456299][ T5973] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.547725][ T5973] usb 6-1: USB disconnect, device number 48 [ 842.613932][T13544] 9p: Bad value for 'rfdno' [ 842.636685][T13543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.222149][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805c4d4c00: rx timeout, send abort [ 845.227263][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c4d4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 846.130787][ T6292] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 847.040840][ T6292] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 847.040858][ T6292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.040868][ T6292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 847.040901][ T6292] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 49, using maximum allowed: 30 [ 847.040929][ T6292] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 847.042536][ T6292] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.042551][ T6292] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.042562][ T6292] usb 3-1: Product: syz [ 847.042569][ T6292] usb 3-1: Manufacturer: syz [ 848.738690][ T5815] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 848.948193][ T5815] usb 4-1: device descriptor read/64, error -71 [ 849.186200][ T5815] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 849.318744][ T5815] usb 4-1: device descriptor read/64, error -71 [ 849.425981][ T5815] usb usb4-port1: attempt power cycle [ 850.664867][ T5815] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 850.860063][ T5815] usb 4-1: device descriptor read/8, error -71 [ 851.037863][ T6292] usb 3-1: USB disconnect, device number 83 [ 851.072993][T13603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 851.314208][T13611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 851.814435][T13618] FAULT_INJECTION: forcing a failure. [ 851.814435][T13618] name failslab, interval 1, probability 0, space 0, times 0 [ 851.814472][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.3.2405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.814498][T13618] Tainted: [L]=SOFTLOCKUP [ 851.814506][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.814518][T13618] Call Trace: [ 851.814527][T13618] [ 851.814536][T13618] dump_stack_lvl+0xe8/0x150 [ 851.814568][T13618] should_fail_ex+0x46c/0x600 [ 851.814599][T13618] should_failslab+0xa8/0x100 [ 851.814620][T13618] __kmalloc_noprof+0xe0/0x7e0 [ 851.814646][T13618] ? kfree+0x4d/0x900 [ 851.814667][T13618] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 851.814693][T13618] tomoyo_realpath_from_path+0xe3/0x5d0 [ 851.814721][T13618] ? tomoyo_domain+0xd9/0x130 [ 851.814747][T13618] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 851.814773][T13618] tomoyo_path_number_perm+0x1e8/0x5a0 [ 851.814802][T13618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 851.814827][T13618] ? __lock_acquire+0x6b6/0x2cf0 [ 851.814856][T13618] ? from_kuid+0x1b0/0x640 [ 851.814907][T13618] ? __fget_files+0x2a/0x420 [ 851.814930][T13618] ? __fget_files+0x2a/0x420 [ 851.814949][T13618] ? __fget_files+0x3a6/0x420 [ 851.814968][T13618] ? __fget_files+0x2a/0x420 [ 851.814992][T13618] security_file_ioctl+0xcb/0x2d0 [ 851.815025][T13618] __se_sys_ioctl+0x47/0x170 [ 851.815053][T13618] do_syscall_64+0xec/0xf80 [ 851.815074][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.815092][T13618] ? trace_irq_disable+0x37/0x100 [ 851.815112][T13618] ? clear_bhb_loop+0x60/0xb0 [ 851.815136][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.815155][T13618] RIP: 0033:0x7f9a722ef749 [ 851.815172][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.815190][T13618] RSP: 002b:00007f9a70556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.815211][T13618] RAX: ffffffffffffffda RBX: 00007f9a72545fa0 RCX: 00007f9a722ef749 [ 851.815227][T13618] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 851.815240][T13618] RBP: 00007f9a70556090 R08: 0000000000000000 R09: 0000000000000000 [ 851.815253][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.815266][T13618] R13: 00007f9a72546038 R14: 00007f9a72545fa0 R15: 00007fff85885518 [ 851.815299][T13618] [ 851.815380][T13618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.815467][T13618] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 853.812309][ T5815] kernel write not supported for file /audio (pid: 5815 comm: kworker/0:4) [ 853.980053][T13660] tmpfs: Bad value for 'mpol' [ 853.980447][T13660] tmpfs: Bad value for 'mpol' [ 853.980964][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 854.181727][T13664] 9pnet_fd: Insufficient options for proto=fd [ 854.182166][T13665] 9pnet_fd: Insufficient options for proto=fd [ 854.275823][ T6292] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 854.289467][ T5815] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 854.999048][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2421'. [ 855.795774][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 855.818042][ T6292] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.820793][ T6292] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 855.820821][ T6292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.820840][ T6292] usb 7-1: Product: syz [ 855.820855][ T6292] usb 7-1: Manufacturer: syz [ 855.820869][ T6292] usb 7-1: SerialNumber: syz [ 855.869659][ T6292] usb 7-1: config 0 descriptor?? [ 855.874789][ T6292] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 855.874850][ T6292] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 855.960028][ T5815] usb 3-1: device descriptor read/all, error -71 [ 856.007504][T13674] netlink: 'syz.5.2425': attribute type 6 has an invalid length. [ 856.008569][T13674] netlink: 'syz.5.2425': attribute type 6 has an invalid length. [ 856.072014][T13678] 9pnet_fd: p9_fd_create_tcp (13678): problem connecting socket to 127.0.0.1 [ 856.316225][ T6292] usb 7-1: USB disconnect, device number 7 [ 857.624813][T13699] JFS: discard option not supported on device [ 857.628772][T13699] Mount JFS Failure: -22 [ 857.628786][T13699] jfs_mount failed w/return code = -22 [ 858.084171][T13700] FAULT_INJECTION: forcing a failure. [ 858.084171][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 858.084230][T13700] CPU: 0 UID: 0 PID: 13700 Comm: syz.2.2431 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.084259][T13700] Tainted: [L]=SOFTLOCKUP [ 858.084267][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.084280][T13700] Call Trace: [ 858.084289][T13700] [ 858.084297][T13700] dump_stack_lvl+0xe8/0x150 [ 858.084320][T13700] should_fail_ex+0x46c/0x600 [ 858.084338][T13700] should_failslab+0xa8/0x100 [ 858.084350][T13700] __kmalloc_cache_noprof+0x84/0x6d0 [ 858.084367][T13700] ? tipc_nametbl_insert_publ+0x65/0x12c0 [ 858.084382][T13700] tipc_nametbl_insert_publ+0x65/0x12c0 [ 858.084393][T13700] ? irqentry_exit+0x5dd/0x660 [ 858.084412][T13700] ? rt_spin_lock+0x1c1/0x3e0 [ 858.084430][T13700] tipc_nametbl_publish+0xdd/0x210 [ 858.084441][T13700] ? tipc_nametbl_publish+0x76/0x210 [ 858.084454][T13700] tipc_sk_publish+0x1c3/0x450 [ 858.084467][T13700] ? __local_bh_enable+0x1e2/0x2f0 [ 858.084481][T13700] ? __pfx_tipc_sk_publish+0x10/0x10 [ 858.084494][T13700] ? __local_bh_enable_ip+0x1af/0x2c0 [ 858.084506][T13700] ? lockdep_hardirqs_on+0x7b/0x110 [ 858.084519][T13700] tipc_sk_bind+0x221/0x300 [ 858.084533][T13700] __sys_bind+0x2cc/0x3e0 [ 858.084546][T13700] ? __pfx___sys_bind+0x10/0x10 [ 858.084562][T13700] ? trace_sys_enter+0x5e/0xf0 [ 858.084578][T13700] ? rcu_is_watching+0x15/0xb0 [ 858.084591][T13700] __x64_sys_bind+0x7a/0x90 [ 858.084602][T13700] do_syscall_64+0xec/0xf80 [ 858.084612][T13700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.084624][T13700] ? clear_bhb_loop+0x60/0xb0 [ 858.084637][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.084647][T13700] RIP: 0033:0x7f14517df749 [ 858.084658][T13700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.084667][T13700] RSP: 002b:00007f144fa25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 858.084679][T13700] RAX: ffffffffffffffda RBX: 00007f1451a36090 RCX: 00007f14517df749 [ 858.084687][T13700] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000006 [ 858.084694][T13700] RBP: 00007f144fa25090 R08: 0000000000000000 R09: 0000000000000000 [ 858.084700][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.084707][T13700] R13: 00007f1451a36128 R14: 00007f1451a36090 R15: 00007ffd59bcc438 [ 858.084725][T13700] [ 860.704533][T13728] tipc: Enabling of bearer rejected, failed to enable media [ 860.705202][T13728] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2442'. [ 862.255699][ T6292] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 862.410585][ T6292] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 862.410615][ T6292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.410636][ T6292] usb 5-1: Product: syz [ 862.410650][ T6292] usb 5-1: Manufacturer: syz [ 862.410664][ T6292] usb 5-1: SerialNumber: syz [ 862.477379][ T6292] hub 5-1:24.0: bad descriptor, ignoring hub [ 862.477419][ T6292] hub 5-1:24.0: probe with driver hub failed with error -5 [ 862.673183][ T6292] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 862.685507][ T6292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 862.696040][ T6292] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 862.696102][ T6292] usb 5-1: media controller created [ 862.726988][ T6292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.800139][ T6292] DVB: Unable to find symbol dib7000p_attach() [ 862.800158][ T6292] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 862.877166][T13727] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2443'. [ 862.885786][ T6292] rc_core: IR keymap rc-dib0700-rc5 not found [ 862.885806][ T6292] Registered IR keymap rc-empty [ 862.885849][ T5973] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 862.886098][ T6292] dvb-usb: could not initialize remote control. [ 862.886108][ T6292] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 862.939254][ T6292] usb 5-1: USB disconnect, device number 74 [ 862.981399][ T6292] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 863.042887][ T5973] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 863.042917][ T5973] usb 6-1: config 0 has no interface number 0 [ 863.042964][ T5973] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 863.042989][ T5973] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.061701][ T5973] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 863.061730][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.061750][ T5973] usb 6-1: Product: syz [ 863.061764][ T5973] usb 6-1: Manufacturer: syz [ 863.061778][ T5973] usb 6-1: SerialNumber: syz [ 863.083795][ T5973] usb 6-1: config 0 descriptor?? [ 863.084893][T13736] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 863.088084][ T5973] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 863.108988][ T5973] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 863.321820][T13743] overlay: ./file0 is not a directory [ 863.425720][ T6292] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 863.835694][ T6292] usb 5-1: Using ep0 maxpacket: 32 [ 863.837539][ T6292] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 863.837564][ T6292] usb 5-1: config 4 has no interface number 0 [ 863.837609][ T6292] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.837637][ T6292] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.837674][ T6292] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 863.837695][ T6292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.169306][ T6292] hub 5-1:4.128: USB hub found [ 864.190504][ T6292] hub 5-1:4.128: 6 ports detected [ 864.190962][ T6292] hub 5-1:4.128: Using single TT (err -22) [ 864.206933][ T6292] hub 5-1:4.128: insufficient power available to use all downstream ports [ 864.404957][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 864.473364][ T9469] block nbd2: Receive control failed (result -32) [ 865.173606][ T6292] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 865.173634][ T6292] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 865.216915][ T6292] usb 5-1: USB disconnect, device number 75 [ 