last executing test programs: 17m11.16748925s ago: executing program 32 (id=31): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "0913cbf04e2d9eec9fc4dcf796c23e0cc20a71141c7a308b3acedf0a7c93e221", "a354a011fa960de2a5686a1d699346d1afed546bd35eabbfc59e00f0e49fb3e5", "9fa3b454b630d9cf1b2cd76981afb01867ba000fada1f18873e9692ff4b033f3", "4944e538eab4714f7355284a5c4e312e4185342c61c0fb68f0575dc256247c82", "9f46ff3236d6b2e71bcc3c1fa9dad2a0bee13cf8102401dfd2d5ce7c2fe07941", "e4a3c77fe201e2cac8271992", 0x6, 0x9, 0x7f6, 0x8, 0xd}}) 15m13.87421863s ago: executing program 33 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14m9.05612187s ago: executing program 34 (id=207): syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 11m16.418021058s ago: executing program 0 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file1/../file0', [], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc9"}, 0x33) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aef", 0x10}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) unshare(0x20000400) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x1, @private=0xa010101}, 0x10) 11m14.978340757s ago: executing program 0 (id=486): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2d87) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80000000, 0xffffffffffffffff, 0x1, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) close(0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)="3edb", 0x2}, {&(0x7f00000006c0)="62b0", 0x2}, {&(0x7f0000000c40)="ba", 0x1}, {&(0x7f0000000240)='p', 0x1}, {&(0x7f0000000900)="cc", 0x1}, {&(0x7f0000000d40)='rQ', 0x2}], 0x7, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000500)="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", 0x118}], 0x2}, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000019080)={0x1, 0x700, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x33e, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 11m12.641880722s ago: executing program 0 (id=487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x50, r5, 0x0) mknodat$loop(r5, &(0x7f0000000040)='./file0\x00', 0xc000, 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x600206, 0x1bc) getdents64(r6, &(0x7f0000000400)=""/4096, 0xc00) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r7, 0x40187014, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r8, 0x40026f34, &(0x7f0000000040)=0x1) lseek(r6, 0x32, 0x4) 11m11.551739232s ago: executing program 0 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0xfffffffffffffeab, 0x1, 0x0, 0x1, @last={{0xe3}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb8}}, 0x20050800) 11m11.216193242s ago: executing program 0 (id=489): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r2, r3, 0x0, 0x201f00) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 11m10.278405648s ago: executing program 0 (id=490): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/sync_on_suspend', 0x0, 0x8a) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x840) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000240)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0/../file0\x00', 0x140) r3 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x1, r4, 0x3}, 0x80, 0x0}, 0x40011) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x6300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="38ff00000000", 0x6}], 0x1) r8 = fcntl$getown(r0, 0x9) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='stat\x00') ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000140)={0x5, 0x4, 0xf044, 0x4, "19f029ed61fc598d2b8b8dc2640165db90b6c4dc271fc4db4c39e00605f5147e"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x8000) lseek(r9, 0x7, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) 11m9.235268478s ago: executing program 35 (id=490): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/sync_on_suspend', 0x0, 0x8a) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x840) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000240)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0/../file0\x00', 0x140) r3 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x1, r4, 0x3}, 0x80, 0x0}, 0x40011) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x6300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="38ff00000000", 0x6}], 0x1) r8 = fcntl$getown(r0, 0x9) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='stat\x00') ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000140)={0x5, 0x4, 0xf044, 0x4, "19f029ed61fc598d2b8b8dc2640165db90b6c4dc271fc4db4c39e00605f5147e"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x8000) lseek(r9, 0x7, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) 9m53.873674961s ago: executing program 7 (id=579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="ed662cff3672974e4d737d008dddd10dc59443b6c659f29573aca4d8d90c7b891cfd3bc0fea2b99c36cd4048c01be84d61e79264ddeeecbcbfa17e2884f0bcc221f5357317115cfda2e1a2db1e46a73f97534e68806943333f58ac3ad9e36bca32b6070791721062388ecded928121b83c028c8d1a32a863c69bcf224382ef8dd445211a09f1ec2b2ea5ab2f41613ac27a79dfdd7829343a74d350430b084f1b30c55b287a082cc5b38e6edc6fa4c270d64815f8c5fcdb793e327bf2d78ef9111047503f89014da9581e7124c2c04f8be5fdc19f446286abc3460f7ca6ff", 0xde}, {&(0x7f0000000180)="b4bc5d84e96cb99d72fdb00fe697976aa4bbdb3d0400961e8d9eaa4ed64e64f5f30487631c9ab30300"/56, 0x38}, {&(0x7f0000008400)="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", 0xefb}], 0x3}], 0x1, 0x40010000) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000029c0)=""/4078, 0xfee}, {&(0x7f00000007c0)=""/176, 0xb0}], 0x2}, 0x12063) (fail_nth: 1) 9m53.104620653s ago: executing program 7 (id=581): syz_open_dev$dri(0x0, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000045e000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0x0) unshare(0x28060400) 9m51.132188375s ago: executing program 7 (id=584): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r2, r3, 0x0, 0x201f00) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 9m47.164093691s ago: executing program 7 (id=591): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3900, 0x0) sendfile(r1, r2, 0x0, 0x100000001) landlock_restrict_self(r0, 0x9) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000002e40)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000640)="a905000000017464000100000000000000e5c064cf077ce5b89a44ab54a6281f251b23e8", 0x24}], 0x1}}], 0x1, 0x4010) 9m45.823902617s ago: executing program 7 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r2, 0x80, 0x33905}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 9m44.773648318s ago: executing program 7 (id=596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m29.24304494s ago: executing program 36 (id=596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m53.152910643s ago: executing program 6 (id=730): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x112) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000240)=0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xa) setresgid(r9, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000300)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100040000000000020001", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040001000000000008000500", @ANYRES32=r9, @ANYRES32, @ANYBLOB="1000040000000000"], 0x4c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x80000, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x60, 0x4, 0x13, 0x8}, {0x6, 0x0, 0x6, 0x201}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000020c0), &(0x7f0000002440)=@buf="70bdf0f0b34867698795e038023442ee728f174b32018f6056c551d03e857f3607edef7ef0d69b252b"}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x0, 0x1}) 8m51.342074755s ago: executing program 6 (id=733): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12}, 0x7}], 0x1, 0x10100, 0x0) 8m51.12228651s ago: executing program 6 (id=734): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000505000400010000000900020073797a360000000014000780080008400000001808001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x30, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xffffffdb) getsockname(r0, &(0x7f0000000280)=@caif=@util, &(0x7f0000000240)=0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x80101, 0x8c) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f00000000c0)={0x2, 0x1, 0x2, 0x800, 0x200, 0x3}) r9 = geteuid() quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000003c0)=@rnullb, r9, &(0x7f0000000480)) nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) 8m50.63875502s ago: executing program 6 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) (fail_nth: 1) 8m50.529400433s ago: executing program 6 (id=736): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x801, 0x100) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000014001105f4590000000000002b000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x3, 0x2, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x80, 0xfd, 0x2, 0x0, 0x6, 0xf8e083ca3cf29bb5}}, 0x1c}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'macsec0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) 8m48.709100317s ago: executing program 6 (id=740): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2d87) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80000000, 0xffffffffffffffff, 0x1, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) close(0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)="3edb", 0x2}, {&(0x7f00000006c0)="62b0", 0x2}, {&(0x7f0000000c40)="ba", 0x1}, {&(0x7f0000000240)='p', 0x1}, {&(0x7f0000000900)="cc", 0x1}, {&(0x7f0000000d40)='rQ', 0x2}], 0x7, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000500)="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", 0x118}], 0x2}, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000019080)={0x1, 0x700, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x33e, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 8m47.879432455s ago: executing program 37 (id=740): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2d87) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80000000, 0xffffffffffffffff, 0x1, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) close(0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)="3edb", 0x2}, {&(0x7f00000006c0)="62b0", 0x2}, {&(0x7f0000000c40)="ba", 0x1}, {&(0x7f0000000240)='p', 0x1}, {&(0x7f0000000900)="cc", 0x1}, {&(0x7f0000000d40)='rQ', 0x2}], 0x7, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000500)="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", 0x118}], 0x2}, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000019080)={0x1, 0x700, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x33e, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 3m40.141846212s ago: executing program 5 (id=1406): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x40000000004, 0xf, 0x80000006}, 0x0, 0x0) 3m38.547636642s ago: executing program 5 (id=1412): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x80801) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) read$FUSE(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 3m38.057033063s ago: executing program 5 (id=1414): capset(&(0x7f0000000040)={0x19980330}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x125, 0x0, &(0x7f0000000300)="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", 0x0, 0x1, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x0, 0x10000006}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m37.870025378s ago: executing program 5 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) rt_sigtimedwait(&(0x7f0000001980)={[0x8000000000000001]}, 0x0, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4dd}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x41}, @NL80211_ATTR_STA_WME={0x4}]}, 0x50}}, 0x20044881) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a183000000000000000005000900080003003b"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) r5 = socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0002}]}) map_shadow_stack(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x180000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000200)={0x12, {{0x29, 0x0, 0x3b000002, @loopback, 0xa}}}, 0x88) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252b00000008000300", @ANYRES32=r4, @ANYBLOB="04003cfe040018012700000008006b005b7700000a0006005050505050500000c6117e230300000008002201fc010000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40900) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000001000), &(0x7f0000001040)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000001580)=0x4) io_uring_enter(r7, 0x7a11, 0x887ef, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001280)={'ip6_vti0\x00', &(0x7f0000001200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x1, 0x3, 0xc5, @loopback, @mcast1, 0x80, 0x7, 0x5, 0x10}}) 3m37.137646046s ago: executing program 5 (id=1417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x8, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x5, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x8000004, 0x401, 0x2}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000008cc0)=0xb) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) gettid() ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x1000}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) r11 = dup(r9) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2181001a0086dd6180"], 0x3a) 3m33.311055401s ago: executing program 5 (id=1426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m32.505627119s ago: executing program 38 (id=1426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59.012339664s ago: executing program 8 (id=1905): r0 = socket(0x26, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r6], 0x1015, 0x2) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) unshare(0x40480) unshare(0xa040280) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00b07a0b0000200081dc28bd701c030000000200003497e44f733bfa6b4a00fff7b53be463bd8ec8462e06b0e2cf94d315fc131d61099661a3934dee7224ce2d06d20e747e2e3ff5b528b542bcef6639a0462fb75552bdf6cfc1472330b063440e1d4e5c5ef2f15a02da545f4ff1404d8e9c56f9ce405f504a90c598cca59649798a61db832b0bec26662549f732b947e504e850cc6dd66c968a90402149b0764ff1921f2f2744f041b2658528002d94c665c0c2992fe052229ac34c89c224b951d6c6101c56fa397c7259cc45b456510f64b0c1ddd5bc07560b279af75de648031d51847142cb5197da01bc4c69072396cf100100515653cb93d69f13b8b38bff4fe4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6225d3351c031a79) 56.547129662s ago: executing program 8 (id=1908): unshare(0x26000400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_overlay={0xbd1, 0xd, 0x4, 0x1000, 0x4, {}, {0x3, 0xc, 0x81, 0x6, 0xf, 0xc, "717480be"}, 0x9, 0x3, {0x0}, 0x4ff}) (fail_nth: 3) 56.152490808s ago: executing program 8 (id=1911): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 55.896193669s ago: executing program 8 (id=1913): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(0x0, 0xb) 55.577072418s ago: executing program 8 (id=1917): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x4000080) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0xfdfffffc, 0x400080, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000df00)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000df560e75d9faabd40000"], 0x0, 0x26, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) memfd_create(0x0, 0x2) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xcb, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x436, 0x4, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 54.737616395s ago: executing program 8 (id=1919): r0 = socket(0x26, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r6], 0x1015, 0x2) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) unshare(0x40480) unshare(0xa040280) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6225d3351c031a79) 53.690070908s ago: executing program 39 (id=1919): r0 = socket(0x26, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r6], 0x1015, 0x2) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) unshare(0x40480) unshare(0xa040280) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6225d3351c031a79) 8.787151833s ago: executing program 3 (id=2057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x100}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 8.520526339s ago: executing program 3 (id=2060): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=@routing={0x16, 0x0, 0x0, 0x3}, 0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @loopback, 0xfffff803}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r3, 0x0, 0x5d) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 7.250822577s ago: executing program 1 (id=2066): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5fff, 0x100) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000002200)={0x3, 0x7d8, 0x1}) listen(r1, 0x0) (async) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) unshare(0x6a040000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xec}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r6}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8ffa1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f0000000480)={&(0x7f0000000000)=0xffffffffc046d0ab, 0x4, &(0x7f0000001c00)=[{}, {}, {}, {}, {}], &(0x7f0000000440)}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$pagemap(r7, &(0x7f00000004c0)) (async) syz_open_procfs$pagemap(r7, &(0x7f00000004c0)) 6.60438584s ago: executing program 9 (id=2070): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x100}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 6.444493894s ago: executing program 3 (id=2072): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x940, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}}], 0x1, 0x24000840) 6.330413228s ago: executing program 9 (id=2073): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414070000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$uac3(0x4, 0xf1, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x7, 0x0, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x26, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x16, 0x57}, [@source_unit={0xc, 0x24, 0xb, 0x2, 0x0, 0x8000, 0x7, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1, 0x4a, 0x9}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x8, 0x7, "d186d32b5b54b8f8"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x5, 0x2, "81d5693ba4f17511a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xfd, 0x6, {0xa, 0x25, 0x25, 0x3, 0xe, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0x2, "", "deb931"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0x8, "d54176a8cc"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x8001, 0xce, "96413c54632af72f"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x9f}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x92, 0x2, 0x5, {0xa, 0x25, 0x25, 0x7, 0x8, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x9, 0xf, 0x3, 0x10, 0x77}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xff37091df41226aa, 0x7, 0x4, 0x2}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x44, &(0x7f0000000300)=@string={0x44, 