last executing test programs: 11m48.636702223s ago: executing program 4 (id=156): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xfffffdff, 0x3, 0x1, '\x00', 0x6, 0x201}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40910}, 0x0) splice(r0, 0x0, r6, 0x0, 0x10d00, 0xf) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 11m46.417067659s ago: executing program 4 (id=160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xe50, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0x800, 0x1, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x9, 0xfffffff9, 0x3, 0x1, 0x4f, "0c41920a87e80cb791f19dd0261b7fcb366b00", 0x4, 0x83cb}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000540)={'syz0\x00', {0x5, 0x7, 0x3, 0xc}, 0x50, [0x3, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x6, 0xc, 0x803, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0xfc000000, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x2, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x6, 0x7f], [0x8, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0x400000, 0x2329, 0x5, 0x3, 0x5, 0x5, 0x10000000, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x1, 0xff, 0xa1, 0xb, 0xffffffff, 0x5, 0x8010004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x2, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0xbdc, 0x2, 0x9, 0x3, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7, 0x5, 0x5, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x5, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x2, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x20b, 0x9, 0xdd, 0x10001, 0x9, 0xc3, 0x8, 0x7a1], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x4, 0x1, 0x8626e27b, 0x3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0xa, 0x416, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xfffffffe, 0x5, 0x29, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x1ff, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x5, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0xb, 0xc, 0x4009371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x840000000002, 0x3, 0xff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x15fc, 0x1, 0x4, 0x1, 0x6, 0x0, 0xf}, &(0x7f00000000c0)=0x20) syz_emit_ethernet(0xdf, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@generic={0x88e5, "27a4891792a01d13bfad426924b27153486a150a0ca24a66231aa30a47f2d300dd6dd8fd8cf0e29f0b95ccc6ed7d0c53e577f66517a1663cb83bd133628b85252c8da211be2fe2a8f64a07d31f0e119e2ce8e1859e18f68bd3428e4d4770e77755c2923f6333b0bfb9e6795931010c5dd3852c9cbd35097f14e356999735925def8f7cf313d5787703053c3be7011094e29d82b1437ddcd3fd6d7e245b9a6b68832af66fa2e53571fa81268636033043c8219dc34fbaa346f5f96f5403f4e52dce66276ef2b6781ff222d99bd9fc507675"}}}, &(0x7f0000000280)={0x1, 0x1, [0x4b3, 0x631, 0xd55, 0x7b2]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x301101, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x0, 0xa], 0x10000, 0x202}) 11m41.3179667s ago: executing program 4 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 11m40.352612239s ago: executing program 4 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xb7) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x800) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) shutdown(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600070080008d87000008"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 11m36.530388191s ago: executing program 4 (id=176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x1000000000000192, 