last executing test programs: 39m20.209202455s ago: executing program 32 (id=297): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendfile(r2, r1, &(0x7f00000000c0)=0x8e, 0x180000504) 37m46.42768953s ago: executing program 0 (id=526): pipe(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, ':*$\']](*,\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 37m46.127871747s ago: executing program 0 (id=528): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37m43.130027343s ago: executing program 0 (id=531): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) io_setup(0xffff0000, &(0x7f0000000180)=0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = eventfd(0x5) io_cancel(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000000300)="64cadb95cd039a2a48bfca9de52174ca3f46e7287fdba4034ecb161880053a4f56b5b3e30214ca5993cdadd353ba944ae181cedbb6b20ee737ece974aa93e0497688e1abac2467b2446519fd", 0x4c, 0xef, 0x0, 0x0, r7}, &(0x7f00000003c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 37m40.034915423s ago: executing program 0 (id=532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 37m36.787704787s ago: executing program 0 (id=539): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 37m36.638398046s ago: executing program 0 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 37m21.574634846s ago: executing program 33 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 35m35.735261291s ago: executing program 3 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 35m35.670413423s ago: executing program 3 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 35m35.201156461s ago: executing program 3 (id=751): syz_io_uring_setup(0xec5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 35m33.885932873s ago: executing program 3 (id=754): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2f1a7df36a5f621, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x4, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x5, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35m28.983822006s ago: executing program 3 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 35m28.039474603s ago: executing program 3 (id=761): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x4, &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) 35m12.944517825s ago: executing program 34 (id=761): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x4, &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) 14m1.408379911s ago: executing program 1 (id=5278): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local, 0x80010000}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000290000003400000000800000000000001400000000000000290000000b0000001820000000000000"], 0x30}, 0x44044) 13m59.762197447s ago: executing program 1 (id=5281): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) inotify_init() r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000005"], 0x28}}], 0x1, 0x854) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000140)=0xfff) r6 = accept4$ax25(r0, 0x0, &(0x7f0000000080), 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000180)={0x3, @bcast, r7}) 13m58.252271633s ago: executing program 1 (id=5284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r6, 0x1f1f, &(0x7f0000000200)) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13m54.812921755s ago: executing program 1 (id=5289): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 13m49.794867805s ago: executing program 1 (id=5300): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x4, 0xf5ff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0x8f0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170a29bd7000fedbdf25100000e30014"], 0x28}}, 0xc114) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80000) 13m47.868771078s ago: executing program 1 (id=5301): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x5}, @enum={0x4}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/124, 0x33, 0x7c, 0x0, 0x69, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8006}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) sendmsg$key(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x8, 0xf4, 0x6, 0x5, 0x0, 0x8070bd23, 0x25dfdbfd, [@sadb_address={0x3, 0x7, 0x32, 0xa0, 0x0, @in={0x2, 0x4e22, @broadcast}}]}, 0x28}}, 0x4c080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) 13m31.270666411s ago: executing program 35 (id=5301): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x5}, @enum={0x4}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/124, 0x33, 0x7c, 0x0, 0x69, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8006}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) sendmsg$key(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x8, 0xf4, 0x6, 0x5, 0x0, 0x8070bd23, 0x25dfdbfd, [@sadb_address={0x3, 0x7, 0x32, 0xa0, 0x0, @in={0x2, 0x4e22, @broadcast}}]}, 0x28}}, 0x4c080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) 11m14.639151772s ago: executing program 8 (id=5491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) add_key(&(0x7f00000003c0)='.dead\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 11m6.461175601s ago: executing program 8 (id=5503): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@rose, @remote, @bcast, @default, @default, @rose, @bcast, @netrom]}, &(0x7f0000000100)=0x48) accept4$netrom(r1, &(0x7f00000006c0)={{0x3, @netrom}, [@default, @rose, @netrom, @null, @netrom, @netrom, @null, @default]}, &(0x7f00000002c0)=0x48, 0x800) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES64=r8, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="0535a20539f457f3306a427064cbe0e9b3cfbf473a453a1cee788887a3a8985bb9fe397a6aac35c0ad539be425ba08d082ca57ba7b3055060c068cd5d8e3aba8be811704a7b63f6f0798cfac", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 11m5.208793209s ago: executing program 8 (id=5504): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 11m3.842600858s ago: executing program 8 (id=5506): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "0100"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000b40)=ANY=[@ANYBLOB="4000100000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10m51.303751311s ago: executing program 8 (id=5525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) add_key(&(0x7f00000003c0)='.dead\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 10m49.758255726s ago: executing program 8 (id=5527): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="201507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m34.652847268s ago: executing program 36 (id=5527): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="201507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m45.535929931s ago: executing program 4 (id=5664): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) fstatfs(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005280), 0x80800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x7258778a, 0x80, 0x1, 0x9}}) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085006aa836e43499f59b007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380)={0x319a, "d15c03"}, 0x6) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000500)=""/242, 0xf2, 0x100, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={'sha1\x00'}}) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9m42.239778986s ago: executing program 4 (id=5670): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) accept4(r2, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000004c0)=0x80, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x8) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x4, 0x8}, {0x0, 0x174f, 0xe, 0x85}}}}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0xdd, 0x0, &(0x7f0000000200)=""/221, 0x4, 0x0, 0xffffffffffffff54, 0x10, 0x0, 0x0, 0x7, 0x0, 0x800004}, 0x50) ppoll(&(0x7f0000000000)=[{r0, 0x1042}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x80040, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000540)={@host}) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 9m41.679624879s ago: executing program 4 (id=5673): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000000)=ANY=[@ANYRES16=r0]) 9m41.344075346s ago: executing program 4 (id=5674): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x40000000}, 0x28) 9m40.753577306s ago: executing program 4 (id=5677): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7feff, 0x20008, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) dup2(r1, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008854}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 9m37.948440028s ago: executing program 4 (id=5680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x96, 0x9b, 0x20, 0xa5c, 0x2033, 0xfe8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x3e, 0xbc, 0x8f}}]}}]}}, 0x0) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)='\x00', r1) 9m22.277874019s ago: executing program 37 (id=5680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x96, 0x9b, 0x20, 0xa5c, 0x2033, 0xfe8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x3e, 0xbc, 0x8f}}]}}]}}, 0x0) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)='\x00', r1) 36.463154033s ago: executing program 7 (id=6945): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 34.960928873s ago: executing program 7 (id=6946): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 32.465686845s ago: executing program 7 (id=6947): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x400000f5, 0x0, 0xff}]}) 29.663790808s ago: executing program 6 (id=6952): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) 29.26703194s ago: executing program 6 (id=6956): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 26.242299591s ago: executing program 9 (id=6958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 26.176410577s ago: executing program 2 (id=6959): r0 = syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 25.614186418s ago: executing program 9 (id=6960): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 25.544381666s ago: executing program 6 (id=6961): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff94acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a00)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r6, 0x13b, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1, 0xa11a, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x24000800) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xb0, 0x0, 0x99, [{{0x3, 0x0, 0x7, 0xa19f, 0x1, 0x0, {0x2, 0xffff, 0x9, 0x5, 0xb409, 0x5, 0x1, 0xc, 0x1, 0x1000, 0x5, r2, r3, 0x6, 0x9}}, {0x4, 0x8, 0x1, 0xe68d, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 23.663759802s ago: executing program 5 (id=6964): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080088474820", 0x100a6, 0x0, &(0x7f0000000140), 0x14) 23.423410857s ago: executing program 7 (id=6965): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a000000000000020001"], 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) 23.31743846s ago: executing program 6 (id=6966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYRESDEC=0x0], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000840)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fddbdf25050000fb0c0005002200000000000000100007802700018008000100", @ANYRES32=r3, @ANYBLOB="0c0002000100000000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x80) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="e08f8524", @ANYRES16=r7, @ANYBLOB="819b08000000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40482012}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000fa37cefc03592fd1608faab19b5956212a80aab3a59abdb6f0e6163f1600064a29c35fa252196345345d22ae3902ef011b4bca7c86f8053c3fd6ac207a93017ae50ecc1ccdd9cece61bf797b163056ae718a890609679df06275e29e2ac81a0214136392dae1dbed5690e979441b7c586c0793a006a2306c2dceece6bbf7975c3cf617787a22122661dcc06db07bb06e73a9748355f1b72201eb567a2a6d4ddc1d57b487cdd3680b4d09d9e010a96a6ea558fb3fc70f86190b4d0c44", @ANYRES16=r7, @ANYBLOB="000025bd7000ffdbdf250100000014000600fe8000000000000000000000000000aa050001000000000008000c00000000000800020007000000070001007d5b0000080002000700000008000800e0000001"], 0x58}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000080) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mmap(&(0x7f00001ee000/0x1000)=nil, 0x1000, 0x200000d, 0x13, r8, 0xed475000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0x0}}, './file0\x00'}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x5, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x0, 0x1000, 0x7f, r12, r13, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0xc000, 0x23, 0x4}, 0x18) r16 = pidfd_getfd(r3, r2, 0x0) r17 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmmsg$unix(r3, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@abs={0x3d1041d820d3de74, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="5529dbf825582bfa5e5e1bfb9f4f833c001166eb49b5a45910eefef85cac63de189c1af6af6757e3b4599714d0241f124d38774d09898b191448b62af2e565032a5fe9e6ca2539d514cc813a05293ad56d116cf2a3cea6cfe8d545", 0x5b}, {&(0x7f0000001740)="51749280e77b416abcb5a5270d40b079e40a6ab763b4019df788fdd6bbfbaeee1be346830527c14ce4e0f666ab040abfe24d8cf17a04b708c2c2c16b6fd5b3b04c7d060ccbda7a25445a20d2904e9d8249c8ae403dc513c5905efb66d6086d84bf9fd58ff7475a49f6247c778becba593b20b68880d461c702cb2513424a5fc902fad9bb366c8ff7fc2c6747dcd431cda5d62d0a3a0c9e2628816491c9a64256aa008c643159f10737a1658b0476e7e18f1f9b6c29e1434f1b8b9db1787e41d3ada6eb391456ec64016fd596e603359b820fff92301b7094762300813266e332e4998e6469cdfc7a14151f1eb0531a545b47a2342804e9de389d67efad5d285bba244fb22de94a0fd63a6fef7775cbac763d5a4e777fd77d61d42e204a1f671256a4771a32132274476c0b53c8721dafda715d70f05304dea49967c339130f58c8bc2d9d9ae5725d61bd01897bf5efbefd59c267045939587160c5ebb01ab503e4948b5c76974ed633e0fa62619c81b209d1ce1b132814b0b912d271da379d800d4eb37408e1c6b63054d6c0ed988da1c18089c9b0853ce22ebc01ef7e19b8c3bd20046b773a04c22c02883f37e90a8bd113171f097dbbfff0487f071c90c6e03015e629ffae23f33352f9654323dd01a640250fd2b9486a65bcbf04649463a5ca40140f5f5c0d23fc169377f22880390dad7191334584f32df97ed84ea1fc24b0b1707e2d4d5c14d896fb83ea4cadac98bb35b59d769fef68e6296ee7d3212e8b8eda754427e72f61162dc5341b448624a3ddee683b9dae8e5cb4c27dba5782b305d14757bb783eb3b965e9fe3e3d4a2e36cd9a8f3db4192c499347e8fa9d403290d9aae245c3f60e1787d22c6194990d4e4bee117835465f31b6b55d0f8b9d955054d443d575f990af797d75e5f67fcd9a402d78c0ea8979f2c04596a049d91ec78c55a32bab803d4f8e923e1c9b028b6b6141308bff942027695f48a56dca2ba6a30f6663c6b2236cbf0bf3d6e90200e79d66fe607626bf59663cafa2ecdffb80fc5b7b61b14596cd039bd89561087bf84a4e1cfd8336a560a75d1d357f2b399a11a3eb254cbc959384834f35828b444b1d9a5f709c77a0754773012c205a5283f5490b8adba05f3e7d10711c6ea43e8a200a91b5bc5d526197602b174d291fb30746bc64b6b1c3ae7a6416980eb3ca563af94c4099b1db1ba813462799f86e7de9fb83d94d8a539c380abdb3a7137e8ddf5129bac225ca3c37d2f29373ea3e85687e0134ec7cb26a847e287abe660ff3c1452847b31a92f873b291853dbe3cfa37da13eb1e4b477a7b3b3b865f4633e12e91aedc831de1023b3facf320809616c8d8d97f6133741b89cafbca57779bf9c2b7387a1380c5f5de99429057f751b45ca648c417a67a951953d43c43ad608549ace1b843e00198bd82b591581e297f63c18920c0af392ea0de4627c0503e51ba1a20a7243d04159aa1131616b3a02a751d498264cfca99da8a96de2dc69a7792c80354f4405c1e42e1a4d5c239e4529a7f679ed9b873e6d88a89ac515bd691453b8c4058e4ab4287c90612bcbe643bd46747a9557148d79e935ff3d332b4a433867122c9b5707c0a1fdedfe233a25802247810e9243bf8016bed361a988e1b74d0b99fe27bd9672d023980fd726be03a1800a18567d3f8e172f0cfd06cf40a94c618c7044a95dac16436d8c691d70c8b10d772d2923469d467a0418d2dcee105d9500ec5c1652bd0e7da8767ecc7efce058cad73a4303e73547f3810249191e2d466324e90983adab0f41d166274eddbedd88d39802f902bfb9e5193e48a8ac1944c88b5e1d6a28de884b3f2ebf7e260207ee75948aac4208e78fd18179a3e91737ebfa9232830d58a2d83be294696d30e29b4998b0e5fba1b7605de3d312fa0b67dead57f191b43f5bf08d78af6e8343160d9fcee772fc5d6ff889e010a81d533d8e320f5e7904aa0bf7f4d26b5aaee3e104cc228f3ed8d7c3c4c8320bec26394da356e3c85d3582d833b603a4b956230357050a62a53cc439b4833c7c8a5da8758995261837c0b28998ac83fe9dd0518a0655158e7cde57e18deec441fb75eb5cb9a979dce6b3bc6fa142bcbb3375f070d3c8b782ceaaaf96299ed76df8835f74d40c8069ca3f004d9bcf64c1fc96cf5c0847e960b1476163653644943a27f89ca5baa1a826acfd8efbed129fb52629b13aebc29fc606d89b3db2a8ee5ba99989b91671e3e885e621ecff56acbf6e4d938966523b94284aac671301faf9043b5c66d949b23cbe16faccf2307bd94f12ad63e990eaebafa8a1d7f5916dbb00254d88516010311d1d9ec163b3f2c7f9f1fb63db3eb8fc21be17fed46e89e4872f193058d1f4736cf3151fe8568725842ca32b4ede2225d5de2d9d49736cb91d1ee718e54fbe8b11dd255570797039c0d2130ad0b9b38220f6b1c6cbc7ce31c64773a6a1bc2d5f2edc35dfa118e9c22dcd7c5b5bed396d0d729fd14acb9e7270819a6f0b864e059ece3795f0b58571aa13598d2a79bfe7e15e0d4a928eb56b49085bcc4cf1370cd78aceefde53c56cfb356fc9deede8357d170197cec9f0b002cb2a9d9702155cc4747101bc8f27eb4bf25460f36975cb1dddd9a2ff387fcadcb4b0b8626fe5e94f378c7dcd3a40c8a7e1b42ffedc42b4ec680c040b4ae917f283db38c1f70b13ba27e3d0f6b51f83cd1803b31cec0c5239f49d6052dd67dbdf21dde6061dc1b654c48643e178d7f71579ca62c909b7e01514536303cb698130ec0b5083307fd66521deab15f8d1effc232c86d7ccc2bae871d5af4591119d8d0e60451a3f32b83c3cfeb6a927227d15b75c4fd920faf626e2a10e11bd05100b6b60c34f143a7effd5b645e4ef84f4a573e8af697e2b8ac9c872cac27d4fe31a1facfeb332b1809a6af6a9ce812c95bcc30ea0e1db7e0564c918ada4105f3b4847ef1943bbc4abe1ecc8444489fd76b073aef35529c0bffc6aae0fd92a87bb3ab0c650f15d23b4cb6b699917b135069a28bd0891c3212d5aa2acc2b2617478b144877ec1a702efa26b63f916ab000f41b3cec6fb61bd11ec5565a689e500b91d56c12a34f0c492385be18cc6ff8cd62962bb344831a1f9f0f13b9955dc61dc2271e093bc7b4666071fd155a37fa4b893de5fe4f17e2c1f7f0709d44c73b3d21539ab8de6e80defc87733396338591b8f88