last executing test programs: 16m24.53060376s ago: executing program 4 (id=869): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) io_uring_setup(0xad7, &(0x7f0000001a40)={0x0, 0x6ffa, 0x4000, 0x0, 0x16f}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x42) inotify_add_watch(r3, &(0x7f0000000100)='./bus\x00', 0x10000044) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./file0/../file0\x00') creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(&(0x7f00000006c0)='./file2\x00', &(0x7f0000000380)='./file0\x00') 16m22.19922056s ago: executing program 4 (id=876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000240)=[0x0, 0x0], 0x46, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x24, r2, 0xb, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10000}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10014}, 0x4) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) preadv(r7, &(0x7f0000000840)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1, 0x8, 0x95b) 16m21.270540525s ago: executing program 4 (id=879): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000000, 0x268}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xaa6, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000300)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="60005e8008"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x30, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 16m20.20944877s ago: executing program 4 (id=881): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) clock_gettime(0x5, &(0x7f0000000000)) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 16m20.0188264s ago: executing program 4 (id=882): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd26, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f00000003c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r5, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000f40)=0xe8) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}}, 0x50) 16m19.125338885s ago: executing program 4 (id=885): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="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", 0x1000, 0x1, &(0x7f0000001100)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000001140)={{0x108, 0x3, 0x6, 0x1a1, 0x159, 0x0, 0x26d, 0x2}, "b79849ca6a7c12b53cd83fcbdfcb0c13", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x830) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000001980)=0x21, 0x4) r4 = syz_open_dev$vivid(&(0x7f00000019c0), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000001a00)={0xeb0, 0x6, 0x1, {0x1, @raw_data="50ee9b473255d7df92019800833e003bc1ab73899e2ced88b2397e62e0af0e59c5e105770f1673fd00295eadbc52f575ef683bc3ccc21b1bb7ae5a07a6c72d8acfe358aab6fcd533e05732c2206bb09c6d049d341720fb8c8d96ec964041bffe0d8b97b0cd3eb5d94294af18a65648afdfe7a5990921d0e844ec702d4de81ba7f87edf24dc5b2b37fcb1866da898154e54bebcf9bf95711597a59a20dd9e595a9430dc9a128975378e573b2538fa88e0b8762036b95810f746d9bd8c594fa2e63207ba1450eabbdc"}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000001b00)={{r0}, {@void, @max}}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4014) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x4040) connect$inet(r1, &(0x7f0000001e40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001f00)=0x9) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000001f40)={0x2, 0x3, 0xfffffffb}) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000001f80)=0x6a0f) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001fc0)) r8 = syz_open_dev$radio(&(0x7f0000002000), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000002040)={0x3, 0x1, @stop_pts=0x8}) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f00000020c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0x4, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3ff, 0xff0d, 0x6}, [@country_functional={0x8, 0x24, 0x7, 0x7, 0x8001, [0xb983]}, @obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x16}, @dmm={0x7, 0x24, 0x14, 0x4, 0x1}, @mdlm_detail={0xea, 0x24, 0x13, 0x6, "9573124d0162ea5deba3416523e5089f6e283321842a0f2c9bc67f5e4b1bd097cb390b87a88118ef9f9f0a3464df8467ebf6f71557dced8cda6c3bdba90d7b4a89d76bca881a0c2a15bae60fdfb8a43ffc9da0df0858ab7e07e73737402bb439b91b1185dd8ee4c4ef15f0aadfbcc39dea4570fa77de2fec3268541c179561ed5860153855a182e167a0aa86a5b77ad97f65226dfcbbd65ec100f58f2d42e7157673c1a11e283202fa62ec4fef92b9ec877f967a33550cfd9fae863a098cf0a07d38e3db9e0de0276cb763c5b36bde319af99390c43061202e5ecba144c674f0aaf23240ffc6"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x250, 0x2, 0xf5, 0xe, 0x40, 0x6}, 0x1c, &(0x7f0000002280)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x8, 0xf947}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x6, 0x6}]}, 0x3, [{0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x2001}}, {0x3d, &(0x7f0000002340)=@string={0x3d, 0x3, "c680b992f814c6e1b50ca55ec78253401d481fae02c36862d5071ad3adb25634d0f4773e3ee1bb9a64de650d4b2c46494abc4c16aa36692c10e24e"}}]}) cachestat(r0, &(0x7f00000023c0)={0x54, 0x2}, &(0x7f0000002400), 0x0) recvmsg(r7, &(0x7f0000003a00)={&(0x7f0000002440)=@rc, 0x80, &(0x7f0000002980)=[{&(0x7f00000024c0)=""/96, 0x60}, {&(0x7f0000002540)=""/245, 0xf5}, {&(0x7f0000002640)=""/226, 0xe2}, {&(0x7f0000002740)=""/230, 0xe6}, {&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/222, 0xde}], 0x6, &(0x7f0000002a00)=""/4096, 0x1000}, 0x10020) r9 = syz_open_dev$vcsn(&(0x7f0000003a40), 0x6, 0x680181) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000005640)={&(0x7f0000003a80), 0xc, &(0x7f0000005600)={&(0x7f0000004cc0)={0x910, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3d}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x910}, 0x1, 0x0, 0x0, 0x80}, 0x10) 16m4.008046961s ago: executing program 32 (id=885): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="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", 0x1000, 0x1, &(0x7f0000001100)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000001140)={{0x108, 0x3, 0x6, 0x1a1, 0x159, 0x0, 0x26d, 0x2}, "b79849ca6a7c12b53cd83fcbdfcb0c13", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x830) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000001980)=0x21, 0x4) r4 = syz_open_dev$vivid(&(0x7f00000019c0), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000001a00)={0xeb0, 0x6, 0x1, {0x1, @raw_data="50ee9b473255d7df92019800833e003bc1ab73899e2ced88b2397e62e0af0e59c5e105770f1673fd00295eadbc52f575ef683bc3ccc21b1bb7ae5a07a6c72d8acfe358aab6fcd533e05732c2206bb09c6d049d341720fb8c8d96ec964041bffe0d8b97b0cd3eb5d94294af18a65648afdfe7a5990921d0e844ec702d4de81ba7f87edf24dc5b2b37fcb1866da898154e54bebcf9bf95711597a59a20dd9e595a9430dc9a128975378e573b2538fa88e0b8762036b95810f746d9bd8c594fa2e63207ba1450eabbdc"}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000001b00)={{r0}, {@void, @max}}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4014) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x4040) connect$inet(r1, &(0x7f0000001e40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001f00)=0x9) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000001f40)={0x2, 0x3, 0xfffffffb}) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000001f80)=0x6a0f) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001fc0)) r8 = syz_open_dev$radio(&(0x7f0000002000), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000002040)={0x3, 0x1, @stop_pts=0x8}) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f00000020c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0x4, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3ff, 0xff0d, 0x6}, [@country_functional={0x8, 0x24, 0x7, 0x7, 0x8001, [0xb983]}, @obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x16}, @dmm={0x7, 0x24, 0x14, 0x4, 0x1}, @mdlm_detail={0xea, 0x24, 0x13, 0x6, "9573124d0162ea5deba3416523e5089f6e283321842a0f2c9bc67f5e4b1bd097cb390b87a88118ef9f9f0a3464df8467ebf6f71557dced8cda6c3bdba90d7b4a89d76bca881a0c2a15bae60fdfb8a43ffc9da0df0858ab7e07e73737402bb439b91b1185dd8ee4c4ef15f0aadfbcc39dea4570fa77de2fec3268541c179561ed5860153855a182e167a0aa86a5b77ad97f65226dfcbbd65ec100f58f2d42e7157673c1a11e283202fa62ec4fef92b9ec877f967a33550cfd9fae863a098cf0a07d38e3db9e0de0276cb763c5b36bde319af99390c43061202e5ecba144c674f0aaf23240ffc6"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x250, 0x2, 0xf5, 0xe, 0x40, 0x6}, 0x1c, &(0x7f0000002280)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x8, 0xf947}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x6, 0x6}]}, 0x3, [{0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x2001}}, {0x3d, &(0x7f0000002340)=@string={0x3d, 0x3, "c680b992f814c6e1b50ca55ec78253401d481fae02c36862d5071ad3adb25634d0f4773e3ee1bb9a64de650d4b2c46494abc4c16aa36692c10e24e"}}]}) cachestat(r0, &(0x7f00000023c0)={0x54, 0x2}, &(0x7f0000002400), 0x0) recvmsg(r7, &(0x7f0000003a00)={&(0x7f0000002440)=@rc, 0x80, &(0x7f0000002980)=[{&(0x7f00000024c0)=""/96, 0x60}, {&(0x7f0000002540)=""/245, 0xf5}, {&(0x7f0000002640)=""/226, 0xe2}, {&(0x7f0000002740)=""/230, 0xe6}, {&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/222, 0xde}], 0x6, &(0x7f0000002a00)=""/4096, 0x1000}, 0x10020) r9 = syz_open_dev$vcsn(&(0x7f0000003a40), 0x6, 0x680181) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000005640)={&(0x7f0000003a80), 0xc, &(0x7f0000005600)={&(0x7f0000004cc0)={0x910, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3d}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x910}, 0x1, 0x0, 0x0, 0x80}, 0x10) 16m2.309304503s ago: executing program 3 (id=931): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fanotify_init(0x0, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) 16m1.304073509s ago: executing program 3 (id=935): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000054cc24"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x68000000, @remote, 0x5}, 0x1c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x2b1b1983) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsmount(0xffffffffffffffff, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x11f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 15m56.132162106s ago: executing program 3 (id=941): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r2], 0x5c}}, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904", @ANYRES16], 0x0) 15m54.353819774s ago: executing program 3 (id=944): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5c00000002"], 0x8) (fail_nth: 5) 15m53.479209019s ago: executing program 3 (id=946): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 15m53.335636973s ago: executing program 3 (id=947): sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4c814) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0x5, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x9, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x8001, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x3ff, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1aa, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000280)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'bond0\x00'}}, 0x1e) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x20, 0x5, 0x2, "0cde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000001480)={0x990001, 0x9}) io_uring_setup(0xa58, &(0x7f0000000040)={0x0, 0xc8a1, 0x20000, 0x3, 0xc4}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6e5c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff822}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0xc800) 15m37.834098943s ago: executing program 33 (id=947): sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4c814) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0x5, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x9, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x8001, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x3ff, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1aa, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000280)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'bond0\x00'}}, 0x1e) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x20, 0x5, 0x2, "0cde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000001480)={0x990001, 0x9}) io_uring_setup(0xa58, &(0x7f0000000040)={0x0, 0xc8a1, 0x20000, 0x3, 0xc4}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6e5c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff822}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0xc800) 9m22.156612761s ago: executing program 1 (id=2390): unshare(0x20000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000040)="0008000092dc7c8fff", 0x9}], 0x2}, 0x20000b88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4428}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket(0x10, 0x3, 0xfffffffc) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x4, 0x8, 0x7fffffff, 0x8, 0xd4, 0xbb49f09, 0xf0, 0x8, 0x80ffa, 0x2, 0xfffffffc, 0x7, 0x0, 0x1000004, 0x1, 0x12000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x51, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x81]}) 9m20.995741272s ago: executing program 1 (id=2395): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="02", 0x1, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000900000000000000ff7f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500200000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m20.010935964s ago: executing program 1 (id=2397): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e", 0xe1}], 0x1}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000880)={0x550, 0x600, 0xf0, 0xa0, 0x2, 0x5, 0x0, 0x1, {0xffffffff, 0x9, 0x1}, {0x40, 0xffff8001}, {0x8, 0x4, 0x1}, {0x401, 0x80, 0x1}, 0x0, 0x2, 0x4, 0x0, 0x1, 0x50b, 0xfffffffa, 0x10, 0x4e, 0x1, 0xfffffffd, 0xffff0f27, 0x12, 0x200, 0x3, 0x9}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040), 0x201800c, &(0x7f0000000a80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\xbe\xa04\xcfu\xb0\xc3y\xaa\xbc\x88\x1f\xcd(P`\x16\x85\xe4-,\x99$\xa1R\xedhz\xe1\x96\xee\x88\xb1\x0e\xbe\xcb\x9b,\xa6\xba\x8b\xd1\x82\xa9\x965\t\xb8C\x8d\x15Vx,\x10k!\x1c\xdb\x1f\x92\xd9\x1d\xcd\x1e\xa0\xea\xadxn\xc4\xed\x99\x14\xc7\xef\x00=\xce\x97\xa5&\x06x\xdct?OR\xfb\xd9#U\xf6\xcfvG\x8a\x96\xb2\x88\x9e\xa7l\x9e\xb0x^\xe4\xa6\xbau(P\tk^\x97\x94\f\xc0\xf4V\x17\xe3\xb9O8td\xe0\v\xb8l\xa1\x05vg\x9f\x9c\xca\xe9\xfcpI\xafd/\xbd\x1eQ\xbe\x0eL`\x9f\xf3\xab\xeb\"\x91\xff=\x18\xa1\x90\xfd\xd3\x85\xec,\xb1\xd9{\xbf\xbb\xce\xf2\xdf@\xe6\x99M\xb3\xcd\ft\x18\xc0z>\r\x9e-.\xe8\xde\xf2\xfa%\x96\x84\xde}\xae$f\xea(\xb4\"\\\xe2V\x9e\xfc\xca\xc2\xa6\x84\xdf\xaa)\xa9w\xbe\xc2\x8f\xd3U\xa3\xd8\xab\x93z\x1af9u\x18f\x8a\xa70\xcf\x98v\xf3%\xa9\xe7\b(\x82'}}, {@context={'context', 0x3d, 'system_u'}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf25040000000800040001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000100)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x894) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 9m18.342892838s ago: executing program 1 (id=2399): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x1, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xf], [0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fe, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000440)={0xe, 0x2634, {0x53, 0xe, 0x8, {0x0, 0x7}, {0x200, 0x2}, @ramp={0x82, 0x10, {0x289, 0xa, 0x3, 0x7ff}}}, {0x52, 0xd402, 0x1, {0x3, 0x4}, {0x3, 0x7ff}, @period={0x58, 0x40, 0x3, 0x7, 0x6, {0x8, 0x1, 0x100, 0x3}, 0x1, &(0x7f0000000300)=[0x5]}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) chmod(&(0x7f00000002c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$bind(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x2020000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r2 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0xd9d76000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getattr(r2, &(0x7f0000000380)={0x38}, 0x38, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="1d000018", @ANYRES16=r4, @ANYBLOB="020025bd7000fddbdf2511000000080031000700000008003b005207000005002d00000000000800390002000000080032000900000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) fcntl$setstatus(r1, 0x4, 0x20400) syz_clone(0x82800, &(0x7f00000001c0)="9a2ff931ea824673295d0ddef0a2b8c78073d28be46bc88cc26ae160785f6ea2444d5fe3a33f12b510b0", 0x2a, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="b211bfd11b985ef9fa2671ced5f5853a4da41f1c523d403221c00b9bf734b2") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0xc6800) fadvise64(r1, 0x9, 0x2, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x240000, 0x0) inotify_add_watch(r6, &(0x7f00000004c0)='./file0\x00', 0x80000040) 9m18.124193615s ago: executing program 1 (id=2400): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 9m17.952993603s ago: executing program 1 (id=2402): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) pwritev(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f4a6dc2d85f1db98b762c688a6757e6255b4794ea4996d26669d117e5c489700fd5f0380c6320dc22377d89e319f71393b8a9c8efceefb95", 0x38}], 0x1, 0x4, 0x5) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000940)={0x2, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x9d6fb58f3dccf0ec) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2c41, 0x74) flock(r3, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000034c0)=@IORING_OP_LINKAT={0x27, 0x30, 0x0, r3, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)='./file0\x00', r0, 0x1000, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aa", 0x17) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 9m17.667379097s ago: executing program 34 (id=2402): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) pwritev(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f4a6dc2d85f1db98b762c688a6757e6255b4794ea4996d26669d117e5c489700fd5f0380c6320dc22377d89e319f71393b8a9c8efceefb95", 0x38}], 0x1, 0x4, 0x5) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000940)={0x2, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x9d6fb58f3dccf0ec) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2c41, 0x74) flock(r3, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000034c0)=@IORING_OP_LINKAT={0x27, 0x30, 0x0, r3, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)='./file0\x00', r0, 0x1000, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aa", 0x17) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 7m1.680735904s ago: executing program 0 (id=2881): openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, &(0x7f0000000140)=ANY=[]) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, r4, 0x4, 0x7}, 0x38) sendfile(r3, r3, 0x0, 0x1002000ff) userfaultfd(0x80001) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r6, 0x0) 7m0.652722626s ago: executing program 0 (id=2886): r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYBLOB="d2ce"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x440d4) 6m58.878993954s ago: executing program 0 (id=2896): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x1}]}) close_range(r0, 0xffffffffffffffff, 0x2) io_uring_setup(0x498f, &(0x7f0000000180)={0x0, 0xf4c8, 0x1, 0x1, 0x47}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6m57.579082889s ago: executing program 0 (id=2900): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) lseek(0xffffffffffffffff, 0x81, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000600)={0x50, 0x0, r2, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) (async) write$FUSE_BMAP(r0, &(0x7f0000000180)={0x18, 0x0, r2, {0x1}}, 0x18) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) close(0xffffffffffffffff) unshare(0x2040400) (async) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect(0x5, 0x24, 0x0, 0x0) (async) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x40) (async) socket$pppl2tp(0x18, 0x1, 0x1) 6m57.521859769s ago: executing program 0 (id=2902): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r0, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r4, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6(0xa, 0x6, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = fanotify_init(0x0, 0x800) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, 0x0, 0xf}, 0x94) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 6m57.152517071s ago: executing program 0 (id=2906): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd}) fcntl$lock(r0, 0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000240)=[0x0, 0x0], 0x46, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x10014}, 0x4) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1, 