last executing test programs: 30m36.358837931s ago: executing program 3 (id=2903): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x4000}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0826, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f00000000c0)=0x18) fallocate(0xffffffffffffffff, 0x50, 0x0, 0x9000f3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 30m35.344646573s ago: executing program 3 (id=2906): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0xdd, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5a, &(0x7f0000000140)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x3}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xe, 0x62, &(0x7f0000000540)=""/98, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 30m27.742105205s ago: executing program 3 (id=2924): r0 = getpid() setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) process_vm_readv(r0, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) r5 = getpgid(r0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 30m23.468345274s ago: executing program 3 (id=2931): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) 30m21.042403028s ago: executing program 3 (id=2933): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 30m19.669962393s ago: executing program 3 (id=2936): io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x4d966584, 0xfffffffffffffe01}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 30m4.535259704s ago: executing program 32 (id=2936): io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x4d966584, 0xfffffffffffffe01}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 23m14.429508437s ago: executing program 5 (id=4018): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, 0x0, 0xfc00) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 23m13.005604894s ago: executing program 5 (id=4019): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x34, 0x3, 0x0, "5e29253e9121f814ade0feb2a4ef0efe", "82d761728dd498b823db379c7ebe5ca241ba99b128425512f7ede679cf37fd"}, 0x34, 0x3) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r7}) 23m10.040122912s ago: executing program 5 (id=4021): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e8d8c44e5a10450c0a"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000193c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl(0xffffffffffffffff, 0x8b27, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4}}, 0x10) socketpair(0x29, 0x2, 0xffffff13, &(0x7f00000002c0)) 23m6.868104535s ago: executing program 5 (id=4025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23m6.030652021s ago: executing program 5 (id=4030): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c0002800600010000000000080005"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23m4.240703087s ago: executing program 5 (id=4040): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x44090) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 22m48.565781615s ago: executing program 33 (id=4040): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x44090) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 21m56.55870206s ago: executing program 4 (id=4147): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x20, 0x2, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x4000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) 21m51.078459244s ago: executing program 4 (id=4155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 21m50.884611342s ago: executing program 4 (id=4157): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ece", 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}}, 0x20000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 21m48.920119085s ago: executing program 4 (id=4160): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 21m48.54043427s ago: executing program 4 (id=4163): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000304000000000000000000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c0002800600010000000000080005"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21m48.251786751s ago: executing program 4 (id=4164): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r4 = open(&(0x7f0000000140)='./file0\x00', 0x222600, 0x4c) fcntl$notify(r4, 0x402, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x5}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x7f, 0x3a, '\x00', 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r8, 0x401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 21m32.525956301s ago: executing program 34 (id=4164): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r4 = open(&(0x7f0000000140)='./file0\x00', 0x222600, 0x4c) fcntl$notify(r4, 0x402, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x5}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x7f, 0x3a, '\x00', 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r8, 0x401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 20m24.914790277s ago: executing program 0 (id=4303): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010003b150300", @ANYBLOB="8420"], 0x28}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}}, 0x20000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 20m22.765031788s ago: executing program 0 (id=4308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000304000000000000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008", @ANYRES32], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20m21.346937026s ago: executing program 0 (id=4313): mkdirat(0xffffffffffffff9c, 0x0, 0x190) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setparam(0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000054) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20m18.692817227s ago: executing program 0 (id=4317): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010003b150300", @ANYBLOB="8420"], 0x28}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}}, 0x20000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 20m17.272328689s ago: executing program 0 (id=4321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r0, r0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000240)={@local, @remote, @void, {@generic={0x8863, "93706b"}}}, 0x0) r3 = syz_open_pts(r0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000043c0)={&(0x7f0000002b00)={0x184c, 0x0, 0x8, 0x70bd25, 0x200, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xc962}, @ETHTOOL_A_EEE_MODES_OURS={0x324, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')\'{.(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\-\'/*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\'e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\xb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '][\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}}]}[*%{*$.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\xa6/(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*%:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd82}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "4c35e4f9e09f53b001bbd89aabf4b44f95cf882a26f9d9de64fba53302f570f07892ceafde7554b8f263a5a60814603665db2db8dc7378b92bc5d5a068ef4c8a610eefd52202c85204942138d5"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "4909fb573dd271758252c7ea44cd372648b0070f75699a15fae067a9f8dd6c2aee778dbbd08e82370e415c9df570660346833452136f653b9250418379c815474a919950dfd31c0235c3856f3161cc6be4d0cf3ccb83ef39304be0755fa7c4461225d46b35db116b15cd1ac098c293c17638ed1c9b12dc1656b04604e966e727505a0dd73bf9b9f2e3a92931750ee8aee342e710c9579aa24619e16584c2adcfc43d0c330b801285af613cafe49ec15540479dba9c0fb2edd7ec0df5f7707742e8cc455a9604"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x11f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "ba2442fd5ac050b93cbd7ecd98827df412447b194326c5cbf12c86eb9abefc6d094e1e14432a0019656493afc9c21a620d27675195c17b66c45cc9f1210133d9ede172a09cacaf73c562d35da13ba61988eddde75b767723f9e062f65557897fbbe470f55e831cc6e396b53b6e25f06001319356e91df50455406f1d6c506e61555c3f9ddfff8bf102ce7684c59f32650841cdd0dc4de579df58464868fa62ca00b09bf5fa0f3c3324ad6d4aa4666ea2a93085714bfa9b7b273d5dceec3bc9165f59180ddec836541e79d9b486ddf8c65857716cb737f78e2b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "a7e49deb544d5cd5f406f7d1c4961fab72ba8bdcb6f412c07858ef64cc515800749195426e3de905f92f2eb1e705aef5d034a772b657d358096dea642d291e8e73d6b59a8d210353f4827772d7f90bae27390de8ec470a57750852d16d21c97e810d101a673836f01af63c8312e6ca772b90bbd0a9747dc83a676cc079ef9321a34aa94fd89705724510b6627cc42abefc405fec4018609078e63eaec379bfc5680c634a3139ccc5c1a2dc9cedec16a0cb07a2e1e8228573fd96da61db4d6827d2673325cce84301d7de8cbce8b053538985e76acd7adfaa5344db6bb65774a326c0747bf15af7"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x2f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x83, 0x5, "e91a838d775dacd2f1f021b53a89abf822666328ea60f731f29e9b3bf61ed5d93721e9186454091dc8c5c07726bd83704e303f142b05055e2184524055be588b2a8be40432ee08ea0a121f8baa0236a93152265f309359c52b57087db607ad916493b07a7068da794a20bd71b02637f110aa3e3839ddd33684b3e90e88692b"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&)%^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "09e3599fef977a0226421c4072e73f9a2cac9b7c36a687b080e33cfcec4c12028e1871b1c6766110dbcab9f091eeaf0adff85e0c9e384af723c7b20437e5e3e433ab1a6d09bc831547c1c1dbeedbb6ffe0ee103dea3fd9f0203f8cc906b85b5bc5df3c84fbdec5e310af222e2835c7695eb6edea88f5f30606c5b154ec7d3149bf55c05aa8caf071bab10c0377339adf3d8da223879cef2628620311c71921ff8374ffec020768abedb0507368d6ca02a2c18096b8d4731ecb47452aca5a960d7a3b3983e225ea339bab149ab5845cb060cbb50889fb1168f2e82f0c7ffa77f8395139c0afbb02b345d53fe3a7bd19d3bb61af0edb52"}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x184c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = dup3(r3, r0, 0x0) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000ac0)={0x2020}, 0x2020) 20m15.404495947s ago: executing program 0 (id=4324): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x5}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x7f, 0x3a, '\x00', 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r7, 0x401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 19m59.988430843s ago: executing program 35 (id=4324): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x5}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x7f, 0x3a, '\x00', 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r7, 0x401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 25.013193696s ago: executing program 1 (id=9110): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01040000000000000000010000000900030073797a32000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800b000100736f636b657400002c000280080003000000003208000240000000080800014000000003"], 0x1f4}}, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r3, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000340)=0xd8, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20010000130008002dbd7000fcdbdf2529fb06024e204e21f0a9044f02000000040000000500000006000000040000000100000003000000b049ef433598c68cf6e2d2bd4bbb9082d3c087688a5cc78bca720cd0ab0d1a0e6708f79e80eff19341ac4ee221581ce7e72c7d1de41b856ca67b239536e938997c2cc630f7e64d247861e9b12031ad6949678f869c76b93f19d8064fa9e7a06b920803a46d562e5a57df66", @ANYRES32=r5, @ANYBLOB="83c7000080000000000000000000001470000100553867178b179fa6026e724bc2d12bc6263e2404bf09e516ce2844923e0681ef7822f7d669464582bca9d8d8bb328c93f0ad1d9aa0d3b9163c2138f5943acc87131fa142281c791225cf6ff05b4a4b87700f7deaa470fbdb0b148bb70bd9379ffe6172182f46bb684853f76f640001000fa83f1c8f216a111e7abdd74e7241b9dc18c6c725ceccdaf9cabaca5f0cae0d720df34a8a92837b76b6c453141c57f3626a27e16fdb7af7df282d540f70ee7af86385aa95737032bc474f7a035468e73a0ff3e735ca6b7366"], 0x120}, 0x1, 0x0, 0x0, 0x801}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x22, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000200000000000000080000001853000010000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000184b0000f9ffffff00000000000000001820000056c3c08437e4eece", @ANYRES32=r3, @ANYBLOB="000000000e000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800", @ANYRES32=r4, @ANYBLOB="000000005b00000095000000000000009500000000000000"], &(0x7f0000000880)='GPL\x00', 0x4, 0xd, &(0x7f0000000900)=""/13, 0x100, 0x1d, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0xe, 0x0, 0xc8e0}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r4, r4, r4, r3, r4], &(0x7f00000009c0)=[{0x4, 0x1, 0xa, 0x3}, {0x0, 0x1, 0xc, 0x6}, {0x0, 0x1, 0xc, 0x1}, {0x0, 0x1, 0x6, 0x9}, {0x0, 0x4, 0x5, 0xb}, {0x2, 0x3, 0x8, 0x4}, {0x0, 0x4, 0x10, 0x2}], 0x10, 0xa3c}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x400, 0x70bd2a, 0x25dfdbfe, {0x4b, 0x1, 0x0, r6, 0x3, 0x4, 0x4800000, 0x6, 0x0, 0x80000000, 0x4}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818510000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 24.499545886s ago: executing program 1 (id=9113): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x200}, {r0}], 0x2, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400)={[0x1]}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0xfffffffe, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}}, 0x40) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x60, 0x24, 0x84, {0x84, 0x7, "eb9e7505bfb44f437bca5f4cf08c8884253191e422162b410b8aa3e9b58d49fb14bc196d8a3891d1fc206c499202d804565cc00a30f3d266e117b5b516ef65d384cbb98f4c96276d9fda2612a226852304307d6802f3473bd79cbca87cd9e5351518ff68a1feda368c9645228d6dbeca725e91fe51b359a1bf881a205c064394da17"}}, &(0x7f0000000140)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "4f34809ce30396ab9812ce9295ee04cfddf40248d018f1e80e9315fa34b9591c446e6da06e96391e"}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "a91d5c90"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xb51}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0xab, "8a2425ba4435ce32e8b8c74546efe1452f36874053daa9de9b9030fd05a6f778465e990ba790e7ba157976b4f86dc6318f84cabad2e22887ec4d64041c05dfe2645c27b9e1912e05bb4977bde512be2d3fbed243936ae75d725f04597040441c763a2741cffe94f9d25a1c35c57eef7aa864c0251f84e0f8a2fc74570c0bc63ac7e33bfef6e342922c912412c3811422e31204bdd5b538ddec057b3efc12828bb3b61e311f0fbb3ee5fa65"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x1, 0xce, "315c610ca91ae1a6b475feef469a322b1419614ecbaa4b02c687eb796cd715ad38bf927997993e78c52c5c162943dfc3ee4dd20b1521a0a6f74318d20fbe351e92c994c882417a75cdfcf88c31ec383ec482f8dacd3b406417df6fec267d3e2cb8feec2c4d316ea8196ab9b59eef48aa3861e2dbeddbfb0b0aff090373a12cba4ba072d14a82fd529157da7a9b7ea62d06db8c0660eb530771a0a6bab1984d219fc4cb847852d535406531fc0a11d4ff18e57ce15dd461fe140d01d443601631953447188a607148e0090a2256fe"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x80}}) 19.428992731s ago: executing program 1 (id=9127): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f3727"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce3400000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.824756989s ago: executing program 1 (id=9144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/231, 0xe7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x400, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0xa}}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000006000000000000000010000000000000fdffffffffffffff0000000000000000000000000000008000000000020001062c00000000000000480003006465666c617465000000"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 17.746510176s ago: executing program 1 (id=9145): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17.499920933s ago: executing program 1 (id=9148): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe8082) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='timers\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r3 = fcntl$getown(r2, 0x9) sched_setparam(r3, &(0x7f00000000c0)=0xfffffffc) setpgid(0x0, r3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @b}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f00000001c0)="5c1d49a7318ad83a4ce33cc461cbda4fd7ffb1b48df25bd61a8a75e2444006f41cf0cc9f4ddda378f66d7cbd4e3e2622cbf21ec635656e235ab54b1088bffb9305df96c4a98e8d0e178ca00af6f9e02d52cd49ce654138df51ef3b0977aba0ce44f344d973c043ca33c32440a279581fce371a4c09bc1e616479d1f2548d216666208dd2cec2433de8f4e5ecee8fbfe24df41d5e6aa8aad1958f347cd335f72469656e6128a30a7a13c196884c904c9a202f69170cc4818094b8c04724a8bd6f194af447ae510dcd43472757046562eca0dcecaa4c3106090fed660beb16d05d7ec83b0772ccd48eea138cff17032744df52317fbc115095d6", 0xf9}, {&(0x7f00000002c0)="d1ac", 0x2}, {&(0x7f0000000300)="08481b873ca6cfef6eae", 0xa}], 0x3, 0x3, 0x0, 0x1bd, 0x7, 0x7, 0x2, 0x3}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20) ioctl$TIOCCONS(r1, 0x541d) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000006c0)={0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0]}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) mkdir(&(0x7f0000000840)='./file0\x00', 0x285) unshare(0x40020000) r8 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000880)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000008c0)={r8, 0xffff957f}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000900)={0x1, 0x7331, "0f9733", 0xa}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r9, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd3}]}, 0x48}, 0x1, 0x0, 0x0, 0x6497a8f1c7b5a0df}, 0x80) fcntl$lock(r1, 0x20, &(0x7f0000000ac0)={0x1, 0x1, 0x300000000000000, 0x3, r3}) r10 = syz_clone(0xa080000, &(0x7f0000000b00)="b9116c1cecc4d20a591742995d1ed2d3f230fdec3b62d2c473ed78e0a3c3ac31fca67eba457a772e7e81a15157cacb87d86da44ef0a1ac63b79d4474ba96c70e474676ca1c4d198b6d91094118b02d66bf7245f6a944861c10e1c3daacf5d3e746364ca914752fb2af57e3af50f6e774d3f6e06bb756aac7d31cefc0a1d5b3cb64b2c1500973f8c79a9790ee1e05c64fd3de8fe1c5edc2c7160bd8ab79b082ff0b370d10", 0xa4, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="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") sched_getaffinity(r10, 0x8, &(0x7f0000001c40)) 6.689281485s ago: executing program 8 (id=9208): ioprio_set$pid(0x2, 0x0, 0x0) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 5.159568251s ago: executing program 6 (id=9216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.120711075s ago: executing program 2 (id=9217): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x8080) ioctl$BLKBSZGET(r2, 0x80081270, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="811035000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) sched_setattr(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x8112000, 0xc, 0x60, 0x2, 0x80, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0x3000, 0x4, 0x0, 0x0, 0x4, 0x35, 0x0, 0x2, 0x3e}, {0x4000, 0x0, 0x0, 0x78, 0x40, 0x0, 0x2, 0x0, 0x0, 0xff, 0x5, 0x3}, {0x26000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa0, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0x10000, 0x3}, {0x40000}, 0x80010006, 0x0, 0xdddd1000, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0xffffffffffffffff, 0x1]}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) syz_open_dev$evdev(0x0, 0x81, 0x402) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="fb180400800b010014001a80100004800c00018008"], 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20002000) syz_usb_connect(0x6, 0x64e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x4f, 0x51, 0xac, 0x20, 0xccd, 0x99, 0xd61d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63c, 0x4, 0x2, 0x7, 0x20, 0xf, "", [{{0x9, 0x4, 0x15, 0xe7, 0x1, 0x1e, 0xd8, 0xc, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x2e}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x6, "e8"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "d31f"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x7, "b80a90aac8"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0x2, "d7"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xefb}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0xfff, 0x4}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x5, [0xd, 0x1271, 0x200]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @mdlm_detail={0xbe, 0x24, 0x13, 0x3, "b72fd7598b5edc2a80a0477f9a1eadca8cbf84abb1f36a78b2f3bf36a5e2b1e302de111bc27f8c48b16ba11d9fd0a2e187326e99481044430473eb95c7c2e9ab7c8b5f9ba6b8cf1eec705519c88976d435c0fbeb6fcb96e3d67f00b6466fd7d03c42b7a0b2a05d7c12b80ef24dfdff73c89027eac833d93ac1f7eb9d3bb39df8e4f2c25f17316c9be73c2e4dd43882f04e58dbbd61cc78f4d63aff61422e924a1d615a2ff445c679cb3e099f61d5d5fd89e6d3a774362688cfea"}, @mdlm={0x15, 0x24, 0x12, 0xf}, @dmm={0x7, 0x24, 0x14, 0x5, 0x7fff}]}], [{{0x9, 0x5, 0xd, 0x4, 0x61531041d94835a1, 0x9, 0x7, 0x6}}]}}, {{0x9, 0x4, 0x2b, 0x3, 0x0, 0x88, 0xb7, 0x54, 0xf1, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x6, 0x1, "4263b6a249c7be94ac"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7ff, 0x6, 0x6, "41293746c6"}]}]}}, {{0x9, 0x4, 0x0, 0x1, 0x0, 0x23, 0xee, 0x75, 0x2}}, {{0x9, 0x4, 0x39, 0x3e, 0xe, 0xff, 0x0, 0x0, 0xb9, [], [{{0x9, 0x5, 0x5, 0x1, 0x200, 0x0, 0xda, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xa, 0x6, 0x9}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x95, 0xa, 0x5}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x4, 0x2a, 0xd, [@generic={0xee, 