724b83c32b5466542bd315230bb99c3ee7b511cda457e93c029964a8d2893cae96afa1614a104d1d72ffb9419892138c8ccdff27f93d67ff2df33442a700c52d2a8da866c4d2775c31b2719cc2f2ed2079a06d0f2a9ce19aa8b9c69de27cf8b4a33af67d18c21e81ce031fe30c6df85ae2ba89932f5f8e33f09eb56e9c31ce844df0dab1450512d8a60c27dd2c7e0ee5f50a09c8d008b819827b1677ce7fae210e665cb9dc8006a3f322b3175b02da6c5155c910be81966d571225b1c04cbb71c7c483aacbe260020ed0c536ca598ada2b1da42e2ae1218d6f08d3969519cde691ef700f2032de0313dca08c97a74c7f1711dc0c81e64752e800895bf780fa28fcc869f33a37e455e78616cb14284d5d7e785955897028ec980d4bed2a212356a1b0bed9bdb96c4caf0664de3a1375380f19e01147bf321bc898f89b3194c54013649ab1d2d1bf3dae739455d0341f257234bcdb1ef11f7602dae9a409e8aa496042d15805517f82a8ca76cbadedd86987e25f30ec08a7c4c7a2f294d7a1e1d0fa5c28a52df928010ec31c0541b6517b72f1338c31ef700982649d5462d9311d86d6d577de34c1c0c7368b65b316b79d3a52122155ce6ccef847bcb08e1b86796fa68f99d0baec346d303cbd6cfb0d71c2b921b76f975dd99b1691fa3d548247e2bce0d55b7583de40216a580f566e5565538682eed29e41fc3a77a09bd95b0b460273991e7e3bacf971e59a0514d7cb5321c93e957293c5e2ae8593913d9af891b6b9fb4f7a616485fdd9bdc95c9313fa5e3c054fb4d94da242860986cdf1d52cf0981c20b6c64bf0050cac6d56ce60ce0a5c9891ab58e27701abed615fcc816105f7d83f75453b59180df55da61791fe821075bffe8d822c0d734954ea9c6f192953a94139262ac480f49b36fb3e7e9ee97411e285f846043305c30616e37bf92b57f86eb93ba1cc040160475009aacde3d60004cfdf7a8a9dd47de2bbcb6ad830cf2af374402ad2082ab92e86667923e949bee95efeecc3229ed8ef3b8f4b729d6a66cc826003e5c2e3be684c4a7751ec85c0de039f164966a938c7bd876cbbb20d6302f5869174bf51d2b36645bc611f13321aa4db82bf2f23a5d6c086af8fd6dc8521057492a6a7d55ffd2c17b61645e4e4dc7107d06d59847ed7873324f36a5d6c382db7ed1a42df1db0c33d08f6f8fd19f26819ae4c7961042d677fcb2937fd86d0760130788ddcc005bebd3b09ba5b71486861ed4895052826810cc952ad5bce3f1c4b2c9880dbad6cda129b89093a9b588354eec3bd1c362ffc3b41d339ab56f391c396b99898d5f7153c55a0a60666e97e2f3e7ca5a80b48f19979fd9f4beb5184427834f169725bbb25534d2771bb33ab3917ddd4ad026b005760c54c9e77a8115ffdafef27e08f30a7023ca6299c564c9bf27883175697a959d14e276464059fc4664cd4dc6c4f7f4ac1becdd363216fc47ee9216fefee39efb552f0a8f3ed06d948c2fbdc80a0e4425958a19e3c1c7eef1fb948a212a47f740a73071b405a604f47f1d7a193d535dc988889ed4c3ec66fb42791e37af71bde831b7a820b982e150310220376190522d2ece2769309744be3eefe217dfda0a75ef1b3b5aafbb9cce7db2252ce74b994f7278ea2ab730859ed7f1e9a526b5eaf3f8c11156b521ecf44f3d069898cfe6d094c2fc24d025c843aa86575fa35b3a6ad6ba87e35ec3eb978568aaaf5a16083880c0e14fbd9ef167e75a84abe5ce82a3e7ca0d0b2f459d60d98c26fe3fd998ef65a496e70fda0576420a5a23df762bc902d949e984581ee57f679f35ea6a14417c524376923e50a5ef41142bf181ada13028df8c6d7719aa68713ea8e6654b3039eacaf9242dbe3ac7b51c4cbbc202fb4f6b3185abe8c72c4d2ad070a6efef6c5e708c7e943f97698beab0069515c92985a95ece041b567d463797496d14cc84f923eacaca073b0d43233d7ea36afa4a2b9b97797987e06f29bc44e1e9a1556cd94e698822c038a2a316f912a55a7ee886184faeac93af574305e2c4b25a857a638793b07d36bcd0bbe54d496e10cb9963149b6a2b3039cfcc885258bb8f2fea067b729c6ae4e1bf21d5ba2c176ae29e63567cc5418151baeff4145a7987f83b347b73c2946494899caa5089fe038eb522ff5906212c13710fcb98ba95333c86d36240b881674c06b0d9e754c50402b31b7010f88fd765d4f405d939e7a4d6e274a74492c621089787b3416459ecdb578502d1447a3a2c9838b9342440c63226c6b105f7e975a7eeb57f9f39ea3c8c044fd5b6cdd79185fc36d8b074fe8ac2e51563df91e50063450f5d35952d0b0f22b303b2299a389bc73c00ec478ce78f90d5447e59406878dc03b3dd6f29e0e1fc9c4a026f2e26b4b8c01e3037650324077025ec129b128ff1d1623c92367042b6310ca84d335e87eed3dc1dafdac03df9688a7dcb0170ee77bfae9f3232c5041e0642d6225806b25f714702a178b1ba55164e8034f6c72028abd89a3b10647bf0fd45d129e48059e3c6a342e858e5d322781f23292be96fbef8672b3c16", 0x1000}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f00000006c0)="c6", 0x1}], 0x4, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r14}}}, @rights={{0x2c, 0x1, 0x1, [r0, r8, r8, r2, r2, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r1, r8, r3, 0xffffffffffffffff, r3]}}, @rights={{0x34, 0x1, 0x1, [r15, r8, r16, r17, r8, r18, r0, r2, r1]}}], 0xf0, 0x20000004}}], 0x1, 0x10) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x89, &(0x7f00000001c0)=""/137, 0x41000}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r19, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) 23.210800462s ago: executing program 5 (id=6967): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x801) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2d, 0x9b, 0x98, 0x10, 0x403, 0xfa06, 0xff64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x10, 0x80, 0x4f, [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0x89, 0x9e, 0xa5, 0xf}}]}}]}}, 0x0) (rerun: 64) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async, rerun: 32) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 23.128366908s ago: executing program 7 (id=6968): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000240)="ff", 0x1, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 21.300400722s ago: executing program 7 (id=6969): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0xe}, {0xfff1, 0xf}, {0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x5, 0x20d, 0x0, 0x8, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xfc, 0x22, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x48000) (fail_nth: 6) 21.107365802s ago: executing program 6 (id=6970): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 19.794396817s ago: executing program 6 (id=6971): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 19.466236219s ago: executing program 2 (id=6972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 19.304168728s ago: executing program 5 (id=6973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 19.217014388s ago: executing program 2 (id=6974): r0 = syz_io_uring_setup(0x9ea, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0xfffffffe, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffff3}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 18.177298412s ago: executing program 5 (id=6975): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17.803334267s ago: executing program 5 (id=6976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000240), 0x145, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x3011, 0x7, 0x0, 0x0, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000000)="c57c83", 0x3}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 17.757614986s ago: executing program 9 (id=6977): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080088474820", 0x100a6, 0x0, &(0x7f0000000140), 0x14) 17.731633754s ago: executing program 2 (id=6978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delqdisc={0x17c, 0x25, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xd, 0x8}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x26, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc0}}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0xe80, &(0x7f0000000300)=ANY=[], 0x0) 17.571670168s ago: executing program 5 (id=6979): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38, &(0x7f0000000140)=ANY=[@ANYBLOB="3300004e7216bd063ced4a2588d9a6a3f5da27d609ea518133653744a25f3c923cc044bb95a75ecc58cf9e7db922c803fb5a78cd77ad3400"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 17.430284488s ago: executing program 9 (id=6980): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500004001008aea0000feff"], 0xc8) 17.248651187s ago: executing program 2 (id=6981): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 17.159856931s ago: executing program 9 (id=6982): r0 = syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 15.927403641s ago: executing program 2 (id=6983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c29c39b0f427b811b76918737f4cfa3a7c81c3ef7f96272c6d0a5c91f6ad22f1d8314db876c7732d15cbee0ca", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x51}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x29, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd26}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x4, 0x40000d, 0x6}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0x26}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180003000300000000000000000095000085db89533a0000100000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.678107238s ago: executing program 9 (id=6984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.096946503s ago: executing program 38 (id=6969): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0xe}, {0xfff1, 0xf}, {0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x5, 0x20d, 0x0, 0x8, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xfc, 0x22, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x48000) (fail_nth: 6) 3.843370724s ago: executing program 39 (id=6971): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2035) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000340)={@host, 0x14fe}) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x9, 0x3000, 0x0, r9, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 1.794752364s ago: executing program 40 (id=6979): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38, &(0x7f0000000140)=ANY=[@ANYBLOB="3300004e7216bd063ced4a2588d9a6a3f5da27d609ea518133653744a25f3c923cc044bb95a75ecc58cf9e7db922c803fb5a78cd77ad3400"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 91.415384ms ago: executing program 41 (id=6984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 42 (id=6983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c29c39b0f427b811b76918737f4cfa3a7c81c3ef7f96272c6d0a5c91f6ad22f1d8314db876c7732d15cbee0ca", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x51}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x29, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd26}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x4, 0x40000d, 0x6}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0x26}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180003000300000000000000000095000085db89533a0000100000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): r while querying for an remote control event. [ 2058.917116][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2058.917155][T24586] dvb-usb: error while querying for an remote control event. [ 2059.026121][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2059.026157][T24586] dvb-usb: error while querying for an remote control event. [ 2059.083254][T25209] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2059.136141][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2059.136175][T24586] dvb-usb: error while querying for an remote control event. [ 2059.246051][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2059.246086][T24586] dvb-usb: error while querying for an remote control event. [ 2059.369340][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2059.370664][T24586] dvb-usb: error while querying for an remote control event. [ 2059.478841][T24586] dvb-usb: bulk message failed: -22 (2/0) [ 2059.483446][T24586] dvb-usb: error while querying for an remote control event. [ 2059.589635][ T7816] dvb-usb: bulk message failed: -22 (2/0) [ 2059.589668][ T7816] dvb-usb: error while querying for an remote control event. [ 2059.695900][ T7816] dvb-usb: bulk message failed: -22 (2/0) [ 2059.695933][ T7816] dvb-usb: error while querying for an remote control event. [ 2059.719707][T24586] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2059.800140][T24504] usb 6-1: USB disconnect, device number 38 [ 2059.867280][ T37] audit: type=1326 audit(6057237683.992:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2059.867719][ T37] audit: type=1326 audit(6057237683.992:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bedf90 code=0x7ffc0000 [ 2059.868326][ T37] audit: type=1326 audit(6057237683.992:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bedf90 code=0x7ffc0000 [ 2059.868719][ T37] audit: type=1326 audit(6057237683.992:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2059.919406][T24586] usb 3-1: Using ep0 maxpacket: 8 [ 2061.434824][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 2061.434845][ T37] audit: type=1326 audit(6057237684.072:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.434895][ T37] audit: type=1326 audit(6057237684.072:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.434943][ T37] audit: type=1326 audit(6057237684.072:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.434984][ T37] audit: type=1326 audit(6057237684.072:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435030][ T37] audit: type=1326 audit(6057237684.082:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435071][ T37] audit: type=1326 audit(6057237684.082:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435114][ T37] audit: type=1326 audit(6057237684.082:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435156][ T37] audit: type=1326 audit(6057237684.082:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435194][ T37] audit: type=1326 audit(6057237684.082:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.435235][ T37] audit: type=1326 audit(6057237684.082:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25215 comm="syz.6.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2061.514831][T24586] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 2061.514859][T24586] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.514876][T24586] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 2061.514894][T24586] usb 3-1: config 127 has no interface number 0 [ 2061.514931][T24586] usb 3-1: config 127 interface 171 has no altsetting 0 [ 2061.718416][T24504] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 2061.766369][T24586] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2061.766398][T24586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.766416][T24586] usb 3-1: Product: syz [ 2061.766430][T24586] usb 3-1: Manufacturer: syz [ 2061.766443][T24586] usb 3-1: SerialNumber: syz [ 2062.151795][T24504] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2062.450476][T24504] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.454143][T24504] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2062.454170][T24504] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2062.454189][T24504] usb 6-1: Product: syz [ 2062.454202][T24504] usb 6-1: Manufacturer: syz [ 2062.454216][T24504] usb 6-1: SerialNumber: syz [ 2062.493912][T24504] usb 6-1: config 0 descriptor?? [ 2062.616901][T24504] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2062.651617][T25233] veth1_macvtap: left promiscuous mode [ 2062.651653][T25233] macsec0: entered allmulticast mode [ 2062.721340][T24504] usb 6-1: USB disconnect, device number 39 [ 2063.197072][T24586] usb 3-1: USB disconnect, device number 5 [ 2064.789652][T25261] ufs: You didn't specify the type of your ufs filesystem [ 2064.789652][T25261] [ 2064.789652][T25261] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2064.789652][T25261] [ 2064.789652][T25261] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2064.789705][T25261] ufs: ufstype=old is supported read-only [ 2064.792682][T25259] netlink: 'syz.2.5970': attribute type 2 has an invalid length. [ 2064.896078][T25261] ufs: ufs_fill_super(): bad magic number [ 2064.924328][T25265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5960'. [ 2064.924351][T25265] netlink: 14692 bytes leftover after parsing attributes in process `syz.6.5960'. [ 2065.020611][T25265] ptrace attach of "./syz-executor exec"[17987] was attempted by " €\x0a 4N À   [ 2065.020916][T25265] FAULT_INJECTION: forcing a failure. [ 2065.020916][T25265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.020949][T25265] CPU: 0 UID: 0 PID: 25265 Comm: syz.6.5960 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2065.020974][T25265] Tainted: [L]=SOFTLOCKUP [ 2065.020981][T25265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2065.020992][T25265] Call Trace: [ 2065.021000][T25265] [ 2065.021009][T25265] dump_stack_lvl+0x189/0x250 [ 2065.021038][T25265] ? __pfx____ratelimit+0x10/0x10 [ 2065.021063][T25265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2065.021086][T25265] ? __pfx__printk+0x10/0x10 [ 2065.021125][T25265] should_fail_ex+0x46c/0x600 [ 2065.021155][T25265] _copy_to_user+0x31/0xb0 [ 2065.021175][T25265] simple_read_from_buffer+0xe1/0x170 [ 2065.021200][T25265] proc_fail_nth_read+0x1b6/0x220 [ 2065.021228][T25265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2065.021255][T25265] ? rw_verify_area+0x2ac/0x4e0 [ 2065.021277][T25265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2065.021302][T25265] vfs_read+0x206/0xa30 [ 2065.021334][T25265] ? __pfx_vfs_read+0x10/0x10 [ 2065.021353][T25265] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 2065.021386][T25265] ? mutex_lock_nested+0x154/0x1d0 [ 2065.021406][T25265] ? fdget_pos+0x253/0x320 [ 2065.021435][T25265] ksys_read+0x14b/0x260 [ 2065.021459][T25265] ? __pfx_ksys_read+0x10/0x10 [ 2065.021492][T25265] do_syscall_64+0xfa/0xf80 [ 2065.021512][T25265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.021530][T25265] ? clear_bhb_loop+0x60/0xb0 [ 2065.021552][T25265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.021569][T25265] RIP: 0033:0x7f9394bee15c [ 2065.021586][T25265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2065.021601][T25265] RSP: 002b:00007f9392e4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2065.021620][T25265] RAX: ffffffffffffffda RBX: 00007f9394e45fa0 RCX: 00007f9394bee15c [ 2065.021639][T25265] RDX: 000000000000000f RSI: 00007f9392e4e0a0 RDI: 0000000000000004 [ 2065.021651][T25265] RBP: 00007f9392e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 