0x3, "bf65c1f8cc475faefe66e3a5338f2cfe0b1423e17159dc9f5ee4df29efd1bf17b7f1c3b0425700ac685777722acd1148f2150b411dc91c50078f47c3130d3fb16187"}}, {0x26, &(0x7f0000000380)=@string={0x26, 0x3, "ee76d23273c0a0c179322077b219499ad082b82e3a49859edc75ba2f10db75fa51d2f794"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x29, &(0x7f0000000400)=@string={0x29, 0x3, "f792da480a44ad3e037939b147b2036f8bb25ff987eeecacf4c24bd911c36bbe4182fbee92fa93"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x813}}, {0x43, &(0x7f0000000480)=@string={0x43, 0x3, "e73f854c426f72ed41625362234ae040e54189cc32d1433b88f42e79980a9d4c50d2e34e38c9c3c821d9c4d3a378323a02d951cceab4a0418309aeca67a8850c99"}}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[], 0x1100}, 0x1, 0x7}, 0x0) syz_usb_connect$uac1(0x6, 0xda, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x1, 0x80, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4d}, [@feature_unit={0x13, 0x24, 0x6, 0x2, 0x2, 0x6, [0x4, 0x7, 0x6, 0xa, 0x1, 0x5], 0x9}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x6, 0x6, [0x3, 0x1, 0x4, 0x6, 0x4, 0xa], 0x8b}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x3, 0x8, 0x0, 0x40, 0x40}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x4, 0x4, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x5, 0x8, "86"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x5, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3c28, 0x0, 0x9, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x3, 0x0, {0x7, 0x25, 0x1, 0x0, 0x35, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0xc9e, 0x80, "0683"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x40, 0x7, 0x51, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0xa2, 0x9, {0x7, 0x25, 0x1, 0xc, 0x2, 0xeb}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x200, 0x2, 0x3, 0x1, 0x1fe, 0x4}, 0x88, &(0x7f0000000a40)={0x5, 0xf, 0x88, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x11, 0x4, 0x9, 0x1e, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x1}, @generic={0x2c, 0x10, 0x2, "9d4f6b24ce57a0cd99ca07a3acfd478aa897bac1deb6f7c8976fb1ef0a146066b9ada141e41e3c63a8"}, @generic={0x27, 0x10, 0x2, "0ca88222a5c33d6b37d4167481c071ed58b4309f7742581cb8ab5a85dedc423cbb18b9d4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0xc, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e1e975ae3664950c6c32431b98269767"}]}, 0x8, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x4, &(0x7f0000000b80)=@string={0x4, 0x3, "c534"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x440a}}, {0x6b, &(0x7f0000000c00)=@string={0x6b, 0x3, "0872a7ada1de8cd2c363b5298daebebbc238ec860c951e7aa7f42fb75a792256d09e0b7b0fd16d509688b7904747e18c6cb53eec2e7cb9bdd1f00c8cfe2ce6e5070641b5ade15ce1dcdd7dbdab78960835bd3b784d02086af86584b83fd2ad032148277f6581acbf2c"}}, {0x91, &(0x7f0000000c80)=@string={0x91, 0x3, "8ea7668a8646f160bb66268af774cf9103aa4623add83d0c2e1a0d1f543df4cab3470232f02543939763accc53c09c76b26571a9c39e4ad6373b072c9379e83eceea619b44a8f17f346f3f7bb098ab0472f8d422eefd452e7624ff5a4b0b03a1d92cac8c4092b11ea5c1bfa2fb46eeb46f5a80bc6636163cd119a556f831e7be4539fcb234f1825a79b801ff59b5f8"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2c62}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x6fee7a69e3c69f54}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c000014000280060012"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r5}) socket(0x80000000000000a, 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x40, 0x37, 0x1c, {0x1c, 0x23, "1b51ed1ad628eea9466e630e3753fa8df142abc1caaf12919e8a"}}, &(0x7f00000005c0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "cf2692d443527409e36a98f0de0641aa9e2570caecb4881fe0a77e44bc0d9d399dc82da0fc68f6c743fd8d5f7387cde24c5939a5041b394236132b37cfee9622"}}, &(0x7f0000000640)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x3, "44e3ddc0"}, @main=@item_4={0x3, 0x0, 0xb, "939a2898"}, @global=@item_012={0x1, 0x1, 0x8, "81"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x9a9}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0x73, "fc3a6b6a81968bd43237f2c5d06d917aebff553239c75aefda3f245ec8bbda365fb0c0b694a10003c0b4a2378b53f6cd475c1c58eb3e7a39df674d7d3c8582d351e41e57ba675fdd430cc7dc2aac89121e8a987aa39d4e8cc0afe9c18dd06f7a86f4631ba16463037f7bdf9e0d4844d30e6cbf"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000800)={0x20, 0x1, 0x74, "5ba05c749e63e34102c034921e7dde45687711046d4b3703acd3d38b95f5d358206ed0cc646d4131386294d6db51fa27d6dc7a26ef428b3ffb8a1907223b285df3e29e404db951487033ba92c515704261cc6e31629ec317165180893338a49c58decc7f2e6bab51cda02f8580ccee16a291d740"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x70}}) syz_usb_control_io(r0, 0x0, 0x0) 6.024735154s ago: executing program 4 (id=2075): socket(0x26, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16], 0x1015, 0x2) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) unshare(0x40480) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00b07a0b0000200081dc28bd701c030000000200003497e44f733bfa6b4a00fff7b53be463bd8ec8462e06b0e2cf94d315fc131d61099661a3934dee7224ce2d06d20e747e2e3ff5b528b542bcef6639a0462fb75552bdf6cfc1472330b063440e1d4e5c5ef2f15a02da545f4ff1404d8e9c56f9ce405f504a90c598cca59649798a61db832b0bec26662549f732b947e504e850cc6dd66c968a90402149b0764ff1921f2f2744f041b2658528002d94c665c0c2992fe052229ac34c89c224b951d6c6101c56fa397c7259cc45b456510f64b0c1ddd5bc07560b279af75de648031d51847142cb5197da01bc4c69072396cf100100515653cb93d69f13b8b38bff4fe4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6225d3351c031a79) 5.982431636s ago: executing program 2 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x50) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x100, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x80, 0x5, 0xff, 0x1, 0xc8, 0x4, 0x3c00}, [@RTA_FLOW={0x8, 0xb, 0x101}, @RTA_UID={0x8, 0x19, r4}, @RTA_MARK={0x8, 0x10, 0x7ec}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 5.831816749s ago: executing program 1 (id=2077): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2d87) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80000000, 0xffffffffffffffff, 0x1, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) close(0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 4.690960422s ago: executing program 2 (id=2078): syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaabbc1c4bec200000186ddb0a7ddf000283afffe8800000000000000000000000001"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x320000) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.689164846s ago: executing program 4 (id=2079): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 4.283290158s ago: executing program 2 (id=2080): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.215292636s ago: executing program 4 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bfe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0x8, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000280)={0x5, 0xf, 0x43, 0x5, [@ptm_cap={0x3}, @generic={0x1f, 0x10, 0x3, "9f80db9f94cdb308ad0996a4aab43b3c29c26d37571b95123076986d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8, 0x6, 0xfffa}, @wireless={0xb, 0x10, 0x1, 0x8, 0xe5, 0x8, 0x2, 0x6, 0x4f}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x827}}, {0x58, &(0x7f0000000780)=@string={0x58, 0x3, "4593a441c68ac2927944eb469b88d3dad6a3c9593a8844eb59f770c5304f451187ad61823f44fdedb0983c36e7cbc9cdd9d1bba9b778077a022cf0a73755487f3530c35645c3124059241c5fb1a5da98c5052ca6fd14"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x701f}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x408}}, {0xf6, &(0x7f0000000480)=@string={0xf6, 0x3, "75c5c301c52acffda54d84d562898e0389ebb86c84fd821a42c8d0f751e6f722f0cf6a94831c8075f5f45a5421c555a36240e7eedfeb5e32fc5aa4a1463588805aa1d308f03d8d0a875f44c3968bc17aa28c1edd2bd0f5bfd2befe43e55d11ccc90bdf45db975024d28776b726f6ee0f6a8ac9581634abad47cb354b86b981afec7b980c9c4029886db26a14164d4493685decf59f93caa3b32eb65e9dc077d1454561096642958ba4a200be3980bd6e9b10f3afdf883809a0318275c0d1365e46b77f7dd215a6ee40463546bb89b6191def7d738af950a859b443fe3cf81554c281173a177bd7e10ef8bd2746f86f7035500f01"}}, {0x98, &(0x7f0000000580)=@string={0x98, 0x3, "224abf27e85c6eca671f4b5e8b1965a32db28ec13472cf3b19b9812889c8c2132e4c6bda70beaf9976cb7ab3758fe0894e63fb14246f93ceb657e8436ba3240e14a1395b6675adbd743ee1bff46a4ebea63cdd017ed04cc3ac9c586f46579f2bc2daac58c73fe1206436ac355ec5b131359ec1403258b0cb9b4039c54d1c4cffcffa9a5c017857de174cbb9fe1e5c15db7627dd5f5e8"}}, {0xa7, &(0x7f0000000640)=@string={0xa7, 0x3, "63985bc0f704c68e5677edc46f07f2baa8a740d43a57d96a9ad9ea393e7d9c7d9f78720b23129cf1fea3865ca71a62447004c4f30c2106f0958153ee7d094cf23295d6ee1ab925f09fc733a8620d3970b5cf1705f796700b0286a49ee37433eb0c7c337a0633e75b2cf9145756b404117dadd75d97061bde3870b8210c6cc6d32030408089666d76c10df4ac780e8d844dbfb6479a1d0ec5d28316813e75a29fdef08e0a1b"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.588469098s ago: executing program 1 (id=2082): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82242, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffe02, 0x3}, {0x0, 0x5}, 0xfffffe25, 0x6}) 3.205178123s ago: executing program 3 (id=2083): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200001, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefb, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsetxattr$smack_xattr_label(r4, &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000180), 0x1, 0x2) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x280688c5}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r7, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/85) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) fallocate(r0, 0x13, 0x9, 0x0) 3.113807615s ago: executing program 1 (id=2084): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='team_slave_1\x00') move_pages(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil], &(0x7f00000002c0)=[0x3], 0x0, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r1 = mq_open(0x0, 0x40, 0x59, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) mq_notify(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x35) chdir(0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x515001, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @mcast1, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000001bc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x18}, 0x40000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0xf204c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53a, 0x3a, '\\$-:/.-[', 0x3a, 'wlan0\x00', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x4f]}, 0x38) 2.665244226s ago: executing program 2 (id=2085): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x2}]}) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="62e269a33d5038fb0407abfa80c660ca977594048242dc881620a7d2afd5fe7a8cb8fb9ea374e8d268ca0a4fd050a489b7b072aad069faa0c0b20453c4352fd87ab6d5637e82fbaf4db62644d74d13edf4253e5f6cd3efac2d4d044b764c0241d723bfdff22d8bbf4c72fc8e022fa39e05a8b87d05d7a16d61f3477c0cda5eb8c5931ae6f37ffb7bf104fbd0fa6e160ae6d0a8a7f1a107b731a657eaa2bce5d2a0674ba95c09a7c0a87d24b72a8883320fe930e5af4535cdcb7d17fc6e0c34827503a3738d0257a7878356d976b3064cf580b2ed13c41ce8773d24843628c06a9d", 0xe1}, {&(0x7f0000001700)="364d93f986f84d52ca68950e8cfaf602dbb86fa64c75c4b5f03bf860630901e3f0ae7c57686a8de9408fff702631ae9995e07eca5868cbfb6eff6124a00e8f9e5a33bb786c1fe5960c0cc505b8370f7c6620c30412371a5a964f2d6e", 0x5c}, {&(0x7f0000001780)="126f829709396dae32e6bbc57ff9dbda1e61035624b4cda84f2a1b0bedb05e4801201a736568178760dae2f2bf5a798202e915c2fc8b65ea2b4daa682c1973fe66a59f04a667d762f09a0df3", 0x4c}, {&(0x7f0000001800)="3997480de4cc90c1ec2c0eb40541ee8ecf3dcffaac1d248dba1d5a75a89213b25b753d3bfae13255b7bebd85def05bced37f14e0a98652d8ef858f23bad8ab7c22b0f618c0d146a281e677f0cf4f38239df6de27158105b816f49cc639f316be2dd2b91e7b6007197196351d69727950747d7f81be827e74c0fb91c3e37f32979ef2237a0db9d6b1c07ac9c74c75a36a4a3f64fed7d097f72c2680ef34d8348635ddf8ffc6a387531f6f9d611b80", 0xae}, {&(0x7f00000018c0)="dc71693692539e85fcb14fe209681fc1affd4b2824e319e78156369c2762637f176f9aff5a2c60c728168ae5a2624462cb44fca2898510e93735d85d7f7756182576d2e72ac795b4bb7cf2341fdc8c1ecfd0a040c5586b2a2726c9e56dec0811b81943bd3282b705c47922a2f9672cee3b10bea6d96a28d830695db780b6d2924ea3c8fa46542ee4baee6023e399144bd957b64e0a799a54fb60eedb7f6bc6631630f194b1d541737b548dfab51fe0ca8e98e5de46275ca2b8b08298d95b61678adb60de23de2cd09c1eb950795ba93524c2b44f890096702f08c5455982d50b2cf47a22943d2c8b372dcf1341f656585e0381e74e0ebb7c", 0xf8}], 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_dev$audion(0x0, 0x8, 0x2000) r2 = syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x226c, 0x2, 0x3, 0x231}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000340), 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@sha1={0x1, "32f7722629ccb96123687f08f757c6cb55524140"}, 0x15, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r3, 0x1, r2, 0x4, 0x80000}) 2.651022528s ago: executing program 3 (id=2086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x0, 0x6, 0x6, 0x5, 0x9, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB='d\x00-'], 0x80}}, 0x4000000) 2.648795988s ago: executing program 9 (id=2087): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x921a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0xbc, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x1, 0x401, 0x3, 0x4, 0x2004}, [@TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2, 0xffffffff}}, @NETEM_LOSS_GI={0x0, 0x1, {0x5, 0x3, 0x28, 0x0, 0x78}}, @NETEM_LOSS_GE={0x24, 0x2, {0x7fffffff, 0x3823, 0x3, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xfffffffd, 0x6, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x5, 0x1, 0x7, 0xfff}}]}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f0000000140)) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f00000001c0)="d51d8c02b60bcfee980fe37853b295e26d2622504f8ed3453b5f6e464dd17cf741a42e9c4232bdc6dacc9f512ad3d49a7f29733333bcdd8813a39e050cc24fa97056ec4152b3c6eb9de88676979b979fea1b5e9b8efe758e502df2293bb39038d72e729e387bb278d9b3c8cbd878d58c607468ca6d160e72d61e218995b6a186b04a318e947507115dbbdfb2e19e72d20643b0d74e76636f", 0x98) 2.560329425s ago: executing program 1 (id=2088): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x4000080) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0xfdfffffc, 0x400080, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000df00)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000df560e75d9faabd40000"], 0x0, 0x26, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(0x0, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xcb, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x436, 0x4, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.266773692s ago: executing program 4 (id=2089): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16], 0x1015, 0x2) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) unshare(0x40480) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6225d3351c031a79) 2.098576028s ago: executing program 2 (id=2090): syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaabbc1c4bec200000186ddb0a7ddf000283afffe8800000000000000000000000001"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x320000) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.020204997s ago: executing program 9 (id=2091): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1.011067726s ago: executing program 4 (id=2092): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @loopback}}}}) (fail_nth: 1) 937.966237ms ago: executing program 2 (id=2093): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x940, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}}], 0x1, 0x24000840) 890.786915ms ago: executing program 3 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) socket(0x6, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) accept4$x25(r2, &(0x7f0000000600)={0x9, @remote}, &(0x7f0000000640)=0x12, 0x100800) sendmmsg$sock(r0, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a", 0xab}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@in6={0xa, 0x4e23, 0x4, @mcast1, 0x2}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="3801000018000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d43c000000fc02000000000000000000000000000007000000000020009201000000000010a39b000000000000ffff0000000000001c250800000000000300000000000000fcffffdcffffffff0463fda5ba00"], 0x138}}, 0x2048805) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0xa, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0xf}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xa, 0xb, 0x3, @SEQ_NOTEON=@note=0x2d, 0xa7, 0xff}) preadv(r9, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x3ef, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="92810800", @ANYBLOB="436464a4618fd889f58d97e2a66cb6cb43a87f833cffb7e4b6bd2ed44d8b05b7", @ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 570.197092ms ago: executing program 1 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x41) close(0x3) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7c, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20008841) 431.276399ms ago: executing program 9 (id=2096): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x202900, &(0x7f0000000140)={@align=0x9, {0x2, 0x326, 0x80000000, 0x7}}, 0x1ff, &(0x7f00000001c0), &(0x7f0000000200)=0x7}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000280)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) prctl$PR_SCHED_CORE(0x37, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa90d053889551fed) 200.805548ms ago: executing program 9 (id=2097): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x3, 0x2, 0x7ffffffd}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0) (fail_nth: 1) 0s ago: executing program 4 (id=2098): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x8, 0x88, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x20}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0x8]) unshare(0x10010900) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000001c0)=""/61) r2 = semget(0x0, 0x4, 0x39c) semop(r2, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x800, 0x8, 0x3]) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000040)=""/53) kernel console output (not intermixed with test programs): 7][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.193513][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.195511][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.195837][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.196139][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.196427][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.196719][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.197045][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.197347][ T5816] Bluetooth: Unexpected start frame (len 18) [ 1041.554358][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1608'. [ 1044.269901][T13208] FAULT_INJECTION: forcing a failure. [ 1044.269901][T13208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.269947][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.8.1614 