0x8, 0x95b) 6m56.75012106s ago: executing program 35 (id=2906): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd}) fcntl$lock(r0, 0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000240)=[0x0, 0x0], 0x46, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x10014}, 0x4) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1, 0x8, 0x95b) 8.497526227s ago: executing program 8 (id=4652): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000340)=[{0xfffb, 0x0, 0xe, &(0x7f00000000c0)="856dfc2b667858f6268ab9b30aa7"}, {0x101, 0x1409, 0x49, &(0x7f0000000140)="06fcf74292606825277f8ff23e107e17b0a673e9707d9a09d3cbfc26f99e06293a816aa37e032e75dbdc264fbf90a695b71838f5eb492fabbd92a23e70a40712c0c1b9853bfef9ab07"}], 0x2}) 8.306540016s ago: executing program 5 (id=4654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="000000000000000000aca932135450853f541a91f8eb165723520366796e6487cde1110724dfb997a268a1873bccf59ed6f496e64536bfe3dd906bb059d848a82a863fbd44116ac340cb051bd9219153b7cf589774f7eb934c246e", 0x5b}], 0x1}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 8.204786201s ago: executing program 5 (id=4656): syslog(0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x6, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002f00)=[{{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e80), 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4000006) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001700)=""/194, 0xc2}], 0x8}}], 0x1, 0x2140, 0x0) 7.377399008s ago: executing program 7 (id=4640): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x4}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001100010027bd7001f200001200000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_delrule={0x30, 0x21, 0x100, 0x70bd28, 0x25dfdbff, {0x2, 0x20, 0x0, 0x1, 0x9, 0x0, 0x0, 0x2, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r5 = syz_open_dev$video(&(0x7f00000001c0), 0x485, 0x60180) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000000)={0x0, "d4d71236161bde0b89a48677cd013bff4f7ae6e8ca8cbdeb813625a1785b5ad3", 0x0, 0x1}) 7.266515188s ago: executing program 7 (id=4663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xbc, 0xc7, 0x60, 0x20, 0x12d1, 0x1413, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x0, 0x21}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x19, &(0x7f0000000000)=ANY=[@ANYBLOB="050f19008114"]}) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1d, 0x10, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0xc8, 0x6, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 6.394085007s ago: executing program 6 (id=4667): getpid() r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0xfcff) epoll_wait(r1, 0x0, 0x0, 0xf19) close_range(r0, 0xffffffffffffffff, 0x0) 6.013811446s ago: executing program 6 (id=4668): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$link(0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0xca200) preadv(r2, 0x0, 0x0, 0x1, 0xd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x1e, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x1a9001) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f87, 0x40, 0x40, 0x4, 0x2, 0x19, 0x8, 0x2, 0x8, 0x0, 0x3f, 0x3f, {0xfffffffd, 0xfffffffc}, 0x3, 0xed}}) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 5.90681412s ago: executing program 7 (id=4669): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x2, 0xd5, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1026, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x78, 0xc0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x6, 0x1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x8c, 'i', 'OZ'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x80, 0x2, 0x7f, 0x7, "81d756", "d4fa"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd7, 0x5, 0x7, 0x5, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9e, 0x9, "87ed75942aa79239c5"}, @as_header={0x7, 0x24, 0x1, 0x7, 0xf8, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x1000, 0x6, "363ae4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x1, 0x80, {0x7, 0x25, 0x1, 0x0, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x1, "d700", "9ba8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x20, 0x5, 0x9, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc, 0x2, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x9, 0xd2, 0x62, 0x20, 0x7}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0xfa, 0x8000, 0x6}]}, 0x1, [{0x55, &(0x7f0000000980)=@string={0x55, 0x3, "8a4c08367e4cae92a7ad2f12f8e3eddd270d72605d639c157f3f9f1c8e4fca6d5817f8f5034ea93e368a60e6ba78511ded05f6de5c8862826a1b8823af2c8a73f0c80151b1c6376bc2bb3d2bb7595c0c997657"}}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000800)={0x3, 0x1, 0x3}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x12}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x81, 0x2, "2bb7"}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, "e6"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "c4"}, 0x0}) 5.646102744s ago: executing program 2 (id=4670): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001600040026bd7000fedbdf250000000098616e091895ae6ba0712d15baafca403ad21bc55ee91a4da30a549c10aa16d91bdf21abae0375b068d1f3479f1e09c07e4f7d2fe8b1a1dab1d87db3ef06ab40ff73c71d0afe04fd1a3f0ffcd193cc30"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3c6, 0x0, 0x2, 0x200004, 0x14000000, 0x3d000, 0xfffffffc, 0x100, 0x9, 0xd, 0x3, 0xfffffffe, 0x400, 0xfa, 0x13, 0x100, 0xffffffa7, 0x9, 0x34b, 0x1, 0x3ff, 0x6, 0x8f, 0x10000bf, 0xaa18, 0xfffffffe, 0x8, 0x0, 0x7, 0xf58, 0xb13]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x5b) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x1000001a) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x7d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x60) 5.556017673s ago: executing program 6 (id=4671): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x10, 0x2, 0x2, 0x1}}}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_TIMEOUT(r4, 0x702, 0xffffffffffffffff) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0xffffc000) 4.855072502s ago: executing program 8 (id=4672): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x20, 0x15, 0x4, "57b752a4"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x100010000) 4.847695773s ago: executing program 5 (id=4673): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 4.571639173s ago: executing program 6 (id=4674): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40, 0x87}, {0x10, 0xfffffffffffffffc, 0x10000000000, 0x2, 0x0, 0x0, 0x7ffe, 0xfffffffffffffffb}, {0x200000000000, 0x40000000000000, 0x200000000000000}, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d4, 0x2b}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x1, 0x9, 0xfffffc01, 0xb1, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4336db01, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x4, 0x6, 0x5d0b6f1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x9, 0xdd64, 0x1, 0x3, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x5, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0x7f, 0x4ec5, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa4, 0x4, 0x7, 0x4, 0x0, 0x85, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0xfffffffd, 0xd2a, 0x6, 0xf4d, 0x9, 0x5f, 0x3, 0x8, 0x7ff, 0x44, 0x1, 0x9, 0x800, 0x3, 0x8, 0x0, 0x3ff, 0x922e, 0xfffffffc, 0x7fffffff, 0x1ae0, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x6, 0x2, 0x0, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x3, 0x9, 0xc, 0x81, 0x42db204e, 0x7, 0x5c20, 0x7b, 0x4000, 0xfffffffc, 0x800, 0x6, 0x391, 0x0, 0x0, 0x3, 0x80000000, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0xffffffff, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x24, 0xfffffff9, 0x10, 0x2, 0xfff, 0x5f14, 0x6, 0x8b4, 0x5ffffc, 0x1, 0x6, 0x0, 0x10000, 0x8, 0x3, 0x3, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x400002, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x8, 0x4, 0xb, 0x0, 0xfffffff8, 0x207, 0x3, 0x10, 0x404, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x6, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x2, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x7ff, 0x4, 0x3, 0xa, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0xffffff15, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0xfffffffe, 0xd, 0x68, {0xb, 0x2, 0x200, 0x7ffe, 0xfffa, 0xba}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x2, 0x9}}]}]}}]}, 0x478}}, 0x2004c840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) 4.436145782s ago: executing program 6 (id=4675): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 4.409168439s ago: executing program 2 (id=4676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r0, &(0x7f0000000040), 0x2) 4.331608363s ago: executing program 6 (id=4677): sched_setscheduler(0x0, 0x1, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xc, "ced50c08"}, @global=@item_012={0x2, 0x1, 0x4, 'XV'}]}}, 0x0}, 0x0) r4 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x1, 0xbb, &(0x7f0000000440)="e1479bd9a646a6e12f4417dfe329403fe21bbfd138f089966f82cac5fe3682bcae38eca93e7b01b250d60228616da903d2fed4ac5143e28482a70ed3161445949cf1ed434aadc9861d8a353296970d01ead5ba03eb26a3f5eec1bf493ffc714e589adba58f055ac8d29cb1ec7222e232ad2ef40108b16b791fa796c97beba22a1756ad960b4bbdb876b0815c678e7baf56a93541b56f88dd4b04c6c186d0920cd99aa79a0fa80dfd90b979b326c4b9c4f55dbd11888dd089901b1e") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x2, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x80007, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8004, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x8000, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x0, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x10009, 0x1, 0x3, 0x2, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x20000, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.323735591s ago: executing program 2 (id=4678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002f00)=[{&(0x7f0000000680)={0x0, &(0x7f0000000580)="d89139", 0x3, 0x3}, 0x0, 0x1}, {&(0x7f0000002e40)={0x0, &(0x7f00000006c0)="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", 0x2, 0xff5}, &(0x7f0000002e80)="d010031de0e8fea75a51835500607e483c92480d408bca7693a2592fea0541bf414640af708341635df975e0b8c882372a79d9dd325f059a2ce0178c6d0498ca0404256325b3", 0x2, 0x46}], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='rxrpc\x00', &(0x7f0000000140)=@secondary) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) memfd_create(0x0, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403003f"], 0xffffffffffffff1c) 4.16925216s ago: executing program 5 (id=4679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000400030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x72dc, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x4, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) close(r7) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x58, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x90, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0xf) 3.062873627s ago: executing program 2 (id=4680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200488dc}, 0x20004804) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1a}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40858}, 0x20004804) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) 1.480371768s ago: executing program 7 (id=4681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000003c0), 0xb97a}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 1.269765293s ago: executing program 8 (id=4682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040), 0x2) 1.224206269s ago: executing program 8 (id=4683): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.149149549s ago: executing program 2 (id=4684): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r1, 0x0, 0x101) 1.14769991s ago: executing program 5 (id=4685): madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), 0x0) ioperm(0x5, 0x6, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8040) r0 = socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) r2 = accept$packet(r0, 0x0, &(0x7f0000000080)) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040)=0x5abb, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8}, 0x14) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000280)={'\x00', 0xffffc9bb, 0x2, 0xfffffff2}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.106737442s ago: executing program 8 (id=4686): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40, 0x87}, {0x10, 0xfffffffffffffffc, 0x10000000000, 0x2, 0x0, 0x0, 0x7ffe, 0xfffffffffffffffb}, {0x200000000000, 0x40000000000000, 0x200000000000000}, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d4, 0x2b}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x1, 0x9, 0xfffffc01, 0xb1, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4336db01, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x4, 0x6, 0x5d0b6f1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x9, 0xdd64, 0x1, 0x3, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x5, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0x7f, 0x4ec5, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa4, 0x4, 0x7, 0x4, 0x0, 0x85, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0xfffffffd, 0xd2a, 0x6, 0xf4d, 0x9, 0x5f, 0x3, 0x8, 0x7ff, 0x44, 0x1, 0x9, 0x800, 0x3, 0x8, 0x0, 0x3ff, 0x922e, 0xfffffffc, 0x7fffffff, 0x1ae0, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x6, 0x2, 0x0, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x3, 0x9, 0xc, 0x81, 0x42db204e, 0x7, 0x5c20, 0x7b, 0x4000, 0xfffffffc, 0x800, 0x6, 0x391, 0x0, 0x0, 0x3, 0x80000000, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0xffffffff, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x24, 0xfffffff9, 0x10, 0x2, 0xfff, 0x5f14, 0x6, 0x8b4, 0x5ffffc, 0x1, 0x6, 0x0, 0x10000, 0x8, 0x3, 0x3, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x400002, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x8, 0x4, 0xb, 0x0, 0xfffffff8, 0x207, 0x3, 0x10, 0x404, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x6, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x2, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x7ff, 0x4, 0x3, 0xa, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0xffffff15, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0xfffffffe, 0xd, 0x68, {0xb, 0x2, 0x200, 0x7ffe, 0xfffa, 0xba}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x2, 0x9}}]}]}}]}, 0x478}}, 0x2004c840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) 581.024292ms ago: executing program 7 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000002ec0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="07089aa761d69f2021c10300f9000100", @ANYRES32, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010) 495.192965ms ago: executing program 7 (id=4688): sendmsg$inet(0xffffffffffffffff, 0x0, 0x50) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) unshare(0xa000400) epoll_create1(0x80000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x0, 0x50, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005700)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000003240)=[{0x0}], 0x1, &(0x7f0000003280)=[@tclass={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400b700) 285.066522ms ago: executing program 5 (id=4689): getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @remote}, &(0x7f00000000c0)=0xc) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000180)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) epoll_wait(r2, 0x0, 0x0, 0xf19) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r5, 0x40045109, &(0x7f00000001c0)=0xfffffff7) close_range(r1, 0xffffffffffffffff, 0x0) 24.62781ms ago: executing program 2 (id=4690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002f00)=[{&(0x7f0000000680)={0x0, &(0x7f0000000580)="d89139", 0x3, 0x3}, 0x0, 0x1}, {&(0x7f0000002e40)={0x0, &(0x7f00000006c0)="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", 0x2, 0xff5}, &(0x7f0000002e80)="d010031de0e8fea75a51835500607e483c92480d408bca7693a2592fea0541bf414640af708341635df975e0b8c882372a79d9dd325f059a2ce0178c6d0498ca0404256325b3", 0x2, 0x46}], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='rxrpc\x00', &(0x7f0000000140)=@secondary) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) memfd_create(0x0, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403003f"], 0xffffffffffffff1c) 0s ago: executing program 8 (id=4691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd3b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) (fail_nth: 7) kernel console output (not intermixed with test programs): 0, SerialNumber=0 [ 1176.951157][T12678] usb 6-1: config 0 descriptor?? [ 1176.972626][T12678] hub 6-1:0.0: bad descriptor, ignoring hub [ 1176.992733][T12678] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1177.018060][T12678] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1177.237790][ T3107] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 1177.460956][ T3107] isku 0003:1E7D:319C.002B: couldn't init struct isku_device [ 1177.483059][ T3107] isku 0003:1E7D:319C.002B: couldn't install keyboard [ 1177.495247][ T3107] isku 0003:1E7D:319C.002B: probe with driver isku failed with error -71 [ 1177.542950][ T3107] usb 7-1: USB disconnect, device number 35 [ 1178.498238][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.507919][T15721] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1178.522097][T15721] cdc_ncm 3-1:1.0: bind() failure [ 1178.535800][T15721] usbtest 3-1:1.0: Linux gadget zero [ 1178.546379][T15721] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1178.912365][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.574827][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.583933][T15721] usb 3-1: USB disconnect, device number 101 [ 1180.100709][T22223] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1180.382805][T22227] FAULT_INJECTION: forcing a failure. [ 1180.382805][T22227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.401899][T22227] CPU: 0 UID: 0 PID: 22227 Comm: syz.8.4299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.401933][T22227] Tainted: [L]=SOFTLOCKUP [ 1180.401942][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1180.401954][T22227] Call Trace: [ 1180.401961][T22227] [ 1180.401969][T22227] dump_stack_lvl+0x100/0x190 [ 1180.402000][T22227] should_fail_ex.cold+0x5/0xa [ 1180.402025][T22227] _copy_to_user+0x32/0xd0 [ 1180.402055][T22227] bpf_test_finish.isra.0+0x452/0x660 [ 1180.402085][T22227] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1180.402113][T22227] ? 0xffffffffa0205540 [ 1180.402128][T22227] ? 