2065.021663][T25265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.021675][T25265] R13: 00007f9394e46038 R14: 00007f9394e45fa0 R15: 00007fffef0f8308 [ 2065.021708][T25265] [ 2067.682743][T25288] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5981'. [ 2067.836329][T25294] FAULT_INJECTION: forcing a failure. [ 2067.836329][T25294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2067.836365][T25294] CPU: 1 UID: 0 PID: 25294 Comm: syz.5.5982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2067.836389][T25294] Tainted: [L]=SOFTLOCKUP [ 2067.836397][T25294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2067.836408][T25294] Call Trace: [ 2067.836416][T25294] [ 2067.836425][T25294] dump_stack_lvl+0x189/0x250 [ 2067.836452][T25294] ? __pfx____ratelimit+0x10/0x10 [ 2067.836477][T25294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2067.836499][T25294] ? __pfx__printk+0x10/0x10 [ 2067.836531][T25294] should_fail_ex+0x46c/0x600 [ 2067.836559][T25294] _copy_from_user+0x2d/0xb0 [ 2067.836578][T25294] copy_from_sockptr+0x5e/0xa0 [ 2067.836597][T25294] packet_setsockopt+0x965/0x12c0 [ 2067.836623][T25294] ? __pfx_packet_setsockopt+0x10/0x10 [ 2067.836643][T25294] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2067.836662][T25294] ? lockdep_hardirqs_on+0x98/0x140 [ 2067.836681][T25294] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2067.836724][T25294] ? __fget_files+0x2a/0x420 [ 2067.836746][T25294] ? __fget_files+0x2a/0x420 [ 2067.836764][T25294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2067.836786][T25294] ? __pfx_packet_setsockopt+0x10/0x10 [ 2067.836811][T25294] do_sock_setsockopt+0x17c/0x1b0 [ 2067.836838][T25294] __x64_sys_setsockopt+0x145/0x1b0 [ 2067.836864][T25294] do_syscall_64+0xfa/0xf80 [ 2067.836882][T25294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.836898][T25294] ? clear_bhb_loop+0x60/0xb0 [ 2067.836919][T25294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.836937][T25294] RIP: 0033:0x7fd8aee6f749 [ 2067.836954][T25294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2067.836970][T25294] RSP: 002b:00007fd8ad0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2067.836989][T25294] RAX: ffffffffffffffda RBX: 00007fd8af0c5fa0 RCX: 00007fd8aee6f749 [ 2067.837003][T25294] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 2067.837015][T25294] RBP: 00007fd8ad0d6090 R08: 000000000000001c R09: 0000000000000000 [ 2067.837028][T25294] R10: 0000200000003180 R11: 0000000000000246 R12: 0000000000000001 [ 2067.837040][T25294] R13: 00007fd8af0c6038 R14: 00007fd8af0c5fa0 R15: 00007ffeb80619b8 [ 2067.837073][T25294] [ 2070.964754][T25310] veth1_macvtap: left promiscuous mode [ 2070.964782][T25310] macsec0: entered allmulticast mode [ 2072.509501][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5993'. [ 2072.529749][T25330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2072.617427][T25330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5993'. [ 2072.929250][T15390] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2072.953797][T25338] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5998'. [ 2073.079221][T15390] usb 3-1: Using ep0 maxpacket: 8 [ 2073.081408][T15390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.081436][T15390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.081472][T15390] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2073.081493][T15390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.086570][T15390] usb 3-1: config 0 descriptor?? [ 2074.749989][T15390] hid_parser_main: 1261 callbacks suppressed [ 2074.750015][T15390] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 2074.750047][T15390] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 2074.785722][T15390] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 2074.943814][T24811] usb 3-1: USB disconnect, device number 6 [ 2075.573686][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 2075.573703][ T37] audit: type=1326 audit(6057237699.710:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.573879][ T37] audit: type=1326 audit(6057237699.710:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.574002][ T37] audit: type=1326 audit(6057237699.710:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.574128][ T37] audit: type=1326 audit(6057237699.710:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.574394][ T37] audit: type=1326 audit(6057237699.710:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.574646][ T37] audit: type=1326 audit(6057237699.710:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.574989][ T37] audit: type=1326 audit(6057237699.710:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.575141][ T37] audit: type=1326 audit(6057237699.710:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.575278][ T37] audit: type=1326 audit(6057237699.710:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.576120][ T37] audit: type=1326 audit(6057237699.710:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25352 comm="syz.5.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aee6f749 code=0x7ffc0000 [ 2075.710368][T25122] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2075.914708][T25122] usb 10-1: Using ep0 maxpacket: 8 [ 2075.923963][T25122] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2075.925164][T25122] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.927512][T25122] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2075.928206][T25122] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.928227][T25122] usb 10-1: Product: syz [ 2075.928241][T25122] usb 10-1: Manufacturer: syz [ 2075.928254][T25122] usb 10-1: SerialNumber: syz [ 2077.084878][T25122] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2078.281281][T25122] snd-usb-audio 10-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 2078.307081][T25122] usb 10-1: USB disconnect, device number 13 [ 2078.480166][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6008'. [ 2078.480227][T25368] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6008'. [ 2078.661809][T25372] Invalid logical block size (61183) [ 2079.581318][T25379] sp0: Synchronizing with TNC [ 2079.584770][T25378] [U] è [ 2083.443704][T25408] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6020'. [ 2084.220549][T25427] hsr0: entered promiscuous mode [ 2084.221133][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6028'. [ 2084.266161][T25427] hsr_slave_0: left promiscuous mode [ 2084.303608][T25427] hsr_slave_1: left promiscuous mode [ 2084.514386][T25427] hsr0 (unregistering): left promiscuous mode [ 2084.831365][T25438] ip6gre1: entered allmulticast mode [ 2084.853399][T25438] fuse: Bad value for 'fd' [ 2086.534363][T25449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2086.576852][T19617] libceph: connect (1)[c::]:6789 error -101 [ 2086.577054][T19617] libceph: mon0 (1)[c::]:6789 connect error [ 2086.583164][T19617] libceph: connect (1)[c::]:6789 error -101 [ 2086.583355][T19617] libceph: mon0 (1)[c::]:6789 connect error [ 2086.665808][T25449] ceph: No mds server is up or the cluster is laggy [ 2087.464602][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 2087.539278][T25458] input: syz1 as /devices/virtual/input/input24 [ 2088.698055][T25467] cgroup: Invalid name [ 2089.314934][T25466] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6038'. [ 2098.336476][ T7816] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2098.506605][ T7816] usb 6-1: device descriptor read/64, error -71 [ 2098.759188][ T7816] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2098.817823][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.817893][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.896596][ T7816] usb 6-1: device descriptor read/64, error -71 [ 2099.009432][ T7816] usb usb6-port1: attempt power cycle [ 2099.339710][T25545] Bluetooth: MGMT ver 1.23 [ 2100.176368][T25545] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 2100.179155][T25545] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.6062'. [ 2100.179278][T25545] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.6062'. [ 2100.215543][ T7816] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2100.425444][ T7816] usb 6-1: device not accepting address 42, error -71 [ 2103.141184][T25565] netlink: 'syz.6.6070': attribute type 1 has an invalid length. [ 2103.403958][T14444] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2103.409523][T19760] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2104.473478][T14444] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.473507][T14444] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2104.506927][T14444] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2104.506956][T14444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.506974][T14444] usb 7-1: Product: Ñ™ [ 2104.506987][T14444] usb 7-1: Manufacturer: 拧࿸ï‘‒枮잶㰌îµîŸ ïŽ€â…³ç²¦á¡…䜒烆渳唲锠䚖ᄢ䯽쮵舅薺 [ 2104.507004][T14444] usb 7-1: SerialNumber: syz [ 2104.544087][T19760] usb 10-1: Using ep0 maxpacket: 8 [ 2104.564000][T19760] usb 10-1: too many configurations: 38, using maximum allowed: 8 [ 2104.566529][T19760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2104.566564][T19760] usb 10-1: can't read configurations, error -61 [ 2104.733272][T19760] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2104.893620][T19760] usb 10-1: Using ep0 maxpacket: 8 [ 2104.894557][T19760] usb 10-1: too many configurations: 38, using maximum allowed: 8 [ 2104.896905][T19760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2104.896939][T19760] usb 10-1: can't read configurations, error -61 [ 2104.897346][T19760] usb usb10-port1: attempt power cycle [ 2105.014320][T14444] usb 7-1: 0:2 : does not exist [ 2105.085771][T14444] usb 7-1: USB disconnect, device number 55 [ 2105.181456][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 2105.253066][T19760] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2105.273837][T19760] usb 10-1: Using ep0 maxpacket: 8 [ 2105.274843][T19760] usb 10-1: too many configurations: 38, using maximum allowed: 8 [ 2105.277385][T19760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2105.277419][T19760] usb 10-1: can't read configurations, error -61 [ 2105.427909][T19760] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2105.443937][T19760] usb 10-1: Using ep0 maxpacket: 8 [ 2105.444781][T19760] usb 10-1: too many configurations: 38, using maximum allowed: 8 [ 2105.448589][T19760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2105.448628][T19760] usb 10-1: can't read configurations, error -61 [ 2105.449000][T19760] usb usb10-port1: unable to enumerate USB device [ 2107.266227][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6068'. [ 2113.654804][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6088'. [ 2118.837006][T25654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6096'. [ 2121.661160][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6103'. [ 2123.259861][T25689] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6102'. [ 2123.263151][T25689] 9pnet_fd: Insufficient options for proto=fd [ 2123.600387][T22984] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2126.415093][T25705] tmpfs: Bad value for 'mpol' [ 2126.752499][T25710] openvswitch: netlink: Flow actions attr not present in new flow. [ 2126.996654][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6117'. [ 2127.731699][T22984] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2128.018102][T25721] netlink: 'syz.6.6119': attribute type 21 has an invalid length. [ 2128.018125][T25721] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6119'. [ 2128.018229][T25721] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6119'. [ 2131.283598][T25749] openvswitch: netlink: Flow actions attr not present in new flow. [ 2131.482331][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6129'. [ 2135.259976][T24811] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2135.409680][T24811] usb 10-1: Using ep0 maxpacket: 32 [ 2135.411761][T24811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.411789][T24811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2135.411826][T24811] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2135.411845][T24811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.414979][T24811] usb 10-1: config 0 descriptor?? [ 2137.142739][T24811] ft260 0003:0403:6030.0012: unknown main item tag 0x7 [ 2137.481859][T25789] openvswitch: netlink: Flow actions attr not present in new flow. [ 2137.629238][T24811] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 2137.629632][T24811] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -71 [ 2137.656401][T24811] usb 10-1: USB disconnect, device number 18 [ 2145.128558][T25827] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2150.867657][T25858] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.6163'. [ 2150.867697][T25858] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2156.292595][T25910] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6180'. [ 2159.992201][T25925] ip6tnl1: entered promiscuous mode [ 2160.226185][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.226263][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.484706][T25954] macvlan0: entered promiscuous mode [ 2163.490869][T25954] netlink: 'syz.6.6196': attribute type 1 has an invalid length. [ 2164.745674][T25962] 9p: Bad value for 'wfdno' [ 2165.141326][T25968] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6201'. [ 2166.012675][T25973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6189'. [ 2167.284180][T25983] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6205'. [ 2167.829903][T25998] netlink: 'syz.9.6202': attribute type 10 has an invalid length. [ 2169.076820][T25998] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2169.421096][T26013] openvswitch: netlink: Flow key attr not present in new flow. [ 2170.570636][T26032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6216'. [ 2170.572382][T26032] IPVS: Error connecting to the multicast addr [ 2174.220744][T20961] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 2174.384368][T20961] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2174.384398][T20961] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2174.388634][T20961] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2174.388660][T20961] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2174.388679][T20961] usb 7-1: Product: syz [ 2174.388692][T20961] usb 7-1: Manufacturer: syz [ 2174.388705][T20961] usb 7-1: SerialNumber: syz [ 2174.399913][T20961] usb 7-1: config 0 descriptor?? [ 2174.421703][T20961] usb 7-1: selecting invalid altsetting 0 [ 2174.690131][T26064] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6234'. [ 2175.638645][T26067] binder: 26066:26067 ioctl c0306201 0 returned -14 [ 2175.680720][T26066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.994989][ T31] usb 7-1: USB disconnect, device number 56 [ 2184.280527][T26107] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6246'. [ 2185.616636][T14444] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2185.782822][T14444] usb 7-1: Using ep0 maxpacket: 32 [ 2185.785344][T14444] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2185.788361][T14444] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2185.788386][T14444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.788405][T14444] usb 7-1: Product: syz [ 2185.788417][T14444] usb 7-1: Manufacturer: syz [ 2185.788430][T14444] usb 7-1: SerialNumber: syz [ 2186.884992][T14444] usb 7-1: config 0 descriptor?? [ 2187.000832][T26118] 9p: Bad value for 'rfdno' [ 2187.020958][T26118] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2187.031891][ T37] kauditd_printk_skb: 51 callbacks suppressed [ 2187.031908][ T37] audit: type=1326 audit(6057237811.205:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26112 comm="syz.7.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872e6f749 code=0x7fc00000 [ 2187.297310][T14444] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 2187.297356][T14444] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 2187.450218][T14444] usb 7-1: USB disconnect, device number 57 [ 2187.526636][ T37] audit: type=1326 audit(6057237811.695:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26112 comm="syz.7.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5872e0b829 code=0x7fc00000 [ 2189.330379][ T37] audit: type=1326 audit(6057237813.516:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.330497][ T37] audit: type=1326 audit(6057237813.516:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.330662][ T37] audit: type=1326 audit(6057237813.516:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.331213][ T37] audit: type=1326 audit(6057237813.526:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.357565][ T37] audit: type=1326 audit(6057237813.526:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.357618][ T37] audit: type=1326 audit(6057237813.526:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bedf90 code=0x7ffc0000 [ 2189.365041][ T37] audit: type=1326 audit(6057237813.556:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2189.365187][ T37] audit: type=1326 audit(6057237813.556:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26136 comm="syz.6.