865.545727][ T6016] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 865.745805][ T6016] usb 3-1: Using ep0 maxpacket: 16 [ 865.748438][ T6016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.748472][ T6016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 865.748512][ T6016] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 865.748534][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.754001][ T6016] usb 3-1: config 0 descriptor?? [ 866.176195][ T6016] logitech 0003:046D:C623.001D: item fetching failed at offset 8/69 [ 866.177028][ T6016] logitech 0003:046D:C623.001D: parse failed [ 866.177138][ T6016] logitech 0003:046D:C623.001D: probe with driver logitech failed with error -22 [ 866.536135][ T6016] usb 3-1: USB disconnect, device number 86 [ 866.545783][T12649] usb 6-1: USB disconnect, device number 49 [ 866.569894][T12649] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 867.564925][T12649] cyberjack 6-1:0.69: device disconnected [ 867.666895][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 867.666918][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 867.720142][T13783] FAULT_INJECTION: forcing a failure. [ 867.720142][T13783] name failslab, interval 1, probability 0, space 0, times 0 [ 867.720190][T13783] CPU: 0 UID: 0 PID: 13783 Comm: syz.4.2455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 867.720219][T13783] Tainted: [L]=SOFTLOCKUP [ 867.720226][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.720238][T13783] Call Trace: [ 867.720247][T13783] [ 867.720256][T13783] dump_stack_lvl+0xe8/0x150 [ 867.720287][T13783] should_fail_ex+0x46c/0x600 [ 867.720317][T13783] ? skb_clone+0x212/0x3a0 [ 867.720342][T13783] should_failslab+0xa8/0x100 [ 867.720362][T13783] ? skb_clone+0x212/0x3a0 [ 867.720385][T13783] kmem_cache_alloc_noprof+0x84/0x6c0 [ 867.720421][T13783] skb_clone+0x212/0x3a0 [ 867.720449][T13783] __netlink_deliver_tap+0x404/0x850 [ 867.720489][T13783] ? netlink_deliver_tap+0x2e/0x1b0 [ 867.720516][T13783] netlink_deliver_tap+0x19c/0x1b0 [ 867.720543][T13783] __netlink_sendskb+0x47/0x90 [ 867.720566][T13783] netlink_dump+0xa84/0xe90 [ 867.720603][T13783] ? __pfx_netlink_dump+0x10/0x10 [ 867.720643][T13783] ? netlink_recvmsg+0x5b2/0xa30 [ 867.720669][T13783] ? netlink_recvmsg+0x5b2/0xa30 [ 867.720699][T13783] netlink_recvmsg+0x676/0xa30 [ 867.720733][T13783] ? __pfx_netlink_recvmsg+0x10/0x10 [ 867.720764][T13783] ? __lock_acquire+0x6b6/0x2cf0 [ 867.720792][T13783] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 867.720817][T13783] ? security_socket_recvmsg+0x7e/0x2e0 [ 867.720841][T13783] ? __pfx_netlink_recvmsg+0x10/0x10 [ 867.720868][T13783] sock_recvmsg+0x22c/0x270 [ 867.720902][T13783] ____sys_recvmsg+0x1ce/0x470 [ 867.720936][T13783] ? __pfx_____sys_recvmsg+0x10/0x10 [ 867.720978][T13783] ? import_iovec+0x74/0xa0 [ 867.721002][T13783] ___sys_recvmsg+0x1b5/0x510 [ 867.721033][T13783] ? __pfx____sys_recvmsg+0x10/0x10 [ 867.721063][T13783] ? __fget_files+0x2a/0x420 [ 867.721102][T13783] ? __fget_files+0x3a6/0x420 [ 867.721134][T13783] __x64_sys_recvmsg+0x19e/0x260 [ 867.721163][T13783] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 867.721204][T13783] ? trace_sys_enter+0x5e/0xf0 [ 867.721234][T13783] ? rcu_is_watching+0x15/0xb0 [ 867.721254][T13783] ? trace_sys_enter+0x25/0xf0 [ 867.721287][T13783] do_syscall_64+0xec/0xf80 [ 867.721307][T13783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.721326][T13783] ? trace_irq_disable+0x37/0x100 [ 867.721347][T13783] ? clear_bhb_loop+0x60/0xb0 [ 867.721371][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.721390][T13783] RIP: 0033:0x7fce12a8f749 [ 867.721408][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.721425][T13783] RSP: 002b:00007fce10ccd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 867.721447][T13783] RAX: ffffffffffffffda RBX: 00007fce12ce6090 RCX: 00007fce12a8f749 [ 867.721462][T13783] RDX: 0000000000000000 RSI: 0000200000002240 RDI: 0000000000000004 [ 867.721476][T13783] RBP: 00007fce10ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 867.721489][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.721501][T13783] R13: 00007fce12ce6128 R14: 00007fce12ce6090 R15: 00007fffc909eaa8 [ 867.721534][T13783] [ 868.735217][T13805] JFS: charset not found [ 870.216429][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.216498][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.451505][T13823] Invalid logical block size (-2130706433) [ 870.782880][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 870.782904][T13836] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 871.715729][ T6005] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 871.835281][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2470'. [ 871.880226][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.880260][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.881606][ T6005] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 871.881632][ T6005] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 871.881652][ T6005] usb 6-1: Manufacturer: syz [ 871.943303][ T6005] usb 6-1: config 0 descriptor?? [ 872.227525][ T6005] usbhid 6-1:0.0: can't add hid device: -71 [ 872.227650][ T6005] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 872.254622][ T6005] usb 6-1: USB disconnect, device number 50 [ 872.635996][ T6005] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 872.790927][ T6005] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 872.790946][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 872.790956][ T6005] usb 6-1: SerialNumber: syz [ 872.820661][ T6005] usb 6-1: config 0 descriptor?? [ 873.857308][ T6005] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 873.900705][ T37] kauditd_printk_skb: 280 callbacks suppressed [ 873.900724][ T37] audit: type=1326 audit(873.715:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 873.907084][ T37] audit: type=1326 audit(873.725:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 873.907134][ T37] audit: type=1326 audit(873.725:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 873.907177][ T37] audit: type=1326 audit(873.725:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 873.911068][ T37] audit: type=1326 audit(873.725:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 873.911355][ T37] audit: type=1326 audit(873.725:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13851 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 874.379708][T13865] FAULT_INJECTION: forcing a failure. [ 874.379708][T13865] name failslab, interval 1, probability 0, space 0, times 0 [ 874.379769][T13865] CPU: 1 UID: 0 PID: 13865 Comm: syz.2.2475 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 874.379797][T13865] Tainted: [L]=SOFTLOCKUP [ 874.379804][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.379817][T13865] Call Trace: [ 874.379825][T13865] [ 874.379835][T13865] dump_stack_lvl+0xe8/0x150 [ 874.379866][T13865] should_fail_ex+0x46c/0x600 [ 874.379895][T13865] ? __alloc_skb+0x1dc/0x3a0 [ 874.379916][T13865] should_failslab+0xa8/0x100 [ 874.379937][T13865] ? __alloc_skb+0x1dc/0x3a0 [ 874.379956][T13865] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 874.379984][T13865] ? __local_bh_enable_ip+0x1c3/0x2c0 [ 874.380010][T13865] ? __alloc_skb+0x198/0x3a0 [ 874.380032][T13865] __alloc_skb+0x1dc/0x3a0 [ 874.380058][T13865] netlink_sendmsg+0x5c6/0xb30 [ 874.380093][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.380126][T13865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.380152][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.380185][T13865] __sock_sendmsg+0x21c/0x270 [ 874.380224][T13865] ____sys_sendmsg+0x508/0x810 [ 874.380253][T13865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.380286][T13865] ? import_iovec+0x74/0xa0 [ 874.380309][T13865] ___sys_sendmsg+0x21f/0x2a0 [ 874.380336][T13865] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.380367][T13865] ? __schedule+0x1475/0x5070 [ 874.380420][T13865] ? __fget_files+0x2a/0x420 [ 874.380440][T13865] ? __fget_files+0x3a6/0x420 [ 874.380470][T13865] __x64_sys_sendmsg+0x1a1/0x260 [ 874.380497][T13865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.380530][T13865] ? trace_sys_enter+0x5e/0xf0 [ 874.380559][T13865] ? rcu_is_watching+0x15/0xb0 [ 874.380579][T13865] ? trace_sys_enter+0x25/0xf0 [ 874.380612][T13865] do_syscall_64+0xec/0xf80 [ 874.380630][T13865] ? rcu_is_watching+0x15/0xb0 [ 874.380647][T13865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.380667][T13865] ? clear_bhb_loop+0x60/0xb0 [ 874.380690][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.380709][T13865] RIP: 0033:0x7f14517df749 [ 874.380727][T13865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.380744][T13865] RSP: 002b:00007f144fa04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.380765][T13865] RAX: ffffffffffffffda RBX: 00007f1451a36180 RCX: 00007f14517df749 [ 874.380780][T13865] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 000000000000000b [ 874.380794][T13865] RBP: 00007f144fa04090 R08: 0000000000000000 R09: 0000000000000000 [ 874.380807][T13865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.380819][T13865] R13: 00007f1451a36218 R14: 00007f1451a36180 R15: 00007ffd59bcc438 [ 874.380851][T13865] [ 875.065761][T12649] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 875.384460][T12649] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.384486][T12649] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 875.384520][T12649] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 875.384532][T12649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.615252][T13873] autofs: Unknown parameter '0x0000000000000000' [ 876.215807][T12649] usb 7-1: config 0 descriptor?? [ 876.242589][T12649] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 876.242680][T12649] dvb-usb: bulk message failed: -22 (3/0) [ 876.289839][T12649] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 876.291146][T12649] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 876.291265][T12649] usb 7-1: media controller created [ 876.307968][T12649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 876.542495][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 876.542604][T12649] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 876.695465][T13878] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2479'. [ 877.512077][T12649] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 877.516296][T12649] dvb-usb: schedule remote query interval to 150 msecs. [ 877.516321][T12649] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 878.016328][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 878.016364][T12649] dvb-usb: error while querying for an remote control event. [ 878.121465][T12649] usb 6-1: USB disconnect, device number 51 [ 878.142692][ T6016] usb 7-1: USB disconnect, device number 8 [ 878.430993][ T6016] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 878.877107][T13907] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 878.918514][ T150] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.191234][T13907] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 879.191363][ T150] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.308481][ T150] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.402259][ T150] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.449094][T13914] overlayfs: missing 'lowerdir' [ 879.697370][T13921] FAULT_INJECTION: forcing a failure. [ 879.697370][T13921] name failslab, interval 1, probability 0, space 0, times 0 [ 879.697406][T13921] CPU: 0 UID: 0 PID: 13921 Comm: syz.3.2493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 879.697435][T13921] Tainted: [L]=SOFTLOCKUP [ 879.697443][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 879.697456][T13921] Call Trace: [ 879.697463][T13921] [ 879.697472][T13921] dump_stack_lvl+0xe8/0x150 [ 879.697503][T13921] should_fail_ex+0x46c/0x600 [ 879.697535][T13921] should_failslab+0xa8/0x100 [ 879.697556][T13921] __kmalloc_noprof+0xe0/0x7e0 [ 879.697584][T13921] ? tomoyo_encode+0x28b/0x550 [ 879.697609][T13921] tomoyo_encode+0x28b/0x550 [ 879.697634][T13921] tomoyo_realpath_from_path+0x58d/0x5d0 [ 879.697665][T13921] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 