0xffffffffa0205540 [ 1180.402140][T22227] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 1180.402172][T22227] bpf_prog_test_run_xdp+0xa70/0x1670 [ 1180.402205][T22227] ? __fget_files+0x215/0x3d0 [ 1180.402223][T22227] ? lock_release+0x24d/0x310 [ 1180.402247][T22227] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1180.402280][T22227] ? fput+0x79/0x100 [ 1180.402300][T22227] ? __bpf_prog_get+0x97/0x2a0 [ 1180.402324][T22227] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1180.402353][T22227] __sys_bpf+0x2a12/0x4e80 [ 1180.402376][T22227] ? kstrtouint_from_user+0x70/0x1d0 [ 1180.402398][T22227] ? __pfx___sys_bpf+0x10/0x10 [ 1180.402415][T22227] ? rcu_is_watching+0x12/0xc0 [ 1180.402442][T22227] ? get_pid_task+0xfc/0x250 [ 1180.402468][T22227] ? rcu_is_watching+0x12/0xc0 [ 1180.402493][T22227] ? get_pid_task+0xfc/0x250 [ 1180.402520][T22227] ? lock_release+0x24d/0x310 [ 1180.402546][T22227] ? ksys_write+0x12a/0x250 [ 1180.402574][T22227] ? rcu_is_watching+0x12/0xc0 [ 1180.402604][T22227] ? preempt_count_add+0x76/0x150 [ 1180.402629][T22227] ? ksys_write+0x190/0x250 [ 1180.402656][T22227] ? rcu_is_watching+0x12/0xc0 [ 1180.402683][T22227] ? ksys_write+0x190/0x250 [ 1180.402709][T22227] ? lock_release+0x24d/0x310 [ 1180.402743][T22227] ? fput+0x79/0x100 [ 1180.402763][T22227] ? __x64_sys_bpf+0xce/0x140 [ 1180.402780][T22227] __x64_sys_bpf+0xce/0x140 [ 1180.402799][T22227] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1180.402825][T22227] do_syscall_64+0x115/0x870 [ 1180.402858][T22227] ? clear_bhb_loop+0x40/0x90 [ 1180.402882][T22227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.402903][T22227] RIP: 0033:0x7fa7cbd9ce59 [ 1180.402920][T22227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.402940][T22227] RSP: 002b:00007fa7ccbaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1180.402961][T22227] RAX: ffffffffffffffda RBX: 00007fa7cc015fa0 RCX: 00007fa7cbd9ce59 [ 1180.402976][T22227] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1180.402989][T22227] RBP: 00007fa7ccbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.403003][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.403016][T22227] R13: 00007fa7cc016038 R14: 00007fa7cc015fa0 R15: 00007ffe81cf0468 [ 1180.403038][T22227] [ 1180.782830][ T3107] Process accounting resumed [ 1180.906337][T22234] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1180.912777][T22234] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1180.989624][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.164304][T22247] netlink: 'syz.6.4306': attribute type 12 has an invalid length. [ 1181.172288][T22243] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14665] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22243] [ 1181.969656][T15721] usb 6-1: USB disconnect, device number 43 [ 1181.987282][T22262] fuse: fd is not a fuse device [ 1182.009650][T22263] netlink: 'syz.5.4311': attribute type 12 has an invalid length. [ 1182.142394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.152035][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.201333][T22284] overlayfs: failed to clone upperpath [ 1183.272970][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.368654][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.565399][T22288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.575499][T22288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.682435][T22294] tipc: Trying to set illegal importance in message [ 1184.694039][T22294] overlayfs: failed to resolve './file1/file0': -2 [ 1185.029201][T12678] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1185.712974][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.071858][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.234674][T12678] usb 6-1: Using ep0 maxpacket: 32 [ 1186.823389][T12678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.845041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.868888][T12678] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.894728][T22304] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1186.928150][T12678] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1186.984350][T12678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.015574][T12678] usb 6-1: config 0 descriptor?? [ 1187.033860][T12678] hub 6-1:0.0: bad descriptor, ignoring hub [ 1187.047168][T12678] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1187.064956][T12678] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1187.101311][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.327470][T22316] FAULT_INJECTION: forcing a failure. [ 1187.327470][T22316] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.340166][T22316] CPU: 0 UID: 0 PID: 22316 Comm: syz.8.4326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.340199][T22316] Tainted: [L]=SOFTLOCKUP [ 1187.340207][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1187.340220][T22316] Call Trace: [ 1187.340228][T22316] [ 1187.340236][T22316] dump_stack_lvl+0x100/0x190 [ 1187.340266][T22316] should_fail_ex.cold+0x5/0xa [ 1187.340290][T22316] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 1187.340315][T22316] should_failslab+0xc2/0x120 [ 1187.340340][T22316] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1187.340362][T22316] ? rcu_is_watching+0x12/0xc0 [ 1187.340392][T22316] ? alloc_empty_file+0x5b/0x1c0 [ 1187.340418][T22316] alloc_empty_file+0x5b/0x1c0 [ 1187.340442][T22316] alloc_file_pseudo+0x183/0x290 [ 1187.340465][T22316] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1187.340489][T22316] ? security_inode_init_security_anon+0x7b/0x230 [ 1187.340526][T22316] __do_sys_memfd_secret+0x11d/0x3d0 [ 1187.340552][T22316] do_syscall_64+0x115/0x870 [ 1187.340582][T22316] ? clear_bhb_loop+0x40/0x90 [ 1187.340605][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.340626][T22316] RIP: 0033:0x7fa7cbd9ce59 [ 1187.340643][T22316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.340663][T22316] RSP: 002b:00007fa7c9ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1187.340684][T22316] RAX: ffffffffffffffda RBX: 00007fa7cc016180 RCX: 00007fa7cbd9ce59 [ 1187.340698][T22316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 1187.340711][T22316] RBP: 00007fa7c9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.340725][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.340738][T22316] R13: 00007fa7cc016218 R14: 00007fa7cc016180 R15: 00007ffe81cf0468 [ 1187.340760][T22316] [ 1187.592309][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1187.752667][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1187.759551][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1187.771416][ T9] usb 3-1: config 8 has an invalid interface number: 17 but max is 0 [ 1187.779589][ T9] usb 3-1: config 8 has no interface number 0 [ 1187.786394][ T9] usb 3-1: config 8 interface 17 has no altsetting 0 [ 1187.794973][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4002, bcdDevice= 2.27 [ 1187.804297][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.812372][ T9] usb 3-1: Product: syz [ 1187.816590][ T9] usb 3-1: Manufacturer: syz [ 1187.821234][ T9] usb 3-1: SerialNumber: syz [ 1187.956230][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.047522][T22343] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4335'. [ 1188.056694][ T9] pegasus 3-1:8.17: Missing or invalid endpoints [ 1188.063865][ T9] usb 3-1: USB disconnect, device number 102 [ 1188.150284][T22347] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4337'. [ 1188.160611][T22347] FAULT_INJECTION: forcing a failure. [ 1188.160611][T22347] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.173220][T22347] CPU: 0 UID: 0 PID: 22347 Comm: syz.8.4337 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.173237][T22347] Tainted: [L]=SOFTLOCKUP [ 1188.173242][T22347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1188.173249][T22347] Call Trace: [ 1188.173253][T22347] [ 1188.173257][T22347] dump_stack_lvl+0x100/0x190 [ 1188.173277][T22347] should_fail_ex.cold+0x5/0xa [ 1188.173291][T22347] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 1188.173310][T22347] should_failslab+0xc2/0x120 [ 1188.173324][T22347] __kmalloc_cache_noprof+0x91/0x6c0 [ 1188.173340][T22347] ? call_usermodehelper_setup+0xaf/0x360 [ 1188.173355][T22347] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1188.173371][T22347] call_usermodehelper_setup+0xaf/0x360 [ 1188.173384][T22347] __request_module+0x3c7/0x6a0 [ 1188.173399][T22347] ? __pfx___request_module+0x10/0x10 [ 1188.173415][T22347] ? rcu_is_watching+0x12/0xc0 [ 1188.173432][T22347] ? crypto_alg_lookup+0x10c/0x1e0 [ 1188.173448][T22347] ? lock_release+0x24d/0x310 [ 1188.173462][T22347] ? crypto_alg_mod_lookup+0x11a/0x5d0 [ 1188.173478][T22347] crypto_alg_mod_lookup+0x257/0x5d0 [ 1188.173495][T22347] crypto_add_alg+0x28e/0x3b0 [ 1188.173511][T22347] ? __pfx_crypto_add_alg+0x10/0x10 [ 1188.173522][T22347] crypto_user_rcv_msg+0x2ed/0x570 [ 1188.173535][T22347] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 1188.173546][T22347] ? kasan_save_stack+0x3f/0x50 [ 1188.173558][T22347] ? kasan_save_stack+0x30/0x50 [ 1188.173569][T22347] ? kasan_save_track+0x14/0x30 [ 1188.173580][T22347] ? __kasan_slab_alloc+0x89/0x90 [ 1188.173592][T22347] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 1188.173604][T22347] ? kmalloc_reserve+0x148/0x350 [ 1188.173620][T22347] ? __alloc_skb+0x185/0x710 [ 1188.173631][T22347] ? netlink_alloc_large_skb+0x69/0x150 [ 1188.173648][T22347] ? netlink_sendmsg+0x680/0xda0 [ 1188.173663][T22347] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1188.173678][T22347] ? ___sys_sendmsg+0x190/0x1e0 [ 1188.173693][T22347] ? __sys_sendmsg+0x160/0x210 [ 1188.173704][T22347] ? do_syscall_64+0x115/0x870 [ 1188.173724][T22347] ? rcu_is_watching+0x12/0xc0 [ 1188.173740][T22347] ? trace_contention_end+0x126/0x160 [ 1188.173755][T22347] ? __mutex_lock+0x26d/0x1bd0 [ 1188.173765][T22347] netlink_rcv_skb+0x159/0x420 [ 1188.173782][T22347] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 1188.173794][T22347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1188.173813][T22347] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1188.173829][T22347] crypto_netlink_rcv+0x2a/0x40 [ 1188.173840][T22347] netlink_unicast+0x585/0x850 [ 1188.173858][T22347] ? __pfx_netlink_unicast+0x10/0x10 [ 1188.173876][T22347] netlink_sendmsg+0x8b0/0xda0 [ 1188.173893][T22347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1188.173911][T22347] ____sys_sendmsg+0xa4d/0xbe0 [ 1188.173926][T22347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1188.173943][T22347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1188.173959][T22347] ? kstrtouint_from_user+0x13c/0x1d0 [ 1188.173974][T22347] ___sys_sendmsg+0x190/0x1e0 [ 1188.173990][T22347] ? __pfx____sys_sendmsg+0x10/0x10 [ 1188.174006][T22347] ? get_pid_task+0x106/0x250 [ 1188.174025][T22347] ? rcu_is_watching+0x12/0xc0 [ 1188.174045][T22347] __sys_sendmsg+0x160/0x210 [ 1188.174058][T22347] ? __pfx___sys_sendmsg+0x10/0x10 [ 1188.174073][T22347] ? rcu_is_watching+0x12/0xc0 [ 1188.174089][T22347] do_syscall_64+0x115/0x870 [ 1188.174104][T22347] ? clear_bhb_loop+0x40/0x90 [ 1188.174117][T22347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.174128][T22347] RIP: 0033:0x7fa7cbd9ce59 [ 1188.174138][T22347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.174149][T22347] RSP: 002b:00007fa7ccbaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1188.174161][T22347] RAX: ffffffffffffffda RBX: 00007fa7cc015fa0 RCX: 00007fa7cbd9ce59 [ 1188.174168][T22347] RDX: 0000000020004000 RSI: 0000200000001300 RDI: 0000000000000005 [ 1188.174175][T22347] RBP: 00007fa7ccbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.174182][T22347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.174188][T22347] R13: 00007fa7cc016038 R14: 00007fa7cc015fa0 R15: 00007ffe81cf0468 [ 1188.174199][T22347] [ 1188.664545][T22354] netlink: 'syz.6.4340': attribute type 12 has an invalid length. [ 1188.761708][ T3107] usb 6-1: USB disconnect, device number 44 [ 1189.068407][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.282229][ T3107] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1189.324359][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.463141][ T3107] usb 6-1: Using ep0 maxpacket: 16 [ 1189.477366][ T3107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.487685][ T3107] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1189.499359][ T3107] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 1189.516087][ T3107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.526025][ T3107] usb 6-1: Product: syz [ 1189.530538][ T3107] usb 6-1: Manufacturer: syz [ 1189.535166][ T3107] usb 6-1: SerialNumber: syz [ 1189.580243][ T3107] usb 6-1: config 0 descriptor?? [ 1189.592295][ T3107] usb 6-1: selecting invalid altsetting 1 [ 1189.600653][ T3107] flexcop_usb: set interface failed. [ 1189.607303][ T3107] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 1189.780077][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4348'. [ 1189.911585][ T3107] usb 6-1: USB disconnect, device number 45 [ 1190.179936][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.192770][T22392] siw: device registration error -23 [ 1190.425614][ T5713] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1190.617977][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 1190.697451][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.811150][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1190.871038][ T5713] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1190.875092][T22396] netlink: 'syz.5.4352': attribute type 12 has an invalid length. [ 1190.894993][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.936472][ T5713] usb 3-1: config 0 descriptor?? [ 1191.064368][ T5713] hub 3-1:0.0: bad descriptor, ignoring hub [ 1191.075284][ T5713] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1191.085047][ T5713] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1191.217282][T22404] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4353'. [ 1192.108560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.135056][T22408] netlink: 'syz.6.4356': attribute type 21 has an invalid length. [ 1192.143209][T22408] netlink: 'syz.6.4356': attribute type 1 has an invalid length. [ 1192.143230][T22408] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4356'. [ 1192.407892][T22422] rdma_rxe: rxe_newlink: failed to add lo [ 1192.415107][T22422] netlink: 'syz.7.4361': attribute type 13 has an invalid length. [ 1192.425070][T22422] gretap0: refused to change device tx_queue_len [ 1192.431691][T22422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1192.512899][T22427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4363'. [ 1192.525388][ T30] audit: type=1400 audit(1782287614.057:3451): avc: denied { shutdown } for pid=22426 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1192.574518][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.606204][ T9] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1192.685161][T22431] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4365'. [ 1192.767976][ T9] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1192.779917][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1192.792287][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1192.807492][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1192.815687][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1192.825914][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1192.835188][ T9] usb 7-1: Product: syz [ 1192.839427][ T9] usb 7-1: Manufacturer: syz [ 1192.844050][ T9] usb 7-1: SerialNumber: syz [ 1192.849600][ T9] usb 7-1: config 0 descriptor?? [ 1192.855012][T22413] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1192.875870][ T9] usb 7-1: selecting invalid altsetting 0 [ 1193.258660][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.390959][T22439] vlan0: entered promiscuous mode [ 1193.426229][ T9] usb 7-1: USB disconnect, device number 36 [ 1193.458410][T22445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4368'. [ 1193.652319][T22439] bridge0: port 3(vlan0) entered blocking state [ 1193.662691][ T5720] usb 3-1: USB disconnect, device number 103 [ 1193.688309][T22439] bridge0: port 3(vlan0) entered disabled state [ 1193.727436][T22448] sctp: [Deprecated]: syz.8.4370 (pid 22448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.727436][T22448] Use struct sctp_sack_info instead [ 1193.729581][T22439] vlan0: entered allmulticast mode [ 1193.991336][T22439] bridge0: entered allmulticast mode [ 1194.008679][T22450] xt_connbytes: Forcing CT accounting to be enabled [ 1194.015279][T22450] set match dimension is over the limit! [ 1194.032829][T22439] vlan0: left allmulticast mode [ 1194.052143][T22439] bridge0: left allmulticast mode [ 1194.224617][ T30] audit: type=1400 audit(1782287615.647:3452): avc: denied { create } for pid=22459 comm="syz.2.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1194.264488][ T30] audit: type=1400 audit(1782287615.666:3453): avc: denied { setopt } for pid=22459 comm="syz.2.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1194.307208][T22461] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1195.241702][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.546102][ T3107] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1195.557070][T22476] syzkaller1: entered allmulticast mode [ 1195.717286][ T3107] usb 6-1: Using ep0 maxpacket: 16 [ 1195.729021][ T3107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1195.747789][ T3107] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1195.765726][ T3107] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1195.787503][ T3107] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.801435][ T3107] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1195.810240][ T3107] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1195.830958][ T3107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.839310][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.856137][ T3107] usb 6-1: Product: syz [ 1195.863280][ T3107] usb 6-1: Manufacturer: syz [ 1195.866834][ T5720] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1195.871197][ T3107] usb 6-1: SerialNumber: syz [ 1195.887741][T22468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1196.039452][ T5720] usb 7-1: Using ep0 maxpacket: 32 [ 1196.050530][ T5720] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.060955][ T5720] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1196.074231][ T5720] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1196.083406][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.092832][ T5720] usb 7-1: config 0 descriptor?? [ 1196.106691][ T5720] hub 7-1:0.0: bad descriptor, ignoring hub [ 1196.116685][ T5720] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1196.125062][ T5720] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1196.126264][ T3107] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input98 [ 1196.340651][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.353275][T22468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.373081][T22468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.400583][T22494] sctp: [Deprecated]: syz.8.4383 (pid 22494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.400583][T22494] Use struct sctp_sack_info instead [ 1196.409364][T22468] loop9: detected capacity change from 0 to 7 [ 1196.444801][T22468] Dev loop9: unable to read RDB block 7 [ 1196.455717][T22468] loop9: AHDI p1 p2 p3 [ 1196.467388][T22468] loop9: partition table partially beyond EOD, truncated [ 1196.473114][ T4962] bcm5974 6-1:1.0: could not read from device [ 1196.481088][T22468] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1196.497568][T22468] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1196.521890][ T3107] bcm5974 6-1:1.0: could not read from device [ 1196.542800][ T4962] bcm5974 6-1:1.0: could not read from device [ 1196.553743][ T3107] input: failed to attach handler mousedev to device input98, error: -5 [ 1196.570224][ T4962] bcm5974 6-1:1.0: could not read from device [ 1196.581810][ T3107] usb 6-1: USB disconnect, device number 46 [ 1196.590280][ T5600] bcm5974 6-1:1.0: could not read from device [ 1196.807685][ T5720] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1196.967982][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 1196.974376][ T5720] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1196.983622][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.992597][ T5720] usb 3-1: config 0 descriptor?? [ 1197.000181][ T5720] as10x_usb: device has been detected [ 1197.006197][ T5720] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1197.020198][ T5720] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1197.031622][ T5720] as10x_usb: error during firmware upload part1 [ 1197.038168][ T5720] Registered device nBox DVB-T Dongle [ 1197.364574][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.214201][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.244312][T22506] bond4: option xmit_hash_policy: invalid value (6) [ 1198.262438][T22506] bond4 (unregistering): Released all slaves [ 1198.438393][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1198.455590][T22512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1198.837392][T22529] netlink: 'syz.7.4391': attribute type 12 has an invalid length. [ 1199.074455][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.151383][T22538] vlan2: entered promiscuous mode [ 1199.162397][T22538] bridge0: entered promiscuous mode [ 1199.171583][T22538] bridge0: port 3(vlan2) entered blocking state [ 1199.178026][T22538] bridge0: port 3(vlan2) entered disabled state [ 1199.184797][T22538] vlan2: entered allmulticast mode [ 1199.190030][T22538] bridge0: entered allmulticast mode [ 1199.196678][T22538] vlan2: left allmulticast mode [ 1199.201640][T22538] bridge0: left allmulticast mode [ 1199.331083][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.480260][ T3107] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1199.662063][ T3107] usb 6-1: Using ep0 maxpacket: 32 [ 1199.669194][ T3107] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1199.678152][ T3107] usb 6-1: config 0 has no interface number 0 [ 1199.685246][ T3107] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1199.700539][ T3107] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1199.709838][ T3107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.718741][ T3107] usb 6-1: Product: syz [ 1199.723314][ T3107] usb 6-1: Manufacturer: syz [ 1199.740191][ T3107] usb 6-1: SerialNumber: syz [ 1199.757777][ T3107] usb 6-1: config 0 descriptor?? [ 1200.224065][T12678] usb 3-1: USB disconnect, device number 104 [ 1200.274810][T12678] Unregistered device nBox DVB-T Dongle [ 1200.276776][T12678] as10x_usb: device has been disconnected [ 1200.308660][T22538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.319772][T22538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.346015][ T3107] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1200.364436][ T3107] usb 6-1: USB disconnect, device number 47 [ 1200.432164][ T5713] usb 7-1: USB disconnect, device number 37 [ 1200.508532][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.548950][T22553] FAULT_INJECTION: forcing a failure. [ 1200.548950][T22553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.565223][T22553] CPU: 1 UID: 0 PID: 22553 Comm: syz.2.4398 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.565252][T22553] Tainted: [L]=SOFTLOCKUP [ 1200.565260][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.565273][T22553] Call Trace: [ 1200.565280][T22553] [ 1200.565288][T22553] dump_stack_lvl+0x100/0x190 [ 1200.565309][T22553] should_fail_ex.cold+0x5/0xa [ 1200.565324][T22553] _copy_from_user+0x2e/0xd0 [ 1200.565341][T22553] copy_msghdr_from_user+0x9f/0x4c0 [ 1200.565359][T22553] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1200.565377][T22553] ? kstrtouint_from_user+0x13c/0x1d0 [ 1200.565391][T22553] ___sys_sendmsg+0x106/0x1e0 [ 1200.565407][T22553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.565429][T22553] ? get_pid_task+0x106/0x250 [ 1200.565464][T22553] ? rcu_is_watching+0x12/0xc0 [ 1200.565493][T22553] __sys_sendmsg+0x160/0x210 [ 1200.565506][T22553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1200.565521][T22553] ? rcu_is_watching+0x12/0xc0 [ 1200.565537][T22553] do_syscall_64+0x115/0x870 [ 1200.565554][T22553] ? clear_bhb_loop+0x40/0x90 [ 1200.565567][T22553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.565578][T22553] RIP: 0033:0x7f8e5459ce59 [ 1200.565588][T22553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.565599][T22553] RSP: 002b:00007f8e553ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.565611][T22553] RAX: ffffffffffffffda RBX: 00007f8e54815fa0 RCX: 00007f8e5459ce59 [ 1200.565619][T22553] RDX: 0000000000028000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1200.565626][T22553] RBP: 00007f8e553ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.565633][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.565640][T22553] R13: 00007f8e54816038 R14: 00007f8e54815fa0 R15: 00007ffc77c99328 [ 1200.565651][T22553] [ 1201.120887][ T30] audit: type=1400 audit(1782287621.811:3454): avc: denied { bind } for pid=22549 comm="syz.6.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1201.259122][T22563] netlink: 'syz.7.4399': attribute type 27 has an invalid length. [ 1201.267099][T22563] netlink: 'syz.7.4399': attribute type 3 has an invalid length. [ 1201.440479][T22567] FAULT_INJECTION: forcing a failure. [ 1201.440479][T22567] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.453162][T22567] CPU: 1 UID: 0 PID: 22567 Comm: syz.2.4401 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.453194][T22567] Tainted: [L]=SOFTLOCKUP [ 1201.453201][T22567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.453214][T22567] Call Trace: [ 1201.453221][T22567] [ 1201.453229][T22567] dump_stack_lvl+0x100/0x190 [ 1201.453260][T22567] should_fail_ex.cold+0x5/0xa [ 1201.453284][T22567] ? __kmalloc_noprof+0xd6/0x820 [ 1201.453307][T22567] should_failslab+0xc2/0x120 [ 1201.453332][T22567] __kmalloc_noprof+0xfc/0x820 [ 1201.453354][T22567] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1201.453383][T22567] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1201.453410][T22567] genl_family_rcv_msg_doit+0xc7/0x300 [ 1201.453433][T22567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1201.453461][T22567] ? bpf_lsm_capable+0x9/0x10 [ 1201.453481][T22567] ? security_capable+0x80/0x260 [ 1201.453513][T22567] genl_rcv_msg+0x560/0x800 [ 1201.453542][T22567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.453563][T22567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1201.453584][T22567] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1201.453610][T22567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1201.453636][T22567] netlink_rcv_skb+0x159/0x420 [ 1201.453666][T22567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.453688][T22567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1201.453717][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.453751][T22567] ? __rcu_read_unlock+0x26a/0x5e0 [ 1201.453775][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.453806][T22567] genl_rcv+0x28/0x40 [ 1201.453825][T22567] netlink_unicast+0x585/0x850 [ 1201.453856][T22567] ? __pfx_netlink_unicast+0x10/0x10 [ 1201.453887][T22567] ? __pfx_bpf_lsm_netlink_send+0x10/0x10 [ 1201.453915][T22567] netlink_sendmsg+0x8b0/0xda0 [ 1201.453947][T22567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.453981][T22567] ____sys_sendmsg+0xa4d/0xbe0 [ 1201.454009][T22567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.454040][T22567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.454071][T22567] ? __css_rstat_updated+0x1ce/0x5a0 [ 1201.454099][T22567] ___sys_sendmsg+0x190/0x1e0 [ 1201.454129][T22567] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.454157][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.454185][T22567] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 1201.454213][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.454246][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.454284][T22567] __sys_sendmsg+0x160/0x210 [ 1201.454308][T22567] ? __pfx___sys_sendmsg+0x10/0x10 [ 1201.454335][T22567] ? trace_hardirqs_off+0x70/0x170 [ 1201.454362][T22567] ? rcu_is_watching+0x12/0xc0 [ 1201.454392][T22567] do_syscall_64+0x115/0x870 [ 1201.454421][T22567] ? clear_bhb_loop+0x40/0x90 [ 1201.454445][T22567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.454466][T22567] RIP: 0033:0x7f8e5459ce59 [ 1201.454483][T22567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.454504][T22567] RSP: 002b:00007f8e553ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.454528][T22567] RAX: ffffffffffffffda RBX: 00007f8e54816180 RCX: 00007f8e5459ce59 [ 1201.454543][T22567] RDX: 0000000004040800 RSI: 0000200000000480 RDI: 0000000000000008 [ 1201.454558][T22567] RBP: 00007f8e553ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.454571][T22567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.454584][T22567] R13: 00007f8e54816218 R14: 00007f8e54816180 R15: 00007ffc77c99328 [ 1201.454606][T22567] [ 1202.217828][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.434597][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.605286][T22577] Bluetooth: MGMT ver 1.23 [ 1202.709556][ T30] audit: type=1400 audit(1782287623.579:3455): avc: denied { append } for pid=22575 comm="syz.2.4404" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1202.743125][T22577] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1202.762981][ T189] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1203.066165][ T189] usb 6-1: device descriptor read/64, error -71 [ 1203.231371][T22593] tipc: Started in network mode [ 1203.236336][T22593] tipc: Node identity aaaaaaaaaa1d, cluster identity 4711 [ 1203.243814][T22593] tipc: Enabled bearer , priority 10 [ 1203.350560][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.371659][ T189] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1203.510648][ T189] usb 6-1: device descriptor read/64, error -71 [ 1203.628524][ T189] usb usb6-port1: attempt power cycle [ 1204.002384][ T189] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1204.025605][ T189] usb 6-1: device descriptor read/8, error -71 [ 1204.193196][ T30] audit: type=1400 audit(1782287624.908:3456): avc: denied { accept } for pid=22625 comm="syz.2.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1204.462301][ T5713] tipc: Node number set to 12036778 [ 1204.483836][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.647868][ T189] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1205.665462][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.066989][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.386637][ T189] usb 6-1: device descriptor read/8, error -71 [ 1206.400913][T22640] sctp: [Deprecated]: syz.6.4417 (pid 22640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1206.400913][T22640] Use struct sctp_sack_info instead [ 1206.504780][ T189] usb usb6-port1: unable to enumerate USB device [ 1206.513320][T22645] vlan2: entered promiscuous mode [ 1206.531920][T22645] bridge0: entered promiscuous mode [ 1206.561219][T22650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.199047][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.384880][ T30] audit: type=1400 audit(1782287627.957:3457): avc: denied { write } for pid=22661 comm="syz.6.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1207.628566][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.022834][T22671] vlan2: entered promiscuous mode [ 1208.028733][T22671] bridge0: port 3(vlan2) entered blocking state [ 1208.035341][T22671] bridge0: port 3(vlan2) entered disabled state [ 1208.041777][T22671] vlan2: entered allmulticast mode [ 1208.046923][T22671] bridge0: entered allmulticast mode [ 1208.052874][T22671] vlan2: left allmulticast mode [ 1208.058404][T22671] bridge0: left allmulticast mode [ 1208.312367][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.332449][ T189] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1208.471057][T15721] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1208.503183][ T189] usb 6-1: Using ep0 maxpacket: 32 [ 1208.509814][ T189] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1208.518236][ T189] usb 6-1: config 0 has no interface number 0 [ 1208.524386][ T189] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.539506][ T189] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1208.549180][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.557436][ T189] usb 6-1: Product: syz [ 1208.561828][ T189] usb 6-1: Manufacturer: syz [ 1208.566439][ T189] usb 6-1: SerialNumber: syz [ 1208.573976][ T189] usb 6-1: config 0 descriptor?? [ 1208.631484][T15721] usb 7-1: Using ep0 maxpacket: 16 [ 1208.638725][T15721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1208.647720][T15721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.658797][T15721] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1208.671908][T15721] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1208.681266][T15721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.690172][T15721] usb 7-1: Product: syz [ 1208.694423][T15721] usb 7-1: Manufacturer: syz [ 1208.699099][T15721] usb 7-1: SerialNumber: syz [ 1208.832696][T22671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.849209][ T189] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1208.863051][ T189] usb 6-1: USB disconnect, device number 52 [ 1208.920713][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.945617][T15721] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1208.955004][T15721] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1209.098474][T22681] netlink: 'syz.7.4430': attribute type 10 has an invalid length. [ 1209.106624][T22681] syz_tun: entered promiscuous mode [ 1209.115071][T22681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1209.209444][T15721] usb 7-1: 2:1 : can't get High Capability descriptor [ 1209.376844][T22685] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4431'. [ 1210.308965][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.355749][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.368007][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.670255][T15721] usb 7-1: USB disconnect, device number 38 [ 1211.691722][T22699] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4437'. [ 1211.718615][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.737043][T22700] netlink: 'syz.7.4436': attribute type 12 has an invalid length. [ 1212.091894][T22706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1212.170244][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.212872][ T3107] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1212.376120][ T3107] usb 6-1: Using ep0 maxpacket: 32 [ 1212.389524][ T3107] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1212.401516][ T3107] usb 6-1: config 0 has no interface number 0 [ 1212.407737][ T3107] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.429670][ T3107] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1212.440187][ T3107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.458868][ T3107] usb 6-1: Product: syz [ 1212.463067][ T3107] usb 6-1: Manufacturer: syz [ 1212.468831][ T3107] usb 6-1: SerialNumber: syz [ 1212.474457][ T3107] usb 6-1: config 0 descriptor?? [ 1212.710409][T22708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.729259][T22708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.843959][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.886291][ T189] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1212.903681][T22705] vlan2: entered promiscuous mode [ 1212.910842][T22705] bridge0: port 3(vlan2) entered blocking state [ 1212.920553][T22705] bridge0: port 3(vlan2) entered disabled state [ 1212.934475][T22705] vlan2: entered allmulticast mode [ 1212.945717][T22705] bridge0: entered allmulticast mode [ 1212.959161][T22705] vlan2: left allmulticast mode [ 1212.970938][T22705] bridge0: left allmulticast mode [ 1213.040705][ T3107] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1213.054311][ T3107] usb 6-1: USB disconnect, device number 53 [ 1213.057354][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 1213.081557][ T189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.102863][ T189] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1213.137374][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1213.158949][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.187524][T22714] FAULT_INJECTION: forcing a failure. [ 1213.187524][T22714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.205622][T22714] CPU: 1 UID: 0 PID: 22714 Comm: syz.6.4441 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.205651][T22714] Tainted: [L]=SOFTLOCKUP [ 1213.205658][T22714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1213.205670][T22714] Call Trace: [ 1213.205676][T22714] [ 1213.205684][T22714] dump_stack_lvl+0x100/0x190 [ 1213.205714][T22714] should_fail_ex.cold+0x5/0xa [ 1213.205739][T22714] _copy_to_user+0x32/0xd0 [ 1213.205770][T22714] simple_read_from_buffer+0xcb/0x170 [ 1213.205801][T22714] proc_fail_nth_read+0x1af/0x230 [ 1213.205825][T22714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.205849][T22714] ? security_file_permission+0x76/0x210 [ 1213.205870][T22714] ? rw_verify_area+0xce/0x6d0 [ 1213.205894][T22714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.205915][T22714] vfs_read+0x1e4/0xb40 [ 1213.205941][T22714] ? __pfx_vfs_read+0x10/0x10 [ 1213.205966][T22714] ? rcu_is_watching+0x12/0xc0 [ 1213.205995][T22714] ? __fget_files+0x21f/0x3d0 [ 1213.206017][T22714] ksys_read+0x12a/0x250 [ 1213.206043][T22714] ? __pfx_ksys_read+0x10/0x10 [ 1213.206077][T22714] ? rcu_is_watching+0x12/0xc0 [ 1213.206106][T22714] do_syscall_64+0x115/0x870 [ 1213.206133][T22714] ? clear_bhb_loop+0x40/0x90 [ 1213.206155][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.206176][T22714] RIP: 0033:0x7f35f1f5d68e [ 1213.206192][T22714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1213.206212][T22714] RSP: 002b:00007f35f2e32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1213.206232][T22714] RAX: ffffffffffffffda RBX: 00007f35f2e336c0 RCX: 00007f35f1f5d68e [ 1213.206245][T22714] RDX: 000000000000000f RSI: 00007f35f2e330a0 RDI: 0000000000000004 [ 1213.206256][T22714] RBP: 00007f35f2e33090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.206268][T22714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.206280][T22714] R13: 00007f35f2216038 R14: 00007f35f2215fa0 R15: 00007ffe86520e78 [ 1213.206299][T22714] [ 1213.206613][ T189] usb 3-1: config 0 descriptor?? [ 1213.261825][T22716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.528091][ T189] hub 3-1:0.0: bad descriptor, ignoring hub [ 1213.602557][ T189] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1213.618552][ T189] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1213.785948][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.792276][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.802649][T22727] input: syz1 as /devices/virtual/input/input99 [ 1213.821514][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1213.956008][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.046840][T22733] vlan0: entered promiscuous mode [ 1214.052900][T22733] bridge0: port 3(vlan0) entered blocking state [ 1214.059222][T22733] bridge0: port 3(vlan0) entered disabled state [ 1214.065696][T22733] vlan0: entered allmulticast mode [ 1214.070821][T22733] bridge0: entered allmulticast mode [ 1214.077555][T22733] vlan0: left allmulticast mode [ 1214.082395][T22733] bridge0: left allmulticast mode [ 1214.137235][ T5713] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1214.308361][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 1214.644243][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1214.653465][ T5713] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 107, changing to 7 [ 1214.664586][ T5713] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 1214.683056][ T5713] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 1214.692181][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.700453][ T5713] usb 6-1: Product: syz [ 1214.705000][ T5713] usb 6-1: Manufacturer: syz [ 1214.709638][ T5713] usb 6-1: SerialNumber: syz [ 1214.757539][T22744] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 1214.978307][ T5713] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1214.991580][ T5713] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1215.110501][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.160902][ T5713] usb 6-1: USB disconnect, device number 54 [ 1215.693264][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.766793][T13684] udevd[13684]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.026232][T22779] syzkaller0: entered promiscuous mode [ 1216.031847][T22779] syzkaller0: entered allmulticast mode [ 1216.040651][T22779] tipc: Enabled bearer , priority 0 [ 1216.048962][T22779] syzkaller0: mtu greater than device maximum [ 1216.056668][T22778] tipc: Resetting bearer [ 1216.063440][T22781] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4466'. [ 1216.075219][T22778] tipc: Disabling bearer [ 1216.187345][T22786] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1217.077884][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.187742][T22791] openvswitch: netlink: Actions may not be safe on all matching packets [ 1217.259016][T22792] fuse: fd is not a fuse device [ 1217.317259][ T189] usb 3-1: USB disconnect, device number 105 [ 1217.387018][T21034] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1217.889649][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.470920][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.725582][T21034] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1218.916314][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.938632][T21034] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1218.952771][T21034] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1218.964312][T21034] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1218.979770][T21034] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1219.008297][T21034] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1219.053347][T21034] usb 7-1: Product: syz [ 1219.086348][T21034] usb 7-1: Manufacturer: syz [ 1219.111604][T21034] usb 7-1: SerialNumber: syz [ 1219.136561][T21034] usb 7-1: config 0 