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2192.108676][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 2192.108694][ T37] audit: type=1326 audit(6057237816.298:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.108812][ T37] audit: type=1326 audit(6057237816.298:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.108963][ T37] audit: type=1326 audit(6057237816.298:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.109824][ T37] audit: type=1326 audit(6057237816.308:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.110002][ T37] audit: type=1326 audit(6057237816.308:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.110141][ T37] audit: type=1326 audit(6057237816.308:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.110404][ T37] audit: type=1326 audit(6057237816.308:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.110536][ T37] audit: type=1326 audit(6057237816.308:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2192.110711][ T37] audit: type=1326 audit(6057237816.308:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26152 comm="syz.2.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2201.944592][T19617] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 2202.116999][T19617] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2202.117035][T19617] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2202.117059][T19617] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 2202.118518][T19617] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2202.118543][T19617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2202.118560][T19617] usb 7-1: SerialNumber: syz [ 2202.208120][T26205] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2202.224899][T19617] hub 7-1:1.0: bad descriptor, ignoring hub [ 2202.224936][T19617] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2202.225929][T19617] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 2202.242681][T26215] ieee802154 phy0 wpan0: encryption failed: -22 [ 2202.242854][T26215] ieee802154 phy0 wpan0: encryption failed: -22 [ 2202.565798][T26205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.566176][T26205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.603492][ T37] audit: type=1800 audit(6057237826.793:810): pid=26217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6280" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2203.319657][T19617] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 2203.344968][T19617] usb 7-1: USB disconnect, device number 58 [ 2211.283129][T26262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2212.446319][T26269] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:0 [ 2213.752644][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6298'. [ 2216.803007][ T37] audit: type=1326 audit(6057237841.010:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26289 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2216.803056][ T37] audit: type=1326 audit(6057237841.010:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26289 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2216.887411][ T37] audit: type=1326 audit(6057237841.100:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26289 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2216.974331][ T37] audit: type=1326 audit(6057237841.180:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26289 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2216.974757][ T37] audit: type=1326 audit(6057237841.180:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26289 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2221.913307][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.913406][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.274046][ T5918] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2223.421172][ T5918] usb 7-1: device descriptor read/64, error -71 [ 2223.654101][ T5918] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2223.783747][ T5918] usb 7-1: device descriptor read/64, error -71 [ 2223.895243][ T5918] usb usb7-port1: attempt power cycle [ 2224.243471][ T5918] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2225.452988][ T5918] usb 7-1: device descriptor read/8, error -71 [ 2225.525366][T26337] Unsupported ieee802154 address type: 0 [ 2230.062747][T22984] Bluetooth: hci5: unexpected event for opcode 0x201c [ 2230.064164][T26357] 9p: Bad value for 'rfdno' [ 2233.935779][T26378] FAULT_INJECTION: forcing a failure. [ 2233.935779][T26378] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.935816][T26378] CPU: 1 UID: 0 PID: 26378 Comm: syz.7.6326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2233.935841][T26378] Tainted: [L]=SOFTLOCKUP [ 2233.935848][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2233.935859][T26378] Call Trace: [ 2233.935867][T26378] [ 2233.935875][T26378] dump_stack_lvl+0x189/0x250 [ 2233.935904][T26378] ? __pfx____ratelimit+0x10/0x10 [ 2233.935929][T26378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2233.935952][T26378] ? __pfx__printk+0x10/0x10 [ 2233.935977][T26378] ? __pfx___might_resched+0x10/0x10 [ 2233.935997][T26378] ? fs_reclaim_acquire+0x7d/0x100 [ 2233.936019][T26378] should_fail_ex+0x46c/0x600 [ 2233.936046][T26378] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2233.936068][T26378] should_failslab+0xa8/0x100 [ 2233.936087][T26378] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2233.936107][T26378] kmem_cache_alloc_noprof+0x84/0x6c0 [ 2233.936135][T26378] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 2233.936164][T26378] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2233.936199][T26378] mmu_topup_memory_caches+0x21/0x170 [ 2233.936224][T26378] kvm_mmu_load+0x9d/0x2330 [ 2233.936244][T26378] ? kvm_msr_allowed+0x9a/0x490 [ 2233.936266][T26378] ? kvm_msr_allowed+0x3f4/0x490 [ 2233.936287][T26378] ? kvm_msr_allowed+0x9a/0x490 [ 2233.936308][T26378] ? kvm_msr_allowed+0x9a/0x490 [ 2233.936335][T26378] ? kvm_apic_has_interrupt+0x744/0x770 [ 2233.936357][T26378] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 2233.936393][T26378] vcpu_run+0x54d7/0x76b0 [ 2233.936494][T26378] ? __pfx_vcpu_run+0x10/0x10 [ 2233.936523][T26378] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 2233.936558][T26378] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 2233.936577][T26378] ? __lock_acquire+0x6b6/0x2cf0 [ 2233.936610][T26378] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 2233.936629][T26378] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2233.936653][T26378] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2233.936672][T26378] ? lockdep_hardirqs_on+0x98/0x140 [ 2233.936691][T26378] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2233.936709][T26378] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2233.936740][T26378] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2233.936763][T26378] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2233.936781][T26378] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2233.936800][T26378] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2233.936824][T26378] ? rt_write_unlock+0x73/0x230 [ 2233.936851][T26378] ? rt_write_unlock+0x191/0x230 [ 2233.936876][T26378] kvm_vcpu_ioctl+0x99d/0xed0 [ 2233.936906][T26378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2233.936938][T26378] ? __asan_memset+0x22/0x50 [ 2233.936959][T26378] ? smack_file_ioctl+0x305/0x340 [ 2233.936984][T26378] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2233.937016][T26378] ? __fget_files+0x3a6/0x420 [ 2233.937034][T26378] ? __fget_files+0x2a/0x420 [ 2233.937057][T26378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2233.937081][T26378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2233.937104][T26378] __se_sys_ioctl+0xff/0x170 [ 2233.937136][T26378] do_syscall_64+0xfa/0xf80 [ 2233.937155][T26378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2233.937173][T26378] ? clear_bhb_loop+0x60/0xb0 [ 2233.937195][T26378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2233.937213][T26378] RIP: 0033:0x7f5872e6f749 [ 2233.937230][T26378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2233.937246][T26378] RSP: 002b:00007f58710ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2233.937267][T26378] RAX: ffffffffffffffda RBX: 00007f58730c6090 RCX: 00007f5872e6f749 [ 2233.937281][T26378] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2233.937293][T26378] RBP: 00007f58710ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2233.937304][T26378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.937315][T26378] R13: 00007f58730c6128 R14: 00007f58730c6090 R15: 00007ffc18a146d8 [ 2233.937349][T26378] [ 2238.225660][T26403] macvlan0: left promiscuous mode [ 2238.225868][T26403] netlink: 'syz.6.6333': attribute type 1 has an invalid length. [ 2238.225884][T26403] netlink: 'syz.6.6333': attribute type 2 has an invalid length. [ 2251.809833][ T5959] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 2252.001950][ T5959] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 2252.001977][ T5959] usb 7-1: config 0 has no interface number 0 [ 2252.002023][ T5959] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2252.008016][ T5959] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2252.008042][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.008061][ T5959] usb 7-1: Product: syz [ 2252.008074][ T5959] usb 7-1: Manufacturer: syz [ 2252.008086][ T5959] usb 7-1: SerialNumber: syz [ 2252.106573][ T5959] usb 7-1: config 0 descriptor?? [ 2252.312594][ T5959] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 2252.315836][ T5959] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 2252.315930][ T5959] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 2252.316155][ T5959] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 2252.371089][ T5959] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2252.392084][ T5959] usb 7-1: USB disconnect, device number 63 [ 2252.421770][ T5959] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2252.422414][ T5959] keyspan 7-1:0.133: device disconnected [ 2263.292253][T26531] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2263.634399][T26535] net veth1_virt_wifi : renamed from virt_wifi0 [ 2266.624193][T26553] netlink: 'syz.5.6382': attribute type 1 has an invalid length. [ 2266.624215][T26553] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.6382'. [ 2269.402068][ T5806] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2270.209753][T26588] netlink: 'syz.2.6381': attribute type 2 has an invalid length. [ 2270.252313][ T5806] usb 7-1: device descriptor read/64, error -71 [ 2270.441275][T26598] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6393'. [ 2271.259938][ T5806] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2272.403359][ T5806] usb 7-1: device descriptor read/64, error -71 [ 2272.509720][ T5806] usb usb7-port1: attempt power cycle [ 2273.095743][T26622] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6403'. [ 2273.410266][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6404'. [ 2273.483899][T11064] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2273.484171][T11064] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2273.484208][T11064] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2273.484241][T11064] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2273.485250][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6404'. [ 2274.020441][T14444] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2274.145685][T26637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6407'. [ 2274.772616][T14444] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2274.776732][T14444] usb 7-1: config 6 has an invalid interface number: 158 but max is 0 [ 2274.776758][T14444] usb 7-1: config 6 has no interface number 0 [ 2274.776790][T14444] usb 7-1: config 6 interface 158 has no altsetting 0 [ 2274.927110][T14444] usb 7-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 2274.927140][T14444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.927159][T14444] usb 7-1: Product: syz [ 2274.927172][T14444] usb 7-1: Manufacturer: syz [ 2274.927186][T14444] usb 7-1: SerialNumber: syz [ 2275.186237][T14444] rtsx_usb 7-1:6.158: probe with driver rtsx_usb failed with error -22 [ 2275.214212][T14444] usb 7-1: USB disconnect, device number 67 [ 2275.592213][T26645] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6408'. [ 2275.597812][T26645] tipc: Enabling of bearer rejected, failed to enable media [ 2276.988759][T26673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6419'. [ 2277.065197][T26674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6418'. [ 2278.192294][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6422'. [ 2278.255998][T26692] netlink: 'syz.2.6426': attribute type 10 has an invalid length. [ 2278.256145][T26692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6426'. [ 2278.370266][T26692] veth0_vlan: entered allmulticast mode [ 2278.371070][T26692] bridge0: port 3(veth0_vlan) entered blocking state [ 2278.389369][T26692] bridge0: port 3(veth0_vlan) entered disabled state [ 2278.410938][T26692] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2278.734887][T26705] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6428'. [ 2279.316436][T26715] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6430'. [ 2279.955675][T26718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6434'. [ 2283.450172][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.450273][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.929138][T26771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6446'. [ 2285.884995][T26778] FAULT_INJECTION: forcing a failure. [ 2285.884995][T26778] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.885040][T26778] CPU: 1 UID: 0 PID: 26778 Comm: syz.7.6453 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2285.885099][T26778] Tainted: [L]=SOFTLOCKUP [ 2285.885115][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2285.885142][T26778] Call Trace: [ 2285.885150][T26778] [ 2285.885158][T26778] dump_stack_lvl+0x189/0x250 [ 2285.885183][T26778] ? __pfx____ratelimit+0x10/0x10 [ 2285.885206][T26778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2285.885227][T26778] ? __pfx__printk+0x10/0x10 [ 2285.885249][T26778] ? __pfx___might_resched+0x10/0x10 [ 2285.885267][T26778] ? fs_reclaim_acquire+0x7d/0x100 [ 2285.885287][T26778] should_fail_ex+0x46c/0x600 [ 2285.885312][T26778] ? __anon_vma_prepare+0x117/0x4a0 [ 2285.885334][T26778] should_failslab+0xa8/0x100 [ 2285.885353][T26778] ? __anon_vma_prepare+0x117/0x4a0 [ 2285.885372][T26778] kmem_cache_alloc_noprof+0x84/0x6c0 [ 2285.885402][T26778] __anon_vma_prepare+0x117/0x4a0 [ 2285.885424][T26778] ? __pte_alloc+0x15e/0x1a0 [ 2285.885447][T26778] do_pte_missing+0x21b3/0x27a0 [ 2285.885490][T26778] ? handle_mm_fault+0xd1/0x1330 [ 2285.885513][T26778] handle_mm_fault+0xcc1/0x1330 [ 2285.885543][T26778] ? handle_mm_fault+0xd1/0x1330 [ 2285.885568][T26778] ? __pfx_handle_mm_fault+0x10/0x10 [ 2285.885614][T26778] ? lock_mm_and_find_vma+0x9c/0x300 [ 2285.885635][T26778] do_user_addr_fault+0x764/0x1380 [ 2285.885673][T26778] exc_page_fault+0x82/0x100 [ 2285.885694][T26778] asm_exc_page_fault+0x26/0x30 [ 2285.885712][T26778] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 2285.885732][T26778] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 2285.885749][T26778] RSP: 0018:ffffc90005da7d48 EFLAGS: 00050216 [ 2285.885766][T26778] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000020 [ 2285.885779][T26778] RDX: 0000000000000000 RSI: ffffc90005da7e40 RDI: 0000200000000500 [ 2285.885791][T26778] RBP: ffffc90005da7ed0 R08: ffffc90005da7e5f R09: 1ffff92000bb4fcb [ 2285.885805][T26778] R10: dffffc0000000000 R11: fffff52000bb4fcc R12: 0000200000000520 [ 2285.885819][T26778] R13: 00007ffffffff000 R14: ffffc90005da7e40 R15: 0000200000000500 [ 2285.885852][T26778] _copy_to_user+0x8a/0xb0 [ 2285.885873][T26778] __se_sys_msgctl+0x277/0x350 [ 2285.885893][T26778] ? __pfx___se_sys_msgctl+0x10/0x10 [ 2285.885924][T26778] ? ksys_write+0x230/0x260 [ 2285.885957][T26778] ? do_syscall_64+0xbe/0xf80 [ 2285.885979][T26778] do_syscall_64+0xfa/0xf80 [ 2285.885998][T26778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.886016][T26778] ? clear_bhb_loop+0x60/0xb0 [ 2285.886038][T26778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.886056][T26778] RIP: 0033:0x7f5872e6f749 [ 2285.886072][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2285.886088][T26778] RSP: 002b:00007f58710ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 2285.886107][T26778] RAX: ffffffffffffffda RBX: 00007f58730c5fa0 RCX: 00007f5872e6f749 [ 2285.886121][T26778] RDX: 0000200000000500 RSI: 000000000000000c RDI: 0000000000000000 [ 2285.886133][T26778] RBP: 00007f58710ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2285.886144][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.886156][T26778] R13: 00007f58730c6038 R14: 00007f58730c5fa0 R15: 00007ffc18a146d8 [ 2285.886189][T26778] [ 2286.111108][T26781] FAULT_INJECTION: forcing a failure. [ 2286.111108][T26781] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.111142][T26781] CPU: 1 UID: 0 PID: 26781 Comm: syz.7.6455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2286.111167][T26781] Tainted: [L]=SOFTLOCKUP [ 2286.111174][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2286.111184][T26781] Call Trace: [ 2286.111192][T26781] [ 2286.111199][T26781] dump_stack_lvl+0x189/0x250 [ 2286.111225][T26781] ? __pfx____ratelimit+0x10/0x10 [ 2286.111251][T26781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2286.111273][T26781] ? __pfx__printk+0x10/0x10 [ 2286.111296][T26781] ? __pfx___might_resched+0x10/0x10 [ 2286.111319][T26781] should_fail_ex+0x46c/0x600 [ 2286.111346][T26781] should_failslab+0xa8/0x100 [ 2286.111365][T26781] __kmalloc_node_noprof+0xe7/0x820 [ 2286.111389][T26781] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 