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1044.269981][T13208] Tainted: [L]=SOFTLOCKUP [ 1044.269990][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1044.270005][T13208] Call Trace: [ 1044.270014][T13208] [ 1044.270024][T13208] dump_stack_lvl+0xe8/0x150 [ 1044.270068][T13208] should_fail_ex+0x46b/0x600 [ 1044.270100][T13208] _copy_from_iter+0x1d3/0x1670 [ 1044.270135][T13208] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1044.270168][T13208] ? __alloc_skb+0x27d/0x7d0 [ 1044.270203][T13208] ? __pfx__copy_from_iter+0x10/0x10 [ 1044.270226][T13208] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1044.270265][T13208] ? __alloc_skb+0x27d/0x7d0 [ 1044.270305][T13208] ? netlink_sendmsg+0x650/0xb40 [ 1044.270335][T13208] ? skb_put+0x11b/0x210 [ 1044.270362][T13208] netlink_sendmsg+0x6c0/0xb40 [ 1044.270407][T13208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.270445][T13208] ? unwind_get_return_address+0x4d/0x90 [ 1044.270476][T13208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1044.270514][T13208] ____sys_sendmsg+0x94c/0x9c0 [ 1044.270547][T13208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.270582][T13208] ? import_iovec+0x73/0xa0 [ 1044.270615][T13208] ___sys_sendmsg+0x2a5/0x360 [ 1044.270640][T13208] ? __lock_acquire+0x6b5/0x2cf0 [ 1044.270672][T13208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1044.270736][T13208] ? __fget_files+0x2a/0x420 [ 1044.270764][T13208] ? __fget_files+0x3a6/0x420 [ 1044.270804][T13208] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1044.270832][T13208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1044.270868][T13208] ? __pfx_ksys_write+0x10/0x10 [ 1044.270920][T13208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.270945][T13208] do_syscall_64+0x15f/0xf80 [ 1044.270977][T13208] ? clear_bhb_loop+0x40/0x90 [ 1044.271006][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.271030][T13208] RIP: 0033:0x7f033c38c819 [ 1044.271052][T13208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.271074][T13208] RSP: 002b:00007f033a5e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.271100][T13208] RAX: ffffffffffffffda RBX: 00007f033c605fa0 RCX: 00007f033c38c819 [ 1044.271118][T13208] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1044.271132][T13208] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.271146][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.271160][T13208] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1044.271196][T13208] [ 1045.516940][T13221] netlink: 'syz.9.1618': attribute type 1 has an invalid length. [ 1045.563415][ T906] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1045.712397][ T906] usb 5-1: Using ep0 maxpacket: 16 [ 1045.716780][ T906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.716814][ T906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.750332][ T906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.750369][ T906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.750393][ T906] usb 5-1: Product: syz [ 1045.750409][ T906] usb 5-1: Manufacturer: syz [ 1045.750426][ T906] usb 5-1: SerialNumber: syz [ 1045.861733][ T906] usb 5-1: 0:2 : does not exist [ 1046.279029][ T906] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1046.412968][ T906] usb 5-1: USB disconnect, device number 24 [ 1046.479454][T12976] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1046.577025][T11681] udevd[11681]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.635698][T12976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.635761][T12976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1046.635810][T12976] usb 10-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1046.635836][T12976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.673468][T13241] blktrace: Concurrent blktraces are not allowed on sg0 [ 1046.673850][T13241] program syz.2.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.709217][T12976] usb 10-1: config 0 descriptor?? [ 1046.761470][T12976] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1046.824491][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 1046.921303][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.923267][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.106308][ T5816] Bluetooth: hci5: unknown advertising packet type: 0x05 [ 1048.380120][ T37] audit: type=1326 audit(1776535097.638:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.380759][ T37] audit: type=1326 audit(1776535097.638:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.381559][ T37] audit: type=1326 audit(1776535097.638:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.381611][ T37] audit: type=1326 audit(1776535097.638:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.383666][ T37] audit: type=1326 audit(1776535097.638:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.383719][ T37] audit: type=1326 audit(1776535097.638:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.383765][ T37] audit: type=1326 audit(1776535097.638:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.383810][ T37] audit: type=1326 audit(1776535097.638:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.385735][ T37] audit: type=1326 audit(1776535097.638:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.385788][ T37] audit: type=1326 audit(1776535097.638:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1048.394377][ T5889] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1048.627248][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 1048.640731][ T5889] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1048.640767][ T5889] usb 3-1: config 2 has no interface number 0 [ 1048.640829][ T5889] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1048.640859][ T5889] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1048.645182][ T5889] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1048.645215][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.645239][ T5889] usb 3-1: Product: syz [ 1048.645258][ T5889] usb 3-1: Manufacturer: syz [ 1048.645275][ T5889] usb 3-1: SerialNumber: syz [ 1048.887340][T13259] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1049.168426][ T5889] asix 3-1:2.88: probe with driver asix failed with error -71 [ 1049.305711][T13259] tipc: Enabling of bearer rejected, already enabled [ 1049.334245][ T5889] usb 3-1: USB disconnect, device number 77 [ 1049.372561][ T5882] usb 10-1: USB disconnect, device number 14 [ 1052.096549][ T5985] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1052.226580][T11478] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1052.305418][ T5985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.305467][ T5985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1052.316028][ T5985] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1052.316062][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.316084][ T5985] usb 3-1: Product: syz [ 1052.316108][ T5985] usb 3-1: Manufacturer: syz [ 1052.316123][ T5985] usb 3-1: SerialNumber: syz [ 1052.335938][ T5985] usb 3-1: config 0 descriptor?? [ 1052.354638][ T5985] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1052.461998][T11478] usb 10-1: Using ep0 maxpacket: 16 [ 1052.464561][T11478] usb 10-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1052.464623][T11478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.464656][T11478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65280, setting to 1024 [ 1052.464687][T11478] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1052.464715][T11478] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.466370][T11478] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1052.466402][T11478] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1052.466425][T11478] usb 10-1: Manufacturer: syz [ 1052.509476][ T5904] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1052.614210][T11478] usb 10-1: config 0 descriptor?? [ 1052.734828][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.734960][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.735012][ T5904] usb 5-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1052.735101][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.824588][ T5904] usb 5-1: config 0 descriptor?? [ 1052.910423][ T5904] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1052.971652][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1052.978815][ T5985] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1052.978876][ T5985] usb 3-1: media controller created [ 1053.107517][T13311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.141854][T13311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.335924][T11478] rc_core: IR keymap rc-hauppauge not found [ 1053.335948][T11478] Registered IR keymap rc-empty [ 1053.337877][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.356318][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.381840][T11478] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1053.409663][T11478] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 1053.466605][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.473589][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.499440][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.523286][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.536231][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.559176][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.579063][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.596233][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.616087][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.636185][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.657503][T11478] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1053.826841][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1648'. [ 1053.866688][T11478] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1053.866719][T11478] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1053.896014][T11478] usb 10-1: USB disconnect, device number 15 [ 1054.334465][ T5985] DVB: Unable to find symbol tda10046_attach() [ 1054.334487][ T5985] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1054.334503][ T5985] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1054.339648][ T5985] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1054.389749][ T5985] usb 3-1: USB disconnect, device number 78 [ 1054.472061][T13350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1650'. [ 1054.526729][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.526808][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.187405][ T5985] usb 5-1: USB disconnect, device number 25 [ 1055.427670][T13384] 9p: Bad value for 'port' [ 1057.412900][T13407] loop2: detected capacity change from 0 to 7 [ 1058.260049][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 1058.260077][T13424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1663'. [ 1058.452343][T13407] Dev loop2: unable to read RDB block 7 [ 1058.452401][T13407] loop2: unable to read partition table [ 1058.452661][T13407] loop2: partition table beyond EOD, truncated [ 1058.452703][T13407] loop_reread_partitions: partition scan of loop2 (ъщѓеЎ™‰ьЌѕCкjМ–гўP=ГЅ?г}X‹єР њлЬ%х«`ЙжЦЂщ…€{н©ЦђИµ4FLQkЭЉ) failed (rc=-5) [ 1060.232487][ T5904] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1060.439097][ T5816] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1060.635228][ T5904] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1060.635263][ T5904] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.635288][ T5904] usb 9-1: config 220 has no interface number 2 [ 1060.635369][ T5904] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1060.635401][ T5904] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1060.635422][ T5904] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1060.635439][ T5904] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1060.643686][ T5904] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1060.643733][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.643757][ T5904] usb 9-1: Product: syz [ 1060.643775][ T5904] usb 9-1: Manufacturer: syz [ 1060.643792][ T5904] usb 9-1: SerialNumber: syz [ 1062.336502][T13444] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1062.519950][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 1062.537173][ T5904] usb 9-1: selecting invalid altsetting 0 [ 1062.644758][ T5904] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1062.644803][ T5904] uvcvideo 9-1:220.0: No valid video chain found. [ 1062.682483][ T5904] usb 9-1: selecting invalid altsetting 0 [ 1062.682529][ T5904] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1062.777447][ T5904] usb 9-1: USB disconnect, device number 46 [ 1064.878300][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1679'. [ 1065.142110][T13499] loop8: detected capacity change from 0 to 7 [ 1065.432740][T13499] Dev loop8: unable to read RDB block 7 [ 1065.432803][T13499] loop8: unable to read partition table [ 1065.433135][T13499] loop8: partition table beyond EOD, truncated [ 1065.433176][T13499] loop_reread_partitions: partition scan of loop8 (юиў«xь^>Са– ) failed (rc=-5) [ 1065.708578][T11681] Dev loop8: unable to read RDB block 7 [ 1065.708632][T11681] loop8: unable to read partition table [ 1065.874361][T11681] loop8: partition table beyond EOD, truncated [ 1066.790827][ T5882] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1066.961701][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 1066.967592][ T5882] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.967676][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.967702][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.967731][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.967759][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.967808][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1066.967835][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.411058][ T5882] usb 5-1: usb_control_msg returned -32 [ 1067.411192][ T5882] usbtmc 5-1:16.0: can't read capabilities [ 1067.772076][T13550] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 1069.018503][T12976] usb 5-1: USB disconnect, device number 26 [ 1074.102072][T13601] fuse: Bad value for 'group_id' [ 1074.102099][T13601] fuse: Bad value for 'group_id' [ 1074.748404][T13619] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1074.939464][ T5816] Bluetooth: hci0: unexpected event for opcode 0x203c [ 1074.985289][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.109988][ T36] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1075.316724][ T36] usb 10-1: Using ep0 maxpacket: 8 [ 1075.343261][ T36] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1075.343300][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.343324][ T36] usb 10-1: Product: syz [ 1075.343342][ T36] usb 10-1: Manufacturer: syz [ 1075.343359][ T36] usb 10-1: SerialNumber: syz [ 1075.491356][T13641] loop2: detected capacity change from 0 to 1 [ 1076.523728][T13641] Dev loop2: unable to read RDB block 1 [ 1076.523769][T13641] loop2: AHDI p1 p2 p3 [ 1076.523809][T13641] loop2: partition table partially beyond EOD, truncated [ 1076.524083][T13641] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1076.524106][T13641] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1076.879401][ T36] usb 10-1: config 0 descriptor?? [ 1076.901503][ T36] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1077.515726][ T5816] Bluetooth: hci4: unexpected event for opcode 0x202a [ 1077.563802][ T36] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1077.783984][ T36] gspca_sq930x: Sensor ov9630 not yet treated [ 1077.785279][ T36] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 1078.697493][ T36] usb 10-1: USB disconnect, device number 16 [ 1078.989494][T13678] FAULT_INJECTION: forcing a failure. [ 1078.989494][T13678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.989560][T13678] CPU: 0 UID: 0 PID: 13678 Comm: syz.8.1724 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1078.989593][T13678] Tainted: [L]=SOFTLOCKUP [ 1078.989628][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1078.989642][T13678] Call Trace: [ 1078.989652][T13678] [ 1078.989663][T13678] dump_stack_lvl+0xe8/0x150 [ 1078.989704][T13678] should_fail_ex+0x46b/0x600 [ 1078.989736][T13678] _copy_from_user+0x2d/0xb0 [ 1078.989764][T13678] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1078.989787][T13678] drm_ioctl+0x5d0/0xb80 [ 1078.989822][T13678] ? smk_tskacc+0x311/0x3a0 [ 1078.989860][T13678] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1078.989887][T13678] ? __pfx_drm_ioctl+0x10/0x10 [ 1078.989932][T13678] ? __fget_files+0x2a/0x420 [ 1078.989964][T13678] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1078.989987][T13678] ? __pfx_drm_ioctl+0x10/0x10 [ 1078.990017][T13678] __se_sys_ioctl+0xff/0x170 [ 1078.990049][T13678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.990073][T13678] do_syscall_64+0x15f/0xf80 [ 1078.990103][T13678] ? clear_bhb_loop+0x40/0x90 [ 1078.990129][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.990150][T13678] RIP: 0033:0x7f033c38c819 [ 1078.990171][T13678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.990191][T13678] RSP: 002b:00007f033a5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.990218][T13678] RAX: ffffffffffffffda RBX: 00007f033c605fa0 RCX: 00007f033c38c819 [ 1078.990236][T13678] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000014 [ 1078.990252][T13678] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.990268][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.990283][T13678] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1078.990319][T13678] [ 1079.343046][ T36] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1079.456679][T13688] FAULT_INJECTION: forcing a failure. [ 1079.456679][T13688] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.456715][T13688] CPU: 0 UID: 0 PID: 13688 Comm: syz.8.1728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1079.456743][T13688] Tainted: [L]=SOFTLOCKUP [ 1079.456750][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1079.456762][T13688] Call Trace: [ 1079.456769][T13688] [ 1079.456778][T13688] dump_stack_lvl+0xe8/0x150 [ 1079.456812][T13688] should_fail_ex+0x46b/0x600 [ 1079.456848][T13688] should_failslab+0xa8/0x100 [ 1079.456868][T13688] __kmalloc_noprof+0xdf/0x7b0 [ 1079.456894][T13688] ? kfree+0x4d/0x6c0 [ 1079.456916][T13688] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1079.456943][T13688] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1079.456965][T13688] ? tomoyo_domain+0xd8/0x130 [ 1079.456990][T13688] ? tomoyo_path_number_perm+0x219/0x630 [ 1079.457016][T13688] tomoyo_path_number_perm+0x246/0x630 [ 1079.457044][T13688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1079.457068][T13688] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.457093][T13688] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.457144][T13688] ? __fget_files+0x2a/0x420 [ 1079.457169][T13688] ? __fget_files+0x2a/0x420 [ 