descriptor?? [ 1219.166386][T22785] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1219.196496][T21034] usb 7-1: selecting invalid altsetting 0 [ 1219.260965][T22821] netlink: 'syz.7.4479': attribute type 10 has an invalid length. [ 1219.272065][T22821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.280408][T22821] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1219.294931][T22823] netlink: 'syz.5.4480': attribute type 12 has an invalid length. [ 1219.315192][T22821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.324914][ T5713] usb 7-1: USB disconnect, device number 39 [ 1219.356009][T22821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.388109][T22821] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1219.407120][ T30] audit: type=1400 audit(1782287639.200:3458): avc: denied { mount } for pid=22820 comm="syz.7.4479" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1219.458772][T22821] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1219.470503][T22821] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1219.479718][T22821] bond0 (unregistering): Released all slaves [ 1219.488764][T22829] tipc: Enabling of bearer rejected, failed to enable media [ 1219.601652][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.996709][T15721] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1220.169910][T15721] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1220.186053][T15721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.194143][T15721] usb 3-1: Product: syz [ 1220.198512][T15721] usb 3-1: Manufacturer: syz [ 1220.203666][T15721] usb 3-1: SerialNumber: syz [ 1220.298644][T22847] FAULT_INJECTION: forcing a failure. [ 1220.298644][T22847] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.315258][T22847] CPU: 1 UID: 0 PID: 22847 Comm: syz.5.4489 Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.315289][T22847] Tainted: [L]=SOFTLOCKUP [ 1220.315297][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1220.315309][T22847] Call Trace: [ 1220.315317][T22847] [ 1220.315323][T22847] dump_stack_lvl+0x100/0x190 [ 1220.315354][T22847] should_fail_ex.cold+0x5/0xa [ 1220.315377][T22847] ? fs_reclaim_acquire+0x70/0x100 [ 1220.315403][T22847] should_failslab+0xc2/0x120 [ 1220.315426][T22847] __kmalloc_noprof+0xfc/0x820 [ 1220.315448][T22847] ? rcu_is_watching+0x12/0xc0 [ 1220.315479][T22847] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1220.315505][T22847] tomoyo_realpath_from_path+0xb6/0x690 [ 1220.315531][T22847] tomoyo_path_number_perm+0x23c/0x580 [ 1220.315557][T22847] ? tomoyo_path_number_perm+0x22e/0x580 [ 1220.315578][T22847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1220.315613][T22847] ? preempt_count_add+0x76/0x150 [ 1220.315646][T22847] ? rcu_is_watching+0x12/0xc0 [ 1220.315670][T22847] ? __fget_files+0x215/0x3d0 [ 1220.315680][T22847] ? hook_file_ioctl_common+0x140/0x440 [ 1220.315695][T22847] ? lock_release+0x24d/0x310 [ 1220.315709][T22847] ? __fget_files+0x21f/0x3d0 [ 1220.315720][T22847] security_file_ioctl+0xd3/0x230 [ 1220.315735][T22847] __x64_sys_ioctl+0xb7/0x210 [ 1220.315762][T22847] do_syscall_64+0x115/0x870 [ 1220.315792][T22847] ? clear_bhb_loop+0x40/0x90 [ 1220.315815][T22847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.315827][T22847] RIP: 0033:0x7f170339ce59 [ 1220.315837][T22847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.315848][T22847] RSP: 002b:00007f17042f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.315860][T22847] RAX: ffffffffffffffda RBX: 00007f1703615fa0 RCX: 00007f170339ce59 [ 1220.315868][T22847] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000003 [ 1220.315875][T22847] RBP: 00007f17042f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.315884][T22847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.315896][T22847] R13: 00007f1703616038 R14: 00007f1703615fa0 R15: 00007ffce937a4c8 [ 1220.315917][T22847] [ 1220.337637][T22847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1220.521095][T22817] support for cryptoloop has been removed. Use dm-crypt instead. [ 1220.598356][T15721] rtl8150 3-1:1.0: couldn't reset the device [ 1220.604764][T15721] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1220.617339][T15721] usb 3-1: USB disconnect, device number 106 [ 1220.649863][T22855] vlan0: entered promiscuous mode [ 1220.655918][T22855] bridge0: port 3(vlan0) entered blocking state [ 1220.662397][T22855] bridge0: port 3(vlan0) entered disabled state [ 1220.668772][T22855] vlan0: entered allmulticast mode [ 1220.678586][T22855] bridge0: entered allmulticast mode [ 1220.684070][ T5713] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1220.697710][T22855] vlan0: left allmulticast mode [ 1220.702800][T22855] bridge0: left allmulticast mode [ 1220.712231][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.878740][ T5713] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.891634][ T5713] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1220.903002][ T5713] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1220.919531][ T5713] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1220.938005][ T5713] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1220.947704][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1220.955897][ T5713] usb 7-1: Product: syz [ 1220.960557][ T5713] usb 7-1: Manufacturer: syz [ 1220.966285][ T5713] usb 7-1: SerialNumber: syz [ 1220.992024][ T5713] usb 7-1: config 0 descriptor?? [ 1221.024243][T22851] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1221.085875][ T5713] usb 7-1: selecting invalid altsetting 0 [ 1221.497383][T22870] netlink: 'syz.2.4497': attribute type 12 has an invalid length. [ 1221.824453][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.166218][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.144259][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.187093][T22880] syzkaller0: entered promiscuous mode [ 1223.192757][T22880] syzkaller0: entered allmulticast mode [ 1223.653213][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 1223.726718][ T30] audit: type=1400 audit(1782287643.241:3459): avc: denied { mounton } for pid=22882 comm="syz.2.4501" path="/proc/877/task" dev="proc" ino=91076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1223.889725][T21051] usb 7-1: USB disconnect, device number 40 [ 1224.230765][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.524240][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.628778][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.927220][T22914] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4508'. [ 1226.766749][ T30] audit: type=1400 audit(1782287646.057:3460): avc: denied { map } for pid=22917 comm="syz.2.4510" path="socket:[91645]" dev="sockfs" ino=91645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1226.807944][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.855771][T22933] FAULT_INJECTION: forcing a failure. [ 1226.855771][T22933] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.875475][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.8.4513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.875506][T22933] Tainted: [L]=SOFTLOCKUP [ 1226.875513][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.875526][T22933] Call Trace: [ 1226.875533][T22933] [ 1226.875541][T22933] dump_stack_lvl+0x100/0x190 [ 1226.875572][T22933] should_fail_ex.cold+0x5/0xa [ 1226.875595][T22933] ? fs_reclaim_acquire+0x70/0x100 [ 1226.875622][T22933] should_failslab+0xc2/0x120 [ 1226.875647][T22933] __kmalloc_noprof+0xfc/0x820 [ 1226.875668][T22933] ? rcu_is_watching+0x12/0xc0 [ 1226.875702][T22933] ? tomoyo_encode2+0xfb/0x3c0 [ 1226.875728][T22933] tomoyo_encode2+0xfb/0x3c0 [ 1226.875752][T22933] ? __get_fs_type+0xe3/0x200 [ 1226.875776][T22933] tomoyo_encode+0x29/0x50 [ 1226.875798][T22933] tomoyo_mount_acl+0x388/0x8b0 [ 1226.875818][T22933] ? rcu_is_watching+0x12/0xc0 [ 1226.875846][T22933] ? is_bpf_text_address+0x8a/0x1a0 [ 1226.875871][T22933] ? lock_release+0x24d/0x310 [ 1226.875894][T22933] ? bpf_ksym_find+0x128/0x1c0 [ 1226.875923][T22933] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1226.875943][T22933] ? kernel_text_address+0x8d/0x100 [ 1226.875966][T22933] ? unwind_get_return_address+0x59/0xa0 [ 1226.876009][T22933] ? rcu_is_watching+0x12/0xc0 [ 1226.876037][T22933] ? lock_acquire+0x301/0x370 [ 1226.876059][T22933] ? kasan_save_stack+0x3f/0x50 [ 1226.876080][T22933] ? tomoyo_domain+0xb2/0x150 [ 1226.876105][T22933] ? tomoyo_profile+0x47/0x60 [ 1226.876130][T22933] tomoyo_mount_permission+0x214/0x460 [ 1226.876151][T22933] ? tomoyo_mount_permission+0x1f6/0x460 [ 1226.876173][T22933] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1226.876200][T22933] security_sb_mount+0xdd/0x270 [ 1226.876230][T22933] path_mount+0x158/0x23d0 [ 1226.876255][T22933] ? __pfx_path_mount+0x10/0x10 [ 1226.876277][T22933] ? putname+0xb1/0x110 [ 1226.876297][T22933] ? kmem_cache_free+0x127/0x6b0 [ 1226.876332][T22933] ? __x64_sys_mount+0x293/0x310 [ 1226.876352][T22933] __x64_sys_mount+0x293/0x310 [ 1226.876375][T22933] ? __pfx___x64_sys_mount+0x10/0x10 [ 1226.876400][T22933] ? rcu_is_watching+0x12/0xc0 [ 1226.876429][T22933] do_syscall_64+0x115/0x870 [ 1226.876457][T22933] ? clear_bhb_loop+0x40/0x90 [ 1226.876500][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.876520][T22933] RIP: 0033:0x7fa7cbd9ce59 [ 1226.876536][T22933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.876555][T22933] RSP: 002b:00007fa7ccbaa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1226.876575][T22933] RAX: ffffffffffffffda RBX: 00007fa7cc015fa0 RCX: 00007fa7cbd9ce59 [ 1226.876589][T22933] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 1226.876603][T22933] RBP: 00007fa7ccbaa090 R08: 0000200000000080 R09: 0000000000000000 [ 1226.876616][T22933] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1226.876628][T22933] R13: 00007fa7cc016038 R14: 00007fa7cc015fa0 R15: 00007ffe81cf0468 [ 1226.876646][T22933] [ 1227.714173][T15721] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1227.864605][T22956] FAULT_INJECTION: forcing a failure. [ 1227.864605][T22956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.879043][T15721] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1227.881455][T22956] CPU: 1 UID: 0 PID: 22956 Comm: syz.2.4522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.881486][T22956] Tainted: [L]=SOFTLOCKUP [ 1227.881494][T22956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1227.881507][T22956] Call Trace: [ 1227.881513][T22956] [ 1227.881521][T22956] dump_stack_lvl+0x100/0x190 [ 1227.881551][T22956] should_fail_ex.cold+0x5/0xa [ 1227.881576][T22956] _copy_from_user+0x2e/0xd0 [ 1227.881606][T22956] __sys_bpf+0x2f5/0x4e80 [ 1227.881628][T22956] ? kstrtouint_from_user+0x70/0x1d0 [ 1227.881652][T22956] ? __pfx___sys_bpf+0x10/0x10 [ 1227.881669][T22956] ? rcu_is_watching+0x12/0xc0 [ 1227.881698][T22956] ? get_pid_task+0xfc/0x250 [ 1227.881726][T22956] ? rcu_is_watching+0x12/0xc0 [ 1227.881753][T22956] ? get_pid_task+0xfc/0x250 [ 1227.881780][T22956] ? lock_release+0x24d/0x310 [ 1227.881809][T22956] ? ksys_write+0x12a/0x250 [ 1227.881835][T22956] ? rcu_is_watching+0x12/0xc0 [ 1227.881864][T22956] ? preempt_count_add+0x76/0x150 [ 1227.881888][T22956] ? ksys_write+0x190/0x250 [ 1227.881918][T22956] ? rcu_is_watching+0x12/0xc0 [ 1227.881945][T22956] ? ksys_write+0x190/0x250 [ 1227.881970][T22956] ? lock_release+0x24d/0x310 [ 1227.882002][T22956] ? fput+0x79/0x100 [ 1227.882024][T22956] ? __x64_sys_bpf+0xce/0x140 [ 1227.882043][T22956] __x64_sys_bpf+0xce/0x140 [ 1227.882062][T22956] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1227.882090][T22956] do_syscall_64+0x115/0x870 [ 1227.882119][T22956] ? clear_bhb_loop+0x40/0x90 [ 1227.882141][T22956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.882162][T22956] RIP: 0033:0x7f8e5459ce59 [ 1227.882177][T22956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.882197][T22956] RSP: 002b:00007f8e553ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1227.882217][T22956] RAX: ffffffffffffffda RBX: 00007f8e54815fa0 RCX: 00007f8e5459ce59 [ 1227.882231][T22956] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1227.882244][T22956] RBP: 00007f8e553ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.882256][T22956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.882268][T22956] R13: 00007f8e54816038 R14: 00007f8e54815fa0 R15: 00007ffc77c99328 [ 1227.882289][T22956] [ 1228.116024][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.126825][T15721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.136838][T15721] usb 6-1: Product: syz [ 1228.141516][T15721] usb 6-1: Manufacturer: syz [ 1228.147418][T15721] usb 6-1: SerialNumber: syz [ 1228.160337][T21051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.178924][T15721] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1228.200720][T21034] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1228.372602][T22975] syzkaller0: entered promiscuous mode [ 1228.398377][T22975] syzkaller0: entered allmulticast mode [ 1228.454520][T22979] fuse: fd is not a fuse device [ 1228.472140][T22981] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4532'. [ 1228.561525][T22989] FAULT_INJECTION: forcing a failure. [ 1228.561525][T22989] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.574218][T22989] CPU: 0 UID: 0 PID: 22989 Comm: syz.8.4535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.574237][T22989] Tainted: [L]=SOFTLOCKUP [ 1228.574241][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.574248][T22989] Call Trace: [ 1228.574252][T22989] [ 1228.574256][T22989] dump_stack_lvl+0x100/0x190 [ 1228.574274][T22989] should_fail_ex.cold+0x5/0xa [ 1228.574291][T22989] ? fs_reclaim_acquire+0x70/0x100 [ 1228.574306][T22989] should_failslab+0xc2/0x120 [ 1228.574320][T22989] __kmalloc_noprof+0xfc/0x820 [ 1228.574331][T22989] ? rcu_is_watching+0x12/0xc0 [ 1228.574349][T22989] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1228.574366][T22989] tomoyo_realpath_from_path+0xb6/0x690 [ 1228.574380][T22989] tomoyo_path_number_perm+0x23c/0x580 [ 1228.574397][T22989] ? tomoyo_path_number_perm+0x22e/0x580 [ 1228.574414][T22989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1228.574433][T22989] ? preempt_count_add+0x76/0x150 [ 1228.574460][T22989] ? rcu_is_watching+0x12/0xc0 [ 1228.574487][T22989] ? __fget_files+0x215/0x3d0 [ 1228.574505][T22989] ? hook_file_ioctl_common+0x140/0x440 [ 1228.574525][T22989] ? lock_release+0x24d/0x310 [ 1228.574539][T22989] ? __fget_files+0x21f/0x3d0 [ 1228.574550][T22989] security_file_ioctl+0xd3/0x230 [ 1228.574562][T22989] __x64_sys_ioctl+0xb7/0x210 [ 1228.574578][T22989] do_syscall_64+0x115/0x870 [ 1228.574594][T22989] ? clear_bhb_loop+0x40/0x90 [ 1228.574608][T22989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.574619][T22989] RIP: 0033:0x7fa7cbd9ce59 [ 1228.574629][T22989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.574640][T22989] RSP: 002b:00007fa7ccbaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.574651][T22989] RAX: ffffffffffffffda RBX: 00007fa7cc015fa0 RCX: 00007fa7cbd9ce59 [ 1228.574659][T22989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1228.574666][T22989] RBP: 00007fa7ccbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.574673][T22989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.574680][T22989] R13: 00007fa7cc016038 R14: 00007fa7cc015fa0 R15: 00007ffe81cf0468 [ 1228.574691][T22989] [ 1228.574725][T22989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1228.676368][ T3107] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1228.692975][T15721] usb 6-1: USB disconnect, device number 55 [ 1228.872834][T21051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.898304][ T30] audit: type=1326 audit(1782287648.077:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22986 comm="syz.7.4534" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab4379ce59 code=0x0 [ 1229.073485][ T3107] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1229.081781][ T3107] usb 3-1: config 0 has no interface number 0 [ 1229.088186][ T3107] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 29760, setting to 64 [ 1229.101841][ T3107] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1229.111093][ T3107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.119214][ T3107] usb 3-1: Product: syz [ 1229.123461][ T3107] usb 3-1: Manufacturer: syz [ 1229.128130][ T3107] usb 3-1: SerialNumber: syz [ 1229.133839][ T3107] usb 3-1: config 0 descriptor?? [ 1229.140080][T22975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1229.264551][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.350240][T21034] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1229.375879][T21034] ath9k_htc: Failed to initialize the device [ 1229.389881][T15721] usb 6-1: ath9k_htc: USB layer deinitialized [ 1229.595846][T23007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4540'. [ 1229.606628][T22975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1230.405349][ T3107] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1230.428005][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.429944][ T3107] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1230.452791][ T3107] asix 3-1:0.251: probe with driver asix failed with error -5 [ 1230.465516][ T3107] usb 3-1: USB disconnect, device number 107 [ 1230.492968][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4542'. [ 1230.805708][T21034] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1230.953484][T21034] usb 6-1: device descriptor read/64, error -71 [ 1231.210085][T21034] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1231.348978][T21034] usb 6-1: device descriptor read/64, error -71 [ 1231.466876][T21034] usb usb6-port1: attempt power cycle [ 1231.573890][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.699205][ T30] audit: type=1326 audit(1782287650.697:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23015 comm="syz.2.4543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5459ce59 code=0x7fc00000 [ 1231.830078][T21034] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1231.864906][T21034] usb 6-1: device descriptor read/8, error -71 [ 1231.912762][T23029] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1231.989795][T23029] random: crng reseeded on system resumption [ 1232.021814][ T30] audit: type=1400 audit(1782287650.996:3463): avc: denied { ioctl } for pid=23028 comm="syz.2.4547" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1232.088028][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.140240][T21034] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1232.173655][T21034] usb 6-1: device descriptor read/8, error -71 [ 1232.256491][ T30] audit: type=1400 audit(1782287651.220:3464): avc: denied { mounton } for pid=23038 comm="syz.8.4551" path="cgroup:[4026533036]" dev="nsfs" ino=4026533036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1232.290728][T21034] usb usb6-port1: unable to enumerate USB device [ 1232.428754][ T3107] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1232.601653][ T3107] usb 7-1: Using ep0 maxpacket: 8 [ 1232.608348][ T3107] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1232.617089][ T3107] usb 7-1: config 86 has an invalid interface number: 149 but max is 0 [ 1232.625538][ T3107] usb 7-1: config 86 has no interface number 0 [ 1232.631725][ T3107] usb 7-1: config 86 interface 149 has no altsetting 0 [ 1232.640390][ T3107] usb 7-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 1232.649474][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.657477][ T3107] usb 7-1: Product: syz [ 1232.661628][ T3107] usb 7-1: Manufacturer: syz [ 1232.666313][ T3107] usb 7-1: SerialNumber: syz [ 1232.685627][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.966499][T23036] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1233.011881][ T3107] belkin_sa 7-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1233.024730][ T3107] usb 7-1: bcdDevice: 0a5c, bfc: 0 [ 1233.032149][ T3107] usb 7-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1233.044392][ T3107] usb 7-1: USB disconnect, device number 41 [ 1233.052321][ T3107] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1233.065887][ T3107] belkin_sa 7-1:86.149: device disconnected [ 1233.358812][T21034] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1233.519191][T21034] usb 3-1: Using ep0 maxpacket: 32 [ 