2286.111417][T26781] __vmalloc_node_range_noprof+0x5df/0x16a0 [ 2286.111477][T26781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2286.111503][T26781] ? __lock_acquire+0x6b6/0x2cf0 [ 2286.111532][T26781] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.111552][T26781] __vmalloc_noprof+0xd2/0x120 [ 2286.111574][T26781] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.111597][T26781] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.111621][T26781] bpf_prog_alloc+0x3c/0x1a0 [ 2286.111643][T26781] bpf_prog_load+0x735/0x1a10 [ 2286.111675][T26781] ? __pfx_bpf_prog_load+0x10/0x10 [ 2286.111715][T26781] ? bpf_lsm_bpf+0x9/0x20 [ 2286.111730][T26781] ? security_bpf+0x7e/0x300 [ 2286.111757][T26781] __sys_bpf+0x507/0x860 [ 2286.111779][T26781] ? __pfx___sys_bpf+0x10/0x10 [ 2286.111795][T26781] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2286.111832][T26781] ? ksys_write+0x230/0x260 [ 2286.111857][T26781] ? __pfx_ksys_write+0x10/0x10 [ 2286.111885][T26781] __x64_sys_bpf+0x7c/0x90 [ 2286.111904][T26781] do_syscall_64+0xfa/0xf80 [ 2286.111922][T26781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.111940][T26781] ? clear_bhb_loop+0x60/0xb0 [ 2286.111961][T26781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.111978][T26781] RIP: 0033:0x7f5872e6f749 [ 2286.111994][T26781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2286.112010][T26781] RSP: 002b:00007f58710ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2286.112030][T26781] RAX: ffffffffffffffda RBX: 00007f58730c5fa0 RCX: 00007f5872e6f749 [ 2286.112043][T26781] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 2286.112055][T26781] RBP: 00007f58710ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2286.112066][T26781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.112077][T26781] R13: 00007f58730c6038 R14: 00007f58730c5fa0 R15: 00007ffc18a146d8 [ 2286.112107][T26781] [ 2286.112116][T26781] syz.7.6455: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2286.112173][T26781] CPU: 1 UID: 0 PID: 26781 Comm: syz.7.6455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2286.112196][T26781] Tainted: [L]=SOFTLOCKUP [ 2286.112203][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2286.112213][T26781] Call Trace: [ 2286.112219][T26781] [ 2286.112226][T26781] dump_stack_lvl+0x189/0x250 [ 2286.112251][T26781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2286.112272][T26781] ? __pfx__printk+0x10/0x10 [ 2286.112289][T26781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2286.112313][T26781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2286.112341][T26781] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2286.112365][T26781] warn_alloc+0x22e/0x3b0 [ 2286.112389][T26781] ? __pfx___might_resched+0x10/0x10 [ 2286.112410][T26781] ? __pfx_warn_alloc+0x10/0x10 [ 2286.112439][T26781] ? rcu_is_watching+0x15/0xb0 [ 2286.112466][T26781] ? trace_kmalloc+0x1f/0xb0 [ 2286.112485][T26781] ? __kmalloc_node_noprof+0x3c5/0x820 [ 2286.112508][T26781] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 2286.112536][T26781] __vmalloc_node_range_noprof+0x97d/0x16a0 [ 2286.112589][T26781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2286.112616][T26781] ? __lock_acquire+0x6b6/0x2cf0 [ 2286.112645][T26781] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.112663][T26781] __vmalloc_noprof+0xd2/0x120 [ 2286.112684][T26781] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.112706][T26781] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2286.112731][T26781] bpf_prog_alloc+0x3c/0x1a0 [ 2286.112753][T26781] bpf_prog_load+0x735/0x1a10 [ 2286.112784][T26781] ? __pfx_bpf_prog_load+0x10/0x10 [ 2286.112826][T26781] ? bpf_lsm_bpf+0x9/0x20 [ 2286.112840][T26781] ? security_bpf+0x7e/0x300 [ 2286.112864][T26781] __sys_bpf+0x507/0x860 [ 2286.112885][T26781] ? __pfx___sys_bpf+0x10/0x10 [ 2286.112902][T26781] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2286.112939][T26781] ? ksys_write+0x230/0x260 [ 2286.112962][T26781] ? __pfx_ksys_write+0x10/0x10 [ 2286.112990][T26781] __x64_sys_bpf+0x7c/0x90 [ 2286.113009][T26781] do_syscall_64+0xfa/0xf80 [ 2286.113027][T26781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.113044][T26781] ? clear_bhb_loop+0x60/0xb0 [ 2286.113065][T26781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.113081][T26781] RIP: 0033:0x7f5872e6f749 [ 2286.113096][T26781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2286.113111][T26781] RSP: 002b:00007f58710ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2286.113129][T26781] RAX: ffffffffffffffda RBX: 00007f58730c5fa0 RCX: 00007f5872e6f749 [ 2286.113142][T26781] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 2286.113154][T26781] RBP: 00007f58710ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2286.113165][T26781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.113176][T26781] R13: 00007f58730c6038 R14: 00007f58730c5fa0 R15: 00007ffc18a146d8 [ 2286.113207][T26781] [ 2286.122589][T26781] Mem-Info: [ 2286.122606][T26781] active_anon:3138 inactive_anon:28418 isolated_anon:0 [ 2286.122606][T26781] active_file:27944 inactive_file:38850 isolated_file:0 [ 2286.122606][T26781] unevictable:17675 dirty:56 writeback:0 [ 2286.122606][T26781] slab_reclaimable:15320 slab_unreclaimable:153937 [ 2286.122606][T26781] mapped:34618 shmem:24173 pagetables:1268 [ 2286.122606][T26781] sec_pagetables:0 bounce:0 [ 2286.122606][T26781] kernel_misc_reclaimable:0 [ 2286.122606][T26781] free:1198858 free_pcp:11732 free_cma:0 [ 2286.122656][T26781] Node 0 active_anon:12552kB inactive_anon:113672kB active_file:111568kB inactive_file:155400kB unevictable:69164kB isolated(anon):0kB isolated(file):0kB mapped:138472kB dirty:224kB writeback:0kB shmem:95156kB kernel_stack:17264kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2286.122697][T26781] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2286.122735][T26781] Node 0 DMA free:15332kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 2286.122790][T26781] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 2286.122821][T26781] Node 0 DMA32 free:880264kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12552kB inactive_anon:113672kB active_file:111568kB inactive_file:155400kB unevictable:69164kB writepending:224kB zspages:0kB present:3129332kB managed:2574552kB mlocked:0kB bounce:0kB free_pcp:46920kB local_pcp:44208kB free_cma:0kB [ 2286.122876][T26781] lowmem_reserve[]: 0 0 1 1 1 [ 2286.122904][T26781] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2286.122954][T26781] lowmem_reserve[]: 0 0 0 0 0 [ 2286.122982][T26781] Node 1 Normal free:3899836kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2286.123035][T26781] lowmem_reserve[]: 0 0 0 0 0 [ 2286.123064][T26781] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15332kB [ 2286.123187][T26781] Node 0 DMA32: 1858*4kB (UM) 2026*8kB (UME) 1618*16kB (UM) 209*32kB (UME) 429*64kB (UME) 449*128kB (UM) 419*256kB (UME) 290*512kB (UME) 144*1024kB (UME) 54*2048kB (UME) 55*4096kB (M) = 880216kB [ 2286.123326][T26781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2286.123412][T26781] Node 1 Normal: 201*4kB (U) 45*8kB (UME) 45*16kB (UME) 231*32kB (UME) 112*64kB (UME) 31*128kB (UME) 14*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3899836kB [ 2286.123745][T26781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.123761][T26781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2286.123776][T26781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.123791][T26781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2286.123805][T26781] 107871 total pagecache pages [ 2286.123813][T26781] 0 pages in swap cache [ 2286.123820][T26781] Free swap = 124996kB [ 2286.123828][T26781] Total swap = 124996kB [ 2286.123836][T26781] 2097051 pages RAM [ 2286.123842][T26781] 0 pages HighMem/MovableOnly [ 2286.123849][T26781] 421387 pages reserved [ 2286.123856][T26781] 0 pages cma reserved [ 2286.549157][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2286.549187][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2287.003240][T26789] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6458'. [ 2287.003304][T26789] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6458'. [ 2288.418615][ T37] audit: type=1326 audit(6057237912.656:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26799 comm="syz.9.6462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x0 [ 2289.753180][T26818] fuse: Unknown parameter 'groÏd_id' [ 2291.741424][T26821] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6466'. [ 2292.142608][T26833] 9p: Bad value for 'wfdno' [ 2304.904696][T26899] ptrace attach of "./syz-executor exec"[24382] was attempted by "  ./file0 maps ÿ \x07  \x07 [ 2304.988049][T26900] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 2305.362279][T26903] netlink: 'syz.9.6494': attribute type 12 has an invalid length. [ 2305.362293][T26903] netlink: 'syz.9.6494': attribute type 29 has an invalid length. [ 2305.362300][T26903] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6494'. [ 2306.026485][T26917] bond10 (unregistering): Released all slaves [ 2310.471940][T26960] loop8: detected capacity change from 0 to 8 [ 2310.494528][T26960] Dev loop8: unable to read RDB block 8 [ 2310.494578][T26960] loop8: unable to read partition table [ 2310.494810][T26960] loop8: partition table beyond EOD, truncated [ 2310.494827][T26960] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2312.170628][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6516'. [ 2312.776891][T26983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6519'. [ 2314.314522][T27011] overlay: Unknown parameter 'fsname' [ 2314.369485][ T37] audit: type=1326 audit(6057237938.629:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27003 comm="syz.9.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2314.369814][ T37] audit: type=1326 audit(6057237938.629:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27003 comm="syz.9.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2315.792428][T26124] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2316.007539][T26124] usb 6-1: Using ep0 maxpacket: 8 [ 2316.025854][T26124] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2316.025883][T26124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.025902][T26124] usb 6-1: Product: syz [ 2316.025915][T26124] usb 6-1: Manufacturer: syz [ 2316.025929][T26124] usb 6-1: SerialNumber: syz [ 2316.079407][T26124] usb 6-1: config 0 descriptor?? [ 2317.208472][T26124] gspca_main: se401-2.14.0 probing 047d:5003 [ 2317.389560][T27026] geneve2: entered promiscuous mode [ 2317.411012][ T37] audit: type=1326 audit(6057237941.660:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2317.411539][ T37] audit: type=1326 audit(6057237941.670:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bedf90 code=0x7ffc0000 [ 2317.414140][ T37] audit: type=1326 audit(6057237941.670:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2317.414576][ T37] audit: type=1326 audit(6057237941.670:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2317.414844][ T37] audit: type=1326 audit(6057237941.670:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2317.415276][ T37] audit: type=1326 audit(6057237941.670:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2317.419134][T27030] trusted_key: encrypted_key: keylen parameter is missing [ 2317.530432][T27024] 9p: Bad value for 'rfdno' [ 2319.056110][ T37] audit: type=1326 audit(6057237941.670:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2319.056432][ T37] audit: type=1326 audit(6057237943.311:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27021 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bedf90 code=0x7ffc0000 [ 2321.765987][T26124] gspca_se401: read req failed req 0x06 error -19 [ 2321.834761][T26124] usb 6-1: USB disconnect, device number 44 [ 2323.299991][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 2323.300010][ T37] audit: type=1326 audit(6057237947.553:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.300477][ T37] audit: type=1326 audit(6057237947.553:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f128d9adf90 code=0x7ffc0000 [ 2323.300974][ T37] audit: type=1326 audit(6057237947.553:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.301361][ T37] audit: type=1326 audit(6057237947.553:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.301512][ T37] audit: type=1326 audit(6057237947.553:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.302457][ T37] audit: type=1326 audit(6057237947.553:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.302846][ T37] audit: type=1326 audit(6057237947.553:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.362741][T27049] 9p: Bad value for 'rfdno' [ 2323.475294][ T37] audit: type=1326 audit(6057237947.733:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2323.478473][ T37] audit: type=1326 audit(6057237947.733:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27048 comm="syz.9.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2331.690938][ T37] audit: type=1326 audit(6057237955.958:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27112 comm="syz.2.6559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x0 [ 2331.718146][T27121] IPVS: length: 161 != 24 [ 2331.839124][T27121] netlink: 'syz.5.6560': attribute type 1 has an invalid length. [ 2333.135353][T27126] fuse: Bad value for 'fd' [ 2333.332362][T27125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2333.350241][T27125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2333.350660][T27125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2333.350931][T27125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2333.351233][T27125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2333.498765][T27135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2333.499244][T27135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2333.729401][ T5918] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2333.868399][ T5918] usb 7-1: device descriptor read/64, error -71 [ 2334.118193][ T5918] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2334.248180][ T5918] usb 7-1: device descriptor read/64, error -71 [ 2334.369352][ T5918] usb usb7-port1: attempt power cycle [ 2335.637040][T22984] Bluetooth: hci5: command 0x0405 tx timeout [ 2335.637155][T22984] Bluetooth: hci0: command 0x0406 tx timeout [ 2335.637183][T22984] Bluetooth: hci3: command 0x0406 tx timeout [ 2335.637204][T22984] Bluetooth: hci1: command 0x0c1a tx timeout [ 2335.637234][T22984] Bluetooth: hci4: command 0x0c1a tx timeout [ 2335.647498][ T5918] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2335.667901][ T5918] usb 7-1: device descriptor read/8, error -71 [ 2335.937144][ T5918] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2335.958313][ T5918] usb 7-1: device descriptor read/8, error -71 [ 2335.991948][T27160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6574'. [ 2336.080075][ T5918] usb usb7-port1: unable to enumerate USB device [ 2341.342938][T27191] MTD: Couldn't look up 'mountinfo': -2 [ 2342.563017][T19617] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2342.864099][T19617] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2342.867393][T19617] usb 7-1: config 3 has an invalid interface number: 8 but max is 3 [ 2342.867418][T19617] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.867436][T19617] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 2342.867456][T19617] usb 7-1: config 3 has no interface number 0 [ 2342.867502][T19617] usb 7-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 2342.867528][T19617] usb 7-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 2342.867565][T19617] usb 7-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2342.867589][T19617] usb 7-1: config 3 interface 8 has no altsetting 0 [ 2342.873771][T19617] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 2342.873799][T19617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.873819][T19617] usb 7-1: Product: syz [ 2342.873832][T19617] usb 7-1: Manufacturer: syz [ 2342.873845][T19617] usb 7-1: SerialNumber: syz [ 2344.131146][T27202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2344.131590][T27202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2344.451447][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.451496][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.144506][T19617] appledisplay 7-1:3.8: Error while getting initial brightness: -71 [ 2345.155567][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 2345.186269][T19617] appledisplay 7-1:3.8: probe with driver appledisplay failed with error -71 [ 2345.226130][T19617] usb 7-1: USB disconnect, device number 72 [ 2345.268790][ T37] audit: type=1326 audit(6057237969.536:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.269837][ T37] audit: type=1326 audit(6057237969.536:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.270188][ T37] audit: type=1326 audit(6057237969.536:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.270598][ T37] audit: type=1326 audit(6057237969.536:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.270741][ T37] audit: type=1326 audit(6057237969.536:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.311257][ T37] audit: type=1326 audit(6057237969.576:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.406034][ T37] audit: type=1326 audit(6057237969.676:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128d9e2005 code=0x7ffc0000 [ 2345.440884][ T37] audit: type=1326 audit(6057237969.706:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.441352][ T37] audit: type=1326 audit(6057237969.716:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27204 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.556412][ T37] audit: type=1326 audit(6057237969.826:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.9.