0x21, "8135688425012e72e2ba79cb8aa091b2829cfcba97a5b640f6aa3b24fa62594f4c57f4b7a0c7f48d7df4338967ba018baaa08692de4bf51b528f9c34691870ff0f8e028540d672b7e656d3860375ff9044bf62c391716c5b5f0fb8eb581ac9c1eec2cf85dfbcb497250723363d722d01b688374c8294229e57c08bedb392be4a4a942442178d1b6c61d16415fc2c7c62ea00fa34c927fb11239f3bea1d88bf591c54fe496b1d0c0260ae269e248600d7cb051d1b20ffa5b73572cae999d9401bb4df1df4249cff43d731d51d67ff041b1a3d98c1a442af4231c09033948177e37b66043e6cb64a849d631f30"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0x2, 0x24, [@generic={0xa0, 0x23, "fc2081bdbf0fd7348e9cca3c309a5c1315bfdd538ffb9b47a64fa12c322988a2ebe25349a8fa25001f519a39d0164e4e7a4df0f229c4c86dd0d8f0f3b60233f8e66cea8ecdc22bb41a9df81d4dc109ab95de980c27d3f216fad67631c49adedbe12e04f9bd2583c4cd0a9df35703c0662f049b8a19daa081e8b897f4407368d29470a4001b98ed388ed71daa3c33e5dde98311cb59a5ebeb1c446b962f33"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x1}, @generic={0xb3, 0x6, "b8d08ad36b4b6379159678b10c9c590e4f069bf4f9d2b3b4674070c0d325937275eb87fc049961127d337f3323dd873db56c5f42d2e2f3d756b4f79f5f54599eb156d0d48c10bde5f4a3d2ede9a13367321c5195beff072aa5bbda15504d5462ceda3466d1266cb03573b52d4ff00f8ffb350e6e936883bddf748c47929930b1dd14e8c035fa70941de92a33d6e5a4c0b2b200b9019305ad588f6a06b5967ad50ff5f31184ec010db172776197f6e5d68d"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x3, 0x54, 0xd5, [@generic={0x52, 0x3e, "bdf994255920f509c33f6898e12256aea2b7922d4c4164e47762adc1644231c4e0b75b4a54492a66c057ba3039fa0970e979ec627dcf27bd58b3063c0ebee36c8df583f44fdec8492f72b8c3b8d12101"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x10, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x68, 0x4}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0xd9, 0xda, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0xfa, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x7f, 0xf2, 0x9, [@generic={0xa2, 0x5, "5f0f49a67dace91db668b97ea74115ec45668177046a475c30a362de7ed71b4c1c68b1ffe4c72bfd78a34e85115846e878e17309607f573505d171961efe586e7a5929519925b30e9f9b5fe2a8c19622938ff28fbde41bb465d1a26f93b2364a658cc672968d2da8efd21192e9a07f85da821df846482048213defacbeadba87c0bb374890515b6509d6d6bc5a054b0a8e19d2e397f26e28d877f6d6a8d45bb5"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x1, 0x0, [@generic={0xb9, 0x22, "703162da389aba5855f1caa61844286f51adb3ee2d21389d2dc18be3f79ff1850759ce1feccea5b232c7f70149858aad499e34938a59ee5a97aa2236945b9521c0c5cf4be1ae879313274eadf0839f1e9ed2adfea7164b8e129e9d4bd92cadff62995a18ea13c3d0ae20e3bb93aeca291542158c0cb4d4eda2cf3bbf06403311ac046aef41aef134ef6545bbb022819538107c9141042290aec1710bc6944c52ab60dfe57ccafd1f5f3b783300375d2ae6459c03a2f729"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x2}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x40, 0x6, 0x40, 0x6}, 0x77, &(0x7f0000000780)={0x5, 0xf, 0x77, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "8f0056984ad30a59c36cc6f63441c410"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffff9, 0xf, 0x7fff, [0x3f, 0xff3fcf, 0x3f3f, 0x3f, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a5316066447b0a1bc06b2813e4f99948"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0xd7, 0x8, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c87c70d971e219d7d044383e2cb49d6d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x104, 0x3, 0x1, 0x8, 0xa}]}, 0x1, [{0x78, &(0x7f0000000800)=@string={0x78, 0x3, "3749167562fb6a10caa3d458a41574688c981fdc6abaa97cdc734956175365199baa1ed1cfcd0afe1e1697a418fe89a3852dc24f2e6864a23956d49b0f680a9259cf9a170659cde5eb5dcf28b1038fffb7eb9d41383ad4377405e77cacf4a382f7527188aa322653b492e782c708db157698791f3ffc"}}]}) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xe, 0xb}, {0x5}}}, 0x24}}, 0x800) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r13, 0x5761, &(0x7f00000008c0)={0x1, 0x0, [{0x4c, 0x0, 0x7, [0x0, 0x5, 0x7fffffff, 0x8, 0x3, 0x9, 0x3, 0x4]}]}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x66, 0xf, 0xfe}, {0x9, 0x5, 0xc, 0x2, 0x200, 0xc, 0x3, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 4.88685059s ago: executing program 6 (id=9219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.668315521s ago: executing program 6 (id=9220): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x1c) 4.432332954s ago: executing program 6 (id=9221): alarm(0x8000000000000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x5, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="b61a6ed454", 0x0, 0xfffffffd, 0x0, 0x40003, 0x0}) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, 0x0) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) alarm(0x0) 4.375586449s ago: executing program 8 (id=9222): listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r1, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 4.374493759s ago: executing program 2 (id=9223): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.266597803s ago: executing program 6 (id=9224): listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$link(0x8, r4, r4) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) ioctl$FE_SET_TONE(r0, 0x6f42, &(0x7f0000000100)=0x1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)='i', 0x1) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.828127311s ago: executing program 7 (id=9225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x8c) fchdir(r4) sendmsg$qrtr(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="627e832c5fd77fa27dfa1000ec894f6c34e730cdb8c2bde48fbc181b14125527c5a80c977a", 0x25}, {&(0x7f0000000300)="c1a218f4814c50c9eb8164eb0aa5aa2437058f42f7a00fc0ac3b42ab79ccd50d013aa0fa50892b5a8dfd365f89a3d6e2be3c516a4a7e976f188a316971d08b3caeabfe88852fd222b096948fce68b72e4c27a927da0bd7d3466aa5a100deaab1078e3ee79f78f514150fd7f57df51f097fd87a540253f8859704c72b4961bdea12e4", 0x82}, {&(0x7f00000003c0)="fd2ee87b5accd332757ec70acdbf822456c93baa8b989f95048dac1c44505e3c0cfc7a5d44e492d8b6a1487410fbf521c74969f5a4985cd3d2665345d8ca77d0683603652999be95b7653fbcc1159607e6c1ce2508ea09681e3695460a9264b785a6514511e155e6c50c0382a7fd4d3127ac7b818f47b712aa49f34e3cb61da89961ef0d8f38cb86b3d533", 0x8b}, {&(0x7f0000000580)="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", 0x1000}], 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1f8, 0x40000}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a96ddd7d3d458dd4992861ac00", "f4bd000000801900", [0x400009, 0xfff7ffff9673e35d]}}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r9 = syz_open_procfs(r2, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r9, &(0x7f0000003480)={0x2020}, 0x2020) 2.918726957s ago: executing program 6 (id=9226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x24, 0x70, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x102, 0x6, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x22}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x5ff, 0x9, 0x16, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xffffffffffffffbd, 0x6, 0x300, 0x7, 0x2, 0x27, 0x8, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.696530671s ago: executing program 7 (id=9227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$video(&(0x7f0000000040), 0x2000000000008, 0x0) 2.613220218s ago: executing program 2 (id=9228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f0", 0x44}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.61130416s ago: executing program 8 (id=9229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.460990373s ago: executing program 36 (id=9148): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe8082) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='timers\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r3 = fcntl$getown(r2, 0x9) sched_setparam(r3, &(0x7f00000000c0)=0xfffffffc) setpgid(0x0, r3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @b}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f00000001c0)="5c1d49a7318ad83a4ce33cc461cbda4fd7ffb1b48df25bd61a8a75e2444006f41cf0cc9f4ddda378f66d7cbd4e3e2622cbf21ec635656e235ab54b1088bffb9305df96c4a98e8d0e178ca00af6f9e02d52cd49ce654138df51ef3b0977aba0ce44f344d973c043ca33c32440a279581fce371a4c09bc1e616479d1f2548d216666208dd2cec2433de8f4e5ecee8fbfe24df41d5e6aa8aad1958f347cd335f72469656e6128a30a7a13c196884c904c9a202f69170cc4818094b8c04724a8bd6f194af447ae510dcd43472757046562eca0dcecaa4c3106090fed660beb16d05d7ec83b0772ccd48eea138cff17032744df52317fbc115095d6", 0xf9}, {&(0x7f00000002c0)="d1ac", 0x2}, {&(0x7f0000000300)="08481b873ca6cfef6eae", 0xa}], 0x3, 0x3, 0x0, 0x1bd, 0x7, 0x7, 0x2, 0x3}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20) ioctl$TIOCCONS(r1, 0x541d) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000006c0)={0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0]}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) mkdir(&(0x7f0000000840)='./file0\x00', 0x285) unshare(0x40020000) r8 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000880)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000008c0)={r8, 0xffff957f}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000900)={0x1, 0x7331, "0f9733", 0xa}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r9, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd3}]}, 0x48}, 0x1, 0x0, 0x0, 0x6497a8f1c7b5a0df}, 0x80) fcntl$lock(r1, 0x20, &(0x7f0000000ac0)={0x1, 0x1, 0x300000000000000, 0x3, r3}) r10 = syz_clone(0xa080000, &(0x7f0000000b00)="b9116c1cecc4d20a591742995d1ed2d3f230fdec3b62d2c473ed78e0a3c3ac31fca67eba457a772e7e81a15157cacb87d86da44ef0a1ac63b79d4474ba96c70e474676ca1c4d198b6d91094118b02d66bf7245f6a944861c10e1c3daacf5d3e746364ca914752fb2af57e3af50f6e774d3f6e06bb756aac7d31cefc0a1d5b3cb64b2c1500973f8c79a9790ee1e05c64fd3de8fe1c5edc2c7160bd8ab79b082ff0b370d10", 0xa4, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="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") sched_getaffinity(r10, 0x8, &(0x7f0000001c40)) 2.449024117s ago: executing program 7 (id=9231): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x1c) 2.447489845s ago: executing program 8 (id=9232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x27, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000) 2.386009478s ago: executing program 2 (id=9233): r0 = syz_open_dev$video(&(0x7f0000000040), 0x2000000000008, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x1, {0x80000000, 0x1, 0x5, 0x7}}) 2.252058939s ago: executing program 7 (id=9234): listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, 0x0, &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, 0x0) keyctl$link(0x8, r4, r4) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) ioctl$FE_SET_TONE(r0, 0x6f42, &(0x7f0000000100)=0x1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)='i', 0x1) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.159738015s ago: executing program 2 (id=9235): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x1000) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x4606, &(0x7f0000000000)) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) 2.047819207s ago: executing program 8 (id=9236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000040)='GPL\x00'}, 0x94) (fail_nth: 1) 1.704140485s ago: executing program 7 (id=9237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x8c) fchdir(r4) sendmsg$qrtr(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="627e832c5fd77fa27dfa1000ec894f6c34e730cdb8c2bde48fbc181b14125527c5a80c977a", 0x25}, {&(0x7f0000000300)="c1a218f4814c50c9eb8164eb0aa5aa2437058f42f7a00fc0ac3b42ab79ccd50d013aa0fa50892b5a8dfd365f89a3d6e2be3c516a4a7e976f188a316971d08b3caeabfe88852fd222b096948fce68b72e4c27a927da0bd7d3466aa5a100deaab1078e3ee79f78f514150fd7f57df51f097fd87a540253f8859704c72b4961bdea12e4", 0x82}, {&(0x7f00000003c0)="fd2ee87b5accd332757ec70acdbf822456c93baa8b989f95048dac1c44505e3c0cfc7a5d44e492d8b6a1487410fbf521c74969f5a4985cd3d2665345d8ca77d0683603652999be95b7653fbcc1159607e6c1ce2508ea09681e3695460a9264b785a6514511e155e6c50c0382a7fd4d3127ac7b818f47b712aa49f34e3cb61da89961ef0d8f38cb86b3d533", 0x8b}, {0x0}, {&(0x7f0000000580)="de9d1b14840770f1234679315f303418e67748572cf892235d94c104c57d9bb5d48a95fbd6f01dc5c783e5627aeac12f6b3db11fa217934420e5a3c9cbebf67e2731eeaa10cef0f1581cd1681289b1fc480166d6428e834c0b52849d34bfbbc76c04cc0039f866da1de1bde94f809aa3cf6931df16a66656d759ea8aba6ac863aea70ec2b30a1ba25e12674a70b4d80d62026830968806055fac8084d15511ffabf65fa507ebe0350cd491ee74c28b62dff2c3de538068e25afcfc8120edc68dacd162a0045384292bb58dfb783020c5be93a8f5a316c2e0317867828ce33dd822c8d1c9a2bfea954a80589b2333a20d17bf1ff102cc0b417b629df6a84569c6e47a01ceb88f9838721b498a4d91ba4065531be31e52c6f215790fb4dceac8d3aeeb05f4747049f06069903b620a612e8d8b2bde6fe6ec13e68ecc4e571f821e023ea405657be20a14891ca62ef485b513df972e67d2e386f93edd9f8e1b73ba656637fc1d4c20e70491f9d6e345a010ae3210d082e1f6b40c458d396bdfc751b579b3242d525c83fe71bbda9849a294ea627d42aa9cd018fc037a85efe13ee447a28c151b940bcc0fd87dc1bc6d633e4b08b15cfce11c38a489ef2a5749da33d6da79ae2c8e43af76bdf1bd3dec226e9cecc3cba3b12f4a40ac3ac06f9a877d83caf22b6c667ece51f59d8250df156662bace8209dd7b35fbde661df02589f1fa1354630879dd88a68d6a008bcc806b9d47cfa95458351ef34be4e3168381e5312caa0afcd7a93383c4bf884c130db2fac58635a0221b5153e777b40679a42b2e750e1f6e5c60fcb957a00ef1f2ba9a61e7e44f5825610025b75a53949c2863522ff41c35d7c306cc72703dd0c2345a31adbe64f5af707d7bc596bf537efb759a432de6c0a0a6bd37f2a708232c0f338f6799563bc0967d69a13b86c68fc8cac5d90d8e109b8e2834ce6c8d0fa0dd86e6ae79cfa39ee0161f9475b2817735d0421709eb5562bc3a1962733faaf1ecaa9d07b98f5593e41b096147ab27064fd016abae76d5be548d5da8f7aa7448a7e980ecfb88b4736cde7bd1796fd861dec05dc160d66de913870a8dccdbdf7c8768e3bef2a7e4705b3785a20f8bee51592d3cffe8d3fcd98260d380465c1337493f79da224e20bfb8daabeb474b6c89ec307bcc8f29f48bb766d2ab839be8a986bbeb4e6710ec799edb5f564e48545ab89e1463b59cdef15ed31c6e42a8e54fdd8eb76e12126efbcad980dc274c289896e24537a233d53ea0d1e60c00f8c9b5ad8900c6229dcdadb48c4b0441ff27a54a1271336cffd11ecaab0685486a7b4b44dcaa5c077460f3218867126dfaa9835b43ed1dab971cc386e4a8196a59f82287e30253e78bcc4b16c980a69bde1f7143a224502ce7e1b117e38cc43bdff5c99a3a3393ed5913a6d65091d72ee78bb32cef8b0c01171dbf407cb6f99236dd3ba029c90f1e5cb88a22b710f9b72424b9b05e435d6c1f352820d2f576604d7710c0f61900ca8b852c23c30d0d40b6f69ab5cd096c058eb49f8d09d0496d982a82f04eeb4a4e98076fc1b34438c873c1729b80cf3fb26f89c9024469c957d915d5c555e6e40c0af51410511e0051592c66340fbb61780eea182e4d9e3f65745f364b90a8cc6d4355f190f3b85ec107716de1dcfe0ee690f92da96de4ec1232f1e13facf95582c525331ef06361d9dd06a3af970b9e783c4c23faeefbd74f3dbddddd8df0ac82a1468d4001aa3ed8bdd8f39722272f39a82b72084ebc28aebe0b2ea5d209bda768a7782f8085c74a016ebd945f134021fdf4a2cf0b1efd653e88693a139d05dca5b6fdd660102cab13ad120ce240d2fa73be75c43b198439621511634d66fdecc1b21a4329333c228753c7e1d6a2c877a049daba806c05b8b5fe9e8435ba05f5b902217e09da4ab846fa08434d0f4b20bb821af7cb401114a8f049da7e3ec1e796e0e50187e77955462b6e020255cfb709e37875e4d1655d659175a5aee9ddaf99cda2f3da38e58bd1fe4b66c65c37f661ce0d57629e3bf9a9b1f828cc2a651ed30a980908c33235678da980540faff261b783063a5ea60abf2ce33266061db0e73716fc7bcb232478d653c023c492df57dfe75e270dab36a172857c97e949cd0755dfff5452fe27d6645640160675bc798672243606cd31c64db3993ebc1ab581f1162a361d8cf80ec1e3ac2731499cf8683ce27e797a86a33535f60e35275ec6bed53f44e2b46358d458b4889e92e4ce73c9fdd0ed6f1c1751ed01156990218a471f2a4b589aec43692b8d1042bb1c1279429d35026d8096829a320c5c2da7d945a4d108c5f8353862a0a71edbabe01dbe00b8f6fe47c6cc57ec651b02205a3d35073b82f2121c53004642af1bef6b64395babc323a67db553ef9a5111abcffdd190c09b9b67afba1c4c78f80bddd5a89d0cdc73d21b0c4a3c53ff67381bbae875c7d4253bb000362561f3edc87e2c9aff66639abb319784ae21e468f031d6354870da1785ceb2a80f53617ba5d0dac634fe4ce340653018b8a402396c883be1aca5628898e0aa3869fc4ba5dc345601a5eb05250e6dcab5ec9f719dd4b3eae385a93d8cbd51375e96cc581e3e6fd08a39c724fb6c91736e87792bbd4545fb8b46a249829838718bd5e54d14558b8d162d162a4948bed874aca33e2b151e61d21050a2ad61ae802ea88e7d72df57a0664e0ae0ea8cff5b4a4ac5ee0d1bc86c9337022aec3320ce199438c207e479c1a317ef87a888aac81bf2847cfcb511a96e85b765860edcec77be963ca99d32665117c95b01acaf0fa003f7cab7b9f373b68e9e94c3ec276238b93f555436f0259d60eaaba68b981591abcb10dccb7818fa3df2419c7f460296d014e8419fe793a4429fd279527e7863a038208ce1c4a3e55e3e07101575cdbec239f812e95feaf265b2dfc12ea29fd71c9c6251c28d1b8e18a167d14832e5a008acc2352fb40acacae3d04b37f3f3aae3136441680b762569381b77f99467d7c5c790313302be82fe6bd95050cafebe3e6e23092f0a0d7f2c574c48d540cd9a5859cb6f74b117c90ff2ce1c28e851b6639f9cb29a3e1e5f3c8d4fc29fef582fa3ff4d8ca0ff96df5c34d2185b4f382007964d2c97060408c3413ae04274ed31467f94beb8d12322b023ec67f38e726e11f0a399d7440bacf6e9d121fae1e87141aa15a6629a1031b64695920bb3f4b9241e5a5875912d5aa49c6d9db8a7eb15d8ee7b2bcb37dc5156e9b66542fdfc56856a66f9ec6fe46535033b6ee0023994af19302b69b66c40f13bb1d92c22bf0911c1a0312ea3475fb939d81b712fd8c4380f8a2bd0ef281bf57c3b2202e0b794c2ec15b36706e9533aa5fa561ae99c02fe448e091242d2ab24b61b5cdc2aac207cc800fcba6ee46b2760f37130fb0368ba8a13003e860cb26b327d5bb6a0f6b939c9f69f235e959d734d7e8b6e5f46e883bcbddb226ac857266089bc54135edfa9cfbc93d29b8add82a6b76b50ccdb0d0654aaa3b7251c311eee8b839e1be99ad585aaa9dd19a4337253d04e1574bc1bfd8e6383f178ab5ab7d6d35d20562c33372fb7306fce2d4834e132c9b3dacd88f1e6263fd13634444a2c44f54781c3de9a54eb303c75a56209bb6fc4412e75baedc114042b53c0fc2e9005e81df0a33c8b7ad0ea1fdc6cfadf86ff9e018e5a79486616d7215340a84965df63b387c0849048ec55a3e8e9650e3618bb69047687a9aa2eb49afbaa2cf30d1e4dd4934d3c3a1ed16fcdb52731ea2bc731d1a9e86e5974daea5ca461491d07212214cfd21f041ddbd68d5a142454d203c68d9c41fe66fcff26532d285f814398b57f620a29fce7fe25e69990328f42d78250bcea23a63900f096911e89495cf607354f8a197c295edaadc5a449896a3761c46cb641f4a0f51e5bf4e3b4254170f836672b20ba9a41fec10fd8e7e70699734d7885d03285bc573005ae897d06f98e18ebfad41e3f12bd45d63ef886850d876a35b2095d2e12a40260975585f6226253b49d86ab905beb483700b7e500b100ca0561e4e6a12132842f0e234174190a51f6477e97a3be8b684eaee544b703980b9f9d99730b74b88c803a3f4ec49b5ab8655bfbf10fa31a237e61df2f2f7bff500d28fd566b4a3a263af5196c9c05f35391b3f930faa5098da3031a83f6229352ed940a2e8f48abc6b5750aa08ff505a6443003eb7baf662c3d8163057b9ab39f1c64086e8af11068b945b4e8ab9eb4acfcdc67eca736bb5f7bfc46e93dce260238b745a38f299c60b9780f7b06c5ed01ba25ef0aea40187df0915701a3cdde587d50aedd787564688a67fe4770c2ed86ac572f9fef188ff3bbe3313034724a5af3f80029c9e2cae361075ce61208aca353d0878f08d8f0bea7930aa9564538d710d09b150e144d64f391b78db95dd256f63898149ed19001b2784205743dcce41f7e3964bde290c29d93f81289ac4a1acf7d37ed5e3cb02d31e243fabd89dd892d2048bd0613cf6de47b9070351798eff34ab478265569169235d5a06b3a0782ae0bfb6046d1c75cce4b4d80635ad61a137124531be4eb94af1a8441b84b5e0a1dccd9ad19304a62d769757023c96e46ec599f273ffabec590ea2fe0b0dd705d956b35dcc691925fc0c41a4e0b5fe2f6d458bc627f66b7f675decce27ecd538a42b98ceb09119446a650129a9a594d4063a74c96db9e5cfdf9bcf7411ff312a971d0fe68a0dfaf2112442c8e263ca799e50d752a87a4908f87aa91c71e73cc185994c428842733e5a25bb94c194f7c9f02318a35570cd55c3cdb79bd262cab4adcc76b1dd1f60296b03bf549fe0256b8def39d79777b286700951a7d20101780ccd9da6500023f10c587683a1d20dc9227b4cbd819f25c066e9b60902235e19e50d831559959da9925b6764ab9768cfdca2ca29f1fd23a150bb4900583fc6675b8ace430c7d3716bceef6949dd1304c36518bde9513454c9c4b798a4ec231a7c6feaaf0b717a20f9bba956cbe6a43102108f9b3082d01e3663db4811719eb1cf8adf874baa2a2c6c6c7f7e5cd7847398ba45a4089b703dd1c709558e344df869a56c15d688eb061542ada4a2dfd3a00f86d8bca59f5b3f2a1e582d695c4d3ee0502ab1045424044a089726988d0c74873e489faf689da42476f95c5d19f8a8f9f0b10e03abbb755fc33b22ea7f14b357a20b665a3660eabd79e26b29bb485d4ab1df1d675b425e896f5c7c2c86ccb36a515468e23df0c1e6a4cf31bf7f55f7ed62c2cadaed66565097252919eef48cd8d7e9eccf27295b8c1168bbeb88855aac7c04916082b094d8a904c619b2ce1635f2ef99436c7700a24e12ea27d2ba9d32e4add6c3fd20a238445428cebc85130ec72362d560da91b32e9049c206ed26df0d0cf0e202492cec82b15bab6b47b9c440af32a22f96bfdc87f0c037a7358e916494f3be38e5d3153a3d7a7958a394e5c3459355d147b196ff718e54804f31367abcb4833732bb00ef38a639c93e4313380d8d316b0b1a7928d47aa465e096b640ca34a9c0fde34a758994f6b667380ba03c48e9a108b96e1cbb7c42dd92be2427a074063ae682fc01a570926663e242582609a50becd2e63400249b9f53e50dff157ded0a71d563425e1b4b0efbf5fa1eedf822e7c3c3932b10e25046993f689f4307bdc629bf0cc806b2baedde3d399f1a7d08dbaa17956ec382e72ac94ee30ecd559946ac88c52ab74c0747af4dc4e7af86efb65a2610d4a4e44a039e2363e6f879fb2f3a73", 0x1000}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1f8, 0x40000}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a96ddd7d3d458dd4992861ac00", "f4bd000000801900", [0x400009, 0xfff7ffff9673e35d]}}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r9 = syz_open_procfs(r2, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r9, &(0x7f0000003480)={0x2020}, 0x2020) 286.686988ms ago: executing program 2 (id=9238): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1230) (async) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) poll(&(0x7f0000000080)=[{r0, 0x284}, {0xffffffffffffffff, 0x4c}, {r2, 0x80}, {r0, 0x80d0}], 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x76) (async, rerun: 32) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) (async, rerun: 32) write$smackfs_labels_list(r0, &(0x7f0000000180)={[{')^]'}, {}, {',,-'}, {':'}]}, 0xc) (async) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001a40)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001b40)=0xe8) (async, rerun: 32) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001c40)={0x400, 0x1, {r4}, {0x0}, 0x6, 0x4}) (async) lstat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r1, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = dup(r2) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001e80)={0x0}, &(0x7f0000001ec0)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001f00)={0x0, 