1233.527015][T21034] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1233.536154][T21034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.544845][T21034] usb 3-1: Product: syz [ 1233.549010][T21034] usb 3-1: Manufacturer: syz [ 1233.553990][T21034] usb 3-1: SerialNumber: syz [ 1233.559484][T21034] usb 3-1: config 0 descriptor?? [ 1233.566843][T21034] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1233.574461][T21034] dvb-usb: bulk message failed: -22 (4/0) [ 1233.580178][T21034] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1233.590403][T21034] dvb-usb: bulk message failed: -22 (5/0) [ 1233.596156][T21034] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1233.607688][T21034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1233.617763][T21034] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1233.626391][T21034] usb 3-1: media controller created [ 1233.684491][T21034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1233.816131][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.901893][T21034] usb 3-1: selecting invalid altsetting 3 [ 1233.910509][T21034] ttusb2: set interface to alts=3 failed [ 1233.937916][T21034] DVB: Unable to find symbol tda10086_attach() [ 1233.944165][T21034] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1233.960521][T21034] dvb-usb: bulk message failed: -22 (4/0) [ 1233.971397][T21034] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1233.982232][T21034] dvb-usb: bulk message failed: -22 (5/0) [ 1233.988164][T21034] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1234.011524][T21034] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1234.048801][T21034] usb 3-1: USB disconnect, device number 108 [ 1234.080397][T23063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=23063 comm=syz.5.4560 [ 1234.242789][T21034] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1234.289270][T15721] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1234.421854][T23069] pim6reg: entered allmulticast mode [ 1234.540314][T23068] pim6reg: left allmulticast mode [ 1234.644354][T15721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1234.657074][T15721] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1234.688170][T15721] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1234.692938][T23077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1234.729075][T15721] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1234.757239][T15721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.765555][T15721] usb 7-1: Product: syz [ 1234.769744][T15721] usb 7-1: Manufacturer: syz [ 1234.774426][T15721] usb 7-1: SerialNumber: syz [ 1234.909639][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.241189][T23054] comedi comedi3: comedi_test: 8193 microvolt, 100000 microsecond waveform attached [ 1235.254969][T21051] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1235.279095][T23054] input: syz0 as /devices/virtual/input/input100 [ 1235.302927][T15721] usb 7-1: Can't get UAC3 power state for id 10 [ 1235.328729][T15721] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 1235.338087][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.351350][T15721] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1235.368614][T15721] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1235.389299][T15721] usb 7-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1235.438456][T21051] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1235.456427][T21051] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1235.464666][T15721] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1235.466946][T21051] usb 6-1: config 150 has no interface number 0 [ 1235.480233][T21051] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1235.490140][T21051] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1235.498488][T15721] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1235.499755][T21051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.515054][T21051] usb 6-1: Product: syz [ 1235.521789][T21051] usb 6-1: Manufacturer: syz [ 1235.529592][T15721] usb 7-1: USB disconnect, device number 42 [ 1235.532453][T21051] usb 6-1: SerialNumber: syz [ 1236.021070][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.205079][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.474763][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 1237.576735][ T3107] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1237.582868][ T3107] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1237.609053][T21051] xr_serial 6-1:150.204: skipping garbage [ 1237.615468][T21051] xr_serial 6-1:150.204: xr_serial converter detected [ 1237.629686][T21051] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1237.639335][T21051] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1237.912982][T23107] FAULT_INJECTION: forcing a failure. [ 1237.912982][T23107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.926248][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.6.4574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1237.926274][T23107] Tainted: [L]=SOFTLOCKUP [ 1237.926278][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1237.926286][T23107] Call Trace: [ 1237.926291][T23107] [ 1237.926296][T23107] dump_stack_lvl+0x100/0x190 [ 1237.926316][T23107] should_fail_ex.cold+0x5/0xa [ 1237.926331][T23107] strncpy_from_user+0x3b/0x2d0 [ 1237.926348][T23107] do_getname+0x78/0x390 [ 1237.926362][T23107] __x64_sys_execve+0x76/0xd0 [ 1237.926378][T23107] do_syscall_64+0x115/0x870 [ 1237.926395][T23107] ? clear_bhb_loop+0x40/0x90 [ 1237.926408][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.926420][T23107] RIP: 0033:0x7f35f1f9ce59 [ 1237.926429][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.926441][T23107] RSP: 002b:00007f35f2e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1237.926453][T23107] RAX: ffffffffffffffda RBX: 00007f35f2216090 RCX: 00007f35f1f9ce59 [ 1237.926461][T23107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1237.926468][T23107] RBP: 00007f35f2e12090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.926475][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.926482][T23107] R13: 00007f35f2216128 R14: 00007f35f2216090 R15: 00007ffe86520e78 [ 1237.926493][T23107] [ 1238.332134][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.352525][T21051] usb 6-1: USB disconnect, device number 60 [ 1238.371546][T21051] xr_serial 6-1:150.204: device disconnected [ 1238.384923][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1238.410050][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1238.419319][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.428055][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1238.441003][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1238.493691][T23093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1238.586922][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.441857][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.783895][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 1239.963665][ T3107] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1240.045582][ T3107] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1240.243528][T23158] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4583'. [ 1240.555473][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.783143][ T3107] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1241.805324][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.849602][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.900670][ T5713] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1241.954130][ T3107] usb 7-1: Using ep0 maxpacket: 8 [ 1241.961109][ T3107] usb 7-1: config 2 has an invalid interface number: 121 but max is 3 [ 1241.970038][ T3107] usb 7-1: config 2 has an invalid interface number: 77 but max is 3 [ 1241.978856][ T3107] usb 7-1: config 2 has an invalid interface number: 18 but max is 3 [ 1241.987512][ T3107] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1241.996210][ T3107] usb 7-1: config 2 has an invalid interface number: 222 but max is 3 [ 1242.004413][ T3107] usb 7-1: config 2 has no interface number 0 [ 1242.010632][ T3107] usb 7-1: config 2 has no interface number 1 [ 1242.016709][ T3107] usb 7-1: config 2 has no interface number 2 [ 1242.022780][ T3107] usb 7-1: config 2 has no interface number 3 [ 1242.028886][ T3107] usb 7-1: config 2 interface 121 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1242.039995][ T3107] usb 7-1: config 2 interface 121 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1242.051167][ T3107] usb 7-1: config 2 interface 121 altsetting 15 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1242.063009][ T3107] usb 7-1: config 2 interface 121 altsetting 15 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1242.073028][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 1242.078258][ T3107] usb 7-1: config 2 interface 77 altsetting 247 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1242.091331][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0xD, skipping [ 1242.110529][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 1242.122687][ T5713] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1242.133993][ T3107] usb 7-1: config 2 interface 77 altsetting 247 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1242.145504][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.155330][ T5713] usb 3-1: Product: syz [ 1242.160547][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 1242.172432][ T5713] usb 3-1: Manufacturer: syz [ 1242.177131][ T5713] usb 3-1: SerialNumber: syz [ 1242.183696][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 1242.239379][ T5713] usb 3-1: config 0 descriptor?? [ 1242.249031][ T5713] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1242.257596][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0xD, skipping [ 1242.271870][ T5713] dvb-usb: bulk message failed: -22 (4/0) [ 1242.278089][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 1242.289048][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1242.327336][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0x3, skipping [ 1242.343777][ T5713] dvb-usb: bulk message failed: -22 (5/0) [ 1242.366877][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1242.388721][ T3107] usb 7-1: config 2 interface 77 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 1242.437586][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1242.449401][ T3107] usb 7-1: config 2 interface 18 altsetting 1 endpoint 0xE has invalid maxpacket 1552, setting to 64 [ 1242.490193][ T5713] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1242.511771][ T3107] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1242.582830][ T5713] usb 3-1: media controller created [ 1242.627536][ T3107] usb 7-1: config 2 interface 18 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1242.715851][ T3107] usb 7-1: config 2 interface 18 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1242.776471][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1242.801873][ T3107] usb 7-1: config 2 interface 18 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1242.865621][T21051] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1242.885382][ T3107] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1242.952280][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.958350][ T5713] usb 3-1: selecting invalid altsetting 3 [ 1242.976343][ T3107] usb 7-1: config 2 interface 18 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1242.999106][ T5713] ttusb2: set interface to alts=3 failed [ 1243.026853][ T3107] usb 7-1: config 2 interface 222 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1243.085415][T21051] usb 6-1: device descriptor read/64, error -71 [ 1243.133917][ T3107] usb 7-1: config 2 interface 222 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1243.235901][ T3107] usb 7-1: config 2 interface 222 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1243.356301][ T3107] usb 7-1: config 2 interface 222 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1243.419425][T21051] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1243.490329][ T3107] usb 7-1: config 2 interface 222 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1243.543204][ T5713] DVB: Unable to find symbol tda10086_attach() [ 1243.561215][ T3107] usb 7-1: config 2 interface 121 has no altsetting 0 [ 1243.571896][ T5713] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1243.584378][ T3107] usb 7-1: config 2 interface 77 has no altsetting 0 [ 1243.591586][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1243.607267][ T3107] usb 7-1: config 2 interface 18 has no altsetting 0 [ 1243.607786][ T5713] dvb-usb: bulk message failed: -22 (4/0) [ 1243.620500][T21051] usb 6-1: device descriptor read/64, error -71 [ 1243.630996][ T3107] usb 7-1: config 2 interface 222 has no altsetting 0 [ 1243.667526][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1243.696403][ T3107] usb 7-1: New USB device found, idVendor=12d1, idProduct=98fd, bcdDevice=86.da [ 1243.747087][ T5713] dvb-usb: bulk message failed: -22 (5/0) [ 1243.747144][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1243.747416][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1243.760905][T21051] usb usb6-port1: attempt power cycle [ 1243.844903][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.934780][ T5713] usb 3-1: USB disconnect, device number 109 [ 1243.955471][ T3107] usb 7-1: Product: 菠鬺⡤檦䤳뽖ꪬ㜱웷雨｢틘썿∴ᘃ﬈쮘㈡⤀䱉濱ῌ⶗䀦ꅤ汩킑ꖒ瀰䍍⛁眘甹㡣䟜ഇﾊ鵻蹭ꢸ藾쨱ᬪ鞍焕⨕็ [ 1243.981311][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1243.992875][ T3107] usb 7-1: Manufacturer: 䦗⮭쟳냠ᙦ樈蛎㤆뎈ꅜ㞟翣嚫캴᭡弥╋㱼왏ﲣ࿮ဳ⍿潾疦ʋ氉釐ꨂ흠艰煄洗䩢㸮髲ﺲᲬ戏ᑮ꘳쑳筘窜姑ꉵ枽꒎✎套ᘽ波䬉쨑Բ鋅㲺⯒態肋ⲅ횎ᦿ쀸 [ 1244.021284][ T3107] usb 7-1: SerialNumber: syz [ 1244.026811][ T3107] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 1244.035688][ T3107] usb 7-1: no configuration chosen from 1 choice [ 1244.062761][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.075836][ T30] audit: type=1400 audit(1782287662.277:3465): avc: denied { shutdown } for pid=23210 comm="syz.7.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1244.129505][T23211] lo speed is unknown, defaulting to 1000 [ 1244.359689][T21051] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1244.477510][T21051] usb 6-1: device descriptor read/8, error -71 [ 1244.540667][T12678] usb 7-1: USB disconnect, device number 43 [ 1244.612500][T23226] input: syz0 as /devices/virtual/input/input101 [ 1244.733790][T21051] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1244.776837][T21051] usb 6-1: device descriptor read/8, error -71 [ 1244.837938][T23239] netlink: 'syz.8.4602': attribute type 12 has an invalid length. [ 1244.915545][T21051] usb usb6-port1: unable to enumerate USB device [ 1245.087462][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.172769][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.195459][T23249] loop2: detected capacity change from 0 to 7 [ 1245.207051][T23249] Dev loop2: unable to read RDB block 7 [ 1245.220500][T23249] loop2: unable to read partition table [ 1245.233347][T23249] loop2: partition table beyond EOD, truncated [ 1245.249099][T23249] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1245.777197][ T30] audit: type=1400 audit(1782287663.867:3466): avc: denied { read } for pid=23268 comm="syz.8.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1245.824413][T23271] netlink: 'syz.7.4607': attribute type 21 has an invalid length. [ 1245.832972][T23271] IPv6: NLM_F_CREATE should be specified when creating new route [ 1245.836597][ T30] audit: type=1400 audit(1782287663.923:3467): avc: denied { connect } for pid=23268 comm="syz.8.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1245.886478][ T30] audit: type=1400 audit(1782287663.923:3468): avc: denied { ioctl } for pid=23268 comm="syz.8.4606" path="socket:[93294]" dev="sockfs" ino=93294 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1245.912232][ T3107] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1246.091402][ T3107] usb 7-1: Using ep0 maxpacket: 32 [ 1246.099329][ T3107] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1246.108605][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.116761][ T3107] usb 7-1: Product: syz [ 1246.121036][ T3107] usb 7-1: Manufacturer: syz [ 1246.125664][ T3107] usb 7-1: SerialNumber: syz [ 1246.131236][ T3107] usb 7-1: config 0 descriptor?? [ 1246.137859][ T3107] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1246.145492][ T3107] dvb-usb: bulk message failed: -22 (4/0) [ 1246.151271][ T3107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.161408][ T3107] dvb-usb: bulk message failed: -22 (5/0) [ 1246.167386][ T3107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.168535][T15721] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1246.179108][ T3107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1246.194969][ T3107] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1246.203179][ T3107] usb 7-1: media controller created [ 1246.212703][ T3107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.224879][ T3107] usb 7-1: selecting invalid altsetting 3 [ 1246.230700][ T3107] ttusb2: set interface to alts=3 failed [ 1246.248224][ T3107] DVB: Unable to find symbol tda10086_attach() [ 1246.254397][ T3107] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1246.262946][ T3107] dvb-usb: bulk message failed: -22 (4/0) [ 1246.268645][ T3107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.278807][ T3107] dvb-usb: bulk message failed: -22 (5/0) [ 1246.284407][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.286882][ T3107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.302748][ T3107] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1246.337216][T15721] usb 6-1: Using ep0 maxpacket: 8 [ 1246.345249][T15721] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1246.363477][T15721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.372075][T15721] usb 6-1: Product: syz [ 1246.377015][ T9] usb 7-1: USB disconnect, device number 44 [ 1246.385215][T15721] usb 6-1: Manufacturer: syz [ 1246.392187][T15721] usb 6-1: SerialNumber: syz [ 1246.400505][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1246.412791][T15721] usb 6-1: config 0 descriptor?? [ 1246.441690][T23282] xt_socket: unknown flags 0x40 [ 1246.500185][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4612'. [ 1246.510407][T23286] batadv_slave_0: entered promiscuous mode [ 1246.516852][T23286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23286 comm=syz.7.4612 [ 1246.531753][T23285] batadv_slave_0: left promiscuous mode [ 1246.644839][T15721] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1247.027165][ T3107] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1247.235480][ T3107] usb 3-1: Using ep0 maxpacket: 8 [ 1247.264838][ T3107] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1247.317018][T23294] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1247.334672][ T3107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.496306][ T3107] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1247.877288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.878061][ T3107] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input102 [ 1248.275027][T23302] netlink: 'syz.6.4617': attribute type 12 has an invalid length. [ 1248.869029][ T3107] usb 3-1: USB disconnect, device number 110 [ 1248.911547][T23308] overlayfs: failed to resolve './cgroup': -2 [ 1249.020971][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.235897][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.244010][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.266222][T23314] lo speed is unknown, defaulting to 1000 [ 1249.686773][T15721] usb write operation failed. (-71) [ 1249.694321][T15721] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1249.733368][T15721] dvbdev: DVB: registering new adapter (Terratec H7) [ 1249.749329][T15721] usb 6-1: media controller created [ 1249.760263][T15721] usb read operation failed. (-71) [ 1249.771487][T15721] usb write operation failed. (-71) [ 1249.801141][T15721] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1249.831404][T15721] usb 6-1: USB disconnect, device number 65 [ 1249.937705][T23339] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4627'. [ 1249.948019][T23339] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4627'. [ 