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2345.856396][T27219] FAULT_INJECTION: forcing a failure. [ 2345.856396][T27219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.856458][T27219] CPU: 1 UID: 0 PID: 27219 Comm: syz.5.6581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2345.856485][T27219] Tainted: [L]=SOFTLOCKUP [ 2345.856492][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2345.856504][T27219] Call Trace: [ 2345.856512][T27219] [ 2345.856521][T27219] dump_stack_lvl+0x189/0x250 [ 2345.856549][T27219] ? __pfx____ratelimit+0x10/0x10 [ 2345.856575][T27219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2345.856598][T27219] ? __pfx__printk+0x10/0x10 [ 2345.856633][T27219] should_fail_ex+0x46c/0x600 [ 2345.856663][T27219] _copy_to_user+0x31/0xb0 [ 2345.856684][T27219] simple_read_from_buffer+0xe1/0x170 [ 2345.856709][T27219] proc_fail_nth_read+0x1b6/0x220 [ 2345.856737][T27219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.856765][T27219] ? rw_verify_area+0x2ac/0x4e0 [ 2345.856787][T27219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.856813][T27219] vfs_read+0x206/0xa30 [ 2345.856844][T27219] ? __pfx_vfs_read+0x10/0x10 [ 2345.856864][T27219] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 2345.856897][T27219] ? mutex_lock_nested+0x154/0x1d0 [ 2345.856917][T27219] ? fdget_pos+0x253/0x320 [ 2345.856946][T27219] ksys_read+0x14b/0x260 [ 2345.856972][T27219] ? __pfx_ksys_read+0x10/0x10 [ 2345.856999][T27219] ? do_syscall_64+0xbe/0xf80 [ 2345.857021][T27219] do_syscall_64+0xfa/0xf80 [ 2345.857038][T27219] ? rcu_is_watching+0x15/0xb0 [ 2345.857055][T27219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.857074][T27219] ? clear_bhb_loop+0x60/0xb0 [ 2345.857101][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.857119][T27219] RIP: 0033:0x7fd8aee6e15c [ 2345.857136][T27219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2345.857152][T27219] RSP: 002b:00007fd8ad094030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2345.857172][T27219] RAX: ffffffffffffffda RBX: 00007fd8af0c6180 RCX: 00007fd8aee6e15c [ 2345.857186][T27219] RDX: 000000000000000f RSI: 00007fd8ad0940a0 RDI: 0000000000000007 [ 2345.857198][T27219] RBP: 00007fd8ad094090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.857210][T27219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.857221][T27219] R13: 00007fd8af0c6218 R14: 00007fd8af0c6180 R15: 00007ffeb80619b8 [ 2345.857255][T27219] [ 2347.945857][T27243] : Can't lookup blockdev [ 2350.295178][T27253] binder: 27249:27253 ioctl 8028640c 200000000200 returned -22 [ 2358.689682][T27317] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2362.360996][T24504] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2362.534363][T24504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2362.534396][T24504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2362.534434][T24504] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2362.534454][T24504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.603512][T24504] usb 6-1: config 0 descriptor?? [ 2363.166034][T24504] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 2363.172500][T24504] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 2363.172790][T24504] hid-thrustmaster 0003:044F:B65D.0013: Wrong number of endpoints? [ 2365.042195][ C0] hid-thrustmaster 0003:044F:B65D.0013: URB to get model id failed with error -71 [ 2365.050589][T24504] usb 6-1: USB disconnect, device number 45 [ 2368.187269][T25726] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2368.356932][T25726] usb 7-1: Using ep0 maxpacket: 16 [ 2368.362237][T25726] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2368.362265][T25726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.362283][T25726] usb 7-1: Product: syz [ 2368.362297][T25726] usb 7-1: Manufacturer: syz [ 2368.362310][T25726] usb 7-1: SerialNumber: syz [ 2368.403545][T25726] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2368.403569][T25726] r8152-cfgselector 7-1: config 0 descriptor?? [ 2368.491870][T27398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6632'. [ 2368.492579][T27398] IPv6: Can't replace route, no match found [ 2368.607709][T25726] r8152-cfgselector 7-1: Needed 2 retries to read version [ 2368.607761][T25726] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2368.622110][T25726] r8152-cfgselector 7-1: bad CDC descriptors [ 2368.902907][ T6099] r8152-cfgselector 7-1: USB disconnect, device number 73 [ 2372.148533][T27427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6653'. [ 2373.600930][T27446] netlink: 79 bytes leftover after parsing attributes in process `syz.6.6656'. [ 2378.790197][T27475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6661'. [ 2379.062156][T27480] FAULT_INJECTION: forcing a failure. [ 2379.062156][T27480] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.062192][T27480] CPU: 1 UID: 0 PID: 27480 Comm: syz.5.6670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2379.062218][T27480] Tainted: [L]=SOFTLOCKUP [ 2379.062225][T27480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2379.062237][T27480] Call Trace: [ 2379.062244][T27480] [ 2379.062253][T27480] dump_stack_lvl+0x189/0x250 [ 2379.062279][T27480] ? __pfx____ratelimit+0x10/0x10 [ 2379.062304][T27480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2379.062326][T27480] ? __pfx__printk+0x10/0x10 [ 2379.062350][T27480] ? __pfx___might_resched+0x10/0x10 [ 2379.062373][T27480] should_fail_ex+0x46c/0x600 [ 2379.062401][T27480] ? __alloc_skb+0x255/0x430 [ 2379.062419][T27480] should_failslab+0xa8/0x100 [ 2379.062438][T27480] ? __alloc_skb+0x255/0x430 [ 2379.062454][T27480] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2379.062486][T27480] __alloc_skb+0x255/0x430 [ 2379.062508][T27480] ? __pfx___alloc_skb+0x10/0x10 [ 2379.062530][T27480] ? netlink_autobind+0xdb/0x300 [ 2379.062551][T27480] ? netlink_autobind+0x2c2/0x300 [ 2379.062577][T27480] netlink_sendmsg+0x5c6/0xb30 [ 2379.062609][T27480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2379.062640][T27480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2379.062662][T27480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2379.062685][T27480] __sock_sendmsg+0x21c/0x270 [ 2379.062713][T27480] ____sys_sendmsg+0x534/0x810 [ 2379.062740][T27480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2379.062771][T27480] ? import_iovec+0x74/0xa0 [ 2379.062792][T27480] ___sys_sendmsg+0x21f/0x2a0 [ 2379.062817][T27480] ? __pfx____sys_sendmsg+0x10/0x10 [ 2379.062875][T27480] ? __fget_files+0x2a/0x420 [ 2379.062893][T27480] ? __fget_files+0x3a6/0x420 [ 2379.062923][T27480] __sys_sendmmsg+0x22d/0x430 [ 2379.062950][T27480] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2379.062982][T27480] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2379.063021][T27480] ? ksys_write+0x230/0x260 [ 2379.063046][T27480] ? __pfx_ksys_write+0x10/0x10 [ 2379.063074][T27480] __x64_sys_sendmmsg+0xa0/0xc0 [ 2379.063098][T27480] do_syscall_64+0xfa/0xf80 [ 2379.063122][T27480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.063141][T27480] ? clear_bhb_loop+0x60/0xb0 [ 2379.063162][T27480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.063179][T27480] RIP: 0033:0x7fd8aee6f749 [ 2379.063197][T27480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2379.063213][T27480] RSP: 002b:00007fd8ad0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2379.063233][T27480] RAX: ffffffffffffffda RBX: 00007fd8af0c5fa0 RCX: 00007fd8aee6f749 [ 2379.063247][T27480] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 2379.063260][T27480] RBP: 00007fd8ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2379.063272][T27480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2379.063283][T27480] R13: 00007fd8af0c6038 R14: 00007fd8af0c5fa0 R15: 00007ffeb80619b8 [ 2379.063315][T27480] [ 2379.800028][T27497] netlink: 'syz.2.6676': attribute type 1 has an invalid length. [ 2379.800050][T27497] netlink: 2096 bytes leftover after parsing attributes in process `syz.2.6676'. [ 2379.800078][T27497] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6676'. [ 2380.165278][T27506] binder: 27501:27506 ioctl c02064a5 200000000240 returned -22 [ 2380.165778][T27506] binder: 27501:27506 ioctl 40044591 0 returned -22 [ 2383.325253][T27537] input: syz0 as /devices/virtual/input/input26 [ 2383.367350][T27537] netlink: 6912 bytes leftover after parsing attributes in process `syz.5.6685'. [ 2383.385708][T27537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2387.341819][T27566] FAULT_INJECTION: forcing a failure. [ 2387.341819][T27566] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.341854][T27566] CPU: 0 UID: 0 PID: 27566 Comm: syz.6.6696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2387.341880][T27566] Tainted: [L]=SOFTLOCKUP [ 2387.341887][T27566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2387.341898][T27566] Call Trace: [ 2387.341906][T27566] [ 2387.341915][T27566] dump_stack_lvl+0x189/0x250 [ 2387.341942][T27566] ? __pfx____ratelimit+0x10/0x10 [ 2387.341967][T27566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2387.341990][T27566] ? __pfx__printk+0x10/0x10 [ 2387.342015][T27566] ? __pfx___might_resched+0x10/0x10 [ 2387.342038][T27566] should_fail_ex+0x46c/0x600 [ 2387.342065][T27566] ? __alloc_skb+0x255/0x430 [ 2387.342084][T27566] should_failslab+0xa8/0x100 [ 2387.342103][T27566] ? __alloc_skb+0x255/0x430 [ 2387.342120][T27566] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2387.342152][T27566] __alloc_skb+0x255/0x430 [ 2387.342174][T27566] ? __pfx___alloc_skb+0x10/0x10 [ 2387.342193][T27566] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 2387.342227][T27566] netlink_sendmsg+0x5c6/0xb30 [ 2387.342261][T27566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2387.342291][T27566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2387.342322][T27566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2387.342345][T27566] __sock_sendmsg+0x21c/0x270 [ 2387.342373][T27566] ____sys_sendmsg+0x508/0x810 [ 2387.342400][T27566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2387.342432][T27566] ? import_iovec+0x74/0xa0 [ 2387.342453][T27566] ___sys_sendmsg+0x21f/0x2a0 [ 2387.342477][T27566] ? __pfx____sys_sendmsg+0x10/0x10 [ 2387.342536][T27566] ? __fget_files+0x2a/0x420 [ 2387.342554][T27566] ? __fget_files+0x3a6/0x420 [ 2387.342583][T27566] __x64_sys_sendmsg+0x1a1/0x260 [ 2387.342607][T27566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2387.342644][T27566] ? __pfx_ksys_write+0x10/0x10 [ 2387.342672][T27566] ? do_syscall_64+0xbe/0xf80 [ 2387.342695][T27566] do_syscall_64+0xfa/0xf80 [ 2387.342713][T27566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.342731][T27566] ? clear_bhb_loop+0x60/0xb0 [ 2387.342753][T27566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.342771][T27566] RIP: 0033:0x7f9394bef749 [ 2387.342787][T27566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2387.342804][T27566] RSP: 002b:00007f9392e4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2387.342823][T27566] RAX: ffffffffffffffda RBX: 00007f9394e45fa0 RCX: 00007f9394bef749 [ 2387.342837][T27566] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000015 [ 2387.342850][T27566] RBP: 00007f9392e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.342861][T27566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.342873][T27566] R13: 00007f9394e46038 R14: 00007f9394e45fa0 R15: 00007fffef0f8308 [ 2387.342904][T27566] [ 2388.374012][T27569] 9p: Bad value for 'rfdno' [ 2388.576012][T27574] Device name cannot be null; rc = [-22] [ 2391.964381][T27597] FAULT_INJECTION: forcing a failure. [ 2391.964381][T27597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2391.964417][T27597] CPU: 0 UID: 0 PID: 27597 Comm: syz.7.6707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2391.964443][T27597] Tainted: [L]=SOFTLOCKUP [ 2391.964450][T27597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2391.964460][T27597] Call Trace: [ 2391.964469][T27597] [ 2391.964477][T27597] dump_stack_lvl+0x189/0x250 [ 2391.964504][T27597] ? __pfx____ratelimit+0x10/0x10 [ 2391.964530][T27597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2391.964552][T27597] ? __pfx__printk+0x10/0x10 [ 2391.964571][T27597] ? __might_fault+0xb0/0x130 [ 2391.964606][T27597] should_fail_ex+0x46c/0x600 [ 2391.964635][T27597] _copy_from_user+0x2d/0xb0 [ 2391.964654][T27597] ___sys_recvmsg+0x12e/0x510 [ 2391.964684][T27597] ? __pfx____sys_recvmsg+0x10/0x10 [ 2391.964738][T27597] ? __might_fault+0xb0/0x130 [ 2391.964766][T27597] do_recvmmsg+0x30d/0x770 [ 2391.964797][T27597] ? __pfx_do_recvmmsg+0x10/0x10 [ 2391.964817][T27597] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2391.964836][T27597] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2391.964865][T27597] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2391.964902][T27597] __x64_sys_recvmmsg+0x190/0x240 [ 2391.964928][T27597] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2391.964955][T27597] ? do_syscall_64+0xbe/0xf80 [ 2391.964978][T27597] do_syscall_64+0xfa/0xf80 [ 2391.964996][T27597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.965014][T27597] ? clear_bhb_loop+0x60/0xb0 [ 2391.965035][T27597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.965053][T27597] RIP: 0033:0x7f5872e6f749 [ 2391.965069][T27597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2391.965084][T27597] RSP: 002b:00007f58710ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2391.965104][T27597] RAX: ffffffffffffffda RBX: 00007f58730c5fa0 RCX: 00007f5872e6f749 [ 2391.965123][T27597] RDX: 0000000000000002 RSI: 0000200000001240 RDI: 0000000000000003 [ 2391.965135][T27597] RBP: 00007f58710ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2391.965147][T27597] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2391.965158][T27597] R13: 00007f58730c6038 R14: 00007f58730c5fa0 R15: 00007ffc18a146d8 [ 2391.965190][T27597] [ 2392.392250][T27599] No control pipe specified [ 2392.465776][T27600] erspan0: entered promiscuous mode [ 2392.466088][T27600] macsec1: entered promiscuous mode [ 2392.524066][T27600] erspan0: left promiscuous mode [ 2394.156462][T27625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6717'. [ 2395.836945][ T5812] Bluetooth: hci0: Malformed Event: 0x2f [ 2395.856726][ T5812] Bluetooth: hci0: unexpected event for opcode 0x080b [ 2396.429789][T27632] No control pipe specified [ 2397.019224][T24811] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2397.278904][T24811] usb 7-1: Using ep0 maxpacket: 32 [ 2397.281203][T24811] usb 7-1: config 0 has an invalid interface number: 218 but max is 0 [ 2397.281227][T24811] usb 7-1: config 0 has no interface number 0 [ 2397.284867][T24811] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 2397.284893][T24811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.284912][T24811] usb 7-1: Product: syz [ 2397.284925][T24811] usb 7-1: Manufacturer: syz [ 2397.284938][T24811] usb 7-1: SerialNumber: syz [ 2397.291068][T24811] usb 7-1: config 0 descriptor?? [ 2397.689144][T24811] usb 7-1: USB disconnect, device number 74 [ 2400.303806][T27667] mkiss: ax0: crc mode is auto. [ 2400.366517][ T37] kauditd_printk_skb: 172 callbacks suppressed [ 2400.366534][ T37] audit: type=1326 audit(6057238024.670:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.366584][ T37] audit: type=1326 audit(6057238024.670:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.417267][ T37] audit: type=1326 audit(6057238024.680:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.419965][ T37] audit: type=1326 audit(6057238024.730:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.420012][ T37] audit: type=1326 audit(6057238024.730:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.485525][ T37] audit: type=1326 audit(6057238024.790:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.485795][ T37] audit: type=1326 audit(6057238024.790:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.486203][ T37] audit: type=1326 audit(6057238024.790:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.486690][ T37] audit: type=1326 audit(6057238024.790:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2400.487430][ T37] audit: type=1326 audit(6057238024.800:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27670 comm="syz.6.