0x0}, &(0x7f0000001f40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) sendmsg$netlink(r3, &(0x7f00000020c0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000001a00)=[{&(0x7f0000000200)={0x10, 0x27, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x10}, {&(0x7f00000002c0)={0x1254, 0x23, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x189, 0xab, 0x0, 0x1, [@generic="58371a2d8b2089e54cb209084d0943057caba19fd6a53f011117b11c", @nested={0x4, 0x34}, @nested={0x4, 0x36}, @nested={0x4, 0x103}, @generic="fd7509b462ecc0923bec73c86b4e2e8bf20c112dcdd8bd420b35c96b8e6a66268f3a1e22b10cec8b1b54fa1c26c412a1be84523fe2f5903239571c20f091f266c60fefa53b1d5b3c38a68ff3eb4c5ec960b12939e528c4e5a68d563268547c0db1d4fcd1c997e74d01f971f22261e0a0361d", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r4}, @generic="45d48a8fd8de658a24706ac682f074340e874a28b7279be95693055f6fd72513bd9b9f23a11876e6d7b0169f4c2318f5c874ddd6bec20669ed6ed44fd8011171906c92c0fd4547eff18dcb1f1ba6d362098933ccf05960939b7fad42da7a4891db2a4bc8156b1472fc5ecab9f4357b5e252565f1485209f68c8f62b908188eede90eec910cbc25258b1df8afb56ccb0e173d8f222c49ee6be8212095d3e810340d59117ec9a8a5c0672d819f61ed69ec3efd37657f4b0a50e8121bae008c516b1933b718029dc861c2892d2b22876e27dfd6ad", @typed={0x8, 0xdf, 0x0, 0x0, @uid=r5}]}, @nested={0x4, 0x152}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x64a}, @nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0x75}]}, @generic="5e47625fce8906fe0be30ae7339f7bfbd76358ade5d4b13925824eec8873578e7d2aba0581d603b8f485f25862ee4ef325d3fb72d2015f90f774a64ad5b2851f702e1c5a7ef6fedf0c3ef43991a5e11d3136cd4b3d07467d9218404aabdf254fc3aa8f4529a273399c17f5df15ff2ba136be98855baccc", @generic="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", @typed={0x14, 0x10d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@empty}]}, 0x1254}, {&(0x7f0000001540)={0x4c0, 0x40, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="638e8ec959cb27f67ebc647f9e8423970727df0e27934dbaaf0a583db247ec73686be52d068c121bc9e820db02b441f1795b161e9da3b0e01c57aa827b447e9c15221ccf95279b88ba6924a6201b32dd3f980707e41b0b7c0cf8cbb4844601fad48185b459c523f5f6ab25a68dc154746a18b48ca497ed23ddb2f541", @nested={0x1df, 0xa6, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x125}, @typed={0x8, 0x11b, 0x0, 0x0, @fd=r2}, @generic="b6b139c041c32711d03bd31528d7bbb7bb27ff46b118a7dad50a19fa5d56ba2efa777f0b97d63cce1c00ae14c6841eb3ad36c3a21b81686ff74ca90f70297b8328469894d1caac78b7d1bb1d4a1391dd2a895db0224115f42346120838f34a8922f23022fd72b646bb10aa4b392056e7dd0b529990f2e910bf02352b", @generic="bfdbefbf8740d8150160f748310f2ce42c57a73da79225bbbe58c91b46e0cf4f43eaacd1fb6ac35e9a5f52313a756ea1e5e8529e049bf831a6e472d61df5d9edcd73e207ad863582b90ac35f43f519ad3fb057a8e77f4a807f34b1441dde6047d0909ba87e73705bfb0b3b1215dc814622b1c3fb4162c9a4b4179a3741b77647e739f7224b210418781d885e938f261272", @generic="8fe54d9e4e8c4ad39a8755586abd9bec0742d5c68f844e3f462937101f3a1982b98687ba51fcd83035f8d1ae72c1efe5a11bfbe1e5fbabb97da9fcb88a6f1c41a994839325c0458b778017405241b6b6f032c3570171b8588ddf8297484c3bacfc1444a5b658018c07ce77e3d1af046f3377d094e4f099613a1841de1770f0853498e6765425203836230c7479110e37cf9a3f2ad4b98d5150018c4cb3d178752bc691b9dd57c4d1d0bf9806a80cc860c597e8b3e0b1", @nested={0x4, 0xae}]}, @generic="61f7360b279ac676468b302a9dd7df34bf625dfc5cf2ad6a3ea50ef915642fe132300e5e85bab9cae05c6e46b1ade24ebb87b9701b69beab7b1045f90f23432eeb54e39b7d8a2dd95b26d2717b01828cea3b9838a4d8502d31764d7aca43784915e9c87bf6a87a308cc627c10ae2cbb50a76b5021691dcd1101f7085cf79defeb6208b786e3ca8dc836dbc946460945ab34f3bcefc7a40fc6708d99e2d0b", @typed={0x4, 0x95}, @generic="8cec2a900872a68ab5df408b319aa9d16493c4075d098456ff445e2e25e03e824ab5e99f026ebf5a11b0334e1bcb9689434c166fa5029b729e7cd774ed010f0bf11580e4b45e61f1b880f873e2e6686ca6f7", @nested={0x20, 0xe6, 0x0, 0x1, [@typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x157}, @nested={0x4, 0xf0}]}, @nested={0x13d, 0x105, 0x0, 0x1, [@nested={0x4, 0x8a}, @typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@remote}, @generic="6a4b8368c93f80cea1a2d1488506558d269630eb2cbaa4bc92566bdcd8a41a0d6c80be9d3c0eb328f21538e8a257d7718ddd33fef2bcf337c1d00c0b21ae342fe209a7a68c9767483e3dcf69227b4bd1dbeef4b9ebaa4285cdcb8ca2109ae73c0e243b5eec7fed13c28696c53b37eb1852cd1c1e34239fb319da93691f73b158bf9a8a082a55b85ff11d68b1a5067458750bdb9562aa52feb0b64333307679", @generic="d4e62fe82492d8c24c64e90d432180ad840e1218ca2e77375ca3bfd27b2080ba0254747106a70948961aa710b84226a2dc6471607eef6f66bbe1001c3a6629efa77aff10391f544e8c6ec667d40b6626e1cbc03c0e7ea6cb01dfa02f71e37d5b1028bd124b7aa089d0442985620501c847df5b76a9bf74af9be7adb5e887be34f5b6"]}]}, 0x4c0}], 0x3, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r17}}}], 0xc0, 0x20008801}, 0x80) syz_clone3(&(0x7f0000002280)={0x80000000, &(0x7f0000002100), &(0x7f0000002140)=0x0, &(0x7f0000002180), {0x41}, &(0x7f00000021c0)=""/12, 0xc, &(0x7f0000002200)=""/56, &(0x7f0000002240)=[r14, r13, r16, r4, r4, r4, r14, r14, r14, r13], 0xa, {r12}}, 0x58) sched_setscheduler(r18, 0x1, &(0x7f0000002300)=0xffffffff) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x4058534c, &(0x7f0000002340)={0x7, 0xfffffff8, 0x0, 0x10, 0xf, 0x12b7ef8d}) (async) dup2(r3, r0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000023c0)=0x7, 0x4) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000002400)={0x3, "25849dab0cd974ad33e4fd3c8a9d7c011f63645fd11a7117da8f660e8fe47c5a", 0x200, 0xe, 0x3, 0x4, 0x2}) (async) mount$nfs4(&(0x7f0000002480)='\x00', &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x238080, &(0x7f0000004600)={[{')^]'}, {'/dev/cpu/#/msr\x00'}, {}, {'&]'}, {'[\'#'}, {'\'..'}], [{@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, '/sys/kernel/debug/binder/transactions\x00'}}, {@fowner_eq}]}) 88.649864ms ago: executing program 8 (id=9239): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 7 (id=9240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) unshare(0x22020400) r1 = fanotify_init(0x2, 0x8000) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7ff8f155b0"], 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000040), 0x4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) openat$fb0(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000012300), 0x2, 0x0) read$FUSE(r6, &(0x7f00000123c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000014500)={0x10, 0x0, r7}, 0x10) ppoll(&(0x7f0000014e40)=[{r6, 0x104}], 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000013c0), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r2, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x810) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000429bd7000fcdbdf25010000000c000400040000000000000008000100000000000c00050001000000000000000c0002000500000000000000cdbe69192c0f48f0316d6b5abe4c"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) kernel console output (not intermixed with test programs): descriptors, different from the interface descriptor's value: 3 [ 2373.133133][T13265] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2373.133162][T13265] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2373.133184][T13265] usb 2-1: Manufacturer: syz [ 2373.229898][T13265] usb 2-1: config 0 descriptor?? [ 2375.055853][T19632] FAULT_INJECTION: forcing a failure. [ 2375.055853][T19632] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.055893][T19632] CPU: 0 UID: 0 PID: 19632 Comm: syz.8.8803 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2375.055923][T19632] Tainted: [L]=SOFTLOCKUP [ 2375.055931][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2375.055945][T19632] Call Trace: [ 2375.055955][T19632] [ 2375.055964][T19632] dump_stack_lvl+0xe8/0x150 [ 2375.056009][T19632] should_fail_ex+0x46b/0x600 [ 2375.056047][T19632] should_failslab+0xa8/0x100 [ 2375.056073][T19632] __kmalloc_noprof+0xdf/0x7b0 [ 2375.056093][T19632] ? kfree+0x4d/0x6c0 [ 2375.056123][T19632] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2375.056158][T19632] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2375.056195][T19632] ? tomoyo_path_number_perm+0x219/0x630 [ 2375.056218][T19632] tomoyo_path_number_perm+0x246/0x630 [ 2375.056245][T19632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2375.056272][T19632] ? __lock_acquire+0x6b5/0x2cf0 [ 2375.056329][T19632] ? __fget_files+0x2a/0x420 [ 2375.056363][T19632] ? __fget_files+0x2a/0x420 [ 2375.056387][T19632] ? __fget_files+0x3a6/0x420 [ 2375.056414][T19632] ? __fget_files+0x2a/0x420 [ 2375.056446][T19632] security_file_ioctl+0xc3/0x2a0 [ 2375.056475][T19632] __se_sys_ioctl+0x47/0x170 [ 2375.056498][T19632] do_syscall_64+0x14d/0xf80 [ 2375.056522][T19632] ? trace_irq_disable+0x3b/0x150 [ 2375.056547][T19632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.056580][T19632] ? clear_bhb_loop+0x40/0x90 [ 2375.056608][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.056631][T19632] RIP: 0033:0x7ff96315c819 [ 2375.056652][T19632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2375.056673][T19632] RSP: 002b:00007ff9613ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.056695][T19632] RAX: ffffffffffffffda RBX: 00007ff9633d5fa0 RCX: 00007ff96315c819 [ 2375.056712][T19632] RDX: 0000200000000000 RSI: 000000000000894b RDI: 0000000000000003 [ 2375.056727][T19632] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.056740][T19632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2375.056754][T19632] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2375.056788][T19632] [ 2375.070070][T19632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2375.706365][T25183] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2375.836569][T25183] usb 9-1: device descriptor read/64, error -71 [ 2375.976333][T13265] rc_core: IR keymap rc-hauppauge not found [ 2375.976358][T13265] Registered IR keymap rc-empty [ 2375.976531][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2375.996508][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.025055][T13265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2376.053810][T13265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input130 [ 2376.076391][T25183] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2376.079591][T19665] FAULT_INJECTION: forcing a failure. [ 2376.079591][T19665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.079628][T19665] CPU: 0 UID: 0 PID: 19665 Comm: syz.2.8812 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2376.079659][T19665] Tainted: [L]=SOFTLOCKUP [ 2376.079668][T19665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2376.079681][T19665] Call Trace: [ 2376.079690][T19665] [ 2376.079701][T19665] dump_stack_lvl+0xe8/0x150 [ 2376.079739][T19665] should_fail_ex+0x46b/0x600 [ 2376.079776][T19665] _copy_from_user+0x2d/0xb0 [ 2376.079798][T19665] ___sys_sendmsg+0x1c6/0x360 [ 2376.079832][T19665] ? __pfx____sys_sendmsg+0x10/0x10 [ 2376.079895][T19665] ? __fget_files+0x2a/0x420 [ 2376.079926][T19665] ? __fget_files+0x3a6/0x420 [ 2376.079965][T19665] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2376.079994][T19665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2376.080030][T19665] ? __pfx_ksys_write+0x10/0x10 [ 2376.080076][T19665] do_syscall_64+0x14d/0xf80 [ 2376.080102][T19665] ? trace_irq_disable+0x3b/0x150 [ 2376.080128][T19665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.080151][T19665] ? clear_bhb_loop+0x40/0x90 [ 2376.080178][T19665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.080201][T19665] RIP: 0033:0x7fcdcb43c819 [ 2376.080223][T19665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2376.080244][T19665] RSP: 002b:00007fcdc968e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2376.080268][T19665] RAX: ffffffffffffffda RBX: 00007fcdcb6b5fa0 RCX: 00007fcdcb43c819 [ 2376.080285][T19665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2376.080300][T19665] RBP: 00007fcdc968e090 R08: 0000000000000000 R09: 0000000000000000 [ 2376.080314][T19665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2376.080328][T19665] R13: 00007fcdcb6b6038 R14: 00007fcdcb6b5fa0 R15: 00007ffd8d5796c8 [ 2376.080371][T19665] [ 2376.085688][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.098974][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.117212][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.137774][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.157704][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.178476][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.196476][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.216624][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.236517][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.274201][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2376.275680][T19676] binder: 19675:19676 ioctl c0306201 0 returned -14 [ 2376.296338][T25183] usb 9-1: device descriptor read/64, error -71 [ 2376.302157][T13265] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2376.302182][T13265] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2376.379824][T13265] usb 2-1: USB disconnect, device number 65 [ 2376.409146][T25183] usb usb9-port1: attempt power cycle [ 2376.746374][T25183] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2376.917032][T25183] usb 9-1: device descriptor read/8, error -71 [ 2377.106682][T13265] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2377.256363][T13265] usb 2-1: Using ep0 maxpacket: 16 [ 2377.260107][T13265] usb 2-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 2377.260172][T13265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2377.260203][T13265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2377.260226][T13265] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2377.260251][T13265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2377.262119][T13265] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2377.262149][T13265] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2377.262172][T13265] usb 2-1: Manufacturer: syz [ 2377.346419][T25183] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2377.367073][T25183] usb 9-1: device descriptor read/8, error -71 [ 2377.385716][T13265] usb 2-1: config 0 descriptor?? [ 2377.486455][T25183] usb usb9-port1: unable to enumerate USB device [ 2377.761195][T13265] rc_core: IR keymap rc-hauppauge not found [ 2377.761221][T13265] Registered IR keymap rc-empty [ 2377.762159][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.776406][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.795411][T19732] binder: 19731:19732 ioctl c0306201 0 returned -14 [ 2377.807289][T13265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2377.811130][T13265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input131 [ 2377.845498][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.856567][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.876621][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.896462][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.916587][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.946434][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.966397][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2377.986497][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2378.006627][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2378.038661][T13265] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2378.079775][T13265] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2378.079804][T13265] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2378.120989][T13265] usb 2-1: USB disconnect, device number 66 [ 2378.134586][T28183] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2378.256373][T28183] usb 3-1: device descriptor read/64, error -71 [ 2378.497153][T28183] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2378.626392][T28183] usb 3-1: device descriptor read/64, error -71 [ 2378.891040][T28183] usb usb3-port1: attempt power cycle [ 2379.005884][T19789] FAULT_INJECTION: forcing a failure. [ 2379.005884][T19789] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.005926][T19789] CPU: 0 UID: 0 PID: 19789 Comm: syz.8.8834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2379.005958][T19789] Tainted: [L]=SOFTLOCKUP [ 2379.005966][T19789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2379.005979][T19789] Call Trace: [ 2379.005989][T19789] [ 2379.005999][T19789] dump_stack_lvl+0xe8/0x150 [ 2379.006039][T19789] should_fail_ex+0x46b/0x600 [ 2379.006077][T19789] should_failslab+0xa8/0x100 [ 2379.006102][T19789] __kmalloc_noprof+0xdf/0x7b0 [ 2379.006123][T19789] ? kfree+0x4d/0x6c0 [ 2379.006152][T19789] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2379.006192][T19789] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2379.006231][T19789] ? tomoyo_path_number_perm+0x219/0x630 [ 2379.006256][T19789] tomoyo_path_number_perm+0x246/0x630 [ 2379.006283][T19789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2379.006310][T19789] ? __lock_acquire+0x6b5/0x2cf0 [ 2379.006381][T19789] ? __fget_files+0x2a/0x420 [ 2379.006414][T19789] ? __fget_files+0x2a/0x420 [ 2379.006441][T19789] ? __fget_files+0x3a6/0x420 [ 2379.006468][T19789] ? __fget_files+0x2a/0x420 [ 2379.006500][T19789] security_file_ioctl+0xc3/0x2a0 [ 2379.006529][T19789] __se_sys_ioctl+0x47/0x170 [ 2379.006555][T19789] do_syscall_64+0x14d/0xf80 [ 2379.006578][T19789] ? trace_irq_disable+0x3b/0x150 [ 2379.006603][T19789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.006625][T19789] ? clear_bhb_loop+0x40/0x90 [ 2379.006653][T19789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.006676][T19789] RIP: 0033:0x7ff96315c819 [ 2379.006698][T19789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2379.006717][T19789] RSP: 002b:00007ff9613ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.006742][T19789] RAX: ffffffffffffffda RBX: 00007ff9633d5fa0 RCX: 00007ff96315c819 [ 2379.006758][T19789] RDX: 0000000000000000 RSI: 00000000c0303e03 RDI: 0000000000000004 [ 2379.006773][T19789] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2379.006787][T19789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2379.006801][T19789] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2379.006838][T19789] [ 2379.276287][T19789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2379.304934][T28183] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2379.319232][T28183] usb 3-1: device descriptor read/8, error -71 [ 2379.404886][T19796] binder: 19795:19796 ioctl c0306201 0 returned -14 [ 2379.433708][T19799] syz.6.8840 (19799): attempted to duplicate a private mapping with mremap. This is not supported. [ 2379.464924][T19799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2379.570751][T28183] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2379.589105][T28183] usb 3-1: device descriptor read/8, error -71 [ 2379.698656][T28183] usb usb3-port1: unable to enumerate USB device [ 2379.978477][T19825] FAULT_INJECTION: forcing a failure. [ 2379.978477][T19825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2379.978515][T19825] CPU: 0 UID: 0 PID: 19825 Comm: syz.8.8850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2379.978543][T19825] Tainted: [L]=SOFTLOCKUP [ 2379.978551][T19825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2379.978564][T19825] Call Trace: [ 2379.978573][T19825] [ 2379.978584][T19825] dump_stack_lvl+0xe8/0x150 [ 2379.978624][T19825] should_fail_ex+0x46b/0x600 [ 2379.978660][T19825] _copy_to_user+0x31/0xb0 [ 2379.978684][T19825] simple_read_from_buffer+0xe1/0x170 [ 2379.978719][T19825] proc_fail_nth_read+0x1be/0x230 [ 2379.978750][T19825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2379.978780][T19825] ? rw_verify_area+0x2ac/0x4e0 [ 2379.978811][T19825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2379.978840][T19825] vfs_read+0x212/0xa80 [ 2379.978881][T19825] ? __pfx_vfs_read+0x10/0x10 [ 2379.978918][T19825] ? kmem_cache_free+0x185/0x6b0 [ 2379.978939][T19825] ? do_sys_openat2+0x14c/0x200 [ 2379.978983][T19825] ksys_read+0x156/0x270 [ 2379.979019][T19825] ? __pfx_ksys_read+0x10/0x10 [ 2379.979063][T19825] do_syscall_64+0x14d/0xf80 [ 2379.979090][T19825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.979113][T19825] ? clear_bhb_loop+0x40/0x90 [ 2379.979140][T19825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.979162][T19825] RIP: 0033:0x7ff96311d04e [ 2379.979183][T19825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2379.979202][T19825] RSP: 002b:00007ff9613adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2379.979226][T19825] RAX: ffffffffffffffda RBX: 00007ff9613ae6c0 RCX: 00007ff96311d04e [ 2379.979243][T19825] RDX: 000000000000000f RSI: 00007ff9613ae0a0 RDI: 0000000000000004 [ 2379.979339][T19825] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2379.979353][T19825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2379.979367][T19825] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2379.979402][T19825] [ 2380.410126][T19844] FAULT_INJECTION: forcing a failure. [ 2380.410126][T19844] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.410152][T19844] CPU: 0 UID: 0 PID: 19844 Comm: syz.8.8857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2380.410171][T19844] Tainted: [L]=SOFTLOCKUP [ 2380.410176][T19844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2380.410184][T19844] Call Trace: [ 2380.410190][T19844] [ 2380.410196][T19844] dump_stack_lvl+0xe8/0x150 [ 2380.410219][T19844] should_fail_ex+0x46b/0x600 [ 2380.410241][T19844] should_failslab+0xa8/0x100 [ 