1250.164489][T12678] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1250.164489][T21034] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1250.172097][T15721] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1250.335500][T12678] usb 7-1: Using ep0 maxpacket: 32 [ 1250.343300][T12678] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1250.352373][T12678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.356886][T15721] usb 6-1: Using ep0 maxpacket: 32 [ 1250.360410][T12678] usb 7-1: Product: syz [ 1250.365508][T21034] usb 3-1: Using ep0 maxpacket: 16 [ 1250.369718][T12678] usb 7-1: Manufacturer: syz [ 1250.376570][T15721] usb 6-1: config 246 has an invalid interface number: 48 but max is 0 [ 1250.379572][T12678] usb 7-1: SerialNumber: syz [ 1250.388148][T15721] usb 6-1: config 246 has an invalid descriptor of length 48, skipping remainder of the config [ 1250.397880][T12678] usb 7-1: config 0 descriptor?? [ 1250.403195][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.410209][T12678] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1250.416080][T21034] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 1250.424618][T12678] dvb-usb: bulk message failed: -22 (4/0) [ 1250.434793][T15721] usb 6-1: config 246 has no interface number 0 [ 1250.446623][T21034] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.453516][T12678] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1250.463647][T12678] dvb-usb: bulk message failed: -22 (5/0) [ 1250.463801][T21034] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1250.469820][T12678] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1250.479890][T15721] usb 6-1: too many endpoints for config 246 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1250.490751][T12678] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1250.499813][T21034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.512932][T12678] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1250.517376][T15721] usb 6-1: config 246 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1250.525719][T12678] usb 7-1: media controller created [ 1250.539693][T21034] usb 3-1: config 0 descriptor?? [ 1250.548643][T15721] usb 6-1: config 246 interface 48 has no altsetting 0 [ 1250.566245][T15721] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1250.575474][T15721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.583658][T15721] usb 6-1: Product: syz [ 1250.587872][T15721] usb 6-1: Manufacturer: syz [ 1250.594412][T15721] usb 6-1: SerialNumber: syz [ 1250.595254][T12678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1250.617160][T12678] usb 7-1: selecting invalid altsetting 3 [ 1250.623001][T12678] ttusb2: set interface to alts=3 failed [ 1250.658744][T12678] DVB: Unable to find symbol tda10086_attach() [ 1250.664993][T12678] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1250.683668][T12678] dvb-usb: bulk message failed: -22 (4/0) [ 1250.689633][T12678] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1250.701701][T12678] dvb-usb: bulk message failed: -22 (5/0) [ 1250.707583][T12678] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1250.722013][T12678] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1250.734712][T12678] usb 7-1: USB disconnect, device number 45 [ 1250.747468][T23347] tipc: Started in network mode [ 1250.752341][T23347] tipc: Node identity ac14140f, cluster identity 4711 [ 1250.764270][T23347] tipc: Enabled bearer , priority 10 [ 1250.795810][T12678] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1250.823697][T23347] lo speed is unknown, defaulting to 1000 [ 1250.875336][ T30] audit: type=1400 audit(1782287668.637:3469): avc: denied { map } for pid=23346 comm="syz.7.4629" path="socket:[93479]" dev="sockfs" ino=93479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1251.001203][T21034] nzxt-smart2 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1251.131073][T23321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.161096][T23321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.172547][T23321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.208180][ T1161] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.228865][T15721] usb 6-1: Cannot retrieve CPort count: -71 [ 1251.237279][T15721] usb 6-1: Cannot retrieve CPort count: -71 [ 1251.240308][ T1161] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.243263][T15721] es2_ap_driver 6-1:246.48: probe with driver es2_ap_driver failed with error -71 [ 1251.272172][T15721] usb 6-1: USB disconnect, device number 66 [ 1251.288479][ T1161] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.303459][T23361] xt_hashlimit: size too large, truncated to 1048576 [ 1251.309657][ T1161] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.405394][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4631'. [ 1251.529011][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.570706][T12678] tipc: Node number set to 2886997007 [ 1252.579794][T21051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.615132][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.777920][ T30] audit: type=1400 audit(1782287670.415:3470): avc: denied { create } for pid=23336 comm="syz.2.4626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1252.988636][T23383] mmap: syz.7.4634 (23383): VmData 37466112 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1252.998650][T23386] netlink: 'syz.8.4635': attribute type 12 has an invalid length. [ 1253.153593][T23392] 9p: Bad value for 'rfdno' [ 1253.187821][T21051] usb 3-1: USB disconnect, device number 111 [ 1253.553649][T12678] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1253.580118][T14666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1253.587994][T14666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1253.595817][T14666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1253.604336][T14666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1253.611784][T14666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1253.643887][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1253.651124][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1253.658344][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1253.667221][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1253.674567][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1253.703837][T21051] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1253.724649][T12678] usb 6-1: Using ep0 maxpacket: 32 [ 1253.725340][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.751165][T12678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1253.767113][T12678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1253.778682][T12678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1253.790792][T12678] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1253.801290][T12678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.814777][T12678] usb 6-1: config 0 descriptor?? [ 1253.820958][T23397] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1253.834620][T12678] hub 6-1:0.0: USB hub found [ 1253.874188][T21051] usb 3-1: Using ep0 maxpacket: 32 [ 1253.890385][T21051] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1253.929248][T21051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.001043][T21051] usb 3-1: Product: syz [ 1254.033485][T21051] usb 3-1: Manufacturer: syz [ 1254.076570][T21051] usb 3-1: SerialNumber: syz [ 1254.089238][T12678] hub 6-1:0.0: 2 ports detected [ 1254.105514][T21051] usb 3-1: config 0 descriptor?? [ 1254.135461][T21051] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1254.174216][T21051] dvb-usb: bulk message failed: -22 (4/0) [ 1254.198658][T21051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1254.249612][T21051] dvb-usb: bulk message failed: -22 (5/0) [ 1254.262667][T21051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1254.281645][T21051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1254.292958][T21051] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1254.301191][T21051] usb 3-1: media controller created [ 1254.340246][T23400] lo speed is unknown, defaulting to 1000 [ 1254.361939][T21051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.391228][T21051] usb 3-1: selecting invalid altsetting 3 [ 1254.403996][T21051] ttusb2: set interface to alts=3 failed [ 1254.468102][T21051] DVB: Unable to find symbol tda10086_attach() [ 1254.487799][T21051] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1254.501778][T21051] dvb-usb: bulk message failed: -22 (4/0) [ 1254.509958][T21051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1254.531104][T21051] dvb-usb: bulk message failed: -22 (5/0) [ 1254.537261][T21051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1254.548506][T21051] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1254.626075][T21051] usb 3-1: USB disconnect, device number 112 [ 1254.673943][T21051] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1254.763093][T23400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.771129][T23400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.794808][T23400] bridge_slave_0: entered allmulticast mode [ 1254.824870][T23400] bridge_slave_0: entered promiscuous mode [ 1254.838596][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.867432][T23400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.892633][T23400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.920946][T23400] bridge_slave_1: entered allmulticast mode [ 1254.964396][T23400] bridge_slave_1: entered promiscuous mode [ 1255.044341][T23400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.081889][T23400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.123553][T23400] team0: Port device team_slave_0 added [ 1255.144580][T23400] team0: Port device team_slave_1 added [ 1255.193551][T23400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.225534][T23400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.257979][ T5713] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1255.275358][T23400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.302114][T23400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.317636][T23400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.363393][T23400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.436401][ T5713] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1255.447609][ T5713] usb 3-1: string descriptor 0 read error: -22 [ 1255.462351][ T5713] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 1255.481724][T23400] hsr_slave_0: entered promiscuous mode [ 1255.487548][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.496716][T23400] hsr_slave_1: entered promiscuous mode [ 1255.503978][T23400] debugfs: 'hsr0' already exists in 'hsr' [ 1255.510870][T23400] Cannot create hsr debugfs directory [ 1255.752562][T23400] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.810864][T23400] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.865336][T21051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.873903][T14666] Bluetooth: hci5: command tx timeout [ 1255.880371][T23400] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.943113][T23400] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.955138][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.985218][ T5713] hid_parser_main: 28 callbacks suppressed [ 1255.985239][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.016024][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.023095][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.030211][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.038358][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.046507][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.053340][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.060736][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.069154][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.075002][T23400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1256.075993][ T5713] savu 0003:1E7D:2D5A.002D: unknown main item tag 0x0 [ 1256.097324][T23400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1256.109323][T23400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1256.128722][T23400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1256.130446][T12678] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1256.142610][T21051] usb 6-1: USB disconnect, device number 67 [ 1256.143210][T23400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1256.164470][ T5713] savu 0003:1E7D:2D5A.002D: hidraw0: USB HID vff.7f Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1256.179562][T23400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1256.195694][T23400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1256.218049][T23400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1256.371700][T23400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.409987][T23400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.424484][T21690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.431619][T21690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.614839][ T30] audit: type=1400 audit(1782287673.979:3471): avc: denied { setopt } for pid=23470 comm="syz.8.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1256.797320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.804481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.404266][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.769374][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4654'. [ 1257.780128][T23400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.854662][T23508] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1257.895328][T23508] FAULT_INJECTION: forcing a failure. [ 1257.895328][T23508] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.913446][T23508] CPU: 1 UID: 0 PID: 23508 Comm: syz.6.4655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.913481][T23508] Tainted: [L]=SOFTLOCKUP [ 1257.913487][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1257.913494][T23508] Call Trace: [ 1257.913498][T23508] [ 1257.913502][T23508] dump_stack_lvl+0x100/0x190 [ 1257.913521][T23508] should_fail_ex.cold+0x5/0xa [ 1257.913535][T23508] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 1257.913549][T23508] should_failslab+0xc2/0x120 [ 1257.913562][T23508] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1257.913574][T23508] ? vhost_task_create+0x1db/0x370 [ 1257.913587][T23508] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 1257.913604][T23508] ? kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 1257.913621][T23508] ? alloc_pid+0x1bd/0x1910 [ 1257.913632][T23508] alloc_pid+0x1bd/0x1910 [ 1257.913643][T23508] ? __pfx_alloc_pid+0x10/0x10 [ 1257.913659][T23508] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1257.913677][T23508] ? fpu_clone+0x226/0x7a0 [ 1257.913688][T23508] ? copy_thread+0x729/0xbe0 [ 1257.913703][T23508] copy_process+0x5485/0x7ff0 [ 1257.913721][T23508] ? __pfx_copy_process+0x10/0x10 [ 1257.913736][T23508] ? __kasan_kmalloc+0xaa/0xb0 [ 1257.913748][T23508] ? lockdep_init_map_type+0x5c/0x250 [ 1257.913763][T23508] ? lockdep_init_map_type+0x5c/0x250 [ 1257.913776][T23508] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1257.913790][T23508] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1257.913803][T23508] vhost_task_create+0x1db/0x370 [ 1257.913815][T23508] ? __pfx_vhost_task_create+0x10/0x10 [ 1257.913827][T23508] ? rcu_is_watching+0x12/0xc0 [ 1257.913844][T23508] ? __pfx_vhost_task_fn+0x10/0x10 [ 1257.913857][T23508] ? __pfx___mutex_lock+0x10/0x10 [ 1257.913867][T23508] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1257.913885][T23508] kvm_mmu_post_init_vm+0x1b3/0x360 [ 1257.913901][T23508] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 1257.913918][T23508] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 1257.913930][T23508] ? lock_release+0x24d/0x310 [ 1257.913944][T23508] kvm_vcpu_ioctl+0x730/0x1700 [ 1257.913957][T23508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1257.913970][T23508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1257.913984][T23508] ? do_vfs_ioctl+0x226/0x13e0 [ 1257.913998][T23508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1257.914012][T23508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1257.914027][T23508] ? rcu_is_watching+0x12/0xc0 [ 1257.914042][T23508] ? hook_file_ioctl_common+0x140/0x440 [ 1257.914059][T23508] ? selinux_file_ioctl+0x13b/0x290 [ 1257.914070][T23508] ? selinux_file_ioctl+0xb6/0x290 [ 1257.914082][T23508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1257.914095][T23508] __x64_sys_ioctl+0x18e/0x210 [ 1257.914109][T23508] do_syscall_64+0x115/0x870 [ 1257.914135][T23508] ? clear_bhb_loop+0x40/0x90 [ 1257.914152][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.914163][T23508] RIP: 0033:0x7f35f1f9ce59 [ 1257.914173][T23508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.914184][T23508] RSP: 002b:00007f35f2e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.914196][T23508] RAX: ffffffffffffffda RBX: 00007f35f2215fa0 RCX: 00007f35f1f9ce59 [ 1257.914204][T23508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1257.914210][T23508] RBP: 00007f35f2e33090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.914218][T23508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.914225][T23508] R13: 00007f35f2216038 R14: 00007f35f2215fa0 R15: 00007ffe86520e78 [ 1257.914244][T23508] [ 1258.259811][T14666] Bluetooth: hci5: command tx timeout [ 1258.322619][T15721] usb 3-1: USB disconnect, device number 113 [ 1258.345180][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1258.349389][T23400] veth0_vlan: entered promiscuous mode [ 1258.365857][T23400] veth1_vlan: entered promiscuous mode [ 1258.384821][T23400] veth0_macvtap: entered promiscuous mode [ 1258.393264][T23400] veth1_macvtap: entered promiscuous mode [ 1258.415346][T23400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.427124][T23400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.438895][ T971] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.448652][ T9] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1258.464726][ T971] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.490596][ T971] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.500736][ T30] audit: type=1400 audit(1782287675.765:3472): avc: denied { bind } for pid=23520 comm="syz.6.