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9394bef749 code=0x7ffc0000 [ 2402.542777][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6739'. [ 2402.888287][T27694] No control pipe specified [ 2403.418798][T27701] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 2403.451631][T27700] IPVS: stopping master sync thread 27701 ... [ 2403.714230][T27710] netlink: 6912 bytes leftover after parsing attributes in process `syz.2.6744'. [ 2403.714280][T27710] openvswitch: netlink: Key type 147 is out of range max 32 [ 2403.880919][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6746'. [ 2403.948479][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6746'. [ 2404.672125][T27725] FAULT_INJECTION: forcing a failure. [ 2404.672125][T27725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2404.672183][T27725] CPU: 0 UID: 0 PID: 27725 Comm: syz.5.6748 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2404.672210][T27725] Tainted: [L]=SOFTLOCKUP [ 2404.672217][T27725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2404.672227][T27725] Call Trace: [ 2404.672234][T27725] [ 2404.672239][T27725] dump_stack_lvl+0x189/0x250 [ 2404.672257][T27725] ? __pfx____ratelimit+0x10/0x10 [ 2404.672271][T27725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2404.672284][T27725] ? __pfx__printk+0x10/0x10 [ 2404.672303][T27725] should_fail_ex+0x46c/0x600 [ 2404.672319][T27725] _copy_to_user+0x31/0xb0 [ 2404.672330][T27725] simple_read_from_buffer+0xe1/0x170 [ 2404.672344][T27725] proc_fail_nth_read+0x1b6/0x220 [ 2404.672361][T27725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2404.672372][T27725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2404.672385][T27725] ? vfs_read+0x1eb/0xa30 [ 2404.672399][T27725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2404.672413][T27725] vfs_read+0x206/0xa30 [ 2404.672424][T27725] ? preempt_schedule_thunk+0x16/0x30 [ 2404.672440][T27725] ? __pfx_vfs_read+0x10/0x10 [ 2404.672450][T27725] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 2404.672468][T27725] ? mutex_lock_nested+0x154/0x1d0 [ 2404.672479][T27725] ? fdget_pos+0x253/0x320 [ 2404.672494][T27725] ksys_read+0x14b/0x260 [ 2404.672508][T27725] ? __pfx_ksys_read+0x10/0x10 [ 2404.672526][T27725] do_syscall_64+0xfa/0xf80 [ 2404.672537][T27725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.672548][T27725] ? clear_bhb_loop+0x60/0xb0 [ 2404.672560][T27725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.672569][T27725] RIP: 0033:0x7fd8aee6e15c [ 2404.672580][T27725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2404.672589][T27725] RSP: 002b:00007fd8ad0b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2404.672601][T27725] RAX: ffffffffffffffda RBX: 00007fd8af0c6090 RCX: 00007fd8aee6e15c [ 2404.672608][T27725] RDX: 000000000000000f RSI: 00007fd8ad0b50a0 RDI: 0000000000000007 [ 2404.672615][T27725] RBP: 00007fd8ad0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2404.672621][T27725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2404.672627][T27725] R13: 00007fd8af0c6128 R14: 00007fd8af0c6090 R15: 00007ffeb80619b8 [ 2404.672645][T27725] [ 2405.867178][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.867251][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2410.782358][T27754] autofs: Bad value for 'fd' [ 2412.643424][T27778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2415.180307][ T37] kauditd_printk_skb: 405 callbacks suppressed [ 2415.180324][ T37] audit: type=1326 audit(6057238039.489:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27777 comm="syz.2.6767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2415.180563][ T37] audit: type=1326 audit(6057238039.499:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27777 comm="syz.2.6767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfc58f749 code=0x7ffc0000 [ 2416.057525][T27802] Invalid logical block size (8192) [ 2424.021953][T27847] syz_tun: entered promiscuous mode [ 2424.089448][T27847] bond0: (slave syz_tun): Releasing backup interface [ 2425.164742][T27847] team0: Port device syz_tun added [ 2425.384066][T27862] tipc: Started in network mode [ 2425.384097][T27862] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 2425.384376][T27862] tipc: Enabled bearer , priority 10 [ 2426.478573][T24811] tipc: Node number set to 10136234 [ 2426.757004][T27869] netlink: 'syz.5.6796': attribute type 18 has an invalid length. [ 2427.993301][T27881] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2431.753709][T27917] netlink: 'syz.6.6810': attribute type 1 has an invalid length. [ 2431.856119][T27917] bond8: entered promiscuous mode [ 2431.874624][T27917] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2432.020606][T27919] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2432.038816][T27919] bond8: (slave bond9): making interface the new active one [ 2432.041026][T27919] bond9: entered promiscuous mode [ 2432.043791][T27919] bond8: (slave bond9): Enslaving as an active interface with an up link [ 2434.385895][T27157] Bluetooth: hci0: command 0x0406 tx timeout [ 2434.389083][ T5812] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 2436.708663][ T37] audit: type=1326 audit(6057238061.033:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.709024][ T37] audit: type=1326 audit(6057238061.033:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.710914][ T37] audit: type=1326 audit(6057238061.033:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.711192][ T37] audit: type=1326 audit(6057238061.033:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.711446][ T37] audit: type=1326 audit(6057238061.033:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.711792][ T37] audit: type=1326 audit(6057238061.033:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.712266][ T37] audit: type=1326 audit(6057238061.033:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2436.712905][ T37] audit: type=1326 audit(6057238061.033:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5872e6df90 code=0x7ffc0000 [ 2437.054317][ T37] audit: type=1326 audit(6057238061.033:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5872e70f77 code=0x7ffc0000 [ 2437.054653][ T37] audit: type=1326 audit(6057238061.383:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27942 comm="syz.7.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5872e6f749 code=0x7ffc0000 [ 2445.163738][T28001] lo speed is unknown, defaulting to 1000 [ 2445.163881][T28001] lo speed is unknown, defaulting to 1000 [ 2445.197261][T28001] lo speed is unknown, defaulting to 1000 [ 2445.241856][T28001] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2445.383316][T28001] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2445.487985][T28001] lo speed is unknown, defaulting to 1000 [ 2445.506796][T28001] lo speed is unknown, defaulting to 1000 [ 2445.523035][T28001] lo speed is unknown, defaulting to 1000 [ 2445.557049][T28001] lo speed is unknown, defaulting to 1000 [ 2445.581251][T28001] lo speed is unknown, defaulting to 1000 [ 2445.582857][T28001] lo speed is unknown, defaulting to 1000 [ 2445.586258][T28001] lo speed is unknown, defaulting to 1000 [ 2445.587993][T28001] lo speed is unknown, defaulting to 1000 [ 2445.610577][T28001] lo speed is unknown, defaulting to 1000 [ 2445.614204][T28001] lo speed is unknown, defaulting to 1000 [ 2446.329026][T28022] tipc: Enabling of bearer rejected, failed to enable media [ 2446.482987][T28034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6841'. [ 2446.652230][T28043] netlink: 'syz.7.6847': attribute type 8 has an invalid length. [ 2446.687837][T28043] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6847'. [ 2446.749489][T20961] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 2446.877110][T28052] sg_write: data in/out 83886044/28 bytes for SCSI command 0x1-- guessing data in; [ 2446.877110][T28052] program syz.5.6851 not setting count and/or reply_len properly [ 2446.917745][T20961] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 2446.917773][T20961] usb 7-1: config 8 has an invalid descriptor of length 166, skipping remainder of the config [ 2446.917791][T20961] usb 7-1: config 8 has no interface number 0 [ 2446.917833][T20961] usb 7-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2446.921051][T20961] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2446.921079][T20961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.921097][T20961] usb 7-1: Product: syz [ 2446.921110][T20961] usb 7-1: Manufacturer: syz [ 2446.921123][T20961] usb 7-1: SerialNumber: syz [ 2447.084105][T28056] FAULT_INJECTION: forcing a failure. [ 2447.084105][T28056] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.084143][T28056] CPU: 1 UID: 0 PID: 28056 Comm: syz.5.6853 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2447.084169][T28056] Tainted: [L]=SOFTLOCKUP [ 2447.084176][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2447.084188][T28056] Call Trace: [ 2447.084195][T28056] [ 2447.084204][T28056] dump_stack_lvl+0x189/0x250 [ 2447.084231][T28056] ? __pfx____ratelimit+0x10/0x10 [ 2447.084258][T28056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2447.084280][T28056] ? __pfx__printk+0x10/0x10 [ 2447.084305][T28056] ? __pfx___might_resched+0x10/0x10 [ 2447.084329][T28056] should_fail_ex+0x46c/0x600 [ 2447.084357][T28056] should_failslab+0xa8/0x100 [ 2447.084378][T28056] __kmalloc_noprof+0xe0/0x7e0 [ 2447.084400][T28056] ? kfree+0x4d/0x900 [ 2447.084418][T28056] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2447.084443][T28056] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2447.084463][T28056] ? tomoyo_domain+0xd9/0x130 [ 2447.084488][T28056] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2447.084511][T28056] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2447.084538][T28056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2447.084566][T28056] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2447.084585][T28056] ? lockdep_hardirqs_on+0x98/0x140 [ 2447.084633][T28056] ? __fget_files+0x2a/0x420 [ 2447.084657][T28056] ? __fget_files+0x3a6/0x420 [ 2447.084673][T28056] ? __fget_files+0x2a/0x420 [ 2447.084696][T28056] security_file_ioctl+0xcb/0x2d0 [ 2447.084722][T28056] __se_sys_ioctl+0x47/0x170 [ 2447.084748][T28056] do_syscall_64+0xfa/0xf80 [ 2447.084767][T28056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2447.084786][T28056] ? clear_bhb_loop+0x60/0xb0 [ 2447.084808][T28056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2447.084826][T28056] RIP: 0033:0x7fd8aee6f749 [ 2447.084843][T28056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2447.084859][T28056] RSP: 002b:00007fd8ad0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2447.084879][T28056] RAX: ffffffffffffffda RBX: 00007fd8af0c5fa0 RCX: 00007fd8aee6f749 [ 2447.084893][T28056] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 2447.084911][T28056] RBP: 00007fd8ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.084923][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.084934][T28056] R13: 00007fd8af0c6038 R14: 00007fd8af0c5fa0 R15: 00007ffeb80619b8 [ 2447.084967][T28056] [ 2447.086594][T28056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2447.173603][T20961] usb 7-1: USB disconnect, device number 75 [ 2449.157899][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 2449.157916][ T37] audit: type=1326 audit(6057238073.490:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.159373][ T37] audit: type=1326 audit(6057238073.490:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.167661][ T37] audit: type=1326 audit(6057238073.490:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.168397][ T37] audit: type=1326 audit(6057238073.490:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.169023][ T37] audit: type=1326 audit(6057238073.490:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.169631][ T37] audit: type=1326 audit(6057238073.490:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28074 comm="syz.9.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f128d9af749 code=0x7ffc0000 [ 2449.872713][T28092] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6865'. [ 2449.978635][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6866'. [ 2450.003809][T20961] kernel read not supported for file /1445/schedstat (pid: 20961 comm: kworker/1:11) [ 2452.665764][T28116] ubi31: attaching mtd0 [ 2452.882401][T28116] ubi31: scanning is finished [ 2452.882465][T28116] ubi31: empty MTD device detected [ 2456.062626][T28116] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2456.062656][T28116] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2456.062666][T28116] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2456.062674][T28116] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2456.062683][T28116] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2456.062691][T28116] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2456.062700][T28116] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1089715382 [ 2456.062710][T28116] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2456.082546][T28134] ubi31: background thread "ubi_bgt31d" started, PID 28134 [ 2459.513062][T14444] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2460.316039][T14444] usb 6-1: device descriptor read/64, error -71 [ 2460.559726][T14444] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2460.689921][T14444] usb 6-1: device descriptor read/64, error -71 [ 2460.801529][T14444] usb usb6-port1: attempt power cycle [ 2463.943933][T19617] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2464.156857][T19617] usb 7-1: config 27 has an invalid descriptor of length 190, skipping remainder of the config [ 2464.156916][T19617] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 48577, setting to 1024 [ 2464.156942][T19617] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2464.156964][T19617] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2464.157003][T19617] usb 7-1: New USB device found, idVendor=0382, idProduct=0000, bcdDevice=bb.00 [ 2464.157025][T19617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.249532][T28181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2464.471375][T14444] usb 7-1: USB disconnect, device number 76 [ 2464.878271][T28208] cgroup: subsys name conflicts with all [ 2467.644984][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.645082][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.335166][T28239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6915'. [ 2472.009560][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6908'. [ 2472.397088][T28256] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6911'. [ 2474.434289][T28275] netlink: 'syz.6.6926': attribute type 1 has an invalid length. [ 2474.434317][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6926'. [ 2474.434345][T28275] netlink: 'syz.6.6926': attribute type 1 has an invalid length. [ 2474.871988][T28280] netlink: 'syz.9.6927': attribute type 1 has an invalid length. [ 2474.872004][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6927'. [ 2474.872018][T28280] netlink: 'syz.9.6927': attribute type 1 has an invalid length. [ 2475.054645][T28284] dummy0: entered allmulticast mode [ 2475.336057][T28288] overlayfs: failed to clone lowerpath [ 2476.828196][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6932'. [ 2478.126849][T28303] netlink: 'syz.2.6933': attribute type 27 has an invalid length. [ 2481.859455][T28326] FAULT_INJECTION: forcing a failure. [ 2481.859455][T28326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.859493][T28326] CPU: 1 UID: 0 PID: 28326 Comm: syz.5.6940 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2481.859517][T28326] Tainted: [L]=SOFTLOCKUP [ 2481.859524][T28326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2481.859536][T28326] Call Trace: [ 2481.859544][T28326] [ 2481.859552][T28326] dump_stack_lvl+0x189/0x250 [ 2481.859579][T28326] ? __pfx____ratelimit+0x10/0x10 [ 2481.859604][T28326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2481.859626][T28326] ? __pfx__printk+0x10/0x10 [ 2481.859645][T28326] ? __might_fault+0xb0/0x130 [ 2481.859679][T28326] should_fail_ex+0x46c/0x600 [ 2481.859708][T28326] _copy_from_user+0x2d/0xb0 [ 2481.859726][T28326] ___sys_recvmsg+0x12e/0x510 [ 2481.859755][T28326] ? __pfx____sys_recvmsg+0x10/0x10 [ 2481.859814][T28326] ? __might_fault+0xb0/0x130 [ 2481.859842][T28326] do_recvmmsg+0x30d/0x770 [ 2481.859872][T28326] ? __pfx_do_recvmmsg+0x10/0x10 [ 2481.859891][T28326] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2481.859910][T28326] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2481.859940][T28326] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2481.859981][T28326] __x64_sys_recvmmsg+0x190/0x240 [ 2481.860005][T28326] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2481.860030][T28326] ? do_syscall_64+0xbe/0xf80 [ 2481.860050][T28326] do_syscall_64+0xfa/0xf80 [ 2481.860067][T28326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2481.860084][T28326] ? clear_bhb_loop+0x60/0xb0 [ 2481.860105][T28326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2481.860128][T28326] RIP: 0033:0x7fd8aee6f749 [ 2481.860142][T28326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2481.860158][T28326] RSP: 002b:00007fd8ad0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2481.860177][T28326] RAX: ffffffffffffffda RBX: 00007fd8af0c5fa0 RCX: 00007fd8aee6f749 [ 2481.860191][T28326] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 2481.860204][T28326] RBP: 00007fd8ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2481.860215][T28326] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2481.860227][T28326] R13: 00007fd8af0c6038 R14: 00007fd8af0c5fa0 R15: 00007ffeb80619b8 [ 2481.860259][T28326] [ 2484.404281][T28345] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.417499][T28345] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.811926][T28373] IPv6: NLM_F_CREATE should be specified when creating new route [ 2494.970634][T28401] tipc: Failed to obtain node identity [ 2494.970675][T28401] tipc: Enabling of bearer rejected, failed to enable media [ 2500.575284][T28432] netlink: 'syz.2.6974': attribute type 1 has an invalid length. [ 2501.444514][T23681] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2501.619460][T23681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2501.619489][T23681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.619507][T23681] usb 6-1: Product: syz [ 2501.619520][T23681] usb 6-1: Manufacturer: syz [ 2501.619534][T23681] usb 6-1: SerialNumber: syz [ 