2380.410255][T19844] __kmalloc_cache_noprof+0x84/0x690 [ 2380.410268][T19844] ? pagemap_read+0x284/0x7d0 [ 2380.410294][T19844] pagemap_read+0x284/0x7d0 [ 2380.410306][T19844] ? __lock_acquire+0x6b5/0x2cf0 [ 2380.410323][T19844] ? __pfx_pagemap_read+0x10/0x10 [ 2380.410340][T19844] ? rw_verify_area+0x2ac/0x4e0 [ 2380.410357][T19844] ? __pfx_pagemap_read+0x10/0x10 [ 2380.410371][T19844] vfs_read+0x212/0xa80 [ 2380.410394][T19844] ? __pfx_vfs_read+0x10/0x10 [ 2380.410413][T19844] ? __fget_files+0x2a/0x420 [ 2380.410431][T19844] ? __fget_files+0x2a/0x420 [ 2380.410445][T19844] ? __fget_files+0x3a6/0x420 [ 2380.410461][T19844] ? __fget_files+0x2a/0x420 [ 2380.410481][T19844] __x64_sys_pread64+0x19c/0x230 [ 2380.410502][T19844] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2380.410527][T19844] do_syscall_64+0x14d/0xf80 [ 2380.410551][T19844] ? trace_irq_disable+0x3b/0x150 [ 2380.410566][T19844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.410579][T19844] ? clear_bhb_loop+0x40/0x90 [ 2380.410594][T19844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.410606][T19844] RIP: 0033:0x7ff96315c819 [ 2380.410619][T19844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2380.410630][T19844] RSP: 002b:00007ff9613ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2380.410645][T19844] RAX: ffffffffffffffda RBX: 00007ff9633d5fa0 RCX: 00007ff96315c819 [ 2380.410654][T19844] RDX: 0000000000018ff8 RSI: 0000200000001240 RDI: 0000000000000003 [ 2380.410663][T19844] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2380.410671][T19844] R10: 0000200ffffe7ff8 R11: 0000000000000246 R12: 0000000000000001 [ 2380.410679][T19844] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2380.410697][T19844] [ 2380.536600][T28183] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2380.690760][T28183] usb 8-1: config 0 has an invalid interface number: 92 but max is 0 [ 2380.690782][T28183] usb 8-1: config 0 has no interface number 0 [ 2380.690810][T28183] usb 8-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2380.690823][T28183] usb 8-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2380.690842][T28183] usb 8-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 14641, setting to 64 [ 2380.690859][T28183] usb 8-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2380.690885][T28183] usb 8-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 2380.690900][T28183] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.703736][T28183] usb 8-1: config 0 descriptor?? [ 2380.704895][T19835] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2380.719809][T28183] em28xx 8-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 2380.719844][T28183] em28xx 8-1:0.92: DVB interface 92 found: bulk [ 2381.324195][T28183] em28xx 8-1:0.92: unknown em28xx chip ID (0) [ 2381.511173][T28183] em28xx 8-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 2381.511212][T28183] em28xx 8-1:0.92: board has no eeprom [ 2381.512532][T19872] FAULT_INJECTION: forcing a failure. [ 2381.512532][T19872] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.512569][T19872] CPU: 0 UID: 0 PID: 19872 Comm: syz.1.8864 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2381.512599][T19872] Tainted: [L]=SOFTLOCKUP [ 2381.512607][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2381.512620][T19872] Call Trace: [ 2381.512629][T19872] [ 2381.512638][T19872] dump_stack_lvl+0xe8/0x150 [ 2381.512676][T19872] should_fail_ex+0x46b/0x600 [ 2381.512713][T19872] should_failslab+0xa8/0x100 [ 2381.512740][T19872] __kmalloc_noprof+0xdf/0x7b0 [ 2381.512760][T19872] ? kfree+0x4d/0x6c0 [ 2381.512787][T19872] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2381.512822][T19872] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2381.512862][T19872] ? tomoyo_path_number_perm+0x219/0x630 [ 2381.512887][T19872] tomoyo_path_number_perm+0x246/0x630 [ 2381.512914][T19872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2381.512941][T19872] ? __lock_acquire+0x6b5/0x2cf0 [ 2381.513001][T19872] ? __fget_files+0x2a/0x420 [ 2381.513034][T19872] ? __fget_files+0x2a/0x420 [ 2381.513062][T19872] ? __fget_files+0x3a6/0x420 [ 2381.513089][T19872] ? __fget_files+0x2a/0x420 [ 2381.513123][T19872] security_file_ioctl+0xc3/0x2a0 [ 2381.513151][T19872] __se_sys_ioctl+0x47/0x170 [ 2381.513178][T19872] do_syscall_64+0x14d/0xf80 [ 2381.513203][T19872] ? trace_irq_disable+0x3b/0x150 [ 2381.513230][T19872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2381.513253][T19872] ? clear_bhb_loop+0x40/0x90 [ 2381.513279][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2381.513301][T19872] RIP: 0033:0x7f70acd0c819 [ 2381.513323][T19872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2381.513342][T19872] RSP: 002b:00007f70aaf66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2381.513366][T19872] RAX: ffffffffffffffda RBX: 00007f70acf85fa0 RCX: 00007f70acd0c819 [ 2381.513382][T19872] RDX: 0000200000000380 RSI: 00000000c038563c RDI: 0000000000000003 [ 2381.513397][T19872] RBP: 00007f70aaf66090 R08: 0000000000000000 R09: 0000000000000000 [ 2381.513412][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2381.513425][T19872] R13: 00007f70acf86038 R14: 00007f70acf85fa0 R15: 00007ffc5d7d3508 [ 2381.513461][T19872] [ 2381.513471][T19872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2381.566351][T28183] em28xx 8-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 2381.566387][T28183] em28xx 8-1:0.92: dvb set to bulk mode. [ 2381.571683][T13265] em28xx 8-1:0.92: Remote control support is not available for this card. [ 2381.622010][T28183] usb 8-1: USB disconnect, device number 90 [ 2381.624282][T28183] em28xx 8-1:0.92: Disconnecting em28xx [ 2381.624308][T28183] em28xx 8-1:0.92: Closing input extension [ 2381.911170][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8869'. [ 2381.981906][T28183] em28xx 8-1:0.92: Freeing device [ 2382.126462][T25183] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 2382.251912][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8875'. [ 2382.251930][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8875'. [ 2382.289732][T25183] usb 7-1: not running at top speed; connect to a high speed hub [ 2382.292211][T25183] usb 7-1: config 4 has an invalid interface number: 46 but max is 3 [ 2382.292251][T25183] usb 7-1: config 4 has an invalid interface number: 32 but max is 3 [ 2382.292272][T25183] usb 7-1: config 4 has an invalid interface number: 190 but max is 3 [ 2382.292293][T25183] usb 7-1: config 4 has an invalid interface number: 207 but max is 3 [ 2382.292318][T25183] usb 7-1: config 4 has no interface number 0 [ 2382.292335][T25183] usb 7-1: config 4 has no interface number 1 [ 2382.292352][T25183] usb 7-1: config 4 has no interface number 2 [ 2382.292368][T25183] usb 7-1: config 4 has no interface number 3 [ 2382.292470][T25183] usb 7-1: config 4 interface 32 altsetting 7 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 2382.292496][T25183] usb 7-1: config 4 interface 32 altsetting 7 endpoint 0x8E has an invalid bInterval 121, changing to 4 [ 2382.292525][T25183] usb 7-1: config 4 interface 32 altsetting 7 endpoint 0x8E has invalid maxpacket 26925, setting to 1023 [ 2382.292554][T25183] usb 7-1: config 4 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2382.292575][T25183] usb 7-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 2382.292600][T25183] usb 7-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 2382.292624][T25183] usb 7-1: config 4 interface 32 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2382.292666][T25183] usb 7-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 2382.292690][T25183] usb 7-1: config 4 interface 190 altsetting 15 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2382.292716][T25183] usb 7-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 2382.292739][T25183] usb 7-1: config 4 interface 190 altsetting 15 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2382.292786][T25183] usb 7-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2382.292812][T25183] usb 7-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 2382.292834][T25183] usb 7-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2382.292858][T25183] usb 7-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2382.292882][T25183] usb 7-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 2382.292903][T25183] usb 7-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2382.292921][T25183] usb 7-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2382.292937][T25183] usb 7-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 2382.292954][T25183] usb 7-1: config 4 interface 32 has no altsetting 0 [ 2382.292968][T25183] usb 7-1: config 4 interface 190 has no altsetting 0 [ 2382.292983][T25183] usb 7-1: config 4 interface 207 has no altsetting 0 [ 2382.427674][T28183] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2382.530171][T25183] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01fe, bcdDevice=97.16 [ 2382.530206][T25183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.530228][T25183] usb 7-1: Product: И [ 2382.530245][T25183] usb 7-1: Manufacturer: ࡥ肗쪖笠囻㷎쏑됞㑒೪嗛쒋突뙆큨嶛ⓡꅕ⬔᱌먌ꃪ㒫鷁嚪툢쬒ể憃㎽붢航␔흗⻐㳽乙ꄤ몡 [ 2382.530270][T25183] usb 7-1: SerialNumber: К [ 2382.605431][T28183] usb 8-1: device descriptor read/64, error -71 [ 2383.036426][T28183] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2383.062920][T25183] ftdi_sio 7-1:4.46: FTDI USB Serial Device converter detected [ 2383.064599][T25183] ftdi_sio ttyUSB0: unknown device type: 0x9716 [ 2383.091766][T25183] ftdi_sio 7-1:4.32: FTDI USB Serial Device converter detected [ 2383.093909][T25183] ftdi_sio ttyUSB1: unknown device type: 0x9716 [ 2383.150305][T25183] ftdi_sio 7-1:4.190: FTDI USB Serial Device converter detected [ 2383.152465][T25183] ftdi_sio ttyUSB2: unknown device type: 0x9716 [ 2383.166483][T28183] usb 8-1: device descriptor read/64, error -71 [ 2383.191205][T25183] ftdi_sio 7-1:4.207: FTDI USB Serial Device converter detected [ 2383.193354][T25183] ftdi_sio ttyUSB3: unknown device type: 0x9716 [ 2383.240165][T25183] usb 7-1: USB disconnect, device number 97 [ 2383.267114][T25183] ftdi_sio 7-1:4.46: device disconnected [ 2383.274430][T25183] ftdi_sio 7-1:4.32: device disconnected [ 2383.281206][T28183] usb usb8-port1: attempt power cycle [ 2383.305192][T25183] ftdi_sio 7-1:4.190: device disconnected [ 2383.336899][T25183] ftdi_sio 7-1:4.207: device disconnected [ 2383.656448][T28183] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2383.677545][T28183] usb 8-1: device descriptor read/8, error -71 [ 2383.892103][T20017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8887'. [ 2384.022682][T20012] syz.1.8888 (20012) used greatest stack depth: 16864 bytes left [ 2384.029264][T28183] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 2384.048585][T28183] usb 8-1: device descriptor read/8, error -71 [ 2384.170854][T28183] usb usb8-port1: unable to enumerate USB device [ 2384.386481][T28183] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2384.559325][T28183] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 2384.559359][T28183] usb 2-1: config 0 has no interface number 0 [ 2384.559416][T28183] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2384.559449][T28183] usb 2-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2384.559478][T28183] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 14641, setting to 64 [ 2384.559508][T28183] usb 2-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2384.559555][T28183] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 2384.559580][T28183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.583118][T28183] usb 2-1: config 0 descriptor?? [ 2384.585847][T20025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2384.624865][T28183] em28xx 2-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 2384.624905][T28183] em28xx 2-1:0.92: DVB interface 92 found: bulk [ 2384.962175][T20048] FAULT_INJECTION: forcing a failure. [ 2384.962175][T20048] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.962216][T20048] CPU: 1 UID: 0 PID: 20048 Comm: syz.8.8900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2384.962247][T20048] Tainted: [L]=SOFTLOCKUP [ 2384.962261][T20048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2384.962275][T20048] Call Trace: [ 2384.962284][T20048] [ 2384.962295][T20048] dump_stack_lvl+0xe8/0x150 [ 2384.962336][T20048] should_fail_ex+0x46b/0x600 [ 2384.962374][T20048] should_failslab+0xa8/0x100 [ 2384.962401][T20048] __kmalloc_noprof+0xdf/0x7b0 [ 2384.962423][T20048] ? kfree+0x4d/0x6c0 [ 2384.962463][T20048] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2384.962500][T20048] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2384.962542][T20048] ? tomoyo_path_number_perm+0x219/0x630 [ 2384.962566][T20048] tomoyo_path_number_perm+0x246/0x630 [ 2384.962594][T20048] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2384.962621][T20048] ? __lock_acquire+0x6b5/0x2cf0 [ 2384.962684][T20048] ? __fget_files+0x2a/0x420 [ 2384.962718][T20048] ? __fget_files+0x2a/0x420 [ 2384.962746][T20048] ? __fget_files+0x3a6/0x420 [ 2384.962773][T20048] ? __fget_files+0x2a/0x420 [ 2384.962808][T20048] security_file_ioctl+0xc3/0x2a0 [ 2384.962836][T20048] __se_sys_ioctl+0x47/0x170 [ 2384.962890][T20048] do_syscall_64+0x14d/0xf80 [ 2384.962916][T20048] ? trace_irq_disable+0x3b/0x150 [ 2384.962943][T20048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.962986][T20048] ? clear_bhb_loop+0x40/0x90 [ 2384.963015][T20048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.963038][T20048] RIP: 0033:0x7ff96315c819 [ 2384.963059][T20048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2384.963078][T20048] RSP: 002b:00007ff96138d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2384.963103][T20048] RAX: ffffffffffffffda RBX: 00007ff9633d6090 RCX: 00007ff96315c819 [ 2384.963119][T20048] RDX: 00002000000002c0 RSI: 0000000080044940 RDI: 0000000000000003 [ 2384.963134][T20048] RBP: 00007ff96138d090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.963148][T20048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.963161][T20048] R13: 00007ff9633d6128 R14: 00007ff9633d6090 R15: 00007ffee66c6cb8 [ 2384.963197][T20048] [ 2384.963272][T20048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2385.243880][T20053] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8902'. [ 2385.380467][T20057] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8903'. [ 2385.707931][T28183] em28xx 2-1:0.92: unknown em28xx chip ID (0) [ 2385.831714][T28183] em28xx 2-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 2385.831751][T28183] em28xx 2-1:0.92: board has no eeprom [ 2385.896661][T28183] em28xx 2-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 2385.896684][T28183] em28xx 2-1:0.92: dvb set to bulk mode. [ 2385.897855][T25112] em28xx 2-1:0.92: Remote control support is not available for this card. [ 2386.327122][T20104] FAULT_INJECTION: forcing a failure. [ 2386.327122][T20104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.327163][T20104] CPU: 1 UID: 0 PID: 20104 Comm: syz.8.8914 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2386.327194][T20104] Tainted: [L]=SOFTLOCKUP [ 2386.327202][T20104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2386.327217][T20104] Call Trace: [ 2386.327226][T20104] [ 2386.327236][T20104] dump_stack_lvl+0xe8/0x150 [ 2386.327275][T20104] should_fail_ex+0x46b/0x600 [ 2386.327312][T20104] _copy_from_user+0x2d/0xb0 [ 2386.327336][T20104] ___sys_sendmsg+0x1c6/0x360 [ 2386.327370][T20104] ? __pfx____sys_sendmsg+0x10/0x10 [ 2386.327435][T20104] ? __fget_files+0x2a/0x420 [ 2386.327470][T20104] ? __fget_files+0x3a6/0x420 [ 2386.327511][T20104] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2386.327549][T20104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2386.327586][T20104] ? __pfx_ksys_write+0x10/0x10 [ 2386.327633][T20104] do_syscall_64+0x14d/0xf80 [ 2386.327658][T20104] ? trace_irq_disable+0x3b/0x150 [ 2386.327685][T20104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.327708][T20104] ? clear_bhb_loop+0x40/0x90 [ 2386.327736][T20104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.327759][T20104] RIP: 0033:0x7ff96315c819 [ 2386.327780][T20104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2386.327799][T20104] RSP: 002b:00007ff9613ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2386.327824][T20104] RAX: ffffffffffffffda RBX: 00007ff9633d5fa0 RCX: 00007ff96315c819 [ 2386.327840][T20104] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2386.327855][T20104] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.327870][T20104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.327884][T20104] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2386.327917][T20104] [ 2386.491039][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8915'. [ 2386.613312][T20108] FAULT_INJECTION: forcing a failure. [ 2386.613312][T20108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.613352][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.8.8917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2386.613384][T20108] Tainted: [L]=SOFTLOCKUP [ 2386.613393][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2386.613407][T20108] Call Trace: [ 2386.613416][T20108] [ 2386.613426][T20108] dump_stack_lvl+0xe8/0x150 [ 2386.613474][T20108] should_fail_ex+0x46b/0x600 [ 2386.613511][T20108] _copy_from_user+0x2d/0xb0 [ 2386.613535][T20108] ucma_write+0x166/0x2f0 [ 2386.613688][T20108] ? __pfx_ucma_write+0x10/0x10 [ 2386.613722][T20108] ? rw_verify_area+0x25b/0x4e0 [ 2386.613762][T20108] ? __pfx_ucma_write+0x10/0x10 [ 2386.613794][T20108] vfs_write+0x2a3/0xba0 [ 2386.613837][T20108] ? __pfx_vfs_write+0x10/0x10 [ 2386.613872][T20108] ? __fget_files+0x2a/0x420 [ 2386.613905][T20108] ? __fget_files+0x2a/0x420 [ 2386.613932][T20108] ? __fget_files+0x3a6/0x420 [ 2386.613960][T20108] ? __fget_files+0x2a/0x420 [ 2386.613998][T20108] ksys_write+0x156/0x270 [ 2386.614035][T20108] ? __pfx_ksys_write+0x10/0x10 [ 2386.614081][T20108] do_syscall_64+0x14d/0xf80 [ 2386.614106][T20108] ? trace_irq_disable+0x3b/0x150 [ 2386.614134][T20108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.614156][T20108] ? clear_bhb_loop+0x40/0x90 [ 2386.614185][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.614207][T20108] RIP: 0033:0x7ff96315c819 [ 2386.614227][T20108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2386.614246][T20108] RSP: 002b:00007ff9613ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2386.614270][T20108] RAX: ffffffffffffffda RBX: 00007ff9633d5fa0 RCX: 00007ff96315c819 [ 2386.614287][T20108] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000003 [ 2386.614302][T20108] RBP: 00007ff9613ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.614316][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.614329][T20108] R13: 00007ff9633d6038 R14: 00007ff9633d5fa0 R15: 00007ffee66c6cb8 [ 2386.614365][T20108] [ 2387.214764][T28183] usb 2-1: USB disconnect, device number 67 [ 2387.228117][T28183] em28xx 2-1:0.92: Disconnecting em28xx [ 2387.228151][T28183] em28xx 2-1:0.92: Closing input extension [ 2387.504311][T28183] em28xx 2-1:0.92: Freeing device [ 2387.939149][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8926'. [ 2389.176333][T28183] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2389.207918][T25112] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2389.368457][T25112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2389.368497][T25112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2389.368542][T25112] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2389.368569][T25112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.426008][T28183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2389.426044][T28183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2389.426088][T28183] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2389.426114][T28183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.494345][T25112] usb 3-1: config 0 descriptor?? [ 2389.504893][T28183] usb 7-1: config 0 descriptor?? [ 2389.811064][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8939'. [ 2389.961434][T28183] hid_parser_main: 4 callbacks suppressed [ 2389.961463][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961556][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961586][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961611][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961636][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961722][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2389.961750][T28183] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 2390.054551][T28183] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2390.055520][T25112] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2390.055554][T25112] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2390.055580][T25112] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2390.095084][T25112] cp2112 0003:10C4:EA90.0045: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2390.155735][T28183] cp2112 0003:10C4:EA90.0044: Part Number: 0x00 Device Version: 0x00 [ 2390.220134][T20202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8944'. [ 2390.239747][T25112] cp2112 0003:10C4:EA90.0045: Part Number: 0x00 Device Version: 0x00 [ 2390.746617][T11902] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2390.927313][T11902] usb 