879.697691][T13921] tomoyo_path_number_perm+0x1e8/0x5a0 [ 879.697720][T13921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 879.697745][T13921] ? __lock_acquire+0x6b6/0x2cf0 [ 879.697773][T13921] ? from_kuid+0x1b0/0x640 [ 879.697825][T13921] ? __fget_files+0x2a/0x420 [ 879.697848][T13921] ? __fget_files+0x2a/0x420 [ 879.697867][T13921] ? __fget_files+0x3a6/0x420 [ 879.697886][T13921] ? __fget_files+0x2a/0x420 [ 879.697910][T13921] security_file_ioctl+0xcb/0x2d0 [ 879.697940][T13921] __se_sys_ioctl+0x47/0x170 [ 879.697968][T13921] do_syscall_64+0xec/0xf80 [ 879.697988][T13921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.698008][T13921] ? trace_irq_disable+0x37/0x100 [ 879.698028][T13921] ? clear_bhb_loop+0x60/0xb0 [ 879.698058][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.698078][T13921] RIP: 0033:0x7f9a722ef749 [ 879.698095][T13921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.698112][T13921] RSP: 002b:00007f9a70556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.698133][T13921] RAX: ffffffffffffffda RBX: 00007f9a72545fa0 RCX: 00007f9a722ef749 [ 879.698149][T13921] RDX: 0000200000000440 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 879.698162][T13921] RBP: 00007f9a70556090 R08: 0000000000000000 R09: 0000000000000000 [ 879.698175][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.698187][T13921] R13: 00007f9a72546038 R14: 00007f9a72545fa0 R15: 00007fff85885518 [ 879.698220][T13921] [ 879.698239][T13921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 880.049664][T13924] tmpfs: Cannot change global quota limit on remount [ 880.131053][ T37] audit: type=1800 audit(879.935:9056): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2494" name="bus" dev="overlay" ino=1664 res=0 errno=0 [ 880.435728][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 882.310918][T13947] overlay: ./file0 is not a directory [ 883.092999][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 883.752501][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2504'. [ 884.730666][T13973] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2506'. [ 885.651017][T13977] tmpfs: Cannot change global quota limit on remount [ 885.842785][T13983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2510'. [ 885.975688][T12649] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 886.125847][T12649] usb 7-1: Using ep0 maxpacket: 32 [ 886.130681][T12649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.130715][T12649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.130754][T12649] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 886.130778][T12649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.137310][T12649] usb 7-1: config 0 descriptor?? [ 886.137587][ T6017] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 886.169165][T12649] hub 7-1:0.0: USB hub found [ 886.295774][ T6017] usb 4-1: Using ep0 maxpacket: 32 [ 886.301350][ T6017] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 886.301377][ T6017] usb 4-1: config 0 has no interface number 0 [ 886.301405][ T6017] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 886.305929][ T5815] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 886.352178][ T6017] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 886.352253][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.352274][ T6017] usb 4-1: Product: syz [ 886.352288][ T6017] usb 4-1: Manufacturer: syz [ 886.352301][ T6017] usb 4-1: SerialNumber: syz [ 886.375646][T12649] hub 7-1:0.0: 1 port detected [ 886.381543][ T6017] usb 4-1: config 0 descriptor?? [ 886.383575][T13984] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 886.475677][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 886.477935][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.478001][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.478014][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 886.478037][ T5815] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 886.478049][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.485167][ T5815] usb 5-1: config 0 descriptor?? [ 886.585951][T13984] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 887.105397][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 887.183369][ T5815] hid_parser_main: 5 callbacks suppressed [ 887.183394][ T5815] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 887.183427][ T5815] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 887.183454][ T5815] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 887.183482][ T5815] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 887.183510][ T5815] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 887.193051][ T6017] net1080 4-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, de:a4:b6:31:32:60 [ 887.202346][ T5815] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 887.222692][ T6017] usb 4-1: USB disconnect, device number 72 [ 887.225623][ T6017] net1080 4-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 887.229307][ T7114] usb 7-1: USB disconnect, device number 9 [ 887.229452][T12649] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 887.304870][ T5815] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 887.305096][ T5815] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 887.521573][T13996] netlink: 'syz.4.2511': attribute type 2 has an invalid length. [ 887.521596][T13996] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2511'. [ 887.817603][ T6005] usb 5-1: USB disconnect, device number 76 [ 887.817834][T12649] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 887.817910][T12649] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 887.817980][T12649] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 887.818046][T12649] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 887.877413][ T6292] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 889.440398][ T6292] usb 6-1: device descriptor read/64, error -71 [ 889.675681][ T6292] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 889.797214][ T5811] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 889.805779][ T6292] usb 6-1: device descriptor read/64, error -71 [ 889.916216][ T6292] usb usb6-port1: attempt power cycle [ 890.255703][ T6292] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 890.286766][ T6292] usb 6-1: device descriptor read/8, error -71 [ 890.568439][ T6292] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 890.654006][ T6292] usb 6-1: device descriptor read/8, error -71 [ 890.934109][ T6292] usb usb6-port1: unable to enumerate USB device [ 891.843335][T14023] tmpfs: Cannot change global quota limit on remount [ 892.292595][T14030] lo speed is unknown, defaulting to 1000 [ 892.526280][ T6005] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 893.423657][ T6005] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 893.423689][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.423708][ T6005] usb 6-1: Product: syz [ 893.423723][ T6005] usb 6-1: Manufacturer: syz [ 893.423738][ T6005] usb 6-1: SerialNumber: syz [ 893.491989][ T6005] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 893.524232][ T6016] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 894.686545][T12649] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 894.713401][ T6016] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 894.714176][ T6016] ath9k_htc: Failed to initialize the device [ 894.793845][ T6016] usb 6-1: ath9k_htc: USB layer deinitialized [ 894.815729][T12649] usb 4-1: device descriptor read/64, error -71 [ 895.066070][T12649] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 895.205668][T12649] usb 4-1: device descriptor read/64, error -71 [ 895.250914][ T6016] usb 6-1: USB disconnect, device number 56 [ 895.316116][T12649] usb usb4-port1: attempt power cycle [ 895.653281][T14062] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 895.664246][T12649] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 895.676352][T12649] usb 4-1: device descriptor read/8, error -71 [ 895.918528][T12649] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 895.937332][T12649] usb 4-1: device descriptor read/8, error -71 [ 896.010127][ T9469] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 896.038550][ T9469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 896.065805][T12649] usb usb4-port1: unable to enumerate USB device [ 896.069568][ T9469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 897.317662][ T9469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 897.321618][ T9469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 897.514089][T14066] lo speed is unknown, defaulting to 1000 [ 897.705679][T12649] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 897.718202][T14081] overlayfs: failed to resolve './file0/file0': -2 [ 897.868511][T12649] usb 5-1: Using ep0 maxpacket: 8 [ 897.886894][T12649] usb 5-1: unable to get BOS descriptor or descriptor too short [ 897.910705][T12649] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 897.910732][T12649] usb 5-1: config 1 has no interface number 1 [ 897.914125][T12649] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.917523][T14081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.929744][T12649] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.929774][T12649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.929792][T12649] usb 5-1: Product: syz [ 897.929807][T12649] usb 5-1: Manufacturer: syz [ 897.929821][T12649] usb 5-1: SerialNumber: syz [ 898.239840][T14066] chnl_net:caif_netlink_parms(): no params data found [ 898.903826][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.904026][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.904278][T14066] bridge_slave_0: entered allmulticast mode [ 898.940048][T14066] bridge_slave_0: entered promiscuous mode [ 898.969115][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.969313][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.969552][T14066] bridge_slave_1: entered allmulticast mode [ 898.973525][T14066] bridge_slave_1: entered promiscuous mode [ 899.168717][T14102] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 899.193934][T14104] tmpfs: Bad value for 'mpol' [ 899.289514][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.332603][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.396727][ T9469] Bluetooth: hci6: command tx timeout [ 899.638801][T12649] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 899.638829][T12649] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 899.708384][T12649] usb 5-1: USB disconnect, device number 77 [ 900.246227][T14112] : Can't lookup blockdev [ 901.427094][T14066] team0: Port device team_slave_0 added [ 901.430595][T14066] team0: Port device team_slave_1 added [ 901.477871][ T9469] Bluetooth: hci6: command tx timeout [ 902.176831][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2551'. [ 903.280637][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.280657][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.280685][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.347323][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.347342][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.347370][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.556065][ T9469] Bluetooth: hci6: command tx timeout [ 903.826362][T14066] hsr_slave_0: entered promiscuous mode [ 903.828557][T14066] hsr_slave_1: entered promiscuous mode [ 903.829521][T14066] debugfs: 'hsr0' already exists in 'hsr' [ 903.829544][T14066] Cannot create hsr debugfs directory [ 904.324512][T14133] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 904.999757][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 905.636034][ T9469] Bluetooth: hci6: command tx timeout [ 906.931528][ T37] audit: type=1326 audit(906.745:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.957553][ T37] audit: type=1326 audit(906.745:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.957602][ T37] audit: type=1326 audit(906.745:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.957797][ T37] audit: type=1326 audit(906.775:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.957841][ T37] audit: type=1326 audit(906.775:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.958033][ T37] audit: type=1326 audit(906.775:9062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.958078][ T37] audit: type=1326 audit(906.775:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.958416][ T37] audit: type=1326 audit(906.775:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.959158][ T37] audit: type=1326 audit(906.775:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.959210][ T37] audit: type=1326 audit(906.775:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14161 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a722ef749 code=0x7ffc0000 [ 906.997210][T14164] netlink: 4608 bytes leftover after parsing attributes in process `syz.6.2564'. [ 907.182412][T14066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 907.309481][T14066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 907.412787][T14066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 907.522022][T14066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 908.298595][T14066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.428700][T14066] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.663226][T10592] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.682621][T10592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.404689][T10587] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.404849][T10587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.146165][ T6292] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 910.297870][ T6292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 910.297900][ T6292] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.300817][ T6292] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 910.300845][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.300866][ T6292] usb 6-1: Product: syz [ 910.300880][ T6292] usb 6-1: Manufacturer: syz [ 910.300895][ T6292] usb 6-1: SerialNumber: syz [ 910.306701][ T6292] usb 6-1: config 0 descriptor?? [ 910.845769][ T5888] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 910.998671][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 911.000947][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.000977][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.001002][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10272, setting to 1024 [ 911.001027][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 911.001050][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.001089][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 911.001113][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.176419][T12649] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 911.229602][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 911.229646][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 911.289653][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.316083][T12649] usb 7-1: device descriptor read/64, error -71 [ 911.342498][ T6292] usb 6-1: USB disconnect, device number 57 [ 911.556382][T12649] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 912.532383][T12649] usb 7-1: device descriptor read/64, error -71 [ 912.636233][T12649] usb usb7-port1: attempt power cycle [ 914.167636][ T6005] usb 5-1: USB disconnect, device number 78 [ 914.315672][T12649] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 914.417757][T12649] usb 7-1: device descriptor read/8, error -71 [ 914.722586][T14066] veth0_vlan: entered promiscuous mode [ 914.759304][T14066] veth1_vlan: entered promiscuous mode [ 914.878680][T12649] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 914.896749][T12649] usb 7-1: Using ep0 maxpacket: 8 [ 914.899044][T12649] usb 7-1: unable to get BOS descriptor or descriptor too short [ 914.904231][T14066] veth0_macvtap: entered promiscuous mode [ 914.926211][T12649] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 914.926237][T12649] usb 7-1: config 4 has no interface number 0 [ 914.926268][T12649] usb 7-1: config 4 interface 30 has no altsetting 0 [ 914.939131][T12649] usb 7-1: string descriptor 0 read error: -22 [ 914.939261][T12649] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 914.939285][T12649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.951050][T14066] veth1_macvtap: entered promiscuous mode [ 915.010439][T12649] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 915.010492][T12649] dw2102: su3000_power_ctrl: 1, initialized 0 [ 915.010514][T12649] dvb-usb: bulk message failed: -22 (2/0) [ 915.019727][T12649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.056221][T12649] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 915.056284][T12649] usb 7-1: media controller created [ 915.056702][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056720][T12649] dw2102: i2c transfer failed. [ 915.056744][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056758][T12649] dw2102: i2c transfer failed. [ 915.056776][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056789][T12649] dw2102: i2c transfer failed. [ 915.056806][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056820][T12649] dw2102: i2c transfer failed. [ 915.056836][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056850][T12649] dw2102: i2c transfer failed. [ 915.056866][T12649] dvb-usb: bulk message failed: -22 (6/0) [ 915.056879][T12649] dw2102: i2c transfer failed. [ 915.056890][T12649] dvb-usb: MAC address: 02:02:02:02:02:02 [ 915.097804][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.149077][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.185782][T12649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.227874][T14241] kvm: user requested TSC rate below hardware speed [ 915.243293][T12649] dvb-usb: bulk message failed: -22 (3/0) [ 915.243313][T12649] dw2102: command 0x0e transfer failed. [ 915.243323][T12649] dvb-usb: bulk message failed: -22 (3/0) [ 915.243337][T12649] dw2102: command 0x0e transfer failed. [ 915.247159][T10585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.247207][T10585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.247242][T10585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.247276][T10585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.545749][T12649] dvb-usb: bulk message failed: -22 (3/0) [ 915.545775][T12649] dw2102: command 0x0e transfer failed. [ 915.545785][T12649] dvb-usb: bulk message failed: -22 (3/0) [ 915.545799][T12649] dw2102: command 0x0e transfer failed. [ 915.545808][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 915.545821][T12649] dw2102: command 0x51 transfer failed. [ 915.545831][T12649] dvb-usb: bulk message failed: -22 (5/0) [ 915.545844][T12649] dw2102: i2c probe for address 0x68 failed. [ 915.545857][T12649] dvb-usb: bulk message failed: -22 (5/0) [ 915.545870][T12649] dw2102: i2c probe for address 0x69 failed. [ 915.545881][T12649] dvb-usb: bulk message failed: -22 (5/0) [ 915.545895][T12649] dw2102: i2c probe for address 0x6a failed. [ 915.545906][T12649] dw2102: probing for demodulator failed. Is the external power switched on? [ 915.545916][T12649] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 915.859687][T10585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.859716][T10585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.956458][T12649] rc_core: IR keymap rc-tt-1500 not found [ 915.956481][T12649] Registered IR keymap rc-empty [ 915.957904][T12649] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 915.997328][T12649] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input32 [ 916.016900][T12649] dvb-usb: schedule remote query interval to 250 msecs. [ 916.016922][T12649] dw2102: su3000_power_ctrl: 0, initialized 1 [ 916.016936][T12649] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 916.019578][T12649] usb 7-1: USB disconnect, device number 13 [ 916.135648][T10585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.135671][T10585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.405230][T12649] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 918.593384][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 919.190961][T14295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 919.191027][T14295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 919.252805][T14296] tmpfs: Unknown parameter 'usrquotaoverlay.redirect' [ 921.115694][ T6292] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 921.386011][ T6292] usb 8-1: Using ep0 maxpacket: 16 [ 921.388258][ T6292] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 921.388279][ T6292] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.388298][ T6292] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.388317][ T6292] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.388335][ T6292] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 921.388397][ T6292] usb 8-1: config 0 has no interface number 0 [ 921.388425][ T6292] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 921.388440][ T6292] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 921.388451][ T6292] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 921.388469][ T6292] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.388483][ T6292] usb 8-1: config 0 interface 125 has no altsetting 0 [ 921.388492][ T6292] usb 8-1: config 0 interface 125 has no altsetting 2 [ 921.404618][ T6292] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 921.404636][ T6292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.404646][ T6292] usb 8-1: Product: syz [ 921.404654][ T6292] usb 8-1: Manufacturer: syz [ 921.404662][ T6292] usb 8-1: SerialNumber: syz [ 921.414698][ T6292] usb 8-1: config 0 descriptor?? [ 921.425253][ T6292] usb 8-1: selecting invalid altsetting 2 [ 922.518460][ T6292] get_1284_register timeout [ 922.520730][ C1] usb 8-1: async_complete: urb error -104 [ 922.526387][ C1] usb 8-1: async_complete: urb error -104 [ 922.526556][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 922.526616][ T6005] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 922.526758][ T6292] uss720 8-1:0.125: probe with driver uss720 failed with error -5 [ 922.665694][ T6005] usb 5-1: device descriptor read/64, error -71 [ 922.712076][ T5901] usb 8-1: USB disconnect, device number 2 [ 923.752662][ T6005] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 923.975740][ T6005] usb 5-1: device descriptor read/64, error -71 [ 924.068085][T14330] io-wq is not configured for unbound workers [ 924.086386][ T6005] usb usb5-port1: attempt power cycle [ 926.518885][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2615'. [ 926.653797][T14353] [†’Ì: entered promiscuous mode [ 927.725880][T14370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.550570][T14389] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 931.561270][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.561338][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.617682][T14404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2629'. [ 932.596549][ T6017] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 932.745659][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 932.751172][ T6017] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 932.767175][ T6017] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 932.767203][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 932.767222][ T6017] usb 5-1: Product: syz [ 932.767236][ T6017] usb 5-1: Manufacturer: syz [ 932.767250][ T6017] usb 5-1: SerialNumber: syz [ 932.788047][ T6017] usb 5-1: config 0 descriptor?? [ 932.791523][T14414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 932.799482][ T6017] hub 5-1:0.0: bad descriptor, ignoring hub [ 932.800776][ T6017] hub 5-1:0.0: probe with driver hub failed with error -5 [ 933.137147][ T5888] usb 5-1: USB disconnect, device number 82 [ 936.091861][ T6005] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 936.440127][ T6005] usb 7-1: Using ep0 maxpacket: 16 [ 937.150623][ T6005] usb 7-1: config 0 has an invalid interface number: 77 but max is 0 [ 937.150651][ T6005] usb 7-1: config 0 has no interface number 0 [ 937.150696][ T6005] usb 7-1: config 0 interface 77 has no altsetting 0 [ 937.180793][ T6005] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=8c.11 [ 937.180823][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.180841][ T6005] usb 