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1258.510823][ T971] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.530154][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.588691][ T9] usb 6-1: device descriptor read/64, error -71 [ 1258.597530][ T6650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.620720][ T6650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.642902][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.650818][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.736774][T23536] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4640'. [ 1258.749736][T23535] syzkaller0: entered promiscuous mode [ 1258.756127][T23535] syzkaller0: entered allmulticast mode [ 1258.780459][T23535] sctp: [Deprecated]: syz.6.4662 (pid 23535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1258.780459][T23535] Use struct sctp_sack_info instead [ 1258.856271][ T9] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1258.941848][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.015563][ T9] usb 6-1: device descriptor read/64, error -71 [ 1259.027052][ T5713] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1259.118338][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.180727][ T9] usb usb6-port1: attempt power cycle [ 1259.230083][ T5713] usb 8-1: Using ep0 maxpacket: 32 [ 1259.239292][ T5713] usb 8-1: descriptor type invalid, skip [ 1259.246120][ T5713] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.256455][ T5713] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1259.267718][ T5713] usb 8-1: New USB device found, idVendor=12d1, idProduct=1413, bcdDevice= 0.00 [ 1259.277994][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.288787][ T5713] usb 8-1: Product: syz [ 1259.293330][ T5713] usb 8-1: Manufacturer: syz [ 1259.299624][ T5713] usb 8-1: SerialNumber: syz [ 1259.527170][T23538] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4663'. [ 1259.547041][ T5713] usb 8-1: USB disconnect, device number 10 [ 1259.604318][ T9] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1259.626453][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.635271][ T9] usb 6-1: device descriptor read/8, error -71 [ 1259.904105][ T9] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1259.936317][ T9] usb 6-1: device descriptor read/8, error -71 [ 1260.065059][ T9] usb usb6-port1: unable to enumerate USB device [ 1260.406076][ T5713] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1260.481451][T14666] Bluetooth: hci5: command tx timeout [ 1260.546922][ T30] audit: type=1400 audit(1782287677.692:3473): avc: denied { write } for pid=23590 comm="syz.6.4671" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1260.587951][ T5713] usb 8-1: Using ep0 maxpacket: 32 [ 1260.666247][ T5713] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.674435][ T5713] usb 8-1: config 0 has no interface number 0 [ 1260.680646][ T5713] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1260.692397][ T5713] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1260.703952][ T5713] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1260.713044][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.738006][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.098250][ T30] audit: type=1400 audit(1782811966.181:3474): avc: denied { map } for pid=23590 comm="syz.6.4671" path="/dev/vbi4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1261.124151][ T5713] usb 8-1: Product: syz [ 1261.128410][ T5713] usb 8-1: Manufacturer: syz [ 1261.162918][ T5713] usb 8-1: SerialNumber: syz [ 1261.172951][ T30] audit: type=1400 audit(1782811966.181:3475): avc: denied { execute } for pid=23590 comm="syz.6.4671" path="/dev/vbi4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1261.231551][ T5713] usb 8-1: config 0 descriptor?? [ 1261.511784][ T5713] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1261.547028][ T5713] cx231xx 8-1:0.1: Failed to read PCB config [ 1261.564880][ T5713] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1261.604873][ T5713] usb 8-1: USB disconnect, device number 11 [ 1261.690297][T23607] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1261.708234][T23607] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1261.860647][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.910072][T23613] openvswitch: netlink: Actions may not be safe on all matching packets [ 1261.956163][ C1] Adjusting tsc more than 11% (4855437 vs 6650463) [ 1262.141425][ T5713] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1262.334650][ T5713] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.370747][ T5713] usb 8-1: config 0 has no interface number 0 [ 1262.380674][ T5713] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1262.395774][ T5713] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1262.409170][ T5713] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1262.418669][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.431539][ T5713] usb 8-1: Product: syz [ 1262.435815][ T5713] usb 8-1: Manufacturer: syz [ 1262.440617][ T5713] usb 8-1: SerialNumber: syz [ 1262.503979][ T5713] usb 8-1: config 0 descriptor?? [ 1262.832356][T14666] Bluetooth: hci5: command tx timeout [ 1262.853206][T23579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.866657][T23579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.880424][T23579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.890705][T23579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.952054][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.974662][ T5713] cx231xx 8-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1262.993878][ T5713] cx231xx 8-1:0.1: Failed to read PCB config [ 1263.000100][ T5713] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1263.012656][ T5713] usb 8-1: USB disconnect, device number 12 [ 1263.072270][ T5720] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1263.149366][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.213435][ T5720] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1264.221632][ T5720] usb 7-1: config 0 has no interface number 0 [ 1264.228212][ T5720] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 1264.239695][ T5720] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 33370, setting to 1024 [ 1264.653539][T23622] kvm: user requested TSC rate below hardware speed [ 1264.661875][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.676337][ T5720] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.696439][ T5720] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1264.707814][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.758356][ T5720] usb 7-1: config 0 descriptor?? [ 1265.508768][T23639] lo speed is unknown, defaulting to 1000 [ 1265.630087][T23611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.640621][T23611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.693798][T23611] syzkaller0: entered promiscuous mode [ 1265.718740][T23611] syzkaller0: entered allmulticast mode [ 1265.831017][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.035411][ T5720] uclogic 0003:28BD:0042.002E: failed retrieving string descriptor #100: -71 [ 1266.059468][ T5720] uclogic 0003:28BD:0042.002E: failed retrieving pen parameters: -71 [ 1266.191203][ T31] INFO: task kworker/u8:11:10007 blocked for more than 143 seconds. [ 1266.220857][ T31] Tainted: G L syzkaller #0 [ 1266.228846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1266.238557][ T31] task:kworker/u8:11 state:D stack:23712 pid:10007 tgid:10007 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1266.255219][ T30] audit: type=1400 audit(1782811970.643:3476): avc: denied { write } for pid=5594 comm="syz-executor" path="pipe:[1919]" dev="pipefs" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1267.189906][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.195606][T23657] FAULT_INJECTION: forcing a failure. [ 1267.195606][T23657] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.210602][T23657] CPU: 1 UID: 0 PID: 23657 Comm: syz.8.4691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1267.210630][T23657] Tainted: [L]=SOFTLOCKUP [ 1267.210638][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1267.210649][T23657] Call Trace: [ 1267.210650][ T5720] uclogic 0003:28BD:0042.002E: pen probing failed: -71 [ 1267.210656][T23657] [ 1267.210665][T23657] dump_stack_lvl+0x100/0x190 [ 1267.210692][T23657] should_fail_ex.cold+0x5/0xa [ 1267.210715][T23657] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 1267.210745][T23657] should_failslab+0xc2/0x120 [ 1267.210770][T23657] __kmalloc_cache_noprof+0x91/0x6c0 [ 1267.210797][T23657] ? fq_pie_change+0xcbc/0x13d0 [ 1267.210824][T23657] ? tcf_block_get_ext+0x94d/0x1950 [ 1267.210855][T23657] tcf_block_get_ext+0x94d/0x1950 [ 1267.210883][T23657] ? qdisc_create+0x70/0x1060 [ 1267.210902][T23657] ? tc_modify_qdisc+0xdcf/0x2120 [ 1267.210923][T23657] tcf_block_get+0xa8/0x100 [ 1267.210951][T23657] ? __pfx_tcf_block_get+0x10/0x10 [ 1267.210977][T23657] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1267.211001][T23657] ? lockdep_init_map_type+0x5c/0x250 [ 1267.211026][T23657] ? timer_init_key+0x150/0x310 [ 1267.211049][T23657] fq_pie_init+0x4b6/0x8e0 [ 1267.211076][T23657] ? __pfx_fq_pie_init+0x10/0x10 [ 1267.211102][T23657] qdisc_create+0x47b/0x1060 [ 1267.211125][T23657] tc_modify_qdisc+0xdcf/0x2120 [ 1267.211148][T23657] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1267.211168][T23657] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1267.211196][T23657] ? __dev_queue_xmit+0x9f0/0x4940 [ 1267.211227][T23657] ? rcu_is_watching+0x12/0xc0 [ 1267.211255][T23657] ? rtnetlink_rcv_msg+0x359/0xe90 [ 1267.211280][T23657] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1267.211301][T23657] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1267.211326][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1267.211355][T23657] ? ref_tracker_free+0x37e/0x6c0 [ 1267.211375][T23657] netlink_rcv_skb+0x159/0x420 [ 1267.211404][T23657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1267.211429][T23657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1267.211468][T23657] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1267.211497][T23657] netlink_unicast+0x585/0x850 [ 1267.211527][T23657] ? __pfx_netlink_unicast+0x10/0x10 [ 1267.211559][T23657] netlink_sendmsg+0x8b0/0xda0 [ 1267.211589][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.211622][T23657] ____sys_sendmsg+0xa4d/0xbe0 [ 1267.211649][T23657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.211678][T23657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1267.211708][T23657] ? kstrtouint_from_user+0x13c/0x1d0 [ 1267.211733][T23657] ___sys_sendmsg+0x190/0x1e0 [ 1267.211761][T23657] ? __pfx____sys_sendmsg+0x10/0x10 [ 1267.211790][T23657] ? get_pid_task+0x106/0x250 [ 1267.211822][T23657] ? rcu_is_watching+0x12/0xc0 [ 1267.211857][T23657] __sys_sendmsg+0x160/0x210 [ 1267.211880][T23657] ? __pfx___sys_sendmsg+0x10/0x10 [ 1267.211907][T23657] ? rcu_is_watching+0x12/0xc0 [ 1267.211935][T23657] do_syscall_64+0x115/0x870 [ 1267.211964][T23657] ? clear_bhb_loop+0x40/0x90 [ 1267.211986][T23657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.212006][T23657] RIP: 0033:0x7fa7cbd9ce59 [ 1267.212022][T23657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.212042][T23657] RSP: 002b:00007fa7ccb89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.212062][T23657] RAX: ffffffffffffffda RBX: 00007fa7cc016090 RCX: 00007fa7cbd9ce59 [ 1267.212075][T23657] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1267.212088][T23657] RBP: 00007fa7ccb89090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.212101][T23657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.212113][T23657] R13: 00007fa7cc016128 R14: 00007fa7cc016090 R15: 00007ffe81cf0468 [ 1267.212134][T23657] [ 1267.214922][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.258359][ T31] Workqueue: netns cleanup_net [ 1267.355041][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.411718][ T5720] uclogic 0003:28BD:0042.002E: failed probing parameters: -71 [ 1267.605736][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.805084][ T31] [ 1267.807815][ T31] Call Trace: [ 1267.813115][ T31] [ 1267.822055][ T31] __schedule+0x125c/0x6730 [ 1267.831426][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1267.841822][T21050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.860291][ T31] ? debug_object_assert_init+0x1c4/0x300 [ 1267.866092][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1267.876320][ T31] ? prepare_to_wait_event+0xbe/0x720 [ 1267.903665][ T31] ? prepare_to_wait_event+0x8d/0x720 [ 1267.917167][ T5720] uclogic 0003:28BD:0042.002E: probe with driver uclogic failed with error -71 [ 1267.928510][ T31] ? __pfx___schedule+0x10/0x10 [ 1267.934762][ T31] ? rcu_is_watching+0x12/0xc0 [ 1267.940187][ T31] ? schedule+0x2bf/0x390 [ 1267.944540][ T31] ? lock_release+0x24d/0x310 [ 1267.948094][ T5720] usb 7-1: USB disconnect, device number 46 [ 1267.949881][ T31] schedule+0xdd/0x390 [ 1267.959194][ T31] afs_cell_purge+0x46a/0x550 [ 1267.964302][ T31] ? __try_to_del_timer_sync+0x107/0x160 [ 1267.969949][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1267.975184][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 1267.980528][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1267.986051][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 1267.991395][ T31] ? __timer_delete_sync+0x10f/0x1c0 [ 1267.996732][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 1268.001907][ T31] afs_net_exit+0x83/0x150 [ 1268.006788][ T31] ops_undo_list+0x2ee/0xab0 [ 1268.011380][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1268.016646][ T31] ? cleanup_net+0x332/0x920 [ 1268.021280][ T31] ? lock_release+0x24d/0x310 [ 1268.026090][ T31] ? idr_destroy+0x62/0x2e0 [ 1268.031057][ T31] cleanup_net+0x499/0x920 [ 1268.035570][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1268.042743][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.048590][ T31] ? lock_acquire+0x301/0x370 [ 1268.053531][ T31] process_one_work+0xa23/0x1940 [ 1268.058464][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1268.063871][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1268.068875][ T31] worker_thread+0x5ef/0xe50 [ 1268.073516][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1268.078662][ T31] ? kthread+0x13a/0x450 [ 1268.083043][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1268.088150][ T31] kthread+0x370/0x450 [ 1268.092245][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.096894][ T31] ret_from_fork+0x72b/0xd50 [ 1268.101559][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1268.106724][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.111575][ T31] ? __switch_to+0x800/0x10f0 [ 1268.116299][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.120940][ T31] ret_from_fork_asm+0x1a/0x30 [ 1268.125763][ T31] [ 1268.140296][ T31] INFO: lockdep is turned off. [ 1268.246793][ T31] NMI backtrace for cpu 1 [ 1268.246815][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.246846][ T31] Tainted: [L]=SOFTLOCKUP [ 1268.246854][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1268.246866][ T31] Call Trace: [ 1268.246873][ T31] [ 1268.246881][ T31] dump_stack_lvl+0x100/0x190 [ 1268.246910][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1268.246938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1268.246966][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1268.246994][ T31] sys_info+0x141/0x190 [ 1268.247015][ T31] watchdog+0xcb1/0x1030 [ 1268.247041][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1268.247068][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.247091][ T31] ? __kthread_parkme+0x18c/0x230 [ 1268.247120][ T31] ? kthread+0x13a/0x450 [ 1268.247137][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.247159][ T31] kthread+0x370/0x450 [ 1268.247177][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.247197][ T31] ret_from_fork+0x72b/0xd50 [ 1268.247224][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1268.247251][ T31] ? __switch_to+0x800/0x10f0 [ 1268.247270][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.247290][ T31] ret_from_fork_asm+0x1a/0x30 [ 1268.247315][ T31] [ 1268.247322][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1268.381404][ C0] NMI backtrace for cpu 0 [ 1268.381422][ C0] CPU: 0 UID: 0 PID: 23400 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.381448][ C0] Tainted: [L]=SOFTLOCKUP [ 1268.381455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1268.381466][ C0] RIP: 0010:arch_stack_walk+0x94/0xf0 [ 1268.381487][ C0] Code: fe 48 89 df e8 cd 0e 09 00 8b 95 70 ff ff ff 85 d2 75 21 eb 2f 4c 89 ef 2e e8 54 7e 51 1e 84 c0 74 22 48 89 df e8 0c ee 08 00 <8b> 85 70 ff ff ff 85 c0 74 10 48 89 df e8 6a ea 08 00 48 89 c6 48 [ 1268.381505][ C0] RSP: 0018:ffffc90003a675f8 EFLAGS: 00000296 [ 1268.381520][ C0] RAX: 0000000000000001 RBX: ffffc90003a675f8 RCX: ffffffff918b2601 [ 1268.381533][ C0] RDX: 0000000000000000 RSI: ffffffff8c1e6000 RDI: ffff888067ef84c4 [ 1268.381545][ C0] RBP: ffffc90003a67688 R08: 0000000000000000 R09: 0000000000000000 [ 1268.381556][ C0] R10: ffffc90003a675f8 R11: 0000000000018459 R12: ffffffff81f38c20 [ 1268.381569][ C0] R13: ffffc90003a676b8 R14: 0000000000000000 R15: ffff888067ef8000 [ 1268.381581][ C0] FS: 0000000000000000(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 1268.381598][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1268.381611][ C0] CR2: 000055558b5359d8 CR3: 000000003731c000 CR4: 00000000003526f0 [ 1268.381623][ C0] Call Trace: [ 1268.381629][ C0] [ 1268.381638][ C0] ? __reset_page_owner+0x84/0x190 [ 1268.381662][ C0] stack_trace_save+0x8e/0xc0 [ 1268.381680][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1268.381697][ C0] ? debug_check_no_obj_freed+0x31f/0x630 [ 1268.381725][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.381751][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1268.381777][ C0] save_stack+0x162/0x1e0 [ 1268.381796][ C0] ? __pfx_save_stack+0x10/0x10 [ 1268.381814][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.381842][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.381871][ C0] ? page_ext_put+0x3e/0xd0 [ 1268.381888][ C0] ? lock_release+0x24d/0x310 [ 1268.381908][ C0] ? rcu_read_lock_held+0x9/0x50 [ 1268.381928][ C0] __reset_page_owner+0x84/0x190 [ 1268.381949][ C0] free_pages_prepare+0x586/0xd80 [ 1268.381977][ C0] __free_contig_range_common+0x14f/0x250 [ 1268.382005][ C0] free_pages_bulk+0xbd/0x200 [ 1268.382024][ C0] vm_area_free_pages+0xad/0x2b0 [ 1268.382044][ C0] vfree+0x107/0x750 [ 1268.382064][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1268.382083][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1268.382102][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.382126][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1268.382150][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1268.382169][ C0] kcov_close+0x34/0x60 [ 1268.382187][ C0] __fput+0x3ff/0xb50 [ 1268.382208][ C0] task_work_run+0x150/0x240 [ 1268.382227][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1268.382249][ C0] do_exit+0x951/0x2ae0 [ 1268.382274][ C0] ? debug_object_free+0x28d/0x550 [ 1268.382300][ C0] ? __pfx_do_exit+0x10/0x10 [ 1268.382325][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1268.382349][ C0] ? get_signal+0x7e0/0x21e0 [ 1268.382373][ C0] do_group_exit+0xd5/0x2a0 [ 1268.382390][ C0] get_signal+0x1ec7/0x21e0 [ 1268.382411][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1268.382432][ C0] ? __asan_memset+0x23/0x50 [ 1268.382451][ C0] ? __pfx_get_signal+0x10/0x10 [ 1268.382472][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1268.382492][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1268.382511][ C0] ? get_timespec64+0x147/0x240 [ 1268.382530][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1268.382553][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1268.382573][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.382599][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1268.382622][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.382647][ C0] do_syscall_64+0x666/0x870 [ 1268.382673][ C0] ? clear_bhb_loop+0x40/0x90 [ 1268.382693][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.382710][ C0] RIP: 0033:0x7ff12d95d68e [ 1268.382724][ C0] Code: Unable to access opcode bytes at 0x7ff12d95d664. [ 1268.382732][ C0] RSP: 002b:00007fff66670958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1268.382749][ C0] RAX: fffffffffffffdfc RBX: 000055556346f500 RCX: 00007ff12d95d68e [ 1268.382761][ C0] RDX: 00007fff666709b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.382772][ C0] RBP: 00007fff66670a1c R08: 0000000000000000 R09: 0000000000000000 [ 1268.382783][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1268.382794][ C0] R13: 00000000000927c0 R14: 0000000000129f3b R15: 00007fff66670a70 [ 1268.382812][ C0] [ 1268.854321][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1268.861190][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.871849][ T31] Tainted: [L]=SOFTLOCKUP [ 1268.876150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1268.886184][ T31] Call Trace: [ 1268.889441][ T31] [ 1268.892359][ T31] dump_stack_lvl+0x100/0x190 [ 1268.897041][ T31] vpanic+0x552/0x970 [ 1268.901003][ T31] ? __pfx_vpanic+0x10/0x10 [ 1268.905485][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1268.911626][ T31] panic+0xd1/0xe0 [ 1268.915327][ T31] ? __pfx_panic+0x10/0x10 [ 1268.919722][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1268.925860][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1268.931997][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1268.938134][ T31] ? watchdog.cold+0x1ec/0x234 [ 1268.942887][ T31] ? watchdog+0xcc1/0x1030 [ 1268.947287][ T31] watchdog.cold+0x1fd/0x234 [ 1268.951860][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1268.957913][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.962576][ T31] ? __kthread_parkme+0x18c/0x230 [ 1268.967589][ T31] ? kthread+0x13a/0x450 [ 1268.971808][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.976472][ T31] kthread+0x370/0x450 [ 1268.980520][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.985089][ T31] ret_from_fork+0x72b/0xd50 [ 1268.989664][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1268.994759][ T31] ? __switch_to+0x800/0x10f0 [ 1268.999415][ T31] ? __pfx_kthread+0x10/0x10 [ 1269.003984][ T31] ret_from_fork_asm+0x1a/0x30 [ 1269.008731][ T31] [ 1269.011960][ T31] Kernel Offset: disabled [ 1269.016259][ T31] Rebooting in 86400 seconds..