1079.457189][T13688] ? __fget_files+0x3a6/0x420 [ 1079.457209][T13688] ? __fget_files+0x2a/0x420 [ 1079.457235][T13688] security_file_ioctl+0xc3/0x2a0 [ 1079.457263][T13688] __se_sys_ioctl+0x47/0x170 [ 1079.457300][T13688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.457320][T13688] do_syscall_64+0x15f/0xf80 [ 1079.457342][T13688] ? trace_irq_disable+0x3b/0x140 [ 1079.457360][T13688] ? clear_bhb_loop+0x40/0x90 [ 1079.457383][T13688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.457401][T13688] RIP: 0033:0x7f033c38c819 [ 1079.457418][T13688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.457433][T13688] RSP: 002b:00007f033a5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.457455][T13688] RAX: ffffffffffffffda RBX: 00007f033c605fa0 RCX: 00007f033c38c819 [ 1079.457468][T13688] RDX: 0000200000000280 RSI: 00000000c0185502 RDI: 0000000000000003 [ 1079.457480][T13688] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.457498][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.457509][T13688] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1079.457540][T13688] [ 1079.457620][T13688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1079.519276][ T36] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1079.519307][ T36] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.519328][ T36] usb 5-1: config 220 has no interface number 2 [ 1079.519398][ T36] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1079.519427][ T36] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1079.519446][ T36] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1079.519464][ T36] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1079.533726][ T36] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1079.533758][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.533779][ T36] usb 5-1: Product: syz [ 1079.533794][ T36] usb 5-1: Manufacturer: syz [ 1079.533809][ T36] usb 5-1: SerialNumber: syz [ 1080.852726][ T36] usb 5-1: selecting invalid altsetting 0 [ 1080.946964][ T36] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1080.947009][ T36] uvcvideo 5-1:220.0: No valid video chain found. [ 1080.969311][ T36] usb 5-1: selecting invalid altsetting 0 [ 1080.969360][ T36] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1081.066729][ T36] usb 5-1: USB disconnect, device number 27 [ 1082.044633][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1732'. [ 1082.584948][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 1082.584971][ T37] audit: type=1326 audit(1776535131.855:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1082.588192][ T37] audit: type=1326 audit(1776535131.855:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1083.355082][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1738'. [ 1084.380396][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1084.542944][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.542984][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.543028][ T36] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1084.543056][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.598513][ T36] usb 5-1: config 0 descriptor?? [ 1084.740284][ T6002] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1084.896569][ T6002] usb 10-1: Using ep0 maxpacket: 16 [ 1084.912394][ T6002] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.912427][ T6002] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1084.915875][ T6002] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1084.915970][ T6002] usb 10-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 1084.915996][ T6002] usb 10-1: Product: syz [ 1084.916011][ T6002] usb 10-1: Manufacturer: syz [ 1084.916027][ T6002] usb 10-1: SerialNumber: syz [ 1085.274253][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.290388][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.479434][ T5985] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1086.942841][ T5985] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1086.942877][ T5985] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.942902][ T5985] usb 3-1: config 220 has no interface number 2 [ 1086.942975][ T5985] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1086.943008][ T5985] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1086.943029][ T5985] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1086.943788][ T5985] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1086.946929][ T5985] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1086.946963][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.946987][ T5985] usb 3-1: Product: syz [ 1086.947004][ T5985] usb 3-1: Manufacturer: syz [ 1086.947022][ T5985] usb 3-1: SerialNumber: syz [ 1088.282430][ T31] usb 10-1: USB disconnect, device number 17 [ 1088.302505][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 1088.302658][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1088.345380][ T36] usb 5-1: USB disconnect, device number 28 [ 1088.542010][ T5985] usb 3-1: selecting invalid altsetting 0 [ 1088.593309][ T5985] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1088.593347][ T5985] uvcvideo 3-1:220.0: No valid video chain found. [ 1088.678030][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1760'. [ 1088.697330][T13819] loop8: detected capacity change from 0 to 7 [ 1088.850825][T13819] Dev loop8: unable to read RDB block 7 [ 1088.850878][T13819] loop8: unable to read partition table [ 1088.851147][T13819] loop8: partition table beyond EOD, truncated [ 1088.851201][T13819] loop_reread_partitions: partition scan of loop8 (юиў«xь^>Са– ) failed (rc=-5) [ 1088.855463][ T5985] usb 3-1: selecting invalid altsetting 0 [ 1088.855507][ T5985] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1088.887634][ T5985] usb 3-1: USB disconnect, device number 79 [ 1088.994581][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 1088.994604][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 1092.293390][T13880] netlink: 87 bytes leftover after parsing attributes in process `syz.8.1775'. [ 1092.489966][T13888] netlink: 'syz.8.1775': attribute type 4 has an invalid length. [ 1094.637160][T13906] FAULT_INJECTION: forcing a failure. [ 1094.637160][T13906] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.637313][T13906] CPU: 1 UID: 0 PID: 13906 Comm: syz.9.1785 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.637350][T13906] Tainted: [L]=SOFTLOCKUP [ 1094.637359][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1094.637379][T13906] Call Trace: [ 1094.637388][T13906] [ 1094.637399][T13906] dump_stack_lvl+0xe8/0x150 [ 1094.637450][T13906] should_fail_ex+0x46b/0x600 [ 1094.637483][T13906] should_failslab+0xa8/0x100 [ 1094.637508][T13906] kmem_cache_alloc_noprof+0x87/0x680 [ 1094.637543][T13906] ? taskstats_exit+0x147/0xa60 [ 1094.637583][T13906] taskstats_exit+0x147/0xa60 [ 1094.637619][T13906] ? seccomp_filter_release+0x278/0x2d0 [ 1094.637649][T13906] do_exit+0x682/0x22c0 [ 1094.637675][T13906] ? preempt_schedule_thunk+0x16/0x30 [ 1094.637713][T13906] ? __pfx_do_exit+0x10/0x10 [ 1094.637738][T13906] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1094.637763][T13906] ? reacquire_held_locks+0x104/0x190 [ 1094.637795][T13906] ? rt_spin_lock+0x1e0/0x400 [ 1094.637830][T13906] do_group_exit+0x21b/0x2d0 [ 1094.637858][T13906] ? rt_spin_unlock+0x160/0x200 [ 1094.637884][T13906] get_signal+0x125c/0x1310 [ 1094.637942][T13906] arch_do_signal_or_restart+0xbc/0x830 [ 1094.637975][T13906] ? __pfx___schedule+0x10/0x10 [ 1094.638002][T13906] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1094.638049][T13906] ? schedule+0x16e/0x360 [ 1094.638074][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.638100][T13906] exit_to_user_mode_loop+0x86/0x480 [ 1094.638125][T13906] ? rcu_is_watching+0x15/0xb0 [ 1094.638157][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.638181][T13906] do_syscall_64+0x33e/0xf80 [ 1094.638209][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.638234][T13906] ? clear_bhb_loop+0x40/0x90 [ 1094.638264][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.638287][T13906] RIP: 0033:0x7f721c52c819 [ 1094.638310][T13906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.638331][T13906] RSP: 002b:00007f721a786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1094.638359][T13906] RAX: fffffffffffffdfe RBX: 00007f721c7a5fa0 RCX: 00007f721c52c819 [ 1094.638377][T13906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1094.638392][T13906] RBP: 00007f721a786090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.638407][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.638422][T13906] R13: 00007f721c7a6038 R14: 00007f721c7a5fa0 R15: 00007fff317e9e88 [ 1094.638466][T13906] [ 1095.369691][T13924] FAULT_INJECTION: forcing a failure. [ 1095.369691][T13924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.369734][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.8.1789 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1095.369765][T13924] Tainted: [L]=SOFTLOCKUP [ 1095.369775][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1095.369788][T13924] Call Trace: [ 1095.369798][T13924] [ 1095.369808][T13924] dump_stack_lvl+0xe8/0x150 [ 1095.369851][T13924] should_fail_ex+0x46b/0x600 [ 1095.369883][T13924] _copy_to_user+0x31/0xb0 [ 1095.369913][T13924] simple_read_from_buffer+0xe1/0x170 [ 1095.369948][T13924] proc_fail_nth_read+0x1be/0x230 [ 1095.369982][T13924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.370014][T13924] ? rw_verify_area+0x2ac/0x4e0 [ 1095.370045][T13924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.370074][T13924] vfs_read+0x212/0xa80 [ 1095.370113][T13924] ? __pfx_vfs_read+0x10/0x10 [ 1095.370146][T13924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1095.370174][T13924] ? lockdep_hardirqs_on+0x7a/0x110 [ 1095.370202][T13924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1095.370229][T13924] ? mutex_lock_nested+0x152/0x1d0 [ 1095.370262][T13924] ? fdget_pos+0x252/0x320 [ 1095.370300][T13924] ksys_read+0x156/0x270 [ 1095.370335][T13924] ? __pfx_ksys_read+0x10/0x10 [ 1095.370383][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.370409][T13924] do_syscall_64+0x15f/0xf80 [ 1095.370435][T13924] ? trace_irq_disable+0x3b/0x140 [ 1095.370459][T13924] ? clear_bhb_loop+0x40/0x90 [ 1095.370488][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.370521][T13924] RIP: 0033:0x7f033c34d04e [ 1095.370542][T13924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1095.370562][T13924] RSP: 002b:00007f033a5e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1095.370586][T13924] RAX: ffffffffffffffda RBX: 00007f033a5e66c0 RCX: 00007f033c34d04e [ 1095.370604][T13924] RDX: 000000000000000f RSI: 00007f033a5e60a0 RDI: 0000000000000005 [ 1095.370617][T13924] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.370632][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.370646][T13924] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1095.370683][T13924] [ 1095.554836][ T906] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1097.052589][ T906] usb 3-1: Using ep0 maxpacket: 8 [ 1097.064026][ T906] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1097.064061][ T906] usb 3-1: config 0 has no interface number 0 [ 1097.073654][ T906] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1097.073699][ T906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.073723][ T906] usb 3-1: Product: syz [ 1097.073741][ T906] usb 3-1: Manufacturer: syz [ 1097.073757][ T906] usb 3-1: SerialNumber: syz [ 1097.236299][ T906] usb 3-1: config 0 descriptor?? [ 1097.443170][ T906] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1097.476289][ T906] usb 3-1: USB disconnect, device number 80 [ 1097.522380][T13937] loop2: detected capacity change from 0 to 7 [ 1097.541123][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.578632][T13937] Dev loop2: unable to read RDB block 7 [ 1097.578670][T13937] loop2: AHDI p1 p2 p3 [ 1097.578699][T13937] loop2: partition table partially beyond EOD, truncated [ 1097.578965][T13937] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1097.578988][T13937] loop2: p3 start 335544320 is beyond EOD, truncated [ 1100.332400][ T815] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1100.482354][ T815] usb 5-1: Using ep0 maxpacket: 32 [ 1100.486250][ T815] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1100.486286][ T815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.529708][ T815] usb 5-1: config 0 descriptor?? [ 1100.554625][ T815] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1100.752184][ T906] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1100.909458][ T906] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.909487][ T906] usb 9-1: config 0 has no interface number 0 [ 1100.909540][ T906] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1100.909571][ T906] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.909596][ T906] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.909620][ T906] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1100.909641][ T906] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1100.909660][ T906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.947457][ T906] usb 9-1: config 0 descriptor?? [ 1101.258836][T13976] misc userio: Invalid payload size [ 1101.263656][T13969] ucma_write: process 1650 (syz.2.1807) changed security contexts after opening file descriptor, this is not allowed. [ 1101.741798][ T5904] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1101.905538][ T5904] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 1101.905636][ T5904] usb 10-1: config 0 has no interface number 0 [ 1101.905659][ T5904] usb 10-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 1101.905689][ T5904] usb 10-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 1101.905722][ T5904] usb 10-1: config 0 interface 48 has no altsetting 0 [ 1101.934156][ T5904] usb 10-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1101.934190][ T5904] usb 10-1: New USB device strings: Mfr=35, Product=2, SerialNumber=3 [ 1101.934216][ T5904] usb 10-1: Product: syz [ 1101.934483][ T5904] usb 10-1: Manufacturer: syz [ 1101.934501][ T5904] usb 10-1: SerialNumber: syz [ 1102.058646][ T5904] usb 10-1: config 0 descriptor?? [ 1102.081791][ T815] gspca_vc032x: reg_w err -110 [ 1102.081810][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081823][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081832][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081842][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081852][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081861][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081871][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081881][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081890][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081899][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081909][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081918][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081928][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081937][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081946][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081956][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081965][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081974][ T815] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.081984][ T815] gspca_vc032x: Unknown sensor... [ 1102.082065][ T815] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1102.301054][ T5904] ftdi_sio 10-1:0.48: FTDI USB Serial Device converter detected [ 1102.325933][ T5904] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1102.405148][ T5904] usb 10-1: USB disconnect, device number 18 [ 1102.486230][ T5904] ftdi_sio 10-1:0.48: device disconnected [ 1102.488607][T13962] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1102.550496][ T5896] usb 5-1: USB disconnect, device number 29 [ 1103.502084][ T906] usbhid 9-1:0.1: can't add hid device: -71 [ 1103.502224][ T906] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1103.555534][ T906] usb 9-1: USB disconnect, device number 47 [ 1104.225507][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1815'. [ 1104.225525][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1815'. [ 1105.523213][T14026] openvswitch: netlink: IP tunnel dst address not specified [ 1107.384796][T14047] FAULT_INJECTION: forcing a failure. [ 1107.384796][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.384839][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.9.1832 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1107.384872][T14047] Tainted: [L]=SOFTLOCKUP [ 1107.384880][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1107.384894][T14047] Call Trace: [ 1107.384903][T14047] [ 1107.384913][T14047] dump_stack_lvl+0xe8/0x150 [ 1107.384955][T14047] should_fail_ex+0x46b/0x600 [ 1107.384986][T14047] should_failslab+0xa8/0x100 [ 1107.385012][T14047] kmem_cache_alloc_noprof+0x87/0x680 [ 1107.385045][T14047] ? __netlink_lookup+0xc6/0x8b0 [ 1107.385067][T14047] ? skb_clone+0x212/0x3a0 [ 1107.385099][T14047] skb_clone+0x212/0x3a0 [ 1107.385129][T14047] __netlink_deliver_tap+0x404/0x850 [ 1107.385177][T14047] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.385214][T14047] netlink_deliver_tap+0x19c/0x1b0 [ 1107.385248][T14047] netlink_unicast+0x754/0x920 [ 1107.385284][T14047] netlink_sendmsg+0x813/0xb40 [ 1107.385310][T14047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.385331][T14047] ? unwind_get_return_address+0x4d/0x90 [ 1107.385349][T14047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.385370][T14047] ____sys_sendmsg+0x94c/0x9c0 [ 1107.385388][T14047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.385415][T14047] ? import_iovec+0x73/0xa0 [ 1107.385433][T14047] ___sys_sendmsg+0x2a5/0x360 [ 1107.385447][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.385465][T14047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.385500][T14047] ? __fget_files+0x2a/0x420 [ 1107.385516][T14047] ? __fget_files+0x3a6/0x420 [ 1107.385538][T14047] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1107.385554][T14047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.385574][T14047] ? __pfx_ksys_write+0x10/0x10 [ 1107.385598][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.385612][T14047] do_syscall_64+0x15f/0xf80 [ 1107.385628][T14047] ? trace_irq_disable+0x3b/0x140 [ 1107.385642][T14047] ? clear_bhb_loop+0x40/0x90 [ 1107.385660][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.385681][T14047] RIP: 0033:0x7f721c52c819 [ 1107.385695][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.385707][T14047] RSP: 002b:00007f721a765028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.385721][T14047] RAX: ffffffffffffffda RBX: 00007f721c7a6090 RCX: 00007f721c52c819 [ 1107.385731][T14047] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1107.385740][T14047] RBP: 00007f721a765090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.385748][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.385756][T14047] R13: 