7-1: Product: syz [ 937.180856][ T6005] usb 7-1: Manufacturer: syz [ 937.180869][ T6005] usb 7-1: SerialNumber: syz [ 937.187446][ T6005] usb 7-1: config 0 descriptor?? [ 937.304469][T14441] fuse: Bad value for 'fd' [ 937.614940][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.615356][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.634641][ T6005] ath6kl: Failed to submit usb control message: -71 [ 937.634694][ T6005] ath6kl: unable to send the bmi data to the device: -71 [ 937.634709][ T6005] ath6kl: Unable to send get target info: -71 [ 937.658905][ T6005] ath6kl: Failed to init ath6kl core: -71 [ 937.662661][ T6005] ath6kl_usb 7-1:0.77: probe with driver ath6kl_usb failed with error -71 [ 937.720567][ T6005] usb 7-1: USB disconnect, device number 14 [ 937.845615][ T5901] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 937.998333][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.998366][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.998407][ T5901] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 937.998431][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.006099][ T5901] usb 6-1: config 0 descriptor?? [ 938.235802][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.236135][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.277326][ T5901] hid-led 0003:1D34:000A.001F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 938.378204][ T5901] hid-led 0003:1D34:000A.001F: Dream Cheeky Webmail Notifier initialized [ 938.825700][T12649] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 938.936842][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 938.936860][ T37] audit: type=1326 audit(938.745:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14467 comm="syz.6.2646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5dfc7f749 code=0x0 [ 938.989572][T12649] usb 5-1: unable to get BOS descriptor or descriptor too short [ 938.991978][T14470] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2646'. [ 938.992270][T12649] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 938.992290][T12649] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 938.992310][T12649] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.042458][T12649] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.042487][T12649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.042506][T12649] usb 5-1: Product: syz [ 939.042520][T12649] usb 5-1: SerialNumber: syz [ 939.123335][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2646'. [ 939.321130][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.322150][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.192772][ T7114] usb 6-1: USB disconnect, device number 58 [ 942.076281][T12649] usb 5-1: 0:2 : does not exist [ 942.116504][T12649] usb 5-1: USB disconnect, device number 83 [ 943.750749][ T9469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 943.772734][ T9469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 943.960950][ T9469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 944.507488][ T9469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 944.508398][ T9469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 944.751587][T14502] lo speed is unknown, defaulting to 1000 [ 945.262923][T14517] lo speed is unknown, defaulting to 1000 [ 946.764953][ T9469] Bluetooth: hci7: command tx timeout [ 946.899236][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2658'. [ 946.899262][T14522] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2658'. [ 947.315048][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2658'. [ 947.320776][T14522] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2658'. [ 947.344705][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2659'. [ 948.547477][ T7114] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 948.745649][ T7114] usb 7-1: Using ep0 maxpacket: 8 [ 948.750178][ T7114] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 948.750212][ T7114] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 948.750238][ T7114] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 948.750261][ T7114] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.750300][ T7114] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 948.750322][ T7114] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.836282][ T9469] Bluetooth: hci7: command tx timeout [ 948.988235][ T7114] usb 7-1: GET_CAPABILITIES returned 0 [ 948.988281][ T7114] usbtmc 7-1:16.0: can't read capabilities [ 949.189920][ T6005] usb 7-1: USB disconnect, device number 15 [ 949.423535][T14502] chnl_net:caif_netlink_parms(): no params data found [ 949.437530][T14557] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2668'. [ 950.395967][ T6017] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 950.735839][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 950.738382][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.738414][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.738437][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.738472][ T6017] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 950.738495][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.744130][T14502] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.744251][T14502] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.744463][T14502] bridge_slave_0: entered allmulticast mode [ 950.763042][T14502] bridge_slave_0: entered promiscuous mode [ 950.774702][ T6017] usb 5-1: config 0 descriptor?? [ 950.781549][T14502] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.781661][T14502] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.784057][T14502] bridge_slave_1: entered allmulticast mode [ 950.803864][T14502] bridge_slave_1: entered promiscuous mode [ 950.916004][ T9469] Bluetooth: hci7: command tx timeout [ 951.227420][ T6017] usbhid 5-1:0.0: can't add hid device: -71 [ 951.227534][ T6017] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 951.244978][ T6017] usb 5-1: USB disconnect, device number 84 [ 951.344750][T14502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.380013][T14502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.465965][ T6005] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 951.617823][ T6005] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.617854][ T6005] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.617880][ T6005] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.617913][ T6005] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 951.617934][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.623476][ T6005] usb 6-1: config 0 descriptor?? [ 951.710203][T14502] team0: Port device team_slave_0 added [ 951.754491][T14502] team0: Port device team_slave_1 added [ 952.080241][T14502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.080259][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.080285][T14502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.100453][T14600] netlink: zone id is out of range [ 952.100468][T14600] netlink: zone id is out of range [ 952.100477][T14600] netlink: get zone limit has 4 unknown bytes [ 952.102616][T14502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.102630][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.102656][T14502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.190808][ T6005] sony 0003:054C:0268.0020: item fetching failed at offset 3/7 [ 952.191551][ T6005] sony 0003:054C:0268.0020: parse failed [ 952.191656][ T6005] sony 0003:054C:0268.0020: probe with driver sony failed with error -22 [ 952.262095][ T6017] usb 6-1: USB disconnect, device number 59 [ 955.264723][ T9469] Bluetooth: hci7: command tx timeout [ 955.333618][T14502] hsr_slave_0: entered promiscuous mode [ 955.334451][T14502] hsr_slave_1: entered promiscuous mode [ 955.335010][T14502] debugfs: 'hsr0' already exists in 'hsr' [ 955.335025][T14502] Cannot create hsr debugfs directory [ 955.455661][T12649] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 955.627024][T12649] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 955.627055][T12649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.627075][T12649] usb 6-1: Product: syz [ 955.627090][T12649] usb 6-1: Manufacturer: syz [ 955.627104][T12649] usb 6-1: SerialNumber: syz [ 955.753447][T12649] hub 6-1:24.0: bad descriptor, ignoring hub [ 955.753489][T12649] hub 6-1:24.0: probe with driver hub failed with error -5 [ 955.957819][T12649] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 955.983558][T12649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 955.984369][T12649] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 955.984424][T12649] usb 6-1: media controller created [ 956.029038][T12649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.124911][T12649] DVB: Unable to find symbol dib7000p_attach() [ 956.124928][T12649] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 956.825598][T12649] rc_core: IR keymap rc-dib0700-rc5 not found [ 956.825669][T12649] Registered IR keymap rc-empty [ 956.858736][T12649] dvb-usb: could not initialize remote control. [ 956.858774][T12649] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 957.112937][T12649] usb 6-1: USB disconnect, device number 60 [ 957.291633][T12649] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 958.033215][T14502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 958.105367][T14502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 958.286897][T14502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 958.311268][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 958.398653][T14502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 958.929350][T14502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.805836][T14502] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.849396][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.849619][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.912426][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.912632][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.090392][T14664] program syz.4.2699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 960.951267][T14694] netlink: 'syz.3.2706': attribute type 1 has an invalid length. [ 961.711729][T14502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.844017][T14721] FAULT_INJECTION: forcing a failure. [ 962.844017][T14721] name failslab, interval 1, probability 0, space 0, times 0 [ 962.844066][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.5.2714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 962.844094][T14721] Tainted: [L]=SOFTLOCKUP [ 962.844101][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 962.844115][T14721] Call Trace: [ 962.844124][T14721] [ 962.844133][T14721] dump_stack_lvl+0xe8/0x150 [ 962.844166][T14721] should_fail_ex+0x46c/0x600 [ 962.844198][T14721] should_failslab+0xa8/0x100 [ 962.844219][T14721] __kmalloc_noprof+0xe0/0x7e0 [ 962.844246][T14721] ? finish_task_switch+0x23d/0x940 [ 962.844273][T14721] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 962.844294][T14721] ? lockdep_hardirqs_on+0x7b/0x110 [ 962.844319][T14721] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 962.844348][T14721] genl_family_rcv_msg_doit+0xb8/0x300 [ 962.844376][T14721] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 962.844395][T14721] ? rcu_is_watching+0x15/0xb0 [ 962.844416][T14721] ? rcu_is_watching+0x15/0xb0 [ 962.844436][T14721] ? cap_capable+0x123/0x440 [ 962.844462][T14721] ? safesetid_security_capable+0xa9/0x1a0 [ 962.844490][T14721] ? bpf_lsm_capable+0x9/0x20 [ 962.844509][T14721] ? security_capable+0x7e/0x2e0 [ 962.844535][T14721] genl_rcv_msg+0x60e/0x790 [ 962.844562][T14721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.844581][T14721] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 962.844612][T14721] ? irqentry_exit+0x5dd/0x660 [ 962.844642][T14721] netlink_rcv_skb+0x208/0x470 [ 962.844670][T14721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.844691][T14721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.844717][T14721] ? lock_acquire+0x222/0x340 [ 962.844759][T14721] ? netlink_deliver_tap+0x2e/0x1b0 [ 962.844783][T14721] ? netlink_deliver_tap+0x2e/0x1b0 [ 962.844813][T14721] genl_rcv+0x28/0x40 [ 