8-1: Using ep0 maxpacket: 8 [ 2390.930055][T11902] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2390.930084][T11902] usb 8-1: config 179 has no interface number 0 [ 2390.930153][T11902] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2390.930184][T11902] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2390.930215][T11902] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2390.930243][T11902] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2390.930271][T11902] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2390.930300][T11902] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2390.930337][T11902] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2390.930362][T11902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.070017][ T4306] usb 7-1: USB disconnect, device number 98 [ 2391.132998][T25183] usb 3-1: USB disconnect, device number 122 [ 2391.220578][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2391.236914][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2391.250009][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2391.264188][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2391.265557][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2391.573078][T11902] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input132 [ 2391.692727][ T5148] input input132: unable to receive magic message: -71 [ 2391.836473][ T5148] input input132: unable to receive magic message: -71 [ 2391.942866][ T5148] input input132: unable to receive magic message: -71 [ 2392.192609][ T5148] input input132: unable to receive magic message: -71 [ 2392.437077][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8953'. [ 2392.625800][ T5148] input input132: unable to receive magic message: -71 [ 2392.809705][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 2392.892632][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2392.892899][T11902] usb 8-1: USB disconnect, device number 95 [ 2393.198176][T20277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8952'. [ 2393.198203][T20277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8952'. [ 2393.209488][T20280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8952'. [ 2393.209512][T20280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8952'. [ 2393.611474][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 30 seconds [ 2393.614564][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 30 seconds [ 2393.614592][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 30 seconds [ 2393.614610][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 30 seconds [ 2393.629724][T11677] Bluetooth: hci4: command tx timeout [ 2394.315404][ T1345] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.486405][T28183] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2394.686645][T28183] usb 2-1: Using ep0 maxpacket: 8 [ 2394.689001][T28183] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2394.689032][T28183] usb 2-1: config 179 has no interface number 0 [ 2394.689082][T28183] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2394.689112][T28183] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2394.689151][T28183] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2394.689180][T28183] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2394.689208][T28183] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2394.689236][T28183] usb 2-1: config 179 interface 65 has no altsetting 0 [ 2394.689273][T28183] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2394.689296][T28183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2394.709799][ T1345] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.851724][T28183] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input133 [ 2394.926616][ T5148] input input133: unable to receive magic message: -110 [ 2394.976400][T11902] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2395.031737][ T5148] input input133: unable to receive magic message: -32 [ 2395.128282][ T5148] input input133: unable to receive magic message: -32 [ 2395.135402][T11902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2395.135438][T11902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2395.135477][T11902] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2395.135500][T11902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.166150][T11902] usb 3-1: config 0 descriptor?? [ 2395.195781][T25183] usb 2-1: USB disconnect, device number 68 [ 2395.195875][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2395.195950][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2395.707387][T11677] Bluetooth: hci4: command tx timeout [ 2395.736029][T11902] hid_parser_main: 4 callbacks suppressed [ 2395.736056][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.736087][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.736124][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.736152][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.737568][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.737600][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.737626][T11902] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2395.807024][T11902] cp2112 0003:10C4:EA90.0046: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2395.912143][T11902] cp2112 0003:10C4:EA90.0046: Part Number: 0x00 Device Version: 0x00 [ 2396.206011][ T1345] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.235755][T20416] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8966'. [ 2396.626557][T13264] usb 7-1: new low-speed USB device number 99 using dummy_hcd [ 2396.714376][ T1345] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.734659][T28183] usb 3-1: USB disconnect, device number 123 [ 2396.778764][T13264] usb 7-1: No LPM exit latency info found, disabling LPM. [ 2396.780100][T13264] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 2396.780136][T13264] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 2396.780164][T13264] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2397.010041][T20230] chnl_net:caif_netlink_parms(): no params data found [ 2397.499037][ T3369] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2397.682491][ T3369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2397.682588][ T3369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2397.682630][ T3369] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2397.682656][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.727323][T20535] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2397.786412][T11677] Bluetooth: hci4: command tx timeout [ 2397.794409][ T3369] usb 2-1: config 0 descriptor?? [ 2398.115416][T20230] bridge0: port 1(bridge_slave_0) entered blocking state [ 2398.115535][T20230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2398.115765][T20230] bridge_slave_0: entered allmulticast mode [ 2398.144210][T20230] bridge_slave_0: entered promiscuous mode [ 2398.156512][T13265] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2398.177256][T20230] bridge0: port 2(bridge_slave_1) entered blocking state [ 2398.177406][T20230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2398.177720][T20230] bridge_slave_1: entered allmulticast mode [ 2398.181617][T20230] bridge_slave_1: entered promiscuous mode [ 2398.266795][T20569] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8976'. [ 2398.321557][ T3369] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 2398.321600][ T3369] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 2398.322785][ T3369] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 2398.334374][T13265] usb 8-1: Using ep0 maxpacket: 16 [ 2398.359976][T13265] usb 8-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 2398.360023][T13265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2398.360086][T13265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2398.360108][T13265] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2398.360121][T13265] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2398.373108][T13265] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2398.373194][T13265] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2398.373215][T13265] usb 8-1: Manufacturer: syz [ 2398.437578][T13265] usb 8-1: config 0 descriptor?? [ 2398.449700][ T3369] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2398.537362][ T3369] cp2112 0003:10C4:EA90.0047: Part Number: 0x00 Device Version: 0x00 [ 2398.748846][ T3369] cp2112 0003:10C4:EA90.0047: error requesting SMBus config [ 2398.789952][T13265] rc_core: IR keymap rc-hauppauge not found [ 2398.789969][T13265] Registered IR keymap rc-empty [ 2398.790114][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.790181][ T3369] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -32 [ 2398.813827][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.839356][T13265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2398.845906][T20230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2398.878676][T13265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input134 [ 2398.884695][T20230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2398.904740][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.920111][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.936769][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.957709][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2398.965485][ T1345] bridge_slave_1: left allmulticast mode [ 2398.965517][ T1345] bridge_slave_1: left promiscuous mode [ 2398.991129][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.005389][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 2399.007620][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.026907][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.046905][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.066749][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.096780][T13265] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2399.118176][ T1345] bridge_slave_0: left allmulticast mode [ 2399.118211][ T1345] bridge_slave_0: left promiscuous mode [ 2399.118491][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 2399.132812][T13265] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2399.133859][T13265] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2399.220363][T13265] usb 8-1: USB disconnect, device number 96 [ 2399.333720][T13264] usb 7-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.40 [ 2399.333757][T13264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.333779][T13264] usb 7-1: Product: 㐉 [ 2399.333794][T13264] usb 7-1: Manufacturer: Т [ 2399.447265][T13264] usb 7-1: can't set config #1, error -71 [ 2399.459555][T13264] usb 7-1: USB disconnect, device number 99 [ 2399.474182][T20626] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8978'. [ 2399.866331][T11677] Bluetooth: hci4: command tx timeout [ 2400.056463][T20653] FAULT_INJECTION: forcing a failure. [ 2400.056463][T20653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2400.056503][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.6.8982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2400.056533][T20653] Tainted: [L]=SOFTLOCKUP [ 2400.056542][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2400.056555][T20653] Call Trace: [ 2400.056564][T20653] [ 2400.056574][T20653] dump_stack_lvl+0xe8/0x150 [ 2400.056611][T20653] should_fail_ex+0x46b/0x600 [ 2400.056647][T20653] _copy_from_user+0x2d/0xb0 [ 2400.056668][T20653] snd_seq_oss_write+0x14b/0x8e0 [ 2400.056814][T20653] ? get_pid_task+0x20/0x1f0 [ 2400.056842][T20653] ? __lock_acquire+0x6b5/0x2cf0 [ 2400.056865][T20653] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 2400.056894][T20653] ? __lock_acquire+0x6b5/0x2cf0 [ 2400.056928][T20653] odev_write+0x5d/0x80 [ 2400.056955][T20653] ? __pfx_odev_write+0x10/0x10 [ 2400.056985][T20653] vfs_write+0x2a3/0xba0 [ 2400.057030][T20653] ? __pfx_vfs_write+0x10/0x10 [ 2400.057066][T20653] ? __fget_files+0x2a/0x420 [ 2400.057097][T20653] ? __fget_files+0x2a/0x420 [ 2400.057124][T20653] ? __fget_files+0x3a6/0x420 [ 2400.057152][T20653] ? __fget_files+0x2a/0x420 [ 2400.057189][T20653] ksys_write+0x156/0x270 [ 2400.057225][T20653] ? __pfx_ksys_write+0x10/0x10 [ 2400.057270][T20653] do_syscall_64+0x14d/0xf80 [ 2400.057295][T20653] ? trace_irq_disable+0x3b/0x150 [ 2400.057335][T20653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.057359][T20653] ? clear_bhb_loop+0x40/0x90 [ 2400.057387][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.057410][T20653] RIP: 0033:0x7f85e46ac819 [ 2400.057431][T20653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2400.057450][T20653] RSP: 002b:00007f85e2906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2400.057475][T20653] RAX: ffffffffffffffda RBX: 00007f85e4925fa0 RCX: 00007f85e46ac819 [ 2400.057492][T20653] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2400.057506][T20653] RBP: 00007f85e2906090 R08: 0000000000000000 R09: 0000000000000000 [ 2400.057520][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.057533][T20653] R13: 00007f85e4926038 R14: 00007f85e4925fa0 R15: 00007ffd1891f5c8 [ 2400.057568][T20653] [ 2400.141347][T13264] usb 2-1: USB disconnect, device number 69 [ 2401.835515][ T1345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2401.929447][ T1345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2401.969861][ T1345] bond0 (unregistering): Released all slaves [ 2402.338436][T20230] team0: Port device team_slave_0 added [ 2402.482239][T20230] team0: Port device team_slave_1 added [ 2403.146418][T25183] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2403.219947][T20230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2403.219968][T20230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2403.219996][T20230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2403.303327][T20230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2403.303347][T20230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2403.303378][T20230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2403.317479][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2403.317516][T25183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2403.317559][T25183] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2403.317583][T25183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.347501][T25183] usb 3-1: config 0 descriptor?? [ 2403.871372][T25183] hid_parser_main: 4 callbacks suppressed [ 2403.871402][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871435][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871461][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871489][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871515][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871541][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.871567][T25183] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2403.975613][T25183] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2404.029626][T25183] cp2112 0003:10C4:EA90.0048: Part Number: 0x00 Device Version: 0x00 [ 2404.317888][T20230] hsr_slave_0: entered promiscuous mode [ 2404.319469][T20230] hsr_slave_1: entered promiscuous mode [ 2404.320389][T20230] debugfs: 'hsr0' already exists in 'hsr' [ 2404.320415][T20230] Cannot create hsr debugfs directory [ 2404.874393][T13265] usb 3-1: USB disconnect, device number 124 [ 2405.849242][T20941] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 2406.290415][T20974] FAULT_INJECTION: forcing a failure. [ 2406.290415][T20974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2406.290456][T20974] CPU: 0 UID: 0 PID: 20974 Comm: syz.2.9001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2406.290486][T20974] Tainted: [L]=SOFTLOCKUP [ 2406.290493][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2406.290507][T20974] Call Trace: [ 2406.290515][T20974] [ 2406.290525][T20974] dump_stack_lvl+0xe8/0x150 [ 2406.290566][T20974] should_fail_ex+0x46b/0x600 [ 2406.290601][T20974] _copy_from_user+0x2d/0xb0 [ 2406.290624][T20974] __x64_sys_epoll_ctl+0x128/0x1b0 [ 2406.290722][T20974] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2406.290761][T20974] do_syscall_64+0x14d/0xf80 [ 2406.290784][T20974] ? trace_irq_disable+0x3b/0x150 [ 2406.290811][T20974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.290835][T20974] ? clear_bhb_loop+0x40/0x90 [ 2406.290859][T20974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.290879][T20974] RIP: 0033:0x7fcdcb43c819 [ 2406.290900][T20974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2406.290918][T20974] RSP: 002b:00007fcdc968e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2406.290940][T20974] RAX: ffffffffffffffda RBX: 00007fcdcb6b5fa0 RCX: 00007fcdcb43c819 [ 2406.290954][T20974] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000005 [ 2406.290967][T20974] RBP: 00007fcdc968e090 R08: 0000000000000000 R09: 0000000000000000 [ 2406.290980][T20974] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2406.290993][T20974] R13: 00007fcdcb6b6038 R14: 00007fcdcb6b5fa0 R15: 00007ffd8d5796c8 [ 2406.291025][T20974] [ 2406.354942][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.355014][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.358560][ T1324] lec:lec_start_xmit: lec0:No lecd attached [ 2406.596735][T13265] usb 8-1: new full-speed USB device number 97 using dummy_hcd [ 2406.751411][T13265] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2406.752299][T13265] usb 8-1: not running at top speed; connect to a high speed hub [ 2406.755043][T13265] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 2406.791082][T13265] usb 8-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2406.791117][T13265] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.791140][T13265] usb 8-1: Product: syz [ 2406.791157][T13265] usb 8-1: Manufacturer: syz [ 2406.791173][T13265] usb 8-1: SerialNumber: syz [ 2407.901486][ T1345] hsr_slave_0: left promiscuous mode [ 2407.976391][ T1345] hsr_slave_1: left promiscuous mode [ 2407.977650][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2407.977677][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2408.128021][T20978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.159288][T20978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.161268][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2408.161297][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2408.250518][T11902] usb 8-1: USB disconnect, device number 97 [ 2408.251069][ T1345] veth1_macvtap: left promiscuous mode [ 2408.251200][ T1345] veth0_macvtap: left promiscuous mode [ 2408.251492][ T1345] veth1_vlan: left promiscuous mode [ 2408.251692][ T1345] veth0_vlan: left promiscuous mode [ 2408.309603][T15072] udevd[15072]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2410.450019][ T1345] team0 (unregistering): Port device team_slave_1 removed [ 2410.497623][ T1345] team0 (unregistering): Port device team_slave_0 removed [ 2410.786328][T25183] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 2410.939986][T25183] usb 3-1: not running at top speed; connect to a high speed hub [ 2410.942622][T25183] usb 3-1: config 4 has an invalid interface number: 46 but max is 3 [ 2410.942652][T25183] usb 3-1: config 4 has an invalid interface number: 32 but max is 3 [ 2410.942675][T25183] usb 3-1: config 4 has an invalid interface number: 190 but max is 3 [ 2410.942696][T25183] usb 3-1: config 4 has an invalid interface number: 207 but max is 3 [ 2410.942720][T25183] usb 3-1: config 4 has no interface number 0 [ 2410.942737][T25183] usb 3-1: config 4 has no interface number 1 [ 2410.942753][T25183] usb 3-1: config 4 has no interface number 2 [ 2410.942770][T25183] usb 3-1: config 4 has no interface number 3 [ 2410.942881][T25183] usb 3-1: config 4 interface 32 altsetting 7 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 2410.942908][T25183] usb 3-1: config 4 interface 32 altsetting 7 endpoint 0x8E has an invalid bInterval 121, changing to 4 [ 2410.942936][T25183] usb 3-1: config 4 interface 32 altsetting 7 endpoint 0x8E has invalid maxpacket 26925, setting to 1023 [ 2410.942964][T25183] usb 3-1: config 4 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2410.942987][T25183] usb 3-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 2410.943010][T25183] usb 3-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 2410.943033][T25183] usb 3-1: config 4 interface 32 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2410.943077][T25183] usb 3-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 2410.943100][T25183] usb 3-1: config 4 interface 190 altsetting 15 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2410.943137][T25183] usb 3-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 2410.943162][T25183] usb 3-1: config 4 interface 190 altsetting 15 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2410.943219][T25183] usb 3-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2410.943245][T25183] usb 3-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 2410.943269][T25183] usb 3-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2410.943293][T25183] usb 3-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2410.943318][T25183] usb 3-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 2410.943345][T25183] usb 3-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2410.943366][T25183] usb 3-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2410.943390][T25183] usb 