2501.647416][T23681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2503.025068][T24504] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2503.204701][T28454] FAULT_INJECTION: forcing a failure. [ 2503.204701][T28454] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.204736][T28454] CPU: 1 UID: 0 PID: 28454 Comm: syz.7.6969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2503.204761][T28454] Tainted: [L]=SOFTLOCKUP [ 2503.204769][T28454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2503.204780][T28454] Call Trace: [ 2503.204788][T28454] [ 2503.204797][T28454] dump_stack_lvl+0x189/0x250 [ 2503.204822][T28454] ? __pfx____ratelimit+0x10/0x10 [ 2503.204855][T28454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2503.204877][T28454] ? __pfx__printk+0x10/0x10 [ 2503.204899][T28454] ? __pfx___might_resched+0x10/0x10 [ 2503.204916][T28454] ? fs_reclaim_acquire+0x7d/0x100 [ 2503.204935][T28454] should_fail_ex+0x46c/0x600 [ 2503.204962][T28454] should_failslab+0xa8/0x100 [ 2503.204982][T28454] __kmalloc_cache_noprof+0x84/0x6d0 [ 2503.205005][T28454] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2503.205023][T28454] ? __inet_diag_dump_start+0x8b/0xbf0 [ 2503.205040][T28454] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2503.205062][T28454] __inet_diag_dump_start+0x8b/0xbf0 [ 2503.205093][T28454] __netlink_dump_start+0x469/0x7e0 [ 2503.205125][T28454] inet_diag_handler_cmd+0x1bf/0x290 [ 2503.205146][T28454] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 2503.205171][T28454] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 2503.205187][T28454] ? __pfx_inet_diag_dump+0x10/0x10 [ 2503.205202][T28454] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 2503.205220][T28454] ? sock_diag_lock_handler+0x19/0x290 [ 2503.205240][T28454] ? sock_diag_lock_handler+0x19/0x290 [ 2503.205265][T28454] sock_diag_rcv_msg+0x4cc/0x600 [ 2503.205290][T28454] netlink_rcv_skb+0x208/0x470 [ 2503.205313][T28454] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 2503.205331][T28454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2503.205481][T28454] ? netlink_deliver_tap+0x2e/0x1b0 [ 2503.205515][T28454] netlink_unicast+0x846/0xa10 [ 2503.205544][T28454] ? __pfx_netlink_unicast+0x10/0x10 [ 2503.205565][T28454] ? netlink_sendmsg+0x642/0xb30 [ 2503.205583][T28454] ? skb_put+0x11b/0x210 [ 2503.205605][T28454] netlink_sendmsg+0x805/0xb30 [ 2503.205635][T28454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2503.205665][T28454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2503.205686][T28454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2503.205710][T28454] __sock_sendmsg+0x21c/0x270 [ 2503.205737][T28454] ____sys_sendmsg+0x508/0x810 [ 2503.205764][T28454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2503.205794][T28454] ? import_iovec+0x74/0xa0 [ 2503.205816][T28454] ___sys_sendmsg+0x21f/0x2a0 [ 2503.205840][T28454] ? __pfx____sys_sendmsg+0x10/0x10 [ 2503.205897][T28454] ? __fget_files+0x2a/0x420 [ 2503.205916][T28454] ? __fget_files+0x3a6/0x420 [ 2503.205945][T28454] __x64_sys_sendmsg+0x1a1/0x260 [ 2503.205969][T28454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2503.206001][T28454] ? __pfx_ksys_write+0x10/0x10 [ 2503.206030][T28454] ? do_syscall_64+0xbe/0xf80 [ 2503.206056][T28454] do_syscall_64+0xfa/0xf80 [ 2503.206075][T28454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.206094][T28454] ? clear_bhb_loop+0x60/0xb0 [ 2503.206115][T28454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.206156][T28454] RIP: 0033:0x7f5872e6f749 [ 2503.206174][T28454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2503.206191][T28454] RSP: 002b:00007f58710ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2503.206212][T28454] RAX: ffffffffffffffda RBX: 00007f58730c5fa0 RCX: 00007f5872e6f749 [ 2503.206225][T28454] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 2503.206237][T28454] RBP: 00007f58710ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.206248][T28454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2503.206258][T28454] R13: 00007f58730c6038 R14: 00007f58730c5fa0 R15: 00007ffc18a146d8 [ 2503.206292][T28454] [ 2512.879575][T27157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2512.898611][T27157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2512.922639][T27157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2512.924220][T27157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2512.926839][T27157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2513.066223][T28459] lo speed is unknown, defaulting to 1000 [ 2513.385891][T28459] chnl_net:caif_netlink_parms(): no params data found [ 2514.976153][T27157] Bluetooth: hci2: command tx timeout [ 2515.079596][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2515.103502][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2515.118508][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2515.133388][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2515.134426][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2517.055213][T27157] Bluetooth: hci2: command tx timeout [ 2517.187256][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2517.206357][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2517.231669][ T5812] Bluetooth: hci6: command tx timeout [ 2517.232511][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2517.260893][T22984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2517.262764][T22984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2519.029935][T22984] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2519.071261][T22984] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2519.087005][T22984] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2519.110418][T22984] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2519.111333][T22984] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2519.138860][T22984] Bluetooth: hci2: command tx timeout [ 2519.237962][T22984] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2519.268937][T22984] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2519.284066][T22984] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2519.287991][T22984] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2519.291536][T22984] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2519.293709][T28470] Bluetooth: hci6: command tx timeout [ 2519.373787][T27157] Bluetooth: hci7: command tx timeout [ 2521.212505][T22984] Bluetooth: hci2: command tx timeout [ 2521.212625][T27157] Bluetooth: hci8: command tx timeout [ 2521.372298][T22984] Bluetooth: hci6: command tx timeout [ 2521.376473][T27157] Bluetooth: hci9: command tx timeout [ 2521.452457][T27157] Bluetooth: hci7: command tx timeout [ 2523.295851][T27157] Bluetooth: hci8: command tx timeout [ 2523.451086][T22984] Bluetooth: hci6: command tx timeout [ 2523.451145][T27157] Bluetooth: hci9: command tx timeout [ 2523.532482][T27157] Bluetooth: hci7: command tx timeout [ 2525.369810][T27157] Bluetooth: hci8: command tx timeout [ 2525.529842][T27157] Bluetooth: hci9: command tx timeout [ 2525.609911][T27157] Bluetooth: hci7: command tx timeout [ 2527.448706][T27157] Bluetooth: hci8: command tx timeout [ 2527.608339][T27157] Bluetooth: hci9: command tx timeout [ 2528.654100][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.654173][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2573.083524][T22984] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2573.103279][T22984] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2573.120687][T22984] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2573.129295][T22984] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2573.155120][T22984] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2575.117377][T27157] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2575.153862][T27157] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2575.156979][T27157] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2575.169804][T27157] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2575.183707][T27157] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2575.259212][T27157] Bluetooth: hci10: command tx timeout [ 2577.174097][T22984] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2577.215971][T22984] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2577.226298][T22984] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2577.249873][T22984] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2577.250749][T22984] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2577.258795][T28470] Bluetooth: hci11: command tx timeout [ 2577.337708][T27157] Bluetooth: hci10: command tx timeout [ 2579.338003][T28470] Bluetooth: hci11: command tx timeout [ 2579.338137][T27157] Bluetooth: hci12: command tx timeout [ 2579.416709][T27157] Bluetooth: hci10: command tx timeout [ 2579.446179][T28470] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2579.480499][T28470] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2579.497954][T28470] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2579.500519][T28470] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2579.501379][T28470] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2579.624553][T27157] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2579.649341][T27157] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2579.652468][T27157] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2579.653776][T27157] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2579.654643][T27157] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2581.415181][T27157] Bluetooth: hci11: command tx timeout [ 2581.415279][T28470] Bluetooth: hci12: command tx timeout [ 2581.504326][T28470] Bluetooth: hci10: command tx timeout [ 2581.585067][T28470] Bluetooth: hci13: command tx timeout [ 2581.735521][T28470] Bluetooth: hci14: command tx timeout [ 2583.493981][T27157] Bluetooth: hci11: command tx timeout [ 2583.494028][T28470] Bluetooth: hci12: command tx timeout [ 2583.656325][T28470] Bluetooth: hci13: command tx timeout [ 2583.814185][T28470] Bluetooth: hci14: command tx timeout [ 2585.572751][T28470] Bluetooth: hci12: command tx timeout [ 2585.732602][T28470] Bluetooth: hci13: command tx timeout [ 2585.892699][T28470] Bluetooth: hci14: command tx timeout [ 2587.811371][T28470] Bluetooth: hci13: command tx timeout [ 2587.971356][T28470] Bluetooth: hci14: command tx timeout [ 2590.056452][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.056524][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2608.298475][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2608.298499][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16942/1:b..l P28454/3:b..l [ 2608.298539][ C0] rcu: (detected by 0, t=10502 jiffies, g=120445, q=2684 ncpus=2) [ 2608.298561][ C0] task:syz.7.6969 state:R running task stack:25096 pid:28454 tgid:28453 ppid:19170 task_flags:0x40044c flags:0x00080000 [ 2608.298616][ C0] Call Trace: [ 2608.298623][ C0] [ 2608.298637][ C0] __schedule+0x1480/0x50a0 [ 2608.298691][ C0] ? __pfx___schedule+0x10/0x10 [ 2608.298722][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 2608.298744][ C0] preempt_schedule_irq+0xb5/0x150 [ 2608.298763][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2608.298781][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2608.298804][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2608.298820][ C0] irqentry_exit+0x5d8/0x660 [ 2608.298838][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2608.298853][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 2608.298871][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 b4 c8 14 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 2608.298884][ C0] RSP: 0018:ffffc9000decf2b0 EFLAGS: 00000206 [ 2608.298896][ C0] RAX: b7f0f0fbe0099c00 RBX: 0000000000000000 RCX: b7f0f0fbe0099c00 [ 2608.298906][ C0] RDX: 00000000a4ec7ff5 RSI: ffffffff8cfe1a8a RDI: ffffffff8b3f5660 [ 2608.298916][ C0] RBP: ffffffff8229a724 R08: ffffffff8229a724 R09: ffffffff8d5ae880 [ 2608.298926][ C0] R10: dffffc0000000000 R11: fffff940004db659 R12: 0000000000000002 [ 2608.298936][ C0] R13: ffffffff8d5ae880 R14: 0000000000000000 R15: 0000000000000246 [ 2608.298948][ C0] ? page_table_check_clear+0x144/0x5f0 [ 2608.298968][ C0] ? page_table_check_clear+0x144/0x5f0 [ 2608.298993][ C0] ? pfn_valid+0xba/0x490 [ 2608.299012][ C0] ? pfn_valid+0xba/0x490 [ 2608.299031][ C0] page_table_check_clear+0x164/0x5f0 [ 2608.299048][ C0] ? page_table_check_clear+0x144/0x5f0 [ 2608.299064][ C0] ? page_table_check_clear+0x144/0x5f0 [ 2608.299084][ C0] unmap_page_range+0x2f39/0x3ce0 [ 2608.299099][ C0] ? preempt_schedule+0xae/0xc0 [ 2608.299147][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2608.299167][ C0] ? mas_find+0xb0e/0xd30 [ 2608.299186][ C0] ? unmap_vmas+0x144/0x580 [ 2608.299203][ C0] unmap_vmas+0x399/0x580 [ 2608.299223][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2608.299256][ C0] exit_mmap+0x239/0xb10 [ 2608.299279][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2608.299295][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2608.299319][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2608.299342][ C0] ? uprobe_clear_state+0x288/0x2a0 [ 2608.299359][ C0] ? mm_update_next_owner+0xa7/0x870 [ 2608.299381][ C0] __mmput+0xcb/0x3d0 [ 2608.299398][ C0] exit_mm+0x1da/0x2c0 [ 2608.299417][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2608.299443][ C0] do_exit+0x658/0x2310 [ 2608.299462][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2608.299478][ C0] ? __pfx_do_exit+0x10/0x10 [ 2608.299489][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2608.299501][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 2608.299520][ C0] do_group_exit+0x21c/0x2d0 [ 2608.299533][ C0] ? rt_spin_unlock+0x161/0x200 [ 2608.299546][ C0] get_signal+0x125d/0x1310 [ 2608.299568][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 2608.299583][ C0] ? __phys_addr+0xd3/0x180 [ 2608.299596][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2608.299617][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 2608.299632][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 2608.299645][ C0] ? rcu_is_watching+0x15/0xb0 [ 2608.299656][ C0] do_syscall_64+0x2d0/0xf80 [ 2608.299667][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2608.299677][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2608.299689][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2608.299698][ C0] RIP: 0033:0x7f5872e6f749 [ 2608.299707][ C0] RSP: 002b:00007f58710ce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2608.299717][ C0] RAX: fffffffffffffe00 RBX: 00007f58730c5fa8 RCX: 00007f5872e6f749 [ 2608.299725][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f58730c5fa8 [ 2608.299731][ C0] RBP: 00007f58730c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.299737][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2608.299743][ C0] R13: 00007f58730c6038 R14: 00007ffc18a145f0 R15: 00007ffc18a146d8 [ 2608.299760][ C0] [ 2608.299764][ C0] task:kworker/u8:48 state:D stack:19584 pid:16942 tgid:16942 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2608.299789][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2608.299804][ C0] Call Trace: [ 2608.299807][ C0] [ 2608.299813][ C0] __schedule+0x1480/0x50a0 [ 2608.299836][ C0] ? finish_task_switch+0x23d/0x940 [ 2608.299851][ C0] ? rcu_is_watching+0x15/0xb0 [ 2608.299862][ C0] ? __pfx___schedule+0x10/0x10 [ 2608.299882][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2608.299893][ C0] schedule_rtlock+0x30/0x70 [ 2608.299906][ C0] rtlock_slowlock_locked+0x3819/0x4010 [ 2608.299920][ C0] ? __resched_curr+0x109/0x3e0 [ 2608.299939][ C0] ? rtlock_slowlock_locked+0x286/0x4010 [ 2608.299951][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2608.299965][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 2608.299982][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2608.299997][ C0] rt_spin_lock+0x158/0x3e0 [ 2608.300011][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 2608.300021][ C0] ? rt_spin_unlock+0x150/0x200 [ 2608.300037][ C0] crng_make_state+0x163/0x5e0 [ 2608.300051][ C0] _get_random_bytes+0xd5/0x210 [ 2608.300065][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 2608.300081][ C0] ? __alloc_skb+0x2f1/0x430 [ 2608.300096][ C0] ? nsim_dev_trap_report_work+0x7fa/0xbc0 [ 2608.300109][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 2608.300121][ C0] ? nsim_dev_trap_report_work+0x7fa/0xbc0 [ 2608.300133][ C0] ? skb_put+0x11b/0x210 [ 2608.300145][ C0] nsim_dev_trap_report_work+0x392/0xbc0 [ 2608.300167][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2608.300179][ C0] process_scheduled_works+0xad1/0x1770 [ 2608.300204][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2608.300223][ C0] worker_thread+0x8a0/0xda0 [ 2608.300247][ C0] kthread+0x711/0x8a0 [ 2608.300262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2608.300272][ C0] ? __pfx_kthread+0x10/0x10 [ 2608.300283][ C0] ? rt_spin_unlock+0x150/0x200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2608.300297][ C0] ? rt_spin_unlock+0x161/0x200 [ 2608.300308][ C0] ? __pfx_kthread+0x10/0x10 [ 2608.300321][ C0] ret_from_fork+0x599/0xb30 [ 2608.300333][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2608.300349][ C0] ? __switch_to_asm+0x39/0x70 [ 2608.300362][ C0] ? __switch_to_asm+0x33/0x70 [ 2608.300373][ C0] ? __pfx_kthread+0x10/0x10 [ 2608.300386][ C0] ret_from_fork_asm+0x1a/0x30 [ 2608.300408][ C0] [ 2616.392220][T24504] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2616.392381][T24504] ath9k_htc: Failed to initialize the device