0xa) 11m34.554006234s ago: executing program 4 (id=177): r0 = syz_clone(0x8000, &(0x7f0000000000)="200223ceca791654d176ba3539c14158f8cb234a63b352f5ccc0ca6690c3be5854c5da47cb1af45a04735e30855a65af47b4685fc65cc3b2f9429b09b520d19b8bc5f5ab00f1f344c2ae34a0ed389afa9289178fc526b9ae76a09ae2cdb1d86f31f32d3addb6659d957f9ab314bc805d3816ce02f54dc5f8a2b88ce20429504341b9f65a81cb7d08d90c4cb6a4a12a7c0c71b6fe3ea4e6bcba418f25b68526d71d6aa96d1d3f3e6d691c2b88fc1cab16", 0xb0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="dcd6593fafc0d83e92b188aec250b21ac46ad9e8b976305290c25bc0ff0c3aa517e36631973556af914f9571dfa4f255c44d259351b09ed9a1525108da5808fa72a0057558e0393849c3275842e6c1eea8c3161ff74a64977050f9745f371cfe7d8844577bac07ccc7590f8a097d8fde704275215384d19cc7593c0233ae95962534a5") r1 = creat(&(0x7f0000000200)='./file0\x00', 0x14) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x7, 0x0, 0x1}, &(0x7f0000000280)=[{}]) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xc5, 0x47, &(0x7f0000000300)="eabacaaf70032209c734246e2c969cc5de40735ef704a5999804caa3ddb410e786f604a763a2a0f2a83634712289f7273da01973633bfb3cdc55b9b25f2542241597cc2c4eb0c35917385279bb48468c235b5e96e724e16e7ebeef69b48a39a0279fa8ec52af5f7f6f87da379fadae61bba3ed4a372ed878468aebaef3f6ee194d3885c26b84397c8d1eeaaefa7cc12833da43d53694a36d1a45beb6e15e3414a7e0374fe10908d4aabf196e64be96bb85718d790fcb6d211a8e27283143b7573bb8864f95", &(0x7f0000000400)=""/71, 0x8, 0x0, 0xa8, 0x0, &(0x7f0000000480)="910306d33bff48e13f3fa28b5dce68faf98ebd6fa7a8360f672007764b0b4b99a80fcb2f9ec57170f39c57668cbe40681647dcf1d62a18b2edc79d9e59a9a07e3b83420e908ab7ce3dfe223998cd5d1bf72a8d8827c657ca025d4afd0c3fe66a30b92182ca9d0fa292e6edf9e3a6c3772fc13832a38af20022f58bcb594c41f2f4fc84c8c05a888d7abeb5cdd2136e5c020c80937465ea1a2f337661a7f5978e62f16be162e2ac30", &(0x7f0000000540), 0x4, 0x0, 0x5}, 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000600)={0x28, 0x2, 0x0, {0x1, 0xf1f, 0xf070}}, 0x28) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000640), 0x1004) execve(&(0x7f0000000680)='./file0\x00', &(0x7f00000008c0)={[&(0x7f00000006c0)='%}}]%\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)=']$%\x00', &(0x7f00000007c0)='#\x00', &(0x7f0000000800)='/}\x00', &(0x7f0000000840)='\\)%\x00', &(0x7f0000000880)='\\\x00']}, &(0x7f0000000a40)={[&(0x7f0000000940)='\x00', &(0x7f0000000980)='}\x00', &(0x7f00000009c0)='##\x00', &(0x7f0000000a00)='\x00']}) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000a80)={0x41, 0x6, 0x9}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x200, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0), 0x2, 0x2) rt_sigqueueinfo(r0, 0x2d, &(0x7f0000000c00)={0x3, 0x1, 0x81d}) ptrace$peeksig(0x4209, r2, &(0x7f0000000c80)={0x0, 0x1, 0x3}, &(0x7f0000000cc0)=[{}, {}, {}]) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000e40)) mkdir(&(0x7f0000000e80)='./file1\x00', 0x8d) migrate_pages(r2, 0x7, &(0x7f0000000ec0)=0x4, &(0x7f0000000f00)=0x9) r4 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000f40)={0x0, 0x4, [{r1, 0x0, 0x10000, 0xfffffffff0000000}, {r1, 0x0, 0x0, 0xfffff000}, {r1, 0x0, 0xfffffffff0000000, 0x1000000}, {r1, 0x0, 0x10000, 0x8000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000fc0)=0x4) sendmsg$nl_netfilter(r1, &(0x7f0000001340)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001040)={0x2b8, 0xa, 0x2, 0x600, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x8}, [@typed={0xa9, 0x73, 0x0, 