3-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 2410.943413][T25183] usb 3-1: config 4 interface 32 has no altsetting 0 [ 2410.943429][T25183] usb 3-1: config 4 interface 190 has no altsetting 0 [ 2410.943444][T25183] usb 3-1: config 4 interface 207 has no altsetting 0 [ 2410.986672][T25183] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01fe, bcdDevice=97.16 [ 2410.986708][T25183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.986731][T25183] usb 3-1: Product: И [ 2410.986747][T25183] usb 3-1: Manufacturer: ࡥ肗쪖笠囻㷎쏑됞㑒೪嗛쒋突뙆큨嶛ⓡꅕ⬔᱌먌ꃪ㒫鷁嚪툢쬒ể憃㎽붢航␔흗⻐㳽乙ꄤ몡 [ 2410.986772][T25183] usb 3-1: SerialNumber: К [ 2411.168201][T13264] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2411.574525][T13264] usb 7-1: config 0 has an invalid interface number: 92 but max is 0 [ 2411.574559][T13264] usb 7-1: config 0 has no interface number 0 [ 2411.574608][T13264] usb 7-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2411.574632][T13264] usb 7-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2411.574660][T13264] usb 7-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 14641, setting to 64 [ 2411.574690][T13264] usb 7-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2411.574736][T13264] usb 7-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 2411.574763][T13264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.587715][T13265] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2411.616792][T13264] usb 7-1: config 0 descriptor?? [ 2411.617785][T21067] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2411.623401][T13264] em28xx 7-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 2411.623432][T13264] em28xx 7-1:0.92: DVB interface 92 found: bulk [ 2411.809740][T13265] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 2411.809774][T13265] usb 2-1: config 0 has no interface number 0 [ 2411.809822][T13265] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2411.809903][T13265] usb 2-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2411.809932][T13265] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 14641, setting to 64 [ 2411.809956][T13265] usb 2-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2411.810061][T13265] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 2411.810088][T13265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.833963][T13265] usb 2-1: config 0 descriptor?? [ 2411.835306][T21103] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2411.857734][T13265] em28xx 2-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 2411.857827][T13265] em28xx 2-1:0.92: DVB interface 92 found: bulk [ 2411.969748][T13264] em28xx 7-1:0.92: unknown em28xx chip ID (0) [ 2411.993726][T25183] ftdi_sio 3-1:4.46: FTDI USB Serial Device converter detected [ 2411.995948][T25183] ftdi_sio ttyUSB0: unknown device type: 0x9716 [ 2412.060843][T25183] ftdi_sio 3-1:4.32: FTDI USB Serial Device converter detected [ 2412.063117][T25183] ftdi_sio ttyUSB1: unknown device type: 0x9716 [ 2412.106457][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 2412.106495][ C0] lec:lec_tx_timeout: lec0 [ 2412.135270][T25183] ftdi_sio 3-1:4.190: FTDI USB Serial Device converter detected [ 2412.152734][T25183] ftdi_sio ttyUSB2: unknown device type: 0x9716 [ 2412.185462][T25183] ftdi_sio 3-1:4.207: FTDI USB Serial Device converter detected [ 2412.231404][T25183] ftdi_sio ttyUSB3: unknown device type: 0x9716 [ 2412.258401][T25183] usb 3-1: USB disconnect, device number 125 [ 2412.267071][T13264] em28xx 7-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 2412.291717][T13264] em28xx 7-1:0.92: board has no eeprom [ 2412.322979][T25183] ftdi_sio 3-1:4.46: device disconnected [ 2412.344178][T25183] ftdi_sio 3-1:4.32: device disconnected [ 2412.358837][T13264] em28xx 7-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 2412.358870][T13264] em28xx 7-1:0.92: dvb set to bulk mode. [ 2412.359281][T14038] em28xx 7-1:0.92: Remote control support is not available for this card. [ 2412.366849][T13265] em28xx 2-1:0.92: unknown em28xx chip ID (0) [ 2412.482659][T25183] ftdi_sio 3-1:4.190: device disconnected [ 2412.733929][T13265] em28xx 2-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 2412.733966][T13265] em28xx 2-1:0.92: board has no eeprom [ 2412.821319][T21167] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.9016'. [ 2412.830837][T13265] em28xx 2-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 2412.830871][T13265] em28xx 2-1:0.92: dvb set to bulk mode. [ 2412.849515][T28183] em28xx 2-1:0.92: Remote control support is not available for this card. [ 2412.883723][T13264] usb 7-1: USB disconnect, device number 100 [ 2413.024945][T25183] ftdi_sio 3-1:4.207: device disconnected [ 2413.075201][T13264] em28xx 7-1:0.92: Disconnecting em28xx [ 2413.075235][T13264] em28xx 7-1:0.92: Closing input extension [ 2414.505741][T13265] usb 2-1: USB disconnect, device number 70 [ 2414.542713][T13265] em28xx 2-1:0.92: Disconnecting em28xx [ 2414.542741][T13265] em28xx 2-1:0.92: Closing input extension [ 2414.761200][T13264] em28xx 7-1:0.92: Freeing device [ 2414.763703][T13265] em28xx 2-1:0.92: Freeing device [ 2415.366311][T13265] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2415.518776][T13265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.518816][T13265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2415.518868][T13265] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2415.518894][T13265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.547642][T13265] usb 2-1: config 0 descriptor?? [ 2416.199492][T13265] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 2416.199533][T13265] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 2416.221023][T13265] cp2112 0003:10C4:EA90.0049: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2416.407422][T13265] cp2112 0003:10C4:EA90.0049: error requesting version [ 2416.438039][T13265] cp2112 0003:10C4:EA90.0049: probe with driver cp2112 failed with error -71 [ 2416.509541][T13265] usb 2-1: USB disconnect, device number 71 [ 2417.206607][T13265] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2417.358835][T13265] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2417.358870][T13265] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2417.360408][T13265] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2417.360436][T13265] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2417.360458][T13265] usb 7-1: Manufacturer: syz [ 2417.389536][T13265] usb 7-1: config 0 descriptor?? [ 2417.407393][T13265] igorplugusb 7-1:0.0: incorrect number of endpoints [ 2417.770566][T20230] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2418.027365][T20230] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2418.074665][T20230] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2418.141959][T20230] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2418.601223][T20230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2418.701192][T20230] 8021q: adding VLAN 0 to HW filter on device team0 [ 2418.727263][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 2418.729287][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2418.805469][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 2418.808151][ T9886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2418.926362][T14038] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 2419.082913][T14038] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2419.084156][T14038] usb 3-1: not running at top speed; connect to a high speed hub [ 2419.087057][T14038] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 2419.136071][T14038] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2419.136107][T14038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.136138][T14038] usb 3-1: Product: syz [ 2419.136154][T14038] usb 3-1: Manufacturer: syz [ 2419.136326][T14038] usb 3-1: SerialNumber: syz [ 2419.424072][T21347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2419.424757][T21347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2419.495732][T14038] usb 3-1: USB disconnect, device number 126 [ 2419.693241][T15072] udevd[15072]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2419.932770][T20230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2419.982352][T11902] usb 7-1: USB disconnect, device number 101 [ 2420.839096][T21455] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 2421.085389][T21460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9049'. [ 2421.085417][T21460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9049'. [ 2422.110667][T20230] veth0_vlan: entered promiscuous mode [ 2422.159350][T20230] veth1_vlan: entered promiscuous mode [ 2422.197618][T25183] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2422.350382][T25183] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2422.350510][T25183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.352059][T25183] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2422.352090][T25183] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2422.352111][T25183] usb 3-1: Manufacturer: syz [ 2422.365744][T20230] veth0_macvtap: entered promiscuous mode [ 2422.388171][T25183] usb 3-1: config 0 descriptor?? [ 2422.405589][T25183] igorplugusb 3-1:0.0: incorrect number of endpoints [ 2422.446728][T20230] veth1_macvtap: entered promiscuous mode [ 2422.574407][T20230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2422.600152][T20230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2422.622447][ T9886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.623448][ T9886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.623498][ T9886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.623538][ T9886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.116306][T19337] usb 8-1: new full-speed USB device number 98 using dummy_hcd [ 2423.197132][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2423.197158][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2423.281905][T19337] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2423.282584][T19337] usb 8-1: not running at top speed; connect to a high speed hub [ 2423.287272][T19337] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 2423.294645][T19337] usb 8-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2423.294676][T19337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.294695][T19337] usb 8-1: Product: syz [ 2423.294709][T19337] usb 8-1: Manufacturer: syz [ 2423.294723][T19337] usb 8-1: SerialNumber: syz [ 2423.424937][ T9883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2423.424963][ T9883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2423.731252][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 60 seconds [ 2423.734663][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 60 seconds [ 2423.734702][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 60 seconds [ 2423.734730][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 60 seconds [ 2424.200640][T21505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.236897][T21505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.448760][T19337] usb 8-1: USB disconnect, device number 98 [ 2424.554584][T15072] udevd[15072]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2424.828666][T19990] lec:lec_start_xmit: lec0:No lecd attached [ 2425.050435][T19337] usb 3-1: USB disconnect, device number 127 [ 2425.302228][T21593] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2425.339746][T21590] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2427.262689][T21641] FAULT_INJECTION: forcing a failure. [ 2427.262689][T21641] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.262731][T21641] CPU: 0 UID: 0 PID: 21641 Comm: syz.6.9079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2427.262761][T21641] Tainted: [L]=SOFTLOCKUP [ 2427.262769][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2427.262783][T21641] Call Trace: [ 2427.262792][T21641] [ 2427.262802][T21641] dump_stack_lvl+0xe8/0x150 [ 2427.262842][T21641] should_fail_ex+0x46b/0x600 [ 2427.262880][T21641] should_failslab+0xa8/0x100 [ 2427.262907][T21641] __kmalloc_noprof+0xdf/0x7b0 [ 2427.262929][T21641] ? kfree+0x4d/0x6c0 [ 2427.262968][T21641] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2427.263004][T21641] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2427.263044][T21641] ? tomoyo_path_number_perm+0x219/0x630 [ 2427.263068][T21641] tomoyo_path_number_perm+0x246/0x630 [ 2427.263095][T21641] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2427.263123][T21641] ? __lock_acquire+0x6b5/0x2cf0 [ 2427.263186][T21641] ? __fget_files+0x2a/0x420 [ 2427.263220][T21641] ? __fget_files+0x2a/0x420 [ 2427.263248][T21641] ? __fget_files+0x3a6/0x420 [ 2427.263276][T21641] ? __fget_files+0x2a/0x420 [ 2427.263310][T21641] security_file_ioctl+0xc3/0x2a0 [ 2427.263339][T21641] __se_sys_ioctl+0x47/0x170 [ 2427.263365][T21641] do_syscall_64+0x14d/0xf80 [ 2427.263390][T21641] ? trace_irq_disable+0x3b/0x150 [ 2427.263418][T21641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2427.263441][T21641] ? clear_bhb_loop+0x40/0x90 [ 2427.263470][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2427.263492][T21641] RIP: 0033:0x7f85e46ac819 [ 2427.263514][T21641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2427.263534][T21641] RSP: 002b:00007f85e2906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.263558][T21641] RAX: ffffffffffffffda RBX: 00007f85e4925fa0 RCX: 00007f85e46ac819 [ 2427.263575][T21641] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000004 [ 2427.263590][T21641] RBP: 00007f85e2906090 R08: 0000000000000000 R09: 0000000000000000 [ 2427.263605][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2427.263618][T21641] R13: 00007f85e4926038 R14: 00007f85e4925fa0 R15: 00007ffd1891f5c8 [ 2427.263655][T21641] [ 2427.263664][T21641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2427.767788][T19337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2428.896909][T19337] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2428.896942][T19337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.898452][T19337] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2428.898481][T19337] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2428.898503][T19337] usb 3-1: Manufacturer: syz [ 2429.007655][T19337] usb 3-1: config 0 descriptor?? [ 2429.028679][T19337] igorplugusb 3-1:0.0: incorrect number of endpoints [ 2430.250067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 2430.250106][ C0] lec:lec_tx_timeout: lec0 [ 2430.620418][ T4794] usb 3-1: USB disconnect, device number 2 [ 2431.006422][T14038] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2431.029656][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9095'. [ 2431.266367][T14038] usb 2-1: Using ep0 maxpacket: 16 [ 2431.268790][T14038] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2431.268827][T14038] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2431.268853][T14038] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 2431.268891][T14038] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2431.268929][T14038] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2431.268955][T14038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.402227][T14038] usb 2-1: config 0 descriptor?? [ 2431.536515][T19293] usb 9-1: new full-speed USB device number 88 using dummy_hcd [ 2431.640132][T21713] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9098'. [ 2431.690687][T19293] usb 9-1: not running at top speed; connect to a high speed hub [ 2431.694298][T19293] usb 9-1: config 4 has an invalid interface number: 46 but max is 3 [ 2431.694318][T19293] usb 9-1: config 4 has an invalid interface number: 32 but max is 3 [ 2431.694330][T19293] usb 9-1: config 4 has an invalid interface number: 190 but max is 3 [ 2431.694343][T19293] usb 9-1: config 4 has an invalid interface number: 207 but max is 3 [ 2431.694356][T19293] usb 9-1: config 4 has no interface number 0 [ 2431.694366][T19293] usb 9-1: config 4 has no interface number 1 [ 2431.694376][T19293] usb 9-1: config 4 has no interface number 2 [ 2431.694495][T19293] usb 9-1: config 4 has no interface number 3 [ 2431.694953][T19293] usb 9-1: config 4 interface 32 altsetting 7 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 2431.694983][T19293] usb 9-1: config 4 interface 32 altsetting 7 endpoint 0x8E has an invalid bInterval 121, changing to 4 [ 2431.695284][T19293] usb 9-1: config 4 interface 32 altsetting 7 endpoint 0x8E has invalid maxpacket 26925, setting to 1023 [ 2431.695366][T19293] usb 9-1: config 4 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2431.695380][T19293] usb 9-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 2431.695393][T19293] usb 9-1: config 4 interface 32 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 2431.695406][T19293] usb 9-1: config 4 interface 32 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2431.695432][T19293] usb 9-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 2431.695446][T19293] usb 9-1: config 4 interface 190 altsetting 15 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2431.695461][T19293] usb 9-1: config 4 interface 190 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 2431.695832][T19293] usb 9-1: config 4 interface 190 altsetting 15 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2431.696399][T19293] usb 9-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2431.698379][T19293] usb 9-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 2431.698409][T19293] usb 9-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2431.698431][T19293] usb 9-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 2431.698453][T19293] usb 9-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 2431.699708][T19293] usb 9-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2431.699734][T19293] usb 9-1: config 4 interface 207 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2431.699754][T19293] usb 9-1: config 4 interface 207 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 2431.699777][T19293] usb 9-1: config 4 interface 32 has no altsetting 0 [ 2431.699795][T19293] usb 9-1: config 4 interface 190 has no altsetting 0 [ 2431.717188][T19293] usb 9-1: config 4 interface 207 has no altsetting 0 [ 2431.818419][T19293] usb 9-1: New USB device found, idVendor=1b3d, idProduct=01fe, bcdDevice=97.16 [ 2431.818505][T19293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2431.818526][T19293] usb 9-1: Product: И [ 2431.818541][T19293] usb 9-1: Manufacturer: ࡥ肗쪖笠囻㷎쏑됞㑒೪嗛쒋突뙆큨嶛ⓡꅕ⬔᱌먌ꃪ㒫鷁嚪툢쬒ể憃㎽붢航␔흗⻐㳽乙ꄤ몡 [ 2431.818563][T19293] usb 9-1: SerialNumber: К [ 2432.244138][T14038] usbhid 2-1:0.0: can't add hid device: -71 [ 2432.244352][T14038] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2432.334711][T14038] usb 2-1: USB disconnect, device number 72 [ 2432.383632][T19293] ftdi_sio 9-1:4.46: FTDI USB Serial Device converter detected [ 2432.405037][T19293] ftdi_sio ttyUSB0: unknown device type: 0x9716 [ 2432.476763][T19293] ftdi_sio 9-1:4.32: FTDI USB Serial Device converter detected [ 2432.497342][T19293] ftdi_sio ttyUSB1: unknown device type: 0x9716 [ 2432.529021][T19293] ftdi_sio 9-1:4.190: FTDI USB Serial Device converter detected [ 2432.530460][T19293] ftdi_sio ttyUSB2: unknown device type: 0x9716 [ 2432.557875][T19293] ftdi_sio 9-1:4.207: FTDI USB Serial Device converter detected [ 2432.568624][T19293] ftdi_sio ttyUSB3: unknown device type: 0x9716 [ 2432.609180][T19293] usb 9-1: USB disconnect, device number 88 [ 2432.646684][T19293] ftdi_sio 9-1:4.46: device disconnected [ 2432.716450][T19337] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 2432.726817][T19293] ftdi_sio 9-1:4.32: device disconnected [ 2432.733318][T19293] ftdi_sio 9-1:4.190: device disconnected [ 2432.800233][T19293] ftdi_sio 9-1:4.207: device disconnected [ 2432.869932][T19337] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 2432.869968][T19337] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.870021][T19337] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2432.874631][T19337] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2432.874666][T19337] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2432.874688][T19337] usb 8-1: Manufacturer: syz [ 2432.943092][T19337] usb 8-1: config 0 descriptor?? [ 2432.978429][T19337] igorplugusb 8-1:0.0: incorrect number of endpoints [ 2433.536857][T19337] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2434.237001][T19337] usb 9-1: Using ep0 maxpacket: 16 [ 2434.334365][T19337] usb 9-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 2434.334443][T19337] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2434.334475][T19337] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2434.334499][T19337] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2434.334525][T19337] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2434.338024][T19337] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2434.338055][T19337] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2434.338078][T19337] usb 9-1: Manufacturer: syz [ 2434.587200][T19337] usb 9-1: config 0 descriptor?? [ 2434.691623][T14038] usb 8-1: USB disconnect, device number 99 [ 2434.792352][T21808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9110'. [ 2434.906443][T19337] rc_core: IR keymap rc-hauppauge not found [ 2434.906469][T19337] Registered IR keymap