00007f721c7a6128 R14: 00007f721c7a6090 R15: 00007fff317e9e88 [ 1107.385776][T14047] [ 1107.548573][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1107.548599][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1107.559718][ T5896] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1107.769447][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 1107.773328][ T5896] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 143, changing to 7 [ 1107.776845][ T5896] usb 5-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 1107.776879][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.776901][ T5896] usb 5-1: Product: syz [ 1107.776916][ T5896] usb 5-1: Manufacturer: syz [ 1107.776933][ T5896] usb 5-1: SerialNumber: syz [ 1108.097094][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.116287][ T5896] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1108.162228][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.162888][ T5896] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1108.187206][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.269954][ T5896] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1108.289740][ T5896] usb 5-1: USB disconnect, device number 30 [ 1108.455329][T11681] udevd[11681]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.938400][T14075] FAULT_INJECTION: forcing a failure. [ 1109.938400][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.938444][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.9.1841 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1109.938477][T14075] Tainted: [L]=SOFTLOCKUP [ 1109.938486][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1109.938500][T14075] Call Trace: [ 1109.938509][T14075] [ 1109.938520][T14075] dump_stack_lvl+0xe8/0x150 [ 1109.938562][T14075] should_fail_ex+0x46b/0x600 [ 1109.938601][T14075] should_failslab+0xa8/0x100 [ 1109.938626][T14075] __kmalloc_noprof+0xdf/0x7b0 [ 1109.938661][T14075] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1109.938699][T14075] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1109.938738][T14075] genl_family_rcv_msg_doit+0xd9/0x330 [ 1109.938775][T14075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1109.938803][T14075] ? rcu_is_watching+0x15/0xb0 [ 1109.938834][T14075] ? rcu_is_watching+0x15/0xb0 [ 1109.938865][T14075] ? cap_capable+0x123/0x460 [ 1109.938899][T14075] ? safesetid_security_capable+0xa9/0x1a0 [ 1109.938934][T14075] ? bpf_lsm_capable+0x9/0x20 [ 1109.938960][T14075] ? security_capable+0x7e/0x2c0 [ 1109.938990][T14075] genl_rcv_msg+0x61c/0x7a0 [ 1109.939026][T14075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1109.939052][T14075] ? ref_tracker_free+0x673/0x820 [ 1109.939077][T14075] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1109.939111][T14075] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1109.939133][T14075] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1109.939168][T14075] ? __pfx_ref_tracker_free+0x10/0x10 [ 1109.939194][T14075] ? __asan_memcpy+0x40/0x70 [ 1109.939222][T14075] ? __skb_clone+0x63/0x7a0 [ 1109.939257][T14075] netlink_rcv_skb+0x232/0x4b0 [ 1109.939293][T14075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1109.939324][T14075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.939383][T14075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.939417][T14075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.939458][T14075] genl_rcv+0x28/0x40 [ 1109.939483][T14075] netlink_unicast+0x780/0x920 [ 1109.939529][T14075] netlink_sendmsg+0x813/0xb40 [ 1109.939575][T14075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.939612][T14075] ? unwind_get_return_address+0x4d/0x90 [ 1109.939643][T14075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.939680][T14075] ____sys_sendmsg+0x94c/0x9c0 [ 1109.939714][T14075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.939750][T14075] ? import_iovec+0x73/0xa0 [ 1109.939783][T14075] ___sys_sendmsg+0x2a5/0x360 [ 1109.939807][T14075] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.939841][T14075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.939906][T14075] ? __fget_files+0x2a/0x420 [ 1109.939934][T14075] ? __fget_files+0x3a6/0x420 [ 1109.939975][T14075] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1109.940004][T14075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.940041][T14075] ? __pfx_ksys_write+0x10/0x10 [ 1109.940085][T14075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.940112][T14075] do_syscall_64+0x15f/0xf80 [ 1109.940140][T14075] ? trace_irq_disable+0x3b/0x140 [ 1109.940164][T14075] ? clear_bhb_loop+0x40/0x90 [ 1109.940193][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.940217][T14075] RIP: 0033:0x7f721c52c819 [ 1109.940240][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.940261][T14075] RSP: 002b:00007f721a786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.940287][T14075] RAX: ffffffffffffffda RBX: 00007f721c7a5fa0 RCX: 00007f721c52c819 [ 1109.940304][T14075] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1109.940320][T14075] RBP: 00007f721a786090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.940335][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.940349][T14075] R13: 00007f721c7a6038 R14: 00007f721c7a5fa0 R15: 00007fff317e9e88 [ 1109.940394][T14075] [ 1110.782750][T14083] netlink: 'syz.2.1844': attribute type 1 has an invalid length. [ 1110.782776][T14083] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1844'. [ 1110.841280][T14054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.604434][T14093] FAULT_INJECTION: forcing a failure. [ 1111.604434][T14093] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.604478][T14093] CPU: 1 UID: 0 PID: 14093 Comm: syz.8.1848 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1111.604511][T14093] Tainted: [L]=SOFTLOCKUP [ 1111.604520][T14093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1111.604533][T14093] Call Trace: [ 1111.604542][T14093] [ 1111.604553][T14093] dump_stack_lvl+0xe8/0x150 [ 1111.604597][T14093] should_fail_ex+0x46b/0x600 [ 1111.604629][T14093] should_failslab+0xa8/0x100 [ 1111.604656][T14093] kmem_cache_alloc_noprof+0x87/0x680 [ 1111.604689][T14093] ? __netlink_lookup+0xc6/0x8b0 [ 1111.604713][T14093] ? skb_clone+0x212/0x3a0 [ 1111.604744][T14093] skb_clone+0x212/0x3a0 [ 1111.604774][T14093] __netlink_deliver_tap+0x404/0x850 [ 1111.604823][T14093] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.604859][T14093] netlink_deliver_tap+0x19c/0x1b0 [ 1111.604896][T14093] netlink_unicast+0x754/0x920 [ 1111.604940][T14093] netlink_sendmsg+0x813/0xb40 [ 1111.604985][T14093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.605023][T14093] ? unwind_get_return_address+0x4d/0x90 [ 1111.605054][T14093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1111.605090][T14093] ____sys_sendmsg+0x94c/0x9c0 [ 1111.605122][T14093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.605157][T14093] ? import_iovec+0x73/0xa0 [ 1111.605189][T14093] ___sys_sendmsg+0x2a5/0x360 [ 1111.605214][T14093] ? __lock_acquire+0x6b5/0x2cf0 [ 1111.605246][T14093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.605320][T14093] ? __fget_files+0x2a/0x420 [ 1111.605350][T14093] ? __fget_files+0x3a6/0x420 [ 1111.605389][T14093] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1111.605418][T14093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1111.605455][T14093] ? __pfx_ksys_write+0x10/0x10 [ 1111.605499][T14093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.605524][T14093] do_syscall_64+0x15f/0xf80 [ 1111.605552][T14093] ? trace_irq_disable+0x3b/0x140 [ 1111.605576][T14093] ? clear_bhb_loop+0x40/0x90 [ 1111.605604][T14093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.605629][T14093] RIP: 0033:0x7f033c38c819 [ 1111.605652][T14093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.605672][T14093] RSP: 002b:00007f033a5e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.605698][T14093] RAX: ffffffffffffffda RBX: 00007f033c605fa0 RCX: 00007f033c38c819 [ 1111.605716][T14093] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1111.605730][T14093] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.605745][T14093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.605760][T14093] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1111.605795][T14093] [ 1111.664321][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 1111.664347][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 1112.217491][T14101] netlink: 'syz.1.1851': attribute type 21 has an invalid length. [ 1112.359125][T14103] tipc: Enabling of bearer rejected, already enabled [ 1112.726734][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 1115.946734][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.946817][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.160826][T14155] 9pnet_fd: p9_fd_create_tcp (14155): problem connecting socket to 127.0.0.1 [ 1117.642256][T14172] FAULT_INJECTION: forcing a failure. [ 1117.642256][T14172] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.642300][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.2.1870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.642333][T14172] Tainted: [L]=SOFTLOCKUP [ 1117.642352][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1117.642365][T14172] Call Trace: [ 1117.642374][T14172] [ 1117.642383][T14172] dump_stack_lvl+0xe8/0x150 [ 1117.642417][T14172] should_fail_ex+0x46b/0x600 [ 1117.642442][T14172] should_failslab+0xa8/0x100 [ 1117.642461][T14172] kmem_cache_alloc_noprof+0x87/0x680 [ 1117.642485][T14172] ? __netlink_lookup+0xc6/0x8b0 [ 1117.642501][T14172] ? skb_clone+0x212/0x3a0 [ 1117.642525][T14172] skb_clone+0x212/0x3a0 [ 1117.642546][T14172] __netlink_deliver_tap+0x404/0x850 [ 1117.642588][T14172] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.642617][T14172] netlink_deliver_tap+0x19c/0x1b0 [ 1117.642645][T14172] netlink_unicast+0x754/0x920 [ 1117.642678][T14172] netlink_sendmsg+0x813/0xb40 [ 1117.642712][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.642740][T14172] ? unwind_get_return_address+0x4d/0x90 [ 1117.642764][T14172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1117.642792][T14172] ____sys_sendmsg+0x94c/0x9c0 [ 1117.642816][T14172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.642843][T14172] ? import_iovec+0x73/0xa0 [ 1117.642869][T14172] ___sys_sendmsg+0x2a5/0x360 [ 1117.642886][T14172] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.642910][T14172] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.642959][T14172] ? __fget_files+0x2a/0x420 [ 1117.642982][T14172] ? __fget_files+0x3a6/0x420 [ 1117.643012][T14172] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1117.643034][T14172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.643061][T14172] ? __pfx_ksys_write+0x10/0x10 [ 1117.643094][T14172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.643114][T14172] do_syscall_64+0x15f/0xf80 [ 1117.643135][T14172] ? trace_irq_disable+0x3b/0x140 [ 1117.643153][T14172] ? clear_bhb_loop+0x40/0x90 [ 1117.643174][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.643192][T14172] RIP: 0033:0x7fded734c819 [ 1117.643212][T14172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.643228][T14172] RSP: 002b:00007fded557d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.643248][T14172] RAX: ffffffffffffffda RBX: 00007fded75c6090 RCX: 00007fded734c819 [ 1117.643262][T14172] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 1117.643274][T14172] RBP: 00007fded557d090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.643285][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.643296][T14172] R13: 00007fded75c6128 R14: 00007fded75c6090 R15: 00007ffd1c9f7758 [ 1117.643324][T14172] [ 1118.924190][T14186] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1874'. [ 1119.136632][T14195] FAULT_INJECTION: forcing a failure. [ 1119.136632][T14195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.136675][T14195] CPU: 0 UID: 0 PID: 14195 Comm: syz.9.1876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.136709][T14195] Tainted: [L]=SOFTLOCKUP [ 1119.136717][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1119.136730][T14195] Call Trace: [ 1119.136739][T14195] [ 1119.136749][T14195] dump_stack_lvl+0xe8/0x150 [ 1119.136792][T14195] should_fail_ex+0x46b/0x600 [ 1119.136824][T14195] _copy_to_user+0x31/0xb0 [ 1119.136856][T14195] simple_read_from_buffer+0xe1/0x170 [ 1119.136892][T14195] proc_fail_nth_read+0x1be/0x230 [ 1119.136926][T14195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.136959][T14195] ? rw_verify_area+0x2ac/0x4e0 [ 1119.136992][T14195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.137024][T14195] vfs_read+0x212/0xa80 [ 1119.137066][T14195] ? __pfx_vfs_read+0x10/0x10 [ 1119.137102][T14195] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1119.137132][T14195] ? lockdep_hardirqs_on+0x7a/0x110 [ 1119.137161][T14195] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1119.137190][T14195] ? mutex_lock_nested+0x152/0x1d0 [ 1119.137222][T14195] ? fdget_pos+0x252/0x320 [ 1119.137260][T14195] ksys_read+0x156/0x270 [ 1119.137297][T14195] ? __pfx_ksys_read+0x10/0x10 [ 1119.137338][T14195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.137365][T14195] do_syscall_64+0x15f/0xf80 [ 1119.137392][T14195] ? trace_irq_disable+0x3b/0x140 [ 1119.137416][T14195] ? clear_bhb_loop+0x40/0x90 [ 1119.137452][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.137484][T14195] RIP: 0033:0x7f721c4ed04e [ 1119.137507][T14195] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1119.137527][T14195] RSP: 002b:00007f721a764fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.137554][T14195] RAX: ffffffffffffffda RBX: 00007f721a7656c0 RCX: 00007f721c4ed04e [ 1119.137572][T14195] RDX: 000000000000000f RSI: 00007f721a7650a0 RDI: 0000000000000005 [ 1119.137587][T14195] RBP: 00007f721a765090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.137601][T14195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.137616][T14195] R13: 00007f721c7a6128 R14: 00007f721c7a6090 R15: 00007fff317e9e88 [ 1119.137653][T14195] [ 1121.811701][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1885'. [ 1121.873506][ T37] audit: type=1804 audit(1776535171.125:881): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1885" name="/newroot/150/file0" dev="tmpfs" ino=807 res=1 errno=0 [ 1122.323415][ T37] audit: type=1326 audit(1776535171.605:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.323571][ T37] audit: type=1326 audit(1776535171.615:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.324338][ T37] audit: type=1326 audit(1776535171.615:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.324391][ T37] audit: type=1326 audit(1776535171.615:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.328980][ T37] audit: type=1326 audit(1776535171.615:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.330638][ T37] audit: type=1326 audit(1776535171.615:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.330692][ T37] audit: type=1326 audit(1776535171.615:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.331177][ T37] audit: type=1326 audit(1776535171.615:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.332494][ T37] audit: type=1326 audit(1776535171.615:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14230 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c38c819 code=0x7ffc0000 [ 1122.531438][ T5985] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1122.571617][T14233] Scaler: ================= START STATUS ================= [ 1122.571637][T14233] Scaler: ================== END STATUS ================== [ 1122.572941][T14234] Scaler: ================= START STATUS ================= [ 1122.572956][T14234] Scaler: ================== END STATUS ================== [ 1122.694827][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.694868][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.694913][ T5985] usb 3-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1122.694940][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.750483][ T5985] usb 3-1: config 0 descriptor?? [ 1124.055103][ T5985] hid (null): invalid report_count 43684 [ 1124.055134][ T5985] hid (null): global environment stack underflow [ 1124.055163][ T5985] hid (null): invalid report_size 28056 [ 1124.203577][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203621][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203651][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203680][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203710][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203739][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203768][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203797][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203826][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.203855][ T5985] hid-generic 0003:0B05:1AFE.000A: unknown main item tag 0x0 [ 1124.209009][ T5985] hid-generic 0003:0B05:1AFE.000A: invalid report_count 43684 [ 1124.209036][ T5985] hid-generic 0003:0B05:1AFE.000A: item 0 2 1 9 parsing failed [ 1124.213169][ T5985] hid-generic 0003:0B05:1AFE.000A: probe with driver hid-generic failed with error -22 [ 1124.342872][ T5985] usb 3-1: USB disconnect, device number 81 [ 1124.392022][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1895'. [ 1124.401855][T14251] sctp: [Deprecated]: syz.8.1895 (pid 14251) Use of int in maxseg socket option. [ 1124.401855][T14251] Use struct sctp_assoc_value instead [ 1124.794703][T14267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1900'. [ 1124.830895][T14268] misc userio: Invalid payload size [ 1125.130030][ T5985] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1125.285021][ T5985] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 1125.285056][ T5985] usb 10-1: config 0 has no interface number 0 [ 1125.285092][ T5985] usb 10-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 1125.285137][ T5985] usb 10-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 1125.285170][ T5985] usb 10-1: config 0 interface 48 has no altsetting 0 [ 1125.288322][ T5985] usb 10-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1125.288354][ T5985] usb 10-1: New USB device strings: Mfr=35, Product=2, SerialNumber=3 [ 1125.288378][ T5985] usb 10-1: Product: syz [ 1125.288395][ T5985] usb 10-1: Manufacturer: syz [ 1125.288413][ T5985] usb 10-1: SerialNumber: syz [ 1125.381950][ T5985] usb 10-1: config 0 descriptor?? [ 1127.160908][ T5985] ftdi_sio 10-1:0.48: FTDI USB Serial Device converter detected [ 1127.166374][ T5985] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1127.212200][ T5985] usb 10-1: USB disconnect, device number 19 [ 1127.514922][ T5985] ftdi_sio 10-1:0.48: device disconnected [ 1127.665085][T14292] FAULT_INJECTION: forcing a failure. [ 1127.665085][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.665128][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.8.1908 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1127.665161][T14292] Tainted: [L]=SOFTLOCKUP [ 1127.665169][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1127.665183][T14292] Call Trace: [ 1127.665192][T14292] [ 1127.665202][T14292] dump_stack_lvl+0xe8/0x150 [ 1127.665245][T14292] should_fail_ex+0x46b/0x600 [ 1127.665277][T14292] _copy_from_user+0x2d/0xb0 [ 1127.665307][T14292] pidfd_ioctl+0x399/0x32b0 [ 1127.665342][T14292] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1127.665384][T14292] ? ksys_write+0x202/0x270 [ 1127.665425][T14292] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1127.665459][T14292] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1127.665488][T14292] __se_sys_ioctl+0xff/0x170 [ 1127.665524][T14292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.665549][T14292] do_syscall_64+0x15f/0xf80 [ 1127.665577][T14292] ? trace_irq_disable+0x3b/0x140 [ 1127.665600][T14292] ? clear_bhb_loop+0x40/0x90 [ 1127.665628][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.665653][T14292] RIP: 0033:0x7f033c38c819 [ 1127.665676][T14292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.665698][T14292] RSP: 002b:00007f033a5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.665724][T14292] RAX: ffffffffffffffda RBX: 00007f033c605fa0 RCX: 00007f033c38c819 [ 1127.665742][T14292] RDX: 0000200000000200 RSI: 00000000c058ff0b RDI: 0000000000000003 [ 1127.665758][T14292] RBP: 00007f033a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.665773][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.665788][T14292] R13: 00007f033c606038 R14: 00007f033c605fa0 R15: 00007ffd7f95ba28 [ 1127.665823][T14292] [ 1128.056817][T14297] sctp: [Deprecated]: syz.2.1910 (pid 14297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1128.056817][T14297] Use struct sctp_sack_info instead [ 1128.459271][T14304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1914'. [ 1128.864265][ T5819] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1128.939382][ T5904] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1129.051827][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.051864][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.051890][ T5819] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1129.051909][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.056447][ T5819] usb 5-1: config 0 descriptor?? [ 1129.122578][ T5904] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1129.124310][ T5904] usb 10-1: config 0 has an invalid interface number: 19 but max is 0 [ 1129.124338][ T5904] usb 10-1: config 0 has no interface number 0 [ 1129.124388][ T5904] usb 10-1: config 0 interface 19 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1129.124428][ T5904] usb 10-1: config 0 interface 19 has no altsetting 0 [ 1129.127503][ T5904] usb 10-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=cd.2b [ 1129.127537][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.127559][ T5904] usb 10-1: Product: syz [ 1129.127577][ T5904] usb 10-1: Manufacturer: syz [ 1129.127593][ T5904] usb 10-1: SerialNumber: syz [ 1129.141061][ T5904] usb 10-1: config 0 descriptor?? [ 1129.474996][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.476010][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.504080][ T5819] hid_parser_main: 176 callbacks suppressed [ 1129.504109][ T5819] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 1129.504144][ T5819] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 1129.504169][ T5819] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 1129.504193][ T5819] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 1129.504216][ T5819] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 1129.596697][ T5819] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1130.018388][ T5819] usb 5-1: USB disconnect, device number 31 [ 1130.041035][ T5904] rndis_host 10-1:0.19: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1130.060271][ T5904] cdc_acm 10-1:0.19: Zero length descriptor references [ 1130.060312][ T5904] cdc_acm 10-1:0.19: probe with driver cdc_acm failed with error -22 [ 1130.155765][ T5904] usb 10-1: USB disconnect, device number 20 [ 1130.568949][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 1130.857911][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1130.912603][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1130.915675][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1130.927226][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1130.943645][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1131.249036][ T3526] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.321237][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1131.448602][ T5904] usb 5-1: device descriptor read/64, error -71 [ 1131.726714][ T5904] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1131.856627][ T5904] usb 5-1: device descriptor read/64, error -71 [ 1131.968377][ T5904] usb usb5-port1: attempt power cycle [ 1132.058211][ T59] Bluetooth: hci4: unexpected event for opcode 0x203c [ 1132.190814][ T3526] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.316567][ T5904] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1132.337358][ T5904] usb 5-1: device descriptor read/8, error -71 [ 1132.627650][ T5904] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1132.647861][ T5904] usb 5-1: device descriptor read/8, error -71 [ 1132.701984][ T3526] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.756716][ T5904] usb usb5-port1: unable to enumerate USB device [ 1133.036150][ T59] Bluetooth: hci3: command tx timeout [ 1133.112429][T14346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1928'. [ 1133.254966][ T5987] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1133.271698][ T3526] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.445880][ T5987] usb 3-1: Using ep0 maxpacket: 16 [ 1133.447769][ T5987] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 1133.449332][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.450866][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.452355][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.453843][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.455349][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.459309][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.460772][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.462275][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.464260][ T5987] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1133.464294][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1133.464318][ T5987] usb 3-1: SerialNumber: syz [ 1133.485935][ T5987] usb 3-1: config 0 descriptor?? [ 1133.628845][ T5987] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 1134.249064][T14361] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1134.272533][ T59] Bluetooth: hci0: unexpected event for opcode 0x203c [ 1134.369511][T14324] chnl_net:caif_netlink_parms(): no params data found [ 1135.021126][T14367] m1Ie5ия: entered promiscuous mode [ 1135.027371][T14367] overlayfs: failed to resolve './file1': -2 [ 1135.156772][ T59] Bluetooth: hci3: command tx timeout [ 1136.273377][ T6002] usb 3-1: USB disconnect, device number 82 [ 1136.338520][ T5158] bcm5974 3-1:0.0: could not read from device [ 1137.145136][T11736] bcm5974 3-1:0.0: could not read from device [ 1137.204219][ T59] Bluetooth: hci3: command tx timeout [ 1137.848743][T14372] FAULT_INJECTION: forcing a failure. [ 1137.848743][T14372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.848786][T14372] CPU: 0 UID: 0 PID: 14372 Comm: syz.1.1934 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1137.848821][T14372] Tainted: [L]=SOFTLOCKUP [ 1137.848831][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.848846][T14372] Call Trace: [ 1137.848856][T14372] [ 1137.848867][T14372] dump_stack_lvl+0xe8/0x150 [ 1137.848914][T14372] should_fail_ex+0x46b/0x600 [ 1137.848946][T14372] copy_fpstate_to_sigframe+0xaab/0xd60 [ 1137.848993][T14372] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1137.849026][T14372] ? kvm_sched_clock_read+0x11/0x20 [ 1137.849059][T14372] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1137.849086][T14372] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1137.849127][T14372] ? arch_scale_cpu_capacity+0x18/0xb0 [ 1137.849166][T14372] ? fpu__alloc_mathframe+0xac/0x130 [ 1137.849202][T14372] get_sigframe+0x5f7/0x820 [ 1137.849232][T14372] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1137.849271][T14372] ? __pfx_get_sigframe+0x10/0x10 [ 1137.849301][T14372] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 1137.849324][T14372] ? reacquire_held_locks+0x104/0x190 [ 1137.849363][T14372] x64_setup_rt_frame+0x161/0xcb0 [ 1137.849393][T14372] ? rt_spin_unlock+0x14f/0x200 [ 1137.849419][T14372] ? rt_spin_unlock+0x160/0x200 [ 1137.849445][T14372] ? get_signal+0x1120/0x1310 [ 1137.849486][T14372] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1137.849528][T14372] arch_do_signal_or_restart+0x429/0x830 [ 1137.849565][T14372] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1137.849616][T14372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.849642][T14372] exit_to_user_mode_loop+0x86/0x480 [ 1137.849666][T14372] ? rcu_is_watching+0x15/0xb0 [ 1137.849696][T14372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.849722][T14372] do_syscall_64+0x33e/0xf80 [ 1137.849752][T14372] ? clear_bhb_loop+0x40/0x90 [ 1137.849779][T14372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.849802][T14372] RIP: 0033:0x7ff296dac817 [ 1137.849824][T14372] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1137.849843][T14372] RSP: 002b:00007ff294ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1137.849868][T14372] RAX: 0000000000000113 RBX: 00007ff297025fa0 RCX: 00007ff296dac819 [ 1137.849884][T14372] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 1137.849899][T14372] RBP: 00007ff294ffe090 R08: 00000080000025a5 R09: 0000000000000000 [ 1137.849914][T14372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.849928][T14372] R13: 00007ff297026038 R14: 00007ff297025fa0 R15: 00007ffe08152478 [ 1137.849964][T14372] [ 1139.273064][ T59] Bluetooth: hci3: command tx timeout [ 1140.027302][T14324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.028149][T14324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.028393][T14324] bridge_slave_0: entered allmulticast mode [ 1140.030995][T14324] bridge_slave_0: entered promiscuous mode [ 1140.069330][T14324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.069585][T14324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.069800][T14324] bridge_slave_1: entered allmulticast mode [ 1140.100019][T14324] bridge_slave_1: entered promiscuous mode [ 1140.291543][ T5987] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1140.378732][T14324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.406166][T14324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.465739][ T5987] usb 3-1: Using ep0 maxpacket: 16 [ 1140.470019][ T5987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.470049][ T5987] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.481487][ T5987] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1140.481523][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.481547][ T5987] usb 3-1: Product: syz [ 1140.481563][ T5987] usb 3-1: Manufacturer: syz [ 1140.481581][ T5987] usb 3-1: SerialNumber: syz [ 1140.620847][ T5987] usb 3-1: 0:2 : does not exist [ 1141.082677][T14406] FAULT_INJECTION: forcing a failure. [ 1141.082677][T14406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.082720][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.9.1944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1141.082752][T14406] Tainted: [L]=SOFTLOCKUP [ 1141.082760][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1141.082774][T14406] Call Trace: [ 1141.082783][T14406] [ 1141.082792][T14406] dump_stack_lvl+0xe8/0x150 [ 1141.082832][T14406] should_fail_ex+0x46b/0x600 [ 1141.082862][T14406] _copy_from_user+0x2d/0xb0 [ 1141.082889][T14406] ___sys_recvmsg+0x175/0x590 [ 1141.082920][T14406] ? __pfx____sys_recvmsg+0x10/0x10 [ 1141.082950][T14406] ? __fget_files+0x2a/0x420 [ 1141.082994][T14406] ? __fget_files+0x3a6/0x420 [ 1141.083031][T14406] do_recvmmsg+0x33a/0x800 [ 1141.083071][T14406] ? __pfx_do_recvmmsg+0x10/0x10 [ 1141.083109][T14406] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1141.083158][T14406] __x64_sys_recvmmsg+0x198/0x250 [ 1141.083186][T14406] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1141.083221][T14406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.083245][T14406] do_syscall_64+0x15f/0xf80 [ 1141.083270][T14406] ? trace_irq_disable+0x3b/0x140 [ 1141.083292][T14406] ? clear_bhb_loop+0x40/0x90 [ 1141.083320][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.083341][T14406] RIP: 0033:0x7f721c52c819 [ 1141.083362][T14406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.083387][T14406] RSP: 002b:00007f721a786028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1141.083412][T14406] RAX: ffffffffffffffda RBX: 00007f721c7a5fa0 RCX: 00007f721c52c819 [ 1141.083429][T14406] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 1141.083445][T14406] RBP: 00007f721a786090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.083459][T14406] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1141.083473][T14406] R13: 00007f721c7a6038 R14: 00007f721c7a5fa0 R15: 00007fff317e9e88 [ 1141.083508][T14406] [ 1142.163121][ T3526] bridge_slave_1: left allmulticast mode [ 1142.163155][ T3526] bridge_slave_1: left promiscuous mode [ 1142.163506][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.243987][ T3526] bridge_slave_0: left allmulticast mode [ 1142.244011][ T3526] bridge_slave_0: left promiscuous mode [ 1142.244196][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.326212][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1946'. [ 1142.326240][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1946'. [ 1143.034577][ T5987] usb 3-1: USB disconnect, device number 83 [ 1143.620812][ T5987] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1143.714537][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.770775][ T5987] usb 3-1: device descriptor read/64, error -71 [ 1143.791461][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.814298][ T3526] bond0 (unregistering): Released all slaves [ 1143.853827][T14324] team0: Port device team_slave_0 added [ 1144.020639][ T5987] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1144.151495][ T5987] usb 3-1: device descriptor read/64, error -71 [ 1144.157981][T14324] team0: Port device team_slave_1 added [ 1144.158059][ T3526] m>e5n: left promiscuous mode [ 1144.262105][ T5987] usb usb3-port1: attempt power cycle [ 1144.455412][T14324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.455430][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.455453][T14324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.457971][T14324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.457986][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.458010][T14324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.490349][ T815] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1144.570626][ T3526] tipc: Disabling bearer [ 1144.570837][ T3526] tipc: Left network mode [ 1144.690919][ T815] usb 5-1: Using ep0 maxpacket: 16 [ 1144.696183][ T815] usb 5-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 1144.696214][ T815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1144.717400][T14324] hsr_slave_0: entered promiscuous mode [ 1144.719564][T14324] hsr_slave_1: entered promiscuous mode [ 1144.721435][T14324] debugfs: 'hsr0' already exists in 'hsr' [ 1144.721461][T14324] Cannot create hsr debugfs directory [ 1144.732425][ T815] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1144.732456][ T815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.732477][ T815] usb 5-1: Product: syz [ 1144.732493][ T815] usb 5-1: Manufacturer: syz [ 1144.732508][ T815] usb 5-1: SerialNumber: syz [ 1144.754469][ T5987] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1144.780977][ T5987] usb 3-1: device descriptor read/8, error -71 [ 1144.837395][ T815] usb 5-1: 0:2 : does not exist [ 1144.837490][ T815] usb 5-1: unit 6 not found! [ 1145.089986][ T5987] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1145.118518][ T5987] usb 3-1: device descriptor read/8, error -71 [ 1145.220475][ T5987] usb usb3-port1: unable to enumerate USB device [ 1145.999982][ T5468] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1146.650641][ T815] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1146.811442][ T815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.811499][ T815] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1146.811519][ T815] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1146.813943][ T815] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.813967][ T815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.813981][ T815] usb 3-1: Product: syz [ 1146.813990][ T815] usb 3-1: Manufacturer: syz [ 1146.814000][ T815] usb 3-1: SerialNumber: syz [ 1146.849181][ T815] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1146.849368][ T815] cdc_ncm 3-1:1.0: bind() failure [ 1146.864589][ T815] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1146.864639][ T815] cdc_ncm 3-1:1.1: bind() failure [ 1147.053337][ T815] usb 3-1: USB disconnect, device number 88 [ 1148.497504][ T815] usb 5-1: USB disconnect, device number 36 [ 1148.782383][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1148.782407][ T37] audit: type=1326 audit(1776535198.089:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.784357][ T37] audit: type=1326 audit(1776535198.089:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.785876][ T37] audit: type=1326 audit(1776535198.089:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.786254][ T37] audit: type=1326 audit(1776535198.089:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.786570][ T37] audit: type=1326 audit(1776535198.089:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.786856][ T37] audit: type=1326 audit(1776535198.089:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.787420][ T37] audit: type=1326 audit(1776535198.089:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.787472][ T37] audit: type=1326 audit(1776535198.089:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.787789][ T37] audit: type=1326 audit(1776535198.089:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1148.788632][ T37] audit: type=1326 audit(1776535198.089:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14471 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86cfbc819 code=0x7ffc0000 [ 1149.290852][T14484] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1149.677891][ T3526] hsr_slave_0: left promiscuous mode [ 1149.740220][ T3526] hsr_slave_1: left promiscuous mode [ 1149.741478][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.741508][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.800489][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.800522][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.626614][ T3526] veth0_macvtap: left promiscuous mode [ 1151.058587][ T59] Bluetooth: hci4: unexpected event for opcode 0x203c [ 1151.113622][ T815] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1151.256976][ T815] usb 3-1: device descriptor read/64, error -71 [ 1151.522226][ T815] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1151.678248][ T815] usb 3-1: device descriptor read/64, error -71 [ 1151.790248][ T815] usb usb3-port1: attempt power cycle [ 1152.070913][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 1152.126550][ T815] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1152.132291][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 1152.147403][ T815] usb 3-1: device descriptor read/8, error -71 [ 1152.303795][T14523] 9p: Bad value for 'wfdno' [ 1152.399883][ T815] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1152.423433][ T815] usb 3-1: device descriptor read/8, error -71 [ 1152.452893][ T5468] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1152.526790][ T815] usb usb3-port1: unable to enumerate USB device [ 1152.976134][ T5987] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1153.156109][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 1153.158865][ T5987] usb 5-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 1153.158896][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.167768][ T5987] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.167802][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.167822][ T5987] usb 5-1: Product: syz [ 1153.167838][ T5987] usb 5-1: Manufacturer: syz [ 1153.167854][ T5987] usb 5-1: SerialNumber: syz [ 1153.248117][ T5987] usb 5-1: 0:2 : does not exist [ 1153.248232][ T5987] usb 5-1: unit 6 not found! [ 1154.564961][ T5468] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1155.816535][ T31] usb 5-1: USB disconnect, device number 37 [ 1156.151878][T14584] tmpfs: Unknown parameter '' [ 1156.239586][T14589] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1984'. [ 1156.734348][ T5819] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1156.806719][ T5468] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1156.806997][T14324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1156.871911][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.892784][ T5819] usb 10-1: device descriptor read/64, error -71 [ 1156.898684][T14324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1157.036760][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.051985][T14324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1157.089854][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 1157.119816][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.124279][T14324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1157.171338][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.174085][ T5819] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1157.303995][ T5819] usb 10-1: device descriptor read/64, error -71 [ 1157.417159][ T5819] usb usb10-port1: attempt power cycle [ 1157.452852][T14324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.559244][T14324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.569965][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.570263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.593140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.593450][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.783735][ T5819] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1157.804513][ T5819] usb 10-1: device descriptor read/8, error -71 [ 1157.861938][T14625] blktrace: Concurrent blktraces are not allowed on sg0 [ 1157.866507][T14625] program syz.2.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1157.914190][T14628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1991'. [ 1158.073623][ T5819] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1158.095979][ T5819] usb 10-1: device descriptor read/8, error -71 [ 1158.213686][ T5819] usb usb10-port1: unable to enumerate USB device [ 1158.601153][T14324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.753302][T14324] veth0_vlan: entered promiscuous mode [ 1158.774068][T14324] veth1_vlan: entered promiscuous mode [ 1158.911826][ T5819] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1159.037486][T14324] veth0_macvtap: entered promiscuous mode [ 1159.069089][T14324] veth1_macvtap: entered promiscuous mode [ 1159.107826][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 1159.166190][ T5819] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1159.238973][ T5819] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1159.239008][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.239030][ T5819] usb 5-1: Product: syz [ 1159.239045][ T5819] usb 5-1: Manufacturer: syz [ 1159.239060][ T5819] usb 5-1: SerialNumber: syz [ 1159.267309][ T5819] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1159.267338][ T5819] r8152-cfgselector 5-1: config 0 descriptor?? [ 1159.358591][T14324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.373093][T14324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.839805][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.842237][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.870403][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.871114][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.193171][ T5896] r8152-cfgselector 5-1: USB disconnect, device number 38 [ 1160.624604][ T5819] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1160.873703][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.873740][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.873779][ T5819] usb 10-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1160.873803][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.968458][ T5819] usb 10-1: config 0 descriptor?? [ 1161.418020][ T5819] hid (null): invalid report_count 43684 [ 1161.418050][ T5819] hid (null): global environment stack underflow [ 1161.529418][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529459][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529490][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529518][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529547][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529577][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.529605][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.534547][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.534589][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.534615][ T5819] hid-generic 0003:0B05:1AFE.000C: unknown main item tag 0x0 [ 1161.537282][ T5819] hid-generic 0003:0B05:1AFE.000C: invalid report_count 43684 [ 1161.537302][ T5819] hid-generic 0003:0B05:1AFE.000C: item 0 2 1 9 parsing failed [ 1161.557309][ T5819] hid-generic 0003:0B05:1AFE.000C: probe with driver hid-generic failed with error -22 [ 1161.723773][ T5819] usb 10-1: USB disconnect, device number 25 [ 1161.817690][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.817716][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.090316][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.090342][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.770378][ T5985] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1164.850317][T14717] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2012'. [ 1164.944687][ T5985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1164.944728][ T5985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.947294][ T5985] usb 3-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 1164.947322][ T5985] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1164.947344][ T5985] usb 3-1: Product: syz [ 1164.947358][ T5985] usb 3-1: Manufacturer: syz [ 1164.985246][ T5985] hub 3-1:4.0: USB hub found [ 1165.042720][T14719] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 1165.216391][ T5985] hub 3-1:4.0: 2 ports detected [ 1165.420792][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1165.420820][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1165.420846][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1166.659893][T14743] RDS: rds_bind could not find a transport for fc00::9, load rds_tcp or rds_rdma? [ 1167.009557][T14748] FAULT_INJECTION: forcing a failure. [ 1167.009557][T14748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.009600][T14748] CPU: 1 UID: 0 PID: 14748 Comm: syz.4.2020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1167.009634][T14748] Tainted: [L]=SOFTLOCKUP [ 1167.009642][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1167.009656][T14748] Call Trace: [ 1167.009671][T14748] [ 1167.009682][T14748] dump_stack_lvl+0xe8/0x150 [ 1167.009725][T14748] should_fail_ex+0x46b/0x600 [ 1167.009756][T14748] _copy_to_user+0x31/0xb0 [ 1167.009788][T14748] simple_read_from_buffer+0xe1/0x170 [ 1167.009823][T14748] proc_fail_nth_read+0x1be/0x230 [ 1167.009858][T14748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1167.009891][T14748] ? rw_verify_area+0x2ac/0x4e0 [ 1167.009920][T14748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1167.009961][T14748] vfs_read+0x212/0xa80 [ 1167.010003][T14748] ? __pfx_vfs_read+0x10/0x10 [ 1167.010041][T14748] ? __asan_memset+0x22/0x50 [ 1167.010072][T14748] ? pidfd_ioctl+0x378/0x32b0 [ 1167.010105][T14748] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1167.010143][T14748] ksys_read+0x156/0x270 [ 1167.010178][T14748] ? __pfx_ksys_read+0x10/0x10 [ 1167.010221][T14748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.010246][T14748] do_syscall_64+0x15f/0xf80 [ 1167.010275][T14748] ? trace_irq_disable+0x3b/0x140 [ 1167.010299][T14748] ? clear_bhb_loop+0x40/0x90 [ 1167.010328][T14748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.010352][T14748] RIP: 0033:0x7fb86cf7d04e [ 1167.010374][T14748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.010396][T14748] RSP: 002b:00007fb86b20dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.010420][T14748] RAX: ffffffffffffffda RBX: 00007fb86b20e6c0 RCX: 00007fb86cf7d04e [ 1167.010437][T14748] RDX: 000000000000000f RSI: 00007fb86b20e0a0 RDI: 0000000000000004 [ 1167.010452][T14748] RBP: 00007fb86b20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.010467][T14748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.010481][T14748] R13: 00007fb86d236038 R14: 00007fb86d235fa0 R15: 00007fff6f5dbd68 [ 1167.010517][T14748] [ 1167.823677][T14761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2024'. [ 1167.869072][ T5985] hub 3-1:4.0: set hub depth failed [ 1167.884029][ T5985] usb 3-1: USB disconnect, device number 93 [ 1167.959811][ T37] kauditd_printk_skb: 292 callbacks suppressed [ 1167.959836][ T37] audit: type=1326 audit(1776535217.268:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.959893][ T37] audit: type=1326 audit(1776535217.268:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.959942][ T37] audit: type=1326 audit(1776535217.268:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.960881][ T37] audit: type=1326 audit(1776535217.278:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.960932][ T37] audit: type=1326 audit(1776535217.278:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.960979][ T37] audit: type=1326 audit(1776535217.278:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.961028][ T37] audit: type=1326 audit(1776535217.278:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.963312][ T37] audit: type=1326 audit(1776535217.278:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.963373][ T37] audit: type=1326 audit(1776535217.278:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1167.977015][ T37] audit: type=1326 audit(1776535217.278:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14762 comm="syz.3.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6336a6c819 code=0x7ffc0000 [ 1169.259743][ T5985] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1169.432428][ T5985] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1169.432469][ T5985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1169.432508][ T5985] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1169.432535][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.462942][ T5985] usb 3-1: config 0 descriptor?? [ 1169.464989][T14781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1169.695819][T14779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.710715][T14779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.989454][ T5985] hid_parser_main: 173 callbacks suppressed [ 1169.989483][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989519][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989548][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989577][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989606][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989634][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989662][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989690][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989718][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1169.989746][ T5985] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 1170.006800][ T5985] mcp2200 0003:04D8:00DF.000D: USB HID v0.01 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 1170.047570][ T5882] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1170.188933][T14781] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2028'. [ 1170.249798][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1170.249853][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1170.251437][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1170.251468][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1170.251491][ T5882] usb 4-1: SerialNumber: syz [ 1170.430287][ T5882] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1170.431573][ T5882] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1170.517612][ T5882] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1170.535789][ T5882] scsi host1: usb-storage 4-1:1.0 [ 1170.718025][T14815] FAULT_INJECTION: forcing a failure. [ 1170.718025][T14815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.718085][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.4.2035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1170.718117][T14815] Tainted: [L]=SOFTLOCKUP [ 1170.718126][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1170.718139][T14815] Call Trace: [ 1170.718149][T14815] [ 1170.718159][T14815] dump_stack_lvl+0xe8/0x150 [ 1170.718201][T14815] should_fail_ex+0x46b/0x600 [ 1170.718233][T14815] prepare_alloc_pages+0x22a/0x6b0 [ 1170.718268][T14815] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1170.718300][T14815] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1170.718330][T14815] ? __pfx_policy_nodemask+0x10/0x10 [ 1170.718359][T14815] ? mtree_range_walk+0x6fc/0x8b0 [ 1170.718397][T14815] alloc_pages_mpol+0xd1/0x380 [ 1170.718424][T14815] alloc_pages_noprof+0xd2/0x2f0 [ 1170.718450][T14815] __pud_alloc+0x3a/0x460 [ 1170.718493][T14815] handle_mm_fault+0xe36/0x13c0 [ 1170.718535][T14815] ? handle_mm_fault+0xe7/0x13c0 [ 1170.718573][T14815] ? __pfx_handle_mm_fault+0x10/0x10 [ 1170.718622][T14815] ? __lock_acquire+0x6b5/0x2cf0 [ 1170.718656][T14815] ? lock_mm_and_find_vma+0xa7/0x340 [ 1170.718685][T14815] do_user_addr_fault+0x75b/0x1340 [ 1170.718738][T14815] exc_page_fault+0x6a/0xc0 [ 1170.718766][T14815] asm_exc_page_fault+0x26/0x30 [ 1170.718789][T14815] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1170.718824][T14815] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1170.718844][T14815] RSP: 0018:ffffc90006277b58 EFLAGS: 00050202 [ 1170.718864][T14815] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c [ 1170.718880][T14815] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc90006277c30 [ 1170.718896][T14815] RBP: ffffc90006277cb0 R08: 0000000000000003 R09: 0000000000000004 [ 1170.718911][T14815] R10: dffffc0000000000 R11: fffff52000c4ef87 R12: 00000000000089e2 [ 1170.718926][T14815] R13: ffffc90006277c30 R14: ffffc90006277c30 R15: 0000200000000340 [ 1170.718963][T14815] _copy_from_user+0x7a/0xb0 [ 1170.718994][T14815] mctp_ioctl+0x2fa/0x9b0 [ 1170.719032][T14815] ? __pfx_mctp_ioctl+0x10/0x10 [ 1170.719061][T14815] ? tomoyo_path_number_perm+0x219/0x630 [ 1170.719106][T14815] ? do_vfs_ioctl+0x117b/0x1540 [ 1170.719132][T14815] ? __ia32_compat_sys_ioctl+0x8a0/0x960 [ 1170.719177][T14815] sock_do_ioctl+0x101/0x320 [ 1170.719209][T14815] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1170.719242][T14815] ? __asan_memset+0x22/0x50 [ 1170.719269][T14815] ? smack_file_ioctl+0x263/0x360 [ 1170.719304][T14815] sock_ioctl+0x5c9/0x7f0 [ 1170.719335][T14815] ? __pfx_sock_ioctl+0x10/0x10 [ 1170.719363][T14815] ? __fget_files+0x2a/0x420 [ 1170.719388][T14815] ? __fget_files+0x3a6/0x420 [ 1170.719414][T14815] ? __fget_files+0x2a/0x420 [ 1170.719445][T14815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1170.719468][T14815] ? __pfx_sock_ioctl+0x10/0x10 [ 1170.719496][T14815] __se_sys_ioctl+0xff/0x170 [ 1170.719531][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.719557][T14815] do_syscall_64+0x15f/0xf80 [ 1170.719584][T14815] ? trace_irq_disable+0x3b/0x140 [ 1170.719606][T14815] ? clear_bhb_loop+0x40/0x90 [ 1170.719635][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.719659][T14815] RIP: 0033:0x7fb86cfbc819 [ 1170.719681][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.719700][T14815] RSP: 002b:00007fb86b20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.719723][T14815] RAX: ffffffffffffffda RBX: 00007fb86d235fa0 RCX: 00007fb86cfbc819 [ 1170.719740][T14815] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000003 [ 1170.719755][T14815] RBP: 00007fb86b20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.719768][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.719781][T14815] R13: 00007fb86d236038 R14: 00007fb86d235fa0 R15: 00007fff6f5dbd68 [ 1170.719817][T14815] [ 1171.056052][ T5882] usb 4-1: USB disconnect, device number 4 [ 1172.406362][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1172.569579][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.569621][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.569666][ T5882] usb 4-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1172.569694][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.631249][ T5882] usb 4-1: config 0 descriptor?? [ 1172.668409][ T31] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1173.117723][ T5882] hid (null): invalid report_count 43684 [ 1173.117763][ T5882] hid (null): global environment stack underflow [ 1173.171643][ T5882] hid-generic 0003:0B05:1AFE.000E: invalid report_count 43684 [ 1173.171674][ T5882] hid-generic 0003:0B05:1AFE.000E: item 0 2 1 9 parsing failed [ 1173.174568][ T5882] hid-generic 0003:0B05:1AFE.000E: probe with driver hid-generic failed with error -22 [ 1173.240415][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1173.240452][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.251528][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 