962.844830][T14721] netlink_unicast+0x846/0xa10 [ 962.844863][T14721] ? __pfx_netlink_unicast+0x10/0x10 [ 962.844887][T14721] ? netlink_sendmsg+0x642/0xb30 [ 962.844911][T14721] ? skb_put+0x11b/0x210 [ 962.844938][T14721] netlink_sendmsg+0x805/0xb30 [ 962.844973][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.845008][T14721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.845038][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.845065][T14721] __sock_sendmsg+0x21c/0x270 [ 962.845097][T14721] sock_sendmsg+0x158/0x230 [ 962.845128][T14721] ? __pfx_sock_sendmsg+0x10/0x10 [ 962.845170][T14721] ? __asan_memset+0x22/0x50 [ 962.845194][T14721] ? iov_iter_bvec+0xb8/0x180 [ 962.845224][T14721] splice_to_socket+0x8f8/0xf10 [ 962.845262][T14721] ? __pfx_splice_to_socket+0x10/0x10 [ 962.845324][T14721] ? rw_verify_area+0x25b/0x4e0 [ 962.845349][T14721] ? __pfx_splice_to_socket+0x10/0x10 [ 962.845367][T14721] do_splice+0xc8e/0x1680 [ 962.845389][T14721] ? __fget_files+0x2a/0x420 [ 962.845424][T14721] ? __pfx_do_splice+0x10/0x10 [ 962.845454][T14721] __se_sys_splice+0x2e1/0x460 [ 962.845482][T14721] ? __pfx___se_sys_splice+0x10/0x10 [ 962.845507][T14721] ? __x64_sys_splice+0x21/0xf0 [ 962.845531][T14721] do_syscall_64+0xec/0xf80 [ 962.845548][T14721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.845567][T14721] ? trace_irq_disable+0x37/0x100 [ 962.845586][T14721] ? clear_bhb_loop+0x60/0xb0 [ 962.845609][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.845627][T14721] RIP: 0033:0x7f693bdff749 [ 962.845646][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.845666][T14721] RSP: 002b:00007f693a066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 962.845688][T14721] RAX: ffffffffffffffda RBX: 00007f693c055fa0 RCX: 00007f693bdff749 [ 962.845703][T14721] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 962.845716][T14721] RBP: 00007f693a066090 R08: 000000000000fffd R09: 0000000000000000 [ 962.845730][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.845742][T14721] R13: 00007f693c056038 R14: 00007f693c055fa0 R15: 00007ffea6afa998 [ 962.845777][T14721] [ 963.045719][T12649] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 963.195629][T12649] usb 7-1: device descriptor read/64, error -71 [ 963.205447][T14726] netlink: 'syz.3.2715': attribute type 10 has an invalid length. [ 963.279919][T14726] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 963.435694][T12649] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 963.522966][T14502] veth0_vlan: entered promiscuous mode [ 963.565721][T12649] usb 7-1: device descriptor read/64, error -71 [ 963.593516][T14502] veth1_vlan: entered promiscuous mode [ 963.696874][T12649] usb usb7-port1: attempt power cycle [ 963.723465][T14502] veth0_macvtap: entered promiscuous mode [ 963.744957][T14502] veth1_macvtap: entered promiscuous mode [ 963.810626][T14502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.839959][T14502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.864439][T10587] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891005][T10587] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891689][T10587] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891726][T10587] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.075654][T12649] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 964.105669][T12649] usb 7-1: device descriptor read/8, error -71 [ 964.405703][T12649] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 964.426501][T12649] usb 7-1: device descriptor read/8, error -71 [ 964.451664][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.451694][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.536289][T12649] usb usb7-port1: unable to enumerate USB device [ 964.579554][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.579575][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.415763][T12649] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 965.585078][T12649] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 965.585137][T12649] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.612418][T12649] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 965.612448][T12649] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 965.612468][T12649] usb 9-1: Manufacturer: syz [ 965.646412][T12649] usb 9-1: config 0 descriptor?? [ 965.725628][T12649] rc_core: IR keymap rc-hauppauge not found [ 965.725650][T12649] Registered IR keymap rc-empty [ 965.727096][T12649] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 965.730164][T12649] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 965.862315][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 968.392950][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.392990][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393018][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393045][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393071][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393098][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393126][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393153][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393179][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.393205][ T6292] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0 [ 968.555052][ T6292] hid-generic 0000:0000:0004.0021: hidraw0: HID v0.03 Device [syz1] on syz0 [ 970.093341][T14801] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2741'. [ 971.767658][ T6005] hid-generic 0000:0000:0004.0022: hidraw0: HID v0.03 Device [syz1] on syz0 [ 976.030969][ T5901] hid_parser_main: 192 callbacks suppressed [ 976.030996][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031026][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031050][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031073][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031099][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031125][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031151][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031178][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031204][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.031230][ T5901] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 976.049532][ T5901] hid-generic 0000:0000:0004.0023: hidraw0: HID v0.03 Device [syz1] on syz0 [ 976.957532][ T5901] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 977.109248][ T5901] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 977.109278][ T5901] usb 6-1: config 160 has no interface number 0 [ 977.109353][ T5901] usb 6-1: config 160 interface 200 has no altsetting 0 [ 977.142538][ T5901] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 977.142564][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.142575][ T5901] usb 6-1: Product: syz [ 977.142583][ T5901] usb 6-1: Manufacturer: syz [ 977.142591][ T5901] usb 6-1: SerialNumber: syz [ 977.446189][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.453406][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.478356][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 977.478420][ T5901] usb 6-1: MIDIStreaming interface descriptor not found [ 977.741398][ T5901] usb 6-1: USB disconnect, device number 61 [ 978.442212][ T5811] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 978.475958][ T5811] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 978.477763][ T5811] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 978.485703][ T5811] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 978.490104][ T5811] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 979.167776][T14888] lo speed is unknown, defaulting to 1000 [ 980.677375][T14907] tmpfs: Unknown parameter 'usrquot>`' [ 981.297582][ T9469] Bluetooth: hci8: command tx timeout [ 981.516649][ T6005] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 981.891976][ T5811] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 981.909087][ T5811] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 981.910816][ T5811] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 981.914338][ T5811] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 981.915148][ T5811] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 983.321722][ T5811] Bluetooth: hci8: command tx timeout [ 983.479853][T14913] lo speed is unknown, defaulting to 1000 [ 983.505719][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2780'. [ 983.835434][T14888] chnl_net:caif_netlink_parms(): no params data found [ 983.959166][ T5811] Bluetooth: hci9: command tx timeout [ 984.794443][ T5811] Bluetooth: hci4: Malformed LE Event: 0x0d [ 986.062986][ T9469] Bluetooth: hci8: command tx timeout [ 986.063020][ T9469] Bluetooth: hci9: command tx timeout [ 986.954483][T14888] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.954693][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.954966][T14888] bridge_slave_0: entered allmulticast mode [ 986.988366][T14888] bridge_slave_0: entered promiscuous mode [ 987.020764][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.021073][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.021401][T14888] bridge_slave_1: entered allmulticast mode [ 987.025385][T14888] bridge_slave_1: entered promiscuous mode [ 987.881434][T14944] netlink: 368 bytes leftover after parsing attributes in process `syz.5.2786'. [ 988.356219][ T5811] Bluetooth: hci8: command tx timeout [ 988.357710][T11403] Bluetooth: hci9: command tx timeout [ 988.640299][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.813338][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.537317][T14913] chnl_net:caif_netlink_parms(): no params data found [ 989.638542][T14888] team0: Port device team_slave_0 added [ 989.805688][T14888] team0: Port device team_slave_1 added [ 990.185645][ T5807] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 990.336350][ T5807] usb 7-1: device descriptor read/64, error -71 [ 990.436887][ T5811] Bluetooth: hci9: command tx timeout [ 990.534910][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.534928][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.534954][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.587414][ T5807] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 990.593890][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 990.639685][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.639704][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.639730][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.725750][ T5807] usb 7-1: device descriptor read/64, error -71 [ 990.846970][ T5807] usb usb7-port1: attempt power cycle [ 991.205795][ T5807] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 991.235637][ T5807] usb 7-1: device descriptor read/8, error -71 [ 991.748080][ T5807] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 992.034227][ T5807] usb 7-1: device descriptor read/8, error -71 [ 992.138543][ T5807] usb usb7-port1: unable to enumerate USB device [ 992.460128][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.461241][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.461418][T14913] bridge_slave_0: entered allmulticast mode [ 992.463315][T14913] bridge_slave_0: entered promiscuous mode [ 992.515611][ T5811] Bluetooth: hci9: command 0x0405 tx timeout [ 992.718577][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.718718][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.718956][T14913] bridge_slave_1: entered allmulticast mode [ 992.721511][T14913] bridge_slave_1: entered promiscuous mode [ 992.820713][T14888] hsr_slave_0: entered promiscuous mode [ 992.821938][T14888] hsr_slave_1: entered promiscuous mode [ 992.822705][T14888] debugfs: 'hsr0' already exists in 'hsr' [ 992.822725][T14888] Cannot create hsr debugfs directory [ 993.003132][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.003273][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.109274][T14989] tmpfs: Unknown parameter 'usrquot>`' [ 995.040958][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.182459][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.701962][T14913] team0: Port device team_slave_0 added [ 995.793148][T14913] team0: Port device team_slave_1 added [ 