rc-empty [ 2434.906658][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2434.935385][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2434.950560][T19337] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2434.972633][T19337] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input142 [ 2434.984757][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2434.996453][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.016615][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.036786][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.058223][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.083147][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.096547][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.116740][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.136424][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.164248][T19337] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2435.209352][T19337] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2435.210119][T19337] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2435.326428][T14038] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2435.367277][T19293] usb 9-1: USB disconnect, device number 89 [ 2437.094278][T14038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2437.094318][T14038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2437.094361][T14038] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2437.094387][T14038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.189390][T14038] usb 2-1: config 0 descriptor?? [ 2438.309919][T19337] libceph: connect (1)[c::]:6789 error -101 [ 2438.310165][T19337] libceph: mon0 (1)[c::]:6789 connect error [ 2438.380846][T21862] ceph: No mds server is up or the cluster is laggy [ 2438.590233][T21519] libceph: connect (1)[c::]:6789 error -101 [ 2438.590450][T21519] libceph: mon0 (1)[c::]:6789 connect error [ 2438.885592][T14038] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2438.885631][T14038] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2438.915391][T14038] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2438.966304][T25112] usb 7-1: new low-speed USB device number 102 using dummy_hcd [ 2439.196577][T14038] cp2112 0003:10C4:EA90.004A: error requesting version [ 2439.216718][T14038] cp2112 0003:10C4:EA90.004A: probe with driver cp2112 failed with error -71 [ 2439.298189][T25112] usb 7-1: No LPM exit latency info found, disabling LPM. [ 2439.300188][T25112] usb 7-1: config 172 has an invalid interface number: 190 but max is 1 [ 2439.300220][T25112] usb 7-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.300241][T25112] usb 7-1: config 172 has no interface number 1 [ 2439.300290][T25112] usb 7-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2439.300313][T25112] usb 7-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2439.323093][T25112] usb 7-1: string descriptor 0 read error: -22 [ 2439.323276][T25112] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 2439.323300][T25112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.329815][T14038] usb 2-1: USB disconnect, device number 73 [ 2439.379278][T21895] FAULT_INJECTION: forcing a failure. [ 2439.379278][T21895] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.379318][T21895] CPU: 1 UID: 0 PID: 21895 Comm: syz.8.9125 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2439.379348][T21895] Tainted: [L]=SOFTLOCKUP [ 2439.379356][T21895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2439.379370][T21895] Call Trace: [ 2439.379379][T21895] [ 2439.379388][T21895] dump_stack_lvl+0xe8/0x150 [ 2439.379427][T21895] should_fail_ex+0x46b/0x600 [ 2439.379463][T21895] should_failslab+0xa8/0x100 [ 2439.379488][T21895] __kmalloc_noprof+0xdf/0x7b0 [ 2439.379517][T21895] ? kfree+0x4d/0x6c0 [ 2439.379546][T21895] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2439.379581][T21895] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2439.379622][T21895] ? tomoyo_path_number_perm+0x219/0x630 [ 2439.379646][T21895] tomoyo_path_number_perm+0x246/0x630 [ 2439.379674][T21895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2439.379701][T21895] ? __lock_acquire+0x6b5/0x2cf0 [ 2439.379760][T21895] ? __fget_files+0x2a/0x420 [ 2439.379792][T21895] ? __fget_files+0x2a/0x420 [ 2439.379819][T21895] ? __fget_files+0x3a6/0x420 [ 2439.379846][T21895] ? __fget_files+0x2a/0x420 [ 2439.379878][T21895] security_file_ioctl+0xc3/0x2a0 [ 2439.379905][T21895] __se_sys_ioctl+0x47/0x170 [ 2439.379931][T21895] do_syscall_64+0x14d/0xf80 [ 2439.379955][T21895] ? trace_irq_disable+0x3b/0x150 [ 2439.379981][T21895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.380003][T21895] ? clear_bhb_loop+0x40/0x90 [ 2439.380030][T21895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.380051][T21895] RIP: 0033:0x7faf1ebac819 [ 2439.380072][T21895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2439.380090][T21895] RSP: 002b:00007faf1ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.380113][T21895] RAX: ffffffffffffffda RBX: 00007faf1ee25fa0 RCX: 00007faf1ebac819 [ 2439.380129][T21895] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 2439.380143][T21895] RBP: 00007faf1ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 2439.380156][T21895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2439.380169][T21895] R13: 00007faf1ee26038 R14: 00007faf1ee25fa0 R15: 00007ffca77be878 [ 2439.380204][T21895] [ 2439.380213][T21895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2439.471175][T25112] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 2439.624287][T25112] usb 7-1: USB disconnect, device number 102 [ 2439.668177][T21887] fido_id[21887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2440.227024][T21930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9130'. [ 2440.394901][T21940] FAULT_INJECTION: forcing a failure. [ 2440.394901][T21940] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.394943][T21940] CPU: 1 UID: 0 PID: 21940 Comm: syz.8.9132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2440.394979][T21940] Tainted: [L]=SOFTLOCKUP [ 2440.394988][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2440.395001][T21940] Call Trace: [ 2440.395010][T21940] [ 2440.395019][T21940] dump_stack_lvl+0xe8/0x150 [ 2440.395059][T21940] should_fail_ex+0x46b/0x600 [ 2440.395098][T21940] should_failslab+0xa8/0x100 [ 2440.395124][T21940] __kmalloc_noprof+0xdf/0x7b0 [ 2440.395144][T21940] ? kfree+0x4d/0x6c0 [ 2440.395173][T21940] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2440.395209][T21940] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2440.395250][T21940] ? tomoyo_path_number_perm+0x219/0x630 [ 2440.395273][T21940] tomoyo_path_number_perm+0x246/0x630 [ 2440.395301][T21940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2440.395328][T21940] ? __lock_acquire+0x6b5/0x2cf0 [ 2440.395390][T21940] ? __fget_files+0x2a/0x420 [ 2440.395422][T21940] ? __fget_files+0x2a/0x420 [ 2440.395451][T21940] ? __fget_files+0x3a6/0x420 [ 2440.395478][T21940] ? __fget_files+0x2a/0x420 [ 2440.395512][T21940] security_file_ioctl+0xc3/0x2a0 [ 2440.395542][T21940] __se_sys_ioctl+0x47/0x170 [ 2440.395568][T21940] do_syscall_64+0x14d/0xf80 [ 2440.395595][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.395628][T21940] ? clear_bhb_loop+0x40/0x90 [ 2440.395657][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.395679][T21940] RIP: 0033:0x7faf1ebac819 [ 2440.395700][T21940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2440.395720][T21940] RSP: 002b:00007faf1ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2440.395745][T21940] RAX: ffffffffffffffda RBX: 00007faf1ee25fa0 RCX: 00007faf1ebac819 [ 2440.395762][T21940] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2440.395777][T21940] RBP: 00007faf1ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 2440.395791][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.395805][T21940] R13: 00007faf1ee26038 R14: 00007faf1ee25fa0 R15: 00007ffca77be878 [ 2440.395842][T21940] [ 2440.401599][T21940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2441.166617][T21961] binder: 21958:21961 ioctl c0306201 200000004a40 returned -22 [ 2441.378091][T21966] netlink: 'syz.8.9139': attribute type 1 has an invalid length. [ 2441.378117][T21966] netlink: 'syz.8.9139': attribute type 1 has an invalid length. [ 2441.585488][T21976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9144'. [ 2441.823977][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9146'. [ 2442.660450][T22042] FAULT_INJECTION: forcing a failure. [ 2442.660450][T22042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2442.660493][T22042] CPU: 1 UID: 0 PID: 22042 Comm: syz.8.9153 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2442.660521][T22042] Tainted: [L]=SOFTLOCKUP [ 2442.660529][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2442.660542][T22042] Call Trace: [ 2442.660551][T22042] [ 2442.660561][T22042] dump_stack_lvl+0xe8/0x150 [ 2442.660596][T22042] should_fail_ex+0x46b/0x600 [ 2442.660630][T22042] _copy_from_user+0x2d/0xb0 [ 2442.660654][T22042] ___sys_sendmsg+0x1c6/0x360 [ 2442.660684][T22042] ? __pfx____sys_sendmsg+0x10/0x10 [ 2442.660742][T22042] ? __fget_files+0x2a/0x420 [ 2442.660770][T22042] ? __fget_files+0x3a6/0x420 [ 2442.660808][T22042] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2442.660845][T22042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2442.660888][T22042] ? __pfx_ksys_write+0x10/0x10 [ 2442.660933][T22042] do_syscall_64+0x14d/0xf80 [ 2442.660959][T22042] ? trace_irq_disable+0x3b/0x150 [ 2442.660985][T22042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.661007][T22042] ? clear_bhb_loop+0x40/0x90 [ 2442.661034][T22042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.661056][T22042] RIP: 0033:0x7faf1ebac819 [ 2442.661077][T22042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2442.661097][T22042] RSP: 002b:00007faf1ce06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2442.661120][T22042] RAX: ffffffffffffffda RBX: 00007faf1ee25fa0 RCX: 00007faf1ebac819 [ 2442.661137][T22042] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 2442.661150][T22042] RBP: 00007faf1ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 2442.661165][T22042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.661178][T22042] R13: 00007faf1ee26038 R14: 00007faf1ee25fa0 R15: 00007ffca77be878 [ 2442.661212][T22042] [ 2443.746356][T19337] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2443.898796][T19337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2443.898834][T19337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2443.898878][T19337] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2443.898904][T19337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2443.903286][T19337] usb 7-1: config 0 descriptor?? [ 2445.608844][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.608884][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.608911][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.608938][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.608965][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.608992][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.609019][T19337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 2445.642435][T19337] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2445.701271][T19337] cp2112 0003:10C4:EA90.004B: Part Number: 0x00 Device Version: 0x00 [ 2446.198716][T11677] Bluetooth: hci3: Unknown advertising packet type: 0x33 [ 2446.198742][T11677] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2446.455926][T22136] fuse: Bad value for 'group_id' [ 2446.455949][T22136] fuse: Bad value for 'group_id' [ 2446.516018][T19339] usb 7-1: USB disconnect, device number 103 [ 2446.935965][T22154] bridge_slave_1: left allmulticast mode [ 2446.935999][T22154] bridge_slave_1: left promiscuous mode [ 2446.939799][T22154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2447.008682][T22154] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2447.577858][T22185] tipc: Started in network mode [ 2447.577892][T22185] tipc: Node identity ae2cf61a0dad, cluster identity 4711 [ 2447.578102][T22185] tipc: Enabled bearer , priority 0 [ 2447.580276][T22185] FAULT_INJECTION: forcing a failure. [ 2447.580276][T22185] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.580312][T22185] CPU: 0 UID: 0 PID: 22185 Comm: syz.2.9183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2447.580343][T22185] Tainted: [L]=SOFTLOCKUP [ 2447.580351][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2447.580364][T22185] Call Trace: [ 2447.580373][T22185] [ 2447.580383][T22185] dump_stack_lvl+0xe8/0x150 [ 2447.580422][T22185] should_fail_ex+0x46b/0x600 [ 2447.580460][T22185] should_failslab+0xa8/0x100 [ 2447.580485][T22185] __kmalloc_noprof+0xdf/0x7b0 [ 2447.580506][T22185] ? kfree+0x4d/0x6c0 [ 2447.580535][T22185] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2447.580572][T22185] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2447.580613][T22185] ? tomoyo_path_number_perm+0x219/0x630 [ 2447.580637][T22185] tomoyo_path_number_perm+0x246/0x630 [ 2447.580665][T22185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2447.580692][T22185] ? __lock_acquire+0x6b5/0x2cf0 [ 2447.580763][T22185] ? __fget_files+0x2a/0x420 [ 2447.580796][T22185] ? __fget_files+0x2a/0x420 [ 2447.580823][T22185] ? __fget_files+0x3a6/0x420 [ 2447.580851][T22185] ? __fget_files+0x2a/0x420 [ 2447.580883][T22185] security_file_ioctl+0xc3/0x2a0 [ 2447.580912][T22185] __se_sys_ioctl+0x47/0x170 [ 2447.580938][T22185] do_syscall_64+0x14d/0xf80 [ 2447.580963][T22185] ? trace_irq_disable+0x3b/0x150 [ 2447.580990][T22185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2447.581013][T22185] ? clear_bhb_loop+0x40/0x90 [ 2447.581041][T22185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2447.581063][T22185] RIP: 0033:0x7fcdcb43c819 [ 2447.581085][T22185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2447.581103][T22185] RSP: 002b:00007fcdc968e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2447.581127][T22185] RAX: ffffffffffffffda RBX: 00007fcdcb6b5fa0 RCX: 00007fcdcb43c819 [ 2447.581144][T22185] RDX: 0000200000002280 RSI: 0000000000008923 RDI: 0000000000000005 [ 2447.581159][T22185] RBP: 00007fcdc968e090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.581174][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.581188][T22185] R13: 00007fcdcb6b6038 R14: 00007fcdcb6b5fa0 R15: 00007ffd8d5796c8 [ 2447.581225][T22185] [ 2447.581234][T22185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2447.581269][T22185] +: renamed from syzkaller0 [ 2447.768211][T22185] tipc: Disabling bearer [ 2448.196356][ T4794] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 2448.525975][ T4794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.526007][ T4794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2448.529992][ T4794] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2448.530025][ T4794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2448.530047][ T4794] usb 7-1: SerialNumber: syz [ 2448.708135][ T4794] usb 7-1: 0:2 : does not exist [ 2448.816519][T22194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.818389][T22194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2448.852242][T22222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.858458][T22222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2448.903387][T22194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.904823][T22194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.087891][ T4794] usb 7-1: USB disconnect, device number 104 [ 2449.626478][ T4794] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 2449.791199][ T4794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2449.791987][ T4794] usb 7-1: not running at top speed; connect to a high speed hub [ 2449.794391][ T4794] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 2449.838158][ T4794] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2449.838197][ T4794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.838220][ T4794] usb 7-1: Product: syz [ 2449.838236][ T4794] usb 7-1: Manufacturer: syz [ 2449.838252][ T4794] usb 7-1: SerialNumber: syz [ 2450.098965][T22242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2450.099628][T22242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2450.314969][ T4794] usb 7-1: USB disconnect, device number 105 [ 2450.412629][T15072] udevd[15072]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2450.895258][T22321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2451.017622][T22291] FAULT_INJECTION: forcing a failure. [ 2451.017622][T22291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2451.017665][T22291] CPU: 1 UID: 0 PID: 22291 Comm: syz.8.9198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2451.017696][T22291] Tainted: [L]=SOFTLOCKUP [ 2451.017705][T22291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2451.017718][T22291] Call Trace: [ 2451.017725][T22291] [ 2451.017735][T22291] dump_stack_lvl+0xe8/0x150 [ 2451.017775][T22291] should_fail_ex+0x46b/0x600 [ 2451.017813][T22291] _copy_from_user+0x2d/0xb0 [ 2451.017843][T22291] ___sys_sendmsg+0x1c6/0x360 [ 2451.017877][T22291] ? __pfx____sys_sendmsg+0x10/0x10 [ 2451.017941][T22291] ? __fget_files+0x2a/0x420 [ 2451.017970][T22291] ? __fget_files+0x3a6/0x420 [ 2451.018010][T22291] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2451.018038][T22291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2451.018075][T22291] ? __pfx_ksys_write+0x10/0x10 [ 2451.018121][T22291] do_syscall_64+0x14d/0xf80 [ 2451.018146][T22291] ? trace_irq_disable+0x3b/0x150 [ 2451.018170][T22291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.018194][T22291] ? clear_bhb_loop+0x40/0x90 [ 2451.018219][T22291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.018238][T22291] RIP: 0033:0x7faf1ebac819 [ 2451.018258][T22291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2451.018275][T22291] RSP: 002b:00007faf1cde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2451.018299][T22291] RAX: ffffffffffffffda RBX: 00007faf1ee26090 RCX: 00007faf1ebac819 [ 2451.018315][T22291] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2451.018330][T22291] RBP: 00007faf1cde5090 R08: 0000000000000000 R09: 0000000000000000 [ 2451.018344][T22291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.018357][T22291] R13: 00007faf1ee26128 R14: 00007faf1ee26090 R15: 00007ffca77be878 [ 2451.018392][T22291] [ 2453.971765][T22420] bond2: option resend_igmp: invalid value (2878) [ 2453.971798][T22420] bond2: option resend_igmp: allowed values 0 - 255 [ 2454.020642][T22420] bond2 (unregistering): Released all slaves [ 2454.386409][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 90 seconds [ 2454.386463][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 90 seconds [ 2454.386496][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 90 seconds [ 2454.386527][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 90 seconds [ 2454.460855][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9217'. [ 2454.461039][T22493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2454.529328][T22493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2454.606403][ T4794] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 2454.756419][ T4794] usb 8-1: Using ep0 maxpacket: 8 [ 2454.759369][ T4794] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2454.759406][ T4794] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2454.759434][ T4794] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2454.759459][ T4794] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2454.759505][ T4794] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2454.759530][ T4794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.039406][ T4794] usb 8-1: usb_control_msg returned -32 [ 2455.039465][ T4794] usbtmc 8-1:16.0: can't read capabilities [ 2455.516789][T19339] usb 8-1: USB disconnect, device number 100 [ 2456.876329][T25112] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2457.056326][T25112] usb 7-1: Using ep0 maxpacket: 16 [ 2457.059076][T25112] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2457.059109][T25112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.108412][T25112] usb 7-1: config 0 descriptor?? [ 2457.134173][T25112] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2458.789921][T22593] FAULT_INJECTION: forcing a failure. [ 2458.789921][T22593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.789962][T22593] CPU: 0 UID: 0 PID: 22593 Comm: syz.8.9236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2458.789993][T22593] Tainted: [L]=SOFTLOCKUP [ 2458.790001][T22593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2458.790014][T22593] Call Trace: [ 2458.790023][T22593] [ 2458.790033][T22593] dump_stack_lvl+0xe8/0x150 [ 2458.790070][T22593] should_fail_ex+0x46b/0x600 [ 2458.790107][T22593] _copy_from_user+0x2d/0xb0 [ 2458.790132][T22593] __sys_bpf+0x229/0x950 [ 2458.790167][T22593] ? __pfx___sys_bpf+0x10/0x10 [ 2458.790194][T22593] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2458.790249][T22593] ? rcu_is_watching+0x15/0xb0 [ 2458.790284][T22593] __x64_sys_bpf+0x7c/0x90 [ 2458.790320][T22593] do_syscall_64+0x14d/0xf80 [ 2458.790345][T22593] ? trace_irq_disable+0x3b/0x150 [ 2458.790372][T22593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2458.790396][T22593] ? clear_bhb_loop+0x40/0x90 [ 2458.790423][T22593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2458.790445][T22593] RIP: 0033:0x7faf1ebac819 [ 2458.790468][T22593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2458.790488][T22593] RSP: 002b:00007faf1ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2458.790513][T22593] RAX: ffffffffffffffda RBX: 00007faf1ee25fa0 RCX: 00007faf1ebac819 [ 2458.790529][T22593] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 2458.790541][T22593] RBP: 00007faf1ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 2458.790552][T22593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.790562][T22593] R13: 00007faf1ee26038 R14: 00007faf1ee25fa0 R15: 00007ffca77be878 [ 2458.790589][T22593] [ 2459.078953][T25112] gspca_sonixj: reg_w1 err -110 [ 2459.096348][T25112] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 2459.097495][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2459.118645][T25112] usb 7-1: USB disconnect, device number 106 [ 2459.178008][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2459.185292][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2459.219131][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2459.230546][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2459.580993][ T37] audit: type=1326 audit(2000005017.571:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22615 comm="syz.7.9240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e900cc819 code=0x0 [ 2460.092728][T22594] chnl_net:caif_netlink_parms(): no params data found [ 2461.326101][T11677] Bluetooth: hci1: command tx timeout [ 2461.693658][T22720] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 2461.768523][T22736] FAULT_INJECTION: forcing a failure. [ 2461.768523][T22736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2461.768565][T22736] CPU: 1 UID: 0 PID: 22736 Comm: syz.7.9247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2461.768595][T22736] Tainted: [L]=SOFTLOCKUP [ 2461.768604][T22736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2461.768617][T22736] Call Trace: [ 2461.768626][T22736] [ 2461.768635][T22736] dump_stack_lvl+0xe8/0x150 [ 2461.768674][T22736] should_fail_ex+0x46b/0x600 [ 2461.768710][T22736] _copy_from_user+0x2d/0xb0 [ 2461.768733][T22736] ___sys_recvmsg+0x175/0x590 [ 2461.768769][T22736] ? __pfx____sys_recvmsg+0x10/0x10 [ 2461.768821][T22736] ? __fget_files+0x3a6/0x420 [ 2461.768863][T22736] do_recvmmsg+0x33a/0x800 [ 2461.768900][T22736] ? __pfx_do_recvmmsg+0x10/0x10 [ 2461.768941][T22736] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2461.768991][T22736] __x64_sys_recvmmsg+0x198/0x250 [ 2461.769022][T22736] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2461.769061][T22736] do_syscall_64+0x14d/0xf80 [ 2461.769084][T22736] ? trace_irq_disable+0x3b/0x150 [ 2461.769110][T22736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.769132][T22736] ? clear_bhb_loop+0x40/0x90 [ 2461.769158][T22736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.769180][T22736] RIP: 0033:0x7f0e900cc819 [ 2461.769201][T22736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2461.769219][T22736] RSP: 002b:00007f0e8e31e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2461.769242][T22736] RAX: ffffffffffffffda RBX: 00007f0e90345fa0 RCX: 00007f0e900cc819 [ 2461.769258][T22736] RDX: 0000000000000001 RSI: 0000200000003700 RDI: 0000000000000003 [ 2461.769272][T22736] RBP: 00007f0e8e31e090 R08: 0000000000000000 R09: 0000000000000000 [ 2461.769286][T22736] R10: 0000000040012100 R11: 0000000000000246 R12: 0000000000000001 [ 2461.769300][T22736] R13: 00007f0e90346038 R14: 00007f0e90345fa0 R15: 00007ffe19ad3bc8 [ 2461.769335][T22736] [ 2461.798633][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.798863][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.799081][T22594] bridge_slave_0: entered allmulticast mode [ 2461.801934][T22594] bridge_slave_0: entered promiscuous mode [ 2461.805360][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.805569][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.805769][T22594] bridge_slave_1: entered allmulticast mode [ 2461.808716][T22594] bridge_slave_1: entered promiscuous mode [ 2461.920034][T22760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9245'. [ 2461.920058][T22760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9245'. [ 2461.937163][T22594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2461.942078][T22594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2462.028648][T22594] team0: Port device team_slave_0 added [ 2462.037535][T22594] team0: Port device team_slave_1 added [ 2462.144485][T22594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2462.144513][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2462.144544][T22594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2462.166420][T22594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2462.166438][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2462.166463][T22594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2462.334727][T22594] hsr_slave_0: entered promiscuous mode [ 2462.342361][T22594] hsr_slave_1: entered promiscuous mode [ 2462.343481][T22594] debugfs: 'hsr0' already exists in 'hsr' [ 2462.343509][T22594] Cannot create hsr debugfs directory [ 2463.160610][T22594] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2463.190344][T22594] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2463.231467][T22594] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2463.271765][T22594] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2463.392555][T22594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2463.397535][T11677] Bluetooth: hci1: command tx timeout [ 2463.419303][T22594] 8021q: adding VLAN 0 to HW filter on device team0 [ 2463.425802][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.426043][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.455488][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.455619][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.699967][T22594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2463.959636][T22594] veth0_vlan: entered promiscuous mode [ 2463.965531][T22594] veth1_vlan: entered promiscuous mode [ 2464.009074][T22594] veth0_macvtap: entered promiscuous mode [ 2464.012790][T22594] veth1_macvtap: entered promiscuous mode [ 2464.044571][T22594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2464.058289][T22594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2464.065799][ T9879] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.066053][ T9879] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.066112][ T9879] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.067507][ T9879] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.429253][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.429287][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.494720][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.494744][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2465.466626][T11677] Bluetooth: hci1: command tx timeout [ 2467.546460][T11677] Bluetooth: hci1: command tx timeout [ 2467.737384][ T5163] udevd[5163]: worker [14431] /devices/virtual/block/nbd1 is taking a long time [ 2467.790824][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.790931][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.794904][ T1324] lec:lec_start_xmit: lec0:No lecd attached [ 2473.146299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 2473.146339][ C0] lec:lec_tx_timeout: lec0 [ 2484.468013][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 120 seconds [ 2484.468061][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 120 seconds [ 2484.468080][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 120 seconds [ 2484.468098][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 120 seconds [ 2488.299415][T19990] lec:lec_start_xmit: lec0:No lecd attached [ 2493.306409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2493.306447][ C0] lec:lec_tx_timeout: lec0 [ 2514.547445][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 150 seconds [ 2514.547481][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 150 seconds [ 2514.547499][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 150 seconds [ 2514.547517][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 150 seconds [ 2515.946723][T11677] Bluetooth: hci4: command 0x0406 tx timeout [ 2529.232809][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.232896][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.238053][ T1324] lec:lec_start_xmit: lec0:No lecd attached [ 2534.246235][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2534.246273][ C0] lec:lec_tx_timeout: lec0 [ 2543.185970][ T5163] udevd[5163]: worker [14431] /devices/virtual/block/nbd1 timeout; kill it [ 2543.188693][ T5163] udevd[5163]: seq 37441 '/devices/virtual/block/nbd1' killed [ 2544.626392][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 180 seconds [ 2544.626443][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 180 seconds [ 2544.626475][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 180 seconds [ 2544.626506][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 180 seconds [ 2551.671125][T19990] lec:lec_start_xmit: lec0:No lecd attached [ 2557.146277][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 2557.146303][ C0] lec:lec_tx_timeout: lec0 [ 2574.716415][ T212] block nbd1: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 210 seconds [ 2574.716466][ T212] block nbd1: Possible stuck request ffff888026b501c0: control (read@1024,1024B). Runtime 210 seconds [ 2574.716498][ T212] block nbd1: Possible stuck request ffff888026b50380: control (read@2048,1024B). Runtime 210 seconds [ 2574.716530][ T212] block nbd1: Possible stuck request ffff888026b50540: control (read@3072,1024B). Runtime 210 seconds [ 2582.506732][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 2590.673955][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.674048][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.692173][ T1324] lec:lec_start_xmit: lec0:No lecd attached [ 2596.106255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 2596.106306][ C0] lec:lec_tx_timeout: lec0 [ 2603.466518][ T38] INFO: task syz.1.9148:21996 blocked for more than 143 seconds. [ 2603.466563][ T38] Tainted: G L syzkaller #0 [ 2603.466577][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2603.466588][ T38] task:syz.1.9148 state:D stack:28072 pid:21996 tgid:21995 ppid:14191 task_flags:0x400040 flags:0x00080002 [ 2603.466659][ T38] Call Trace: [ 2603.466668][ T38] [ 2603.466684][ T38] __schedule+0x1553/0x5240 [ 2603.466749][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2603.466797][ T38] ? __pfx___schedule+0x10/0x10 [ 2603.466834][ T38] rt_mutex_schedule+0x76/0xf0 [ 2603.466863][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 2603.466911][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2603.466946][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 2603.466980][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 2603.467020][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2603.467088][ T38] ? bdev_open+0xe0/0xcc0 [ 2603.467128][ T38] ? bdev_open+0xe0/0xcc0 [ 2603.467152][ T38] mutex_lock_nested+0x168/0x1d0 [ 2603.467191][ T38] bdev_open+0xe0/0xcc0 [ 2603.467231][ T38] blkdev_open+0x485/0x620 [ 2603.467268][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 2603.467299][ T38] do_dentry_open+0x83d/0x13e0 [ 2603.467353][ T38] vfs_open+0x3b/0x350 [ 2603.467379][ T38] ? path_openat+0x2e2b/0x38a0 [ 2603.467417][ T38] path_openat+0x2e43/0x38a0 [ 2603.467488][ T38] ? __pfx_path_openat+0x10/0x10 [ 2603.467523][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 2603.467596][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 2603.467623][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2603.467646][ T38] do_file_open+0x23e/0x4a0 [ 2603.467665][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2603.467682][ T38] ? __pfx_do_file_open+0x10/0x10 [ 2603.467700][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2603.467732][ T38] ? alloc_fd+0x64e/0x6c0 [ 2603.467755][ T38] do_sys_openat2+0x113/0x200 [ 2603.467773][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 2603.467790][ T38] ? exc_page_fault+0x6a/0xc0 [ 2603.467810][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 2603.467832][ T38] __x64_sys_openat+0x138/0x170 [ 2603.467851][ T38] do_syscall_64+0x14d/0xf80 [ 2603.467866][ T38] ? trace_irq_disable+0x3b/0x150 [ 2603.467883][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2603.467898][ T38] ? clear_bhb_loop+0x40/0x90 [ 2603.467913][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2603.467926][ T38] RIP: 0033:0x7f70acccd04e [ 2603.467939][ T38] RSP: 002b:00007f70aaf65b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2603.467954][ T38] RAX: ffffffffffffffda RBX: 00007f70aaf666c0 RCX: 00007f70acccd04e [ 2603.467963][ T38] RDX: 00000000000e8082 RSI: 00007f70aaf65c00 RDI: ffffffffffffff9c [ 2603.467972][ T38] RBP: 00007f70aaf65c00 R08: 0000000000000000 R09: 0000000000000000 [ 2603.467980][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2603.467989][ T38] R13: 00007f70acf86038 R14: 00007f70acf85fa0 R15: 00007ffc5d7d3508 [ 2603.468009][ T38] [ 2603.468021][ T38] [ 2603.468021][ T38] Showing all locks held in the system: [ 2603.468029][ T38] 1 lock held by khungtaskd/38: [ 2603.468036][ T38] #0: ffffffff8ddcb9c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2603.468117][ T38] 2 locks held by getty/5550: [ 2603.468125][ T38] #0: ffff88823bf4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2603.468221][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 2603.468268][ T38] 1 lock held by udevd/14431: [ 2603.468275][ T38] #0: ffff888026a974c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 2603.468310][ T38] 1 lock held by syz.1.9148/21996: [ 2603.468317][ T38] #0: ffff888026a974c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 2603.468348][ T38] [ 2603.468351][ T38] ============================================= [ 2603.468351][ T38] [ 2603.468357][ T38] NMI backtrace for cpu 0 [ 2603.468369][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2603.468386][ T38] Tainted: [L]=SOFTLOCKUP [ 2603.468391][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2603.468399][ T38] Call Trace: [ 2603.468404][ T38] [ 2603.468409][ T38] dump_stack_lvl+0xe8/0x150 [ 2603.468429][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2603.468467][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2603.468486][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2603.468505][ T38] sys_info+0x135/0x170 [ 2603.468520][ T38] watchdog+0xfd9/0x1030 [ 2603.468538][ T38] ? watchdog+0x21a/0x1030 [ 2603.468564][ T38] kthread+0x388/0x470 [ 2603.468578][ T38] ? __pfx_watchdog+0x10/0x10 [ 2603.468591][ T38] ? __pfx_kthread+0x10/0x10 [ 2603.468605][ T38] ret_from_fork+0x51e/0xb90 [ 2603.468624][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2603.468640][ T38] ? __switch_to+0xc7d/0x1450 [ 2603.468658][ T38] ? __pfx_kthread+0x10/0x10 [ 2603.468681][ T38] ret_from_fork_asm+0x1a/0x30 [ 2603.468715][ T38] [ 2603.468743][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2603.468783][ C1] NMI backtrace for cpu 1 [ 2603.468811][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2603.468836][ C1] Tainted: [L]=SOFTLOCKUP [ 2603.468843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2603.468853][ C1] RIP: 0010:__lock_acquire+0x84d/0x2cf0 [ 2603.468875][ C1] Code: 00 60 00 00 09 c5 48 89 d8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 01 d8 29 cb 89 ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 <31> c6 01 ca 29 f1 89 f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 [ 2603.468890][ C1] RSP: 0018:ffffc90000a3f158 EFLAGS: 00000082 [ 2603.468914][ C1] RAX: 00000000923660c1 RBX: 00000000c5e72f55 RCX: 0000000084e95067 [ 2603.468933][ C1] RDX: 000000004c8d45fc RSI: 000000008d45fc4c RDI: ffff88801ceebd00 [ 2603.468946][ C1] RBP: 000000008d49724d R08: ffffffff81767e65 R09: ffffffff8ddcb9c0 [ 2603.468959][ C1] R10: ffffc90000a3f438 R11: ffffffff81af9290 R12: ffff88801ceec9a8 [ 2603.468972][ C1] R13: ffff88801ceec9a8 R14: ffff88801ceebd00 R15: 0000000000000006 [ 2603.468985][ C1] FS: 0000000000000000(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 2603.469001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2603.469013][ C1] CR2: 000056234d2f7168 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 2603.469030][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 2603.469042][ C1] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2603.469054][ C1] Call Trace: [ 2603.469061][ C1] [ 2603.469072][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2603.469098][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469117][ C1] lock_acquire+0xf0/0x2e0 [ 2603.469134][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469151][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469167][ C1] ? __netdev_alloc_skb+0xc0/0x4b0 [ 2603.469188][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469203][ C1] unwind_next_frame+0xc2/0x23c0 [ 2603.469219][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469237][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2603.469253][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 2603.469269][ C1] ? __netdev_alloc_skb+0xc0/0x4b0 [ 2603.469286][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2603.469310][ C1] arch_stack_walk+0x11b/0x150 [ 2603.469329][ C1] ? __netdev_alloc_skb+0xc0/0x4b0 [ 2603.469345][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 2603.469371][ C1] stack_trace_save+0xa9/0x100 [ 2603.469393][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2603.469419][ C1] kasan_save_track+0x3e/0x80 [ 2603.469443][ C1] ? kasan_save_track+0x3e/0x80 [ 2603.469465][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 2603.469488][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 2603.469512][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 2603.469526][ C1] ? __netdev_alloc_skb+0xc0/0x4b0 [ 2603.469559][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2603.469584][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 2603.469608][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 2603.469627][ C1] __alloc_skb+0x1d0/0x7d0 [ 2603.469644][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 2603.469662][ C1] __ieee80211_beacon_get+0xca4/0x1860 [ 2603.469742][ C1] ? __ieee80211_beacon_get+0x36/0x1860 [ 2603.469764][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 2603.469785][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 2603.469811][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 2603.469839][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 2603.469885][ C1] __iterate_interfaces+0x2ab/0x590 [ 2603.469918][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2603.469936][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2603.469955][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2603.469974][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2603.469994][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 2603.470018][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2603.470041][ C1] __hrtimer_run_queues+0x55f/0xda0 [ 2603.470067][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2603.470085][ C1] ? read_tsc+0x9/0x20 [ 2603.470108][ C1] hrtimer_run_softirq+0x192/0x5d0 [ 2603.470132][ C1] handle_softirqs+0x1de/0x6f0 [ 2603.470159][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2603.470183][ C1] run_ktimerd+0x69/0x100 [ 2603.470199][ C1] smpboot_thread_fn+0x541/0xa50 [ 2603.470223][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2603.470251][ C1] kthread+0x388/0x470 [ 2603.470268][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2603.470292][ C1] ? __pfx_kthread+0x10/0x10 [ 2603.470309][ C1] ret_from_fork+0x51e/0xb90 [ 2603.470333][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2603.470355][ C1] ? __switch_to+0xc7d/0x1450 [ 2603.470376][ C1] ? __pfx_kthread+0x10/0x10 [ 2603.470394][ C1] ret_from_fork_asm+0x1a/0x30 [ 2603.470416][ C1] [ 2603.471729][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2603.471752][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2603.471782][ T38] Tainted: [L]=SOFTLOCKUP [ 2603.471791][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2603.471804][ T38] Call Trace: [ 2603.471813][ T38] [ 2603.471823][ T38] vpanic+0x56c/0xa60 [ 2603.471858][ T38] ? __pfx___schedule+0x10/0x10 [ 2603.471891][ T38] ? __pfx_vpanic+0x10/0x10 [ 2603.471934][ T38] panic+0xc5/0xd0 [ 2603.471966][ T38] ? __pfx_panic+0x10/0x10 [ 2603.471999][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 2603.472032][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2603.472069][ T38] watchdog+0x1023/0x1030 [ 2603.472103][ T38] ? watchdog+0x21a/0x1030 [ 2603.472138][ T38] kthread+0x388/0x470 [ 2603.472163][ T38] ? __pfx_watchdog+0x10/0x10 [ 2603.472189][ T38] ? __pfx_kthread+0x10/0x10 [ 2603.472215][ T38] ret_from_fork+0x51e/0xb90 [ 2603.472250][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2603.472279][ T38] ? __switch_to+0xc7d/0x1450 [ 2603.472310][ T38] ? __pfx_kthread+0x10/0x10 [ 2603.472333][ T38] ret_from_fork_asm+0x1a/0x30 [ 2603.472370][ T38] [ 2603.472537][ T38] Kernel Offset: disabled