1173.251559][ T31] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1173.251581][ T31] usb 5-1: Product: syz [ 1173.251596][ T31] usb 5-1: Manufacturer: syz [ 1173.328615][ T31] hub 5-1:4.0: USB hub found [ 1173.498468][ T5896] usb 4-1: USB disconnect, device number 5 [ 1173.559619][ T5985] usb 3-1: USB disconnect, device number 94 [ 1173.605796][ T31] hub 5-1:4.0: 2 ports detected [ 1173.799908][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 1173.799936][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 1173.800018][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 1173.938491][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2046'. [ 1173.938519][T14853] openvswitch: netlink: Flow key attr not present in new flow. [ 1173.984888][ T59] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 1174.203449][ T5985] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1174.327291][ T5985] usb 3-1: device descriptor read/64, error -71 [ 1174.475804][ T31] usb 5-1: USB disconnect, device number 39 [ 1174.575313][ T5985] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1174.705458][ T5985] usb 3-1: device descriptor read/64, error -71 [ 1174.825814][ T5985] usb usb3-port1: attempt power cycle [ 1175.189909][ T5985] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1175.225753][ T5985] usb 3-1: device descriptor read/8, error -71 [ 1175.484824][ T5985] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1175.518448][ T5985] usb 3-1: device descriptor read/8, error -71 [ 1175.625252][ T5985] usb usb3-port1: unable to enumerate USB device [ 1176.457801][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'. [ 1177.345546][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.345624][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.484198][ T59] Bluetooth: hci0: unexpected event for opcode 0x203c [ 1178.066356][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1178.176819][ T5985] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1178.350590][ T31] usb 4-1: no configurations [ 1178.350653][ T31] usb 4-1: can't read configurations, error -22 [ 1179.382928][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1179.410917][ T5985] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1179.410955][ T5985] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.441086][ T5985] usb 10-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 1179.441120][ T5985] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1179.441146][ T5985] usb 10-1: Product: syz [ 1179.441162][ T5985] usb 10-1: Manufacturer: syz [ 1179.517348][ T5985] hub 10-1:4.0: USB hub found [ 1179.533871][ T31] usb 4-1: no configurations [ 1179.533895][ T31] usb 4-1: can't read configurations, error -22 [ 1179.538267][ T31] usb usb4-port1: attempt power cycle [ 1179.810969][ T5985] hub 10-1:4.0: 2 ports detected [ 1179.942599][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1179.964216][ T31] usb 4-1: no configurations [ 1179.964241][ T31] usb 4-1: can't read configurations, error -22 [ 1180.048341][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'. [ 1180.048369][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2073'. [ 1180.048395][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'. [ 1180.124068][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1180.142299][ T59] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1180.145037][ T31] usb 4-1: no configurations [ 1180.145061][ T31] usb 4-1: can't read configurations, error -22 [ 1180.145596][ T31] usb usb4-port1: unable to enumerate USB device [ 1180.372712][ T5896] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1180.536554][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.536595][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.536638][ T5896] usb 5-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1180.536665][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.557337][ T5896] usb 5-1: config 0 descriptor?? [ 1180.628631][ T5985] usb 10-1: USB disconnect, device number 26 [ 1180.986993][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 1180.998232][ T5896] hid (null): invalid report_count 43684 [ 1180.998260][ T5896] hid (null): global environment stack underflow [ 1180.998286][ T5896] hid (null): invalid report_size 28056 [ 1181.034877][ T5896] hid_parser_main: 653 callbacks suppressed [ 1181.034906][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.034941][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.034969][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037426][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037471][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037500][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037529][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037557][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037586][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.037615][ T5896] hid-generic 0003:0B05:1AFE.000F: unknown main item tag 0x0 [ 1181.056681][ T5896] hid-generic 0003:0B05:1AFE.000F: invalid report_count 43684 [ 1181.056708][ T5896] hid-generic 0003:0B05:1AFE.000F: item 0 2 1 9 parsing failed [ 1181.088227][T15014] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 1181.190381][ T37] kauditd_printk_skb: 156 callbacks suppressed [ 1181.190403][ T37] audit: type=1326 audit(1776535230.505:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.190458][ T37] audit: type=1326 audit(1776535230.505:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.190503][ T37] audit: type=1326 audit(1776535230.505:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.190546][ T37] audit: type=1326 audit(1776535230.505:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.190583][ T37] audit: type=1326 audit(1776535230.505:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.219371][ T5896] hid-generic 0003:0B05:1AFE.000F: probe with driver hid-generic failed with error -22 [ 1181.228702][ T37] audit: type=1326 audit(1776535230.515:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.228752][ T37] audit: type=1326 audit(1776535230.545:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.283294][ T37] audit: type=1326 audit(1776535230.605:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.283349][ T37] audit: type=1326 audit(1776535230.605:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.283394][ T37] audit: type=1326 audit(1776535230.605:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15016 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff296dac819 code=0x7ffc0000 [ 1181.308006][ T5896] usb 5-1: USB disconnect, device number 40 [ 1183.230001][T15047] FAULT_INJECTION: forcing a failure. [ 1183.230001][T15047] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.230043][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.4.2092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1183.230076][T15047] Tainted: [L]=SOFTLOCKUP [ 1183.230085][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1183.230099][T15047] Call Trace: [ 1183.230109][T15047] [ 1183.230119][T15047] dump_stack_lvl+0xe8/0x150 [ 1183.230162][T15047] should_fail_ex+0x46b/0x600 [ 1183.230195][T15047] should_failslab+0xa8/0x100 [ 1183.230220][T15047] __kmalloc_noprof+0xdf/0x7b0 [ 1183.230260][T15047] ? kfree+0x4d/0x6c0 [ 1183.230288][T15047] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1183.230321][T15047] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1183.230348][T15047] ? tomoyo_domain+0xd8/0x130 [ 1183.230379][T15047] ? tomoyo_path_number_perm+0x219/0x630 [ 1183.230411][T15047] tomoyo_path_number_perm+0x246/0x630 [ 1183.230446][T15047] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1183.230478][T15047] ? __lock_acquire+0x6b5/0x2cf0 [ 1183.230508][T15047] ? do_raw_spin_lock+0x12b/0x2f0 [ 1183.230567][T15047] ? __fget_files+0x2a/0x420 [ 1183.230599][T15047] ? __fget_files+0x2a/0x420 [ 1183.230626][T15047] ? __fget_files+0x3a6/0x420 [ 1183.230652][T15047] ? __fget_files+0x2a/0x420 [ 1183.230685][T15047] security_file_ioctl+0xc3/0x2a0 [ 1183.230745][T15047] __se_sys_ioctl+0x47/0x170 [ 1183.230778][T15047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.230803][T15047] do_syscall_64+0x15f/0xf80 [ 1183.230831][T15047] ? trace_irq_disable+0x3b/0x140 [ 1183.230854][T15047] ? clear_bhb_loop+0x40/0x90 [ 1183.230882][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.230906][T15047] RIP: 0033:0x7fb86cfbc819 [ 1183.230929][T15047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.230949][T15047] RSP: 002b:00007fb86b20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.230974][T15047] RAX: ffffffffffffffda RBX: 00007fb86d235fa0 RCX: 00007fb86cfbc819 [ 1183.230990][T15047] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1183.231005][T15047] RBP: 00007fb86b20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.231018][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.231032][T15047] R13: 00007fb86d236038 R14: 00007fb86d235fa0 R15: 00007fff6f5dbd68 [ 1183.231068][T15047] [ 1183.264320][T15047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1183.602585][ T5896] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1183.805033][ T5896] usb 3-1: no configurations [ 1183.805056][ T5896] usb 3-1: can't read configurations, error -22 [ 1183.845387][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2096'. [ 1183.845418][T15063] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1184.042222][ T5896] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1184.084559][T15067] FAULT_INJECTION: forcing a failure. [ 1184.084559][T15067] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.084600][T15067] CPU: 1 UID: 0 PID: 15067 Comm: syz.9.2097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.084632][T15067] Tainted: [L]=SOFTLOCKUP [ 1184.084640][T15067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.084654][T15067] Call Trace: [ 1184.084668][T15067] [ 1184.084678][T15067] dump_stack_lvl+0xe8/0x150 [ 1184.084729][T15067] should_fail_ex+0x46b/0x600 [ 1184.084759][T15067] should_failslab+0xa8/0x100 [ 1184.084782][T15067] __kmalloc_noprof+0xdf/0x7b0 [ 1184.084813][T15067] ? kfree+0x4d/0x6c0 [ 1184.084839][T15067] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1184.084869][T15067] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1184.084895][T15067] ? tomoyo_domain+0xd8/0x130 [ 1184.084924][T15067] ? tomoyo_path_number_perm+0x219/0x630 [ 1184.084956][T15067] tomoyo_path_number_perm+0x246/0x630 [ 1184.084989][T15067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1184.085019][T15067] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.085048][T15067] ? __seccomp_filter+0xaf7/0x1ef0 [ 1184.085108][T15067] ? __fget_files+0x2a/0x420 [ 1184.085139][T15067] ? __fget_files+0x2a/0x420 [ 1184.085164][T15067] ? __fget_files+0x3a6/0x420 [ 1184.085190][T15067] ? __fget_files+0x2a/0x420 [ 1184.085220][T15067] security_file_ioctl+0xc3/0x2a0 [ 1184.085255][T15067] __se_sys_ioctl+0x47/0x170 [ 1184.085289][T15067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.085313][T15067] do_syscall_64+0x15f/0xf80 [ 1184.085341][T15067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.085365][T15067] ? clear_bhb_loop+0x40/0x90 [ 1184.085392][T15067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.085414][T15067] RIP: 0033:0x7f721c52c819 [ 1184.085436][T15067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.085455][T15067] RSP: 002b:00007f721a786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.085480][T15067] RAX: ffffffffffffffda RBX: 00007f721c7a5fa0 RCX: 00007f721c52c819 [ 1184.085497][T15067] RDX: 0000000000000000 RSI: 00000000c0086202 RDI: 0000000000000004 [ 1184.085512][T15067] RBP: 00007f721a786090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.085526][T15067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.085540][T15067] R13: 00007f721c7a6038 R14: 00007f721c7a5fa0 R15: 00007fff317e9e88 [ 1184.085576][T15067] [ 1184.108403][T15067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1184.192107][T15053] ------------[ cut here ]------------ [ 1184.192121][T15053] kcov->t != t [ 1184.192129][T15053] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.3.2094/15053 [ 1184.192176][T15053] Modules linked in: [ 1184.192198][T15053] CPU: 1 UID: 0 PID: 15053 Comm: syz.3.2094 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.192227][T15053] Tainted: [L]=SOFTLOCKUP [ 1184.192235][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.192248][T15053] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1184.192280][T15053] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1184.192299][T15053] RSP: 0018:ffffc90005dc7ae0 EFLAGS: 00010287 [ 1184.192317][T15053] RAX: ab16f3f7ecbc7700 RBX: ffff888024541900 RCX: 0000000000000000 [ 1184.192333][T15053] RDX: 000000009c6ac396 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1184.192349][T15053] RBP: ffffc90005dc7c28 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1184.192365][T15053] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1184.192381][T15053] R13: 0000000000000000 R14: ffff888024541908 R15: ffff888034155c40 [ 1184.192397][T15053] FS: 00007f6334cbe6c0(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 1184.192414][T15053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.192429][T15053] CR2: 000055c8247c6008 CR3: 000000009e530000 CR4: 00000000003526f0 [ 1184.192450][T15053] Call Trace: [ 1184.192458][T15053] [ 1184.192469][T15053] do_exit+0x150/0x22c0 [ 1184.192505][T15053] ? __pfx_do_exit+0x10/0x10 [ 1184.192527][T15053] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 1184.192549][T15053] ? reacquire_held_locks+0x104/0x190 [ 1184.192600][T15053] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1184.192630][T15053] do_group_exit+0x21b/0x2d0 [ 1184.192655][T15053] ? rt_spin_unlock+0x160/0x200 [ 1184.192679][T15053] get_signal+0x125c/0x1310 [ 1184.192740][T15053] arch_do_signal_or_restart+0xbc/0x830 [ 1184.192773][T15053] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1184.192819][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.192842][T15053] exit_to_user_mode_loop+0x86/0x480 [ 1184.192865][T15053] ? rcu_is_watching+0x15/0xb0 [ 1184.192894][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.192917][T15053] do_syscall_64+0x33e/0xf80 [ 1184.192944][T15053] ? trace_irq_disable+0x3b/0x140 [ 1184.192966][T15053] ? clear_bhb_loop+0x40/0x90 [ 1184.192992][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.193014][T15053] RIP: 0033:0x7f6336a6c819 [ 1184.193034][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.193050][T15053] RSP: 002b:00007f6334cbe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1184.193071][T15053] RAX: fffffffffffffe00 RBX: 00007f6336ce5fa8 RCX: 00007f6336a6c819 [ 1184.193085][T15053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6336ce5fa8 [ 1184.193098][T15053] RBP: 00007f6336ce5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1184.193112][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.193125][T15053] R13: 00007f6336ce6038 R14: 00007ffc7117dcb0 R15: 00007ffc7117dd98 [ 1184.193158][T15053] [ 1184.193169][T15053] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1184.193186][T15053] CPU: 1 UID: 0 PID: 15053 Comm: syz.3.2094 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.193214][T15053] Tainted: [L]=SOFTLOCKUP [ 1184.193222][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.193234][T15053] Call Trace: [ 1184.193243][T15053] [ 1184.193251][T15053] vpanic+0x56c/0xa60 [ 1184.193274][T15053] ? __pfx__printk+0x10/0x10 [ 1184.193298][T15053] ? __pfx_vpanic+0x10/0x10 [ 1184.193317][T15053] ? is_bpf_text_address+0x292/0x2b0 [ 1184.193340][T15053] ? is_bpf_text_address+0x26/0x2b0 [ 1184.193372][T15053] panic+0xc5/0xd0 [ 1184.193393][T15053] ? __pfx_panic+0x10/0x10 [ 1184.193439][T15053] __warn+0x315/0x4c0 [ 1184.193462][T15053] ? kcov_task_exit+0xf5/0x160 [ 1184.193497][T15053] ? kcov_task_exit+0xf5/0x160 [ 1184.193531][T15053] __report_bug+0x29a/0x540 [ 1184.193559][T15053] ? __pfx_css_rstat_updated+0x10/0x10 [ 1184.193592][T15053] ? kcov_task_exit+0xf5/0x160 [ 1184.193627][T15053] ? __pfx___report_bug+0x10/0x10 [ 1184.193660][T15053] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1184.193691][T15053] ? rt_spin_lock+0x1e0/0x400 [ 1184.193724][T15053] ? rt_spin_lock+0x1e0/0x400 [ 1184.193752][T15053] ? kcov_task_exit+0xf5/0x160 [ 1184.193786][T15053] report_bug+0x16a/0x220 [ 1184.193817][T15053] ? kcov_task_exit+0xf5/0x160 [ 1184.193850][T15053] ? kcov_task_exit+0xf7/0x160 [ 1184.193885][T15053] handle_bug+0x9c/0x200 [ 1184.193919][T15053] exc_invalid_op+0x1a/0x50 [ 1184.193954][T15053] asm_exc_invalid_op+0x1a/0x20 [ 1184.193976][T15053] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1184.194012][T15053] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1184.194032][T15053] RSP: 0018:ffffc90005dc7ae0 EFLAGS: 00010287 [ 1184.194052][T15053] RAX: ab16f3f7ecbc7700 RBX: ffff888024541900 RCX: 0000000000000000 [ 1184.194070][T15053] RDX: 000000009c6ac396 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1184.194087][T15053] RBP: ffffc90005dc7c28 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1184.194105][T15053] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1184.194122][T15053] R13: 0000000000000000 R14: ffff888024541908 R15: ffff888034155c40 [ 1184.194148][T15053] ? rt_spin_lock+0x1e0/0x400 [ 1184.194182][T15053] do_exit+0x150/0x22c0 [ 1184.194221][T15053] ? __pfx_do_exit+0x10/0x10 [ 1184.194247][T15053] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 1184.194270][T15053] ? reacquire_held_locks+0x104/0x190 [ 1184.194309][T15053] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1184.194343][T15053] do_group_exit+0x21b/0x2d0 [ 1184.194372][T15053] ? rt_spin_unlock+0x160/0x200 [ 1184.194400][T15053] get_signal+0x125c/0x1310 [ 1184.194459][T15053] arch_do_signal_or_restart+0xbc/0x830 [ 1184.194498][T15053] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1184.194553][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.194579][T15053] exit_to_user_mode_loop+0x86/0x480 [ 1184.194605][T15053] ? rcu_is_watching+0x15/0xb0 [ 1184.194637][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.194663][T15053] do_syscall_64+0x33e/0xf80 [ 1184.194692][T15053] ? trace_irq_disable+0x3b/0x140 [ 1184.194724][T15053] ? clear_bhb_loop+0x40/0x90 [ 1184.194754][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.194778][T15053] RIP: 0033:0x7f6336a6c819 [ 1184.194800][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.194821][T15053] RSP: 002b:00007f6334cbe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1184.194845][T15053] RAX: fffffffffffffe00 RBX: 00007f6336ce5fa8 RCX: 00007f6336a6c819 [ 1184.194863][T15053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6336ce5fa8 [ 1184.194879][T15053] RBP: 00007f6336ce5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1184.194894][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.194909][T15053] R13: 00007f6336ce6038 R14: 00007ffc7117dcb0 R15: 00007ffc7117dd98 [ 1184.194947][T15053] [ 1184.195108][T15053] Kernel Offset: disabled