997.152172][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.152191][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.152218][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.210590][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.210610][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.210638][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.685703][ T6292] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 997.854905][ T6292] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 997.854938][ T6292] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.880351][ T6292] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 997.880380][ T6292] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 997.880400][ T6292] usb 6-1: Manufacturer: syz [ 997.880415][ T6292] usb 6-1: SerialNumber: syz [ 998.140227][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.142460][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.182846][ T6292] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 998.200307][ T6292] usb 6-1: USB disconnect, device number 62 [ 998.258043][T14913] hsr_slave_0: entered promiscuous mode [ 998.263262][T14913] hsr_slave_1: entered promiscuous mode [ 998.293505][T14913] debugfs: 'hsr0' already exists in 'hsr' [ 998.293535][T14913] Cannot create hsr debugfs directory [ 1001.169211][T15017] tmpfs: Unknown parameter 'usrquot>`' [ 1001.576575][T14888] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1001.736159][T14888] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1001.908749][T14888] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1001.967924][T14888] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1002.525961][ T6292] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1002.676131][ T6292] usb 7-1: Using ep0 maxpacket: 16 [ 1002.678212][ T6292] usb 7-1: too many configurations: 46, using maximum allowed: 8 [ 1002.681488][ T6292] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1002.681525][ T6292] usb 7-1: can't read configurations, error -61 [ 1002.825926][ T6292] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1002.992132][ T6292] usb 7-1: Using ep0 maxpacket: 16 [ 1002.996532][ T6292] usb 7-1: too many configurations: 46, using maximum allowed: 8 [ 1003.005325][ T6292] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1003.005359][ T6292] usb 7-1: can't read configurations, error -61 [ 1003.006413][ T6292] usb usb7-port1: attempt power cycle [ 1003.202938][T14913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.345928][ T6292] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1003.378329][ T6292] usb 7-1: Using ep0 maxpacket: 16 [ 1003.379159][ T6292] usb 7-1: too many configurations: 46, using maximum allowed: 8 [ 1003.382080][ T6292] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1003.382114][ T6292] usb 7-1: can't read configurations, error -61 [ 1004.484055][ T6292] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1004.508463][ T6292] usb 7-1: Using ep0 maxpacket: 16 [ 1004.516986][ T6292] usb 7-1: too many configurations: 46, using maximum allowed: 8 [ 1004.520068][ T6292] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1004.520111][ T6292] usb 7-1: can't read configurations, error -61 [ 1004.520463][ T6292] usb usb7-port1: unable to enumerate USB device [ 1005.174083][T14913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.390932][T14913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.249399][T14913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.615337][T14888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.732316][T14888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.802323][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.802545][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.833911][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.834086][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.520941][T15062] siw: device registration error -23 [ 1009.985896][ T6292] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1010.025982][ T6005] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1010.166150][ T6292] usb 7-1: Using ep0 maxpacket: 16 [ 1010.168209][ T6292] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1010.168242][ T6292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1010.170906][ T6292] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1010.170931][ T6292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.170950][ T6292] usb 7-1: Product: syz [ 1010.170964][ T6292] usb 7-1: Manufacturer: syz [ 1010.170979][ T6292] usb 7-1: SerialNumber: syz [ 1010.180010][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.180051][ T6005] usb 6-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 1010.180073][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.189739][ T6005] usb 6-1: config 0 descriptor?? [ 1010.213598][ T6292] usb 7-1: config 0 descriptor?? [ 1010.376022][ T6292] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1010.376128][ T6292] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1010.480755][T14913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1010.764634][ T6005] ntrig 0003:1B96:0014.0024: item fetching failed at offset 1/3 [ 1010.765394][ T6005] ntrig 0003:1B96:0014.0024: parse failed [ 1010.781772][ T6005] ntrig 0003:1B96:0014.0024: probe with driver ntrig failed with error -22 [ 1010.811070][T14913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1012.313973][ T6292] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1012.386996][ T5888] usb 6-1: USB disconnect, device number 63 [ 1012.620237][T14913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1013.081400][T15085] sit0: entered promiscuous mode [ 1013.082170][T15085] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 1013.082191][T15085] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2822'. [ 1013.082264][T14913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1013.315997][ T6292] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1013.316436][ T6292] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1013.316454][ T6292] em28xx 7-1:0.0: No AC97 audio processor [ 1015.024865][ T6292] usb 7-1: USB disconnect, device number 29 [ 1015.027328][ T6292] em28xx 7-1:0.0: Disconnecting em28xx [ 1015.050562][ T6292] em28xx 7-1:0.0: Freeing device [ 1017.635998][ T6292] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1017.800857][ T6292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.800904][ T6292] usb 7-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 1017.800927][ T6292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.835002][ T6292] usb 7-1: config 0 descriptor?? [ 1017.859609][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.230188][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.361535][ T6292] ntrig 0003:1B96:0014.0025: item fetching failed at offset 1/3 [ 1018.362297][ T6292] ntrig 0003:1B96:0014.0025: parse failed [ 1018.362398][ T6292] ntrig 0003:1B96:0014.0025: probe with driver ntrig failed with error -22 [ 1018.429148][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.486166][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.486369][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.562055][ T6017] usb 7-1: USB disconnect, device number 30 [ 1018.780824][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.780987][T10597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.836532][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 1020.992044][T14888] veth0_vlan: entered promiscuous mode [ 1021.118540][T14888] veth1_vlan: entered promiscuous mode [ 1022.326211][ T6005] hid_parser_main: 91 callbacks suppressed [ 1022.326235][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326266][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326293][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326320][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326346][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326372][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326398][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326425][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326452][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.326478][ T6005] hid-generic 0000:0000:0004.0026: unknown main item tag 0x0 [ 1022.329037][T14888] veth0_macvtap: entered promiscuous mode [ 1022.486098][ T6005] hid-generic 0000:0000:0004.0026: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1022.784362][T14888] veth1_macvtap: entered promiscuous mode [ 1023.114350][ T5888] kernel read not supported for file /vcs (pid: 5888 comm: kworker/0:5) [ 1024.105403][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.186881][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.253579][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.438869][ T3548] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.449287][ T3548] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.453555][ T3548] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.459198][ T3548] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.241688][T14913] veth0_vlan: entered promiscuous mode [ 1026.358467][T14913] veth1_vlan: entered promiscuous mode [ 1026.740457][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.740477][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.909340][T14913] veth0_macvtap: entered promiscuous mode [ 1028.197801][T14913] veth1_macvtap: entered promiscuous mode [ 1028.202772][ T6671] hid_parser_main: 91 callbacks suppressed [ 1028.202794][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202827][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202855][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202881][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202907][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202932][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202957][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.202983][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.203009][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.203035][ T6671] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1028.330751][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.330773][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.526049][ T6671] hid-generic 0000:0000:0004.0027: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1030.228096][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.360177][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.459714][ T158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.465150][ T158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.486780][ T158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.492255][ T158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.535690][ T5815] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1030.688462][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 1030.694052][ T5815] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1030.694070][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.694081][ T5815] usb 7-1: Product: syz [ 1030.694089][ T5815] usb 7-1: Manufacturer: syz [ 1030.694096][ T5815] usb 7-1: SerialNumber: syz [ 1030.804912][ T5815] usb 7-1: config 0 descriptor?? [ 1031.743639][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.762656][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.143478][ T5815] usb 7-1: USB disconnect, device number 31 [ 1033.255750][ T5815] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1033.436729][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.436752][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.563114][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.563178][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.563190][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.563217][ T5815] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1033.563229][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.594353][ T5815] usb 7-1: config 0 descriptor?? [ 1034.031543][ T5815] usbhid 7-1:0.0: can't add hid device: -71 [ 1034.121761][ T5815] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1034.145461][T15222] batadv_slave_1: entered promiscuous mode [ 1034.152307][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 1034.154870][T15221] batadv_slave_1: left promiscuous mode [ 1034.193292][ T5815] usb 7-1: USB disconnect, device number 32 [ 1035.296030][T15228] netlink: 'syz.3.2856': attribute type 26 has an invalid length. [ 1037.458192][T15246] F2FS-fs: Conflicting test_dummy_encryption options [ 1038.599073][T15257] batadv_slave_1: entered promiscuous mode [ 1038.601312][T15255] batadv_slave_1: left promiscuous mode [ 1038.917446][T15250] tmpfs: Unknown parameter 'usrquot>`' [ 1039.891267][T11403] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1039.919838][T11403] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1039.950933][T11403] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1039.954723][T11403] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1039.970276][T11403] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1040.356960][ T38] INFO: task syz.2.2499:13941 blocked for more than 143 seconds. [ 1040.356986][ T38] Tainted: G L syzkaller #0 [ 1040.356997][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1040.357006][ T38] task:syz.2.2499 state:D stack:25528 pid:13941 tgid:13939 ppid:5802 task_flags:0x400140 flags:0x00080002 [ 1040.357058][ T38] Call Trace: [ 1040.357296][ T38] [ 1040.357312][ T38] __schedule+0x145f/0x5070 [ 1040.357363][ T38] ? update_irq_load_avg+0x8c7/0xe30 [ 1040.357392][ T38] ? arch_scale_cpu_capacity+0x18/0xb0 [ 1040.357466][ T38] ? __pfx___schedule+0x10/0x10 [ 1040.357499][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 1040.357535][ T38] rt_mutex_schedule+0x77/0xf0 [ 1040.357563][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 1040.357634][ T38] __rt_mutex_slowlock_locked+0x1dfe/0x25e0 [ 1040.357658][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1040.357701][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 1040.357733][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 1040.357814][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1040.357842][ T38] ? rcu_is_watching+0x15/0xb0 [ 1040.357866][ T38] __rwbase_read_lock+0xbc/0x180 [ 1040.357889][ T38] ? __pfx___rwbase_read_lock+0x10/0x10 [ 1040.357970][ T38] down_read+0x127/0x1f0 [ 1040.357993][ T38] ? __pfx_down_read+0x10/0x10 [ 1040.358014][ T38] ? mnt_put_write_access_file+0xbf/0x100 [ 1040.358043][ T38] ? file_update_time_flags+0x44e/0x4f0 [ 1040.358120][ T38] blkdev_write_iter+0x50e/0x720 [ 1040.358161][ T38] iter_file_splice_write+0x977/0x10b0 [ 1040.358210][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1040.358297][ T38] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1040.358326][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1040.358348][ T38] direct_splice_actor+0x104/0x160 [ 1040.358375][ T38] splice_direct_to_actor+0x5b3/0xcd0 [ 1040.358465][ T38] ? __pfx_direct_splice_actor+0x10/0x10 [ 1040.358488][ T38] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1040.358522][ T38] do_splice_direct+0x187/0x270 [ 1040.358548][ T38] ? __pfx_do_splice_direct+0x10/0x10 [ 1040.358618][ T38] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1040.358651][ T38] ? rw_verify_area+0x25b/0x4e0 [ 1040.358689][ T38] do_sendfile+0x4ec/0x7f0 [ 1040.358720][ T38] ? __pfx_do_sendfile+0x10/0x10 [ 1040.358786][ T38] ? bpf_trace_run2+0x322/0x4c0 [ 1040.358809][ T38] ? __might_fault+0xb0/0x130 [ 1040.358834][ T38] ? bpf_trace_run2+0x186/0x4c0 [ 1040.358857][ T38] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1040.358883][ T38] __se_sys_sendfile64+0x13e/0x190 [ 1040.358954][ T38] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1040.358977][ T38] ? rcu_is_watching+0x15/0xb0 [ 1040.358996][ T38] ? trace_sys_enter+0x25/0xf0 [ 1040.359029][ T38] do_syscall_64+0xec/0xf80 [ 1040.359047][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.359108][ T38] ? trace_irq_disable+0x37/0x100 [ 1040.359128][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1040.359150][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.359168][ T38] RIP: 0033:0x7f14517df749 [ 1040.359185][ T38] RSP: 002b:00007f144fa46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1040.359207][ T38] RAX: ffffffffffffffda RBX: 00007f1451a35fa0 RCX: 00007f14517df749 [ 1040.359272][ T38] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1040.359285][ T38] RBP: 00007f1451863f91 R08: 0000000000000000 R09: 0000000000000000 [ 1040.359298][ T38] R10: 0000000001000007 R11: 0000000000000246 R12: 0000000000000000 [ 1040.359311][ T38] R13: 00007f1451a36038 R14: 00007f1451a35fa0 R15: 00007ffd59bcc438 [ 1040.359345][ T38] [ 1040.359442][ T38] [ 1040.359442][ T38] Showing all locks held in the system: [ 1040.359455][ T38] 1 lock held by khungtaskd/38: [ 1040.359466][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1040.359583][ T38] 6 locks held by kworker/u8:11/1434: [ 1040.359609][ T38] 5 locks held by kworker/u8:21/5081: [ 1040.359622][ T38] 2 locks held by getty/5563: [ 1040.359633][ T38] #0: ffff88814e1d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1040.359685][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1040.359787][ T38] 2 locks held by kworker/u8:36/10600: [ 1040.359799][ T38] #0: ffff8881422bc938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1040.359892][ T38] #1: ffffc90022ee7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1040.359940][ T38] 1 lock held by syz-executor/11911: [ 1040.359955][ T38] 1 lock held by syz.2.2499/13941: [ 1040.359966][ T38] #0: ffff88802482e1e8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50e/0x720 [ 1040.360063][ T38] 2 locks held by syz.2.2499/13942: [ 1040.360076][ T38] 1 lock held by syz.7.2617/14364: [ 1040.360087][ T38] #0: ffff88802482e3b8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_unbounded+0x193/0x8c0 [ 1040.360138][ T38] 1 lock held by syz.7.2617/14367: [ 1040.360150][ T38] #0: ffff88802482e3b8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_unbounded+0x193/0x8c0 [ 1040.360258][ T38] 1 lock held by syz.4.2711/14711: [ 1040.360270][ T38] #0: ffff88802482e1e8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 1040.360326][ T38] 1 lock held by syz.8.2724/14754: [ 1040.360387][ T38] #0: ffff88802482e1e8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 1040.360447][ T38] 7 locks held by kworker/0:2/15231: [ 1040.360460][ T38] 4 locks held by syz-executor/15256: [ 1040.360473][ T38] 6 locks held by syz.3.2868/15262: [ 1040.360485][ T38] [ 1040.360491][ T38] ============================================= [ 1040.360491][ T38] [ 1040.360553][ T38] NMI backtrace for cpu 0 [ 1040.360570][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.360596][ T38] Tainted: [L]=SOFTLOCKUP [ 1040.360603][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.360615][ T38] Call Trace: [ 1040.360623][ T38] [ 1040.360630][ T38] dump_stack_lvl+0xe8/0x150 [ 1040.360658][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1040.360690][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1040.360713][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1040.360740][ T38] sys_info+0x135/0x170 [ 1040.360760][ T38] watchdog+0xf95/0xfe0 [ 1040.360786][ T38] ? watchdog+0x20a/0xfe0 [ 1040.360812][ T38] kthread+0x711/0x8a0 [ 1040.360841][ T38] ? __pfx_watchdog+0x10/0x10 [ 1040.360860][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.360883][ T38] ? rt_spin_unlock+0x150/0x200 [ 1040.360913][ T38] ? rt_spin_unlock+0x161/0x200 [ 1040.360936][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.360964][ T38] ret_from_fork+0x510/0xa50 [ 1040.360987][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.361006][ T38] ? __switch_to+0xc9e/0x1480 [ 1040.361040][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.361066][ T38] ret_from_fork_asm+0x1a/0x30 [ 1040.361107][ T38] [ 1040.361129][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1040.361159][ C1] NMI backtrace for cpu 1 [ 1040.361176][ C1] CPU: 1 UID: 0 PID: 1434 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.361203][ C1] Tainted: [L]=SOFTLOCKUP [ 1040.361210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.361222][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1040.361245][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xa0 [ 1040.361267][ C1] Code: 89 74 0a 18 48 89 44 0a 20 e9 14 a1 15 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 b3 91 65 44 8b 05 77 61 f3 0f 41 81 e0 00 00 [ 1040.361284][ C1] RSP: 0018:ffffc900057c74d8 EFLAGS: 00000246 [ 1040.361299][ C1] RAX: ffffffff897fd968 RBX: dffffc0000000000 RCX: ffff8880275b0000 [ 1040.361315][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1040.361327][ C1] RBP: ffffc900057c75f0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.361339][ C1] R10: 0000000000000100 R11: 0000000000000003 R12: 1ffff92000af8ea4 [ 1040.361353][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 1040.361365][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1040.361381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1040.361394][ C1] CR2: 00002000000002c0 CR3: 0000000077270000 CR4: 00000000003526f0 [ 1040.361417][ C1] Call Trace: [ 1040.361425][ C1] [ 1040.361431][ C1] nf_hook+0x238/0x380 [ 1040.361461][ C1] ? nf_hook+0x9d/0x380 [ 1040.361486][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1040.361512][ C1] ? ip6_output+0x126/0x550 [ 1040.361543][ C1] ? ip6_output+0x126/0x550 [ 1040.361566][ C1] ip6_output+0x30b/0x550 [ 1040.361588][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 1040.361615][ C1] udp_tunnel6_xmit_skb+0x68d/0xb30 [ 1040.361647][ C1] send6+0x5ac/0x8d0 [ 1040.361668][ C1] ? rt_read_lock+0x203/0x490 [ 1040.361691][ C1] ? send6+0x220/0x8d0 [ 1040.361713][ C1] ? __pfx_send6+0x10/0x10 [ 1040.361730][ C1] ? rcu_is_watching+0x15/0xb0 [ 1040.361752][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1040.361774][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1040.361795][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1040.361815][ C1] wg_socket_send_skb_to_peer+0x128/0x200 [ 1040.361837][ C1] wg_packet_handshake_send_worker+0x1db/0x320 [ 1040.361858][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1040.361891][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1040.361910][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1040.361931][ C1] process_scheduled_works+0xad1/0x1770 [ 1040.361966][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1040.361984][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1040.362014][ C1] worker_thread+0x8a0/0xda0 [ 1040.362048][ C1] kthread+0x711/0x8a0 [ 1040.362073][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.362093][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.362115][ C1] ? rt_spin_unlock+0x150/0x200 [ 1040.362141][ C1] ? rt_spin_unlock+0x161/0x200 [ 1040.362162][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.362187][ C1] ret_from_fork+0x510/0xa50 [ 1040.362207][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.362225][ C1] ? __switch_to+0xc9e/0x1480 [ 1040.362253][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.362277][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.362312][ C1] [ 1040.363209][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1040.363232][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.363258][ T38] Tainted: [L]=SOFTLOCKUP [ 1040.363265][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.363277][ T38] Call Trace: [ 1040.363285][ T38] [ 1040.363292][ T38] vpanic+0x1e0/0x670 [ 1040.363325][ T38] panic+0xb9/0xc0 [ 1040.363348][ T38] ? __pfx_panic+0x10/0x10 [ 1040.363373][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1040.363397][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1040.363423][ T38] watchdog+0xfdf/0xfe0 [ 1040.363445][ T38] ? watchdog+0x20a/0xfe0 [ 1040.363472][ T38] kthread+0x711/0x8a0 [ 1040.363499][ T38] ? __pfx_watchdog+0x10/0x10 [ 1040.363520][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.363542][ T38] ? rt_spin_unlock+0x150/0x200 [ 1040.363571][ T38] ? rt_spin_unlock+0x161/0x200 [ 1040.363594][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.363621][ T38] ret_from_fork+0x510/0xa50 [ 1040.363646][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.363672][ T38] ? __switch_to+0xc9e/0x1480 [ 1040.363706][ T38] ? __pfx_kthread+0x10/0x10 [ 1040.363733][ T38] ret_from_fork_asm+0x1a/0x30 [ 1040.363778][ T38] [ 1040.364119][ T38] Kernel Offset: disabled