0x0, @binary="fb19bf41845eba2729fa4f6df48a97df0a32fe8c88b0457a1111d71ba46918a4b22e4592e713a6c6008a20bd57bef192ba8f77e87af05784a75ec7cba7a5e3440ee0fd310b5925c5363836dbc0b055a81485c65a158f47e7ab3fc7224935059a1f68d39e7203e545743a46d4cdac2c2fa9f06e7ee087b2ab221c1ccda745566105150d9fdad3d086134b2e48d1fe8ed92a110bb4ff3f9dd1e3820379ca2b9f27db22bc531d"}, @generic="d61dff6e8da6c03865879465d03b8607a7491fb75ab7b9d11e0d73b4de3ae377b2eea68bdf637c541f17891f3b52a947ad130898cbc8090b3b6266671739c519125c9b83050c96ea5f96c3332fcfef965b15904dcd7440d3b0e13fa4375baa3f737d7018195d", @generic="af1ace9d3122038ffcca6d07cd8613ad6dc07752ab81683e16f7230fc7e16a0484c58de40d954b65ff97de3f862d33441698e450240398ce883d39dcfcd91a50a098d9104a758dfb0130c8eb4e3a81b85e278a11e3d40c07223cf96d4213f73da4bac7ec2222017b0d9029be8458d392784938e6e6649cfa592051da13381327de35d94f9b6c41428ed6802eb28b43f43870ba1b61d328ae8b6429116fae3a72f66fec0a24caedb87abf2fa04657ceaca9d6b4756c75b8e81390f499f0f6ecaf5705240ea2a252939496a69e73b7951066971d15071c157216ce665b83d7f93aef19b10858", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x5}, @generic="57c8c22a0edfcfaa22b2c17f7f9f456b380656e9d46bf570da46f904aca986de570e719248291c8e92b0959b94780f3a6b4624ed3f9b92ae284c99265afd47aa89b73ecd1e2a35e1acb0d1d981ce7a7e7de334f5bb1a9faf5bc0030a9ae282859810d31e4cc70a68a4a29b23baf0b0703be1ab9b88a5de514b81c87742df593aff23e44efc414e83cfcde045ad2f44a03c655fbb106a1e8003fb1087d24802f2e3"]}, 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x50) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001380)={'\x00', 0xfffc, 0x7b3, 0x8, 0x2, 0xd4, r2}) ptrace$getsig(0x4202, r5, 0x33123685, &(0x7f0000001400)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000014c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001540)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001580)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000015c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000016c0)={&(0x7f0000001640)=[r6, r7, r8, r9, r10, r11, 0x0], &(0x7f0000001680)=[0x9036d40, 0x7af6, 0x8000000000000000], 0x7, 0x1}) 11m18.553868715s ago: executing program 32 (id=177): r0 = syz_clone(0x8000, &(0x7f0000000000)="200223ceca791654d176ba3539c14158f8cb234a63b352f5ccc0ca6690c3be5854c5da47cb1af45a04735e30855a65af47b4685fc65cc3b2f9429b09b520d19b8bc5f5ab00f1f344c2ae34a0ed389afa9289178fc526b9ae76a09ae2cdb1d86f31f32d3addb6659d957f9ab314bc805d3816ce02f54dc5f8a2b88ce20429504341b9f65a81cb7d08d90c4cb6a4a12a7c0c71b6fe3ea4e6bcba418f25b68526d71d6aa96d1d3f3e6d691c2b88fc1cab16", 0xb0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="dcd6593fafc0d83e92b188aec250b21ac46ad9e8b976305290c25bc0ff0c3aa517e36631973556af914f9571dfa4f255c44d259351b09ed9a1525108da5808fa72a0057558e0393849c3275842e6c1eea8c3161ff74a64977050f9745f371cfe7d8844577bac07ccc7590f8a097d8fde704275215384d19cc7593c0233ae95962534a5") r1 = creat(&(0x7f0000000200)='./file0\x00', 0x14) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x7, 0x0, 0x1}, &(0x7f0000000280)=[{}]) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xc5, 0x47, &(0x7f0000000300)="eabacaaf70032209c734246e2c969cc5de40735ef704a5999804caa3ddb410e786f604a763a2a0f2a83634712289f7273da01973633bfb3cdc55b9b25f2542241597cc2c4eb0c35917385279bb48468c235b5e96e724e16e7ebeef69b48a39a0279fa8ec52af5f7f6f87da379fadae61bba3ed4a372ed878468aebaef3f6ee194d3885c26b84397c8d1eeaaefa7cc12833da43d53694a36d1a45beb6e15e3414a7e0374fe10908d4aabf196e64be96bb85718d790fcb6d211a8e27283143b7573bb8864f95", &(0x7f0000000400)=""/71, 0x8, 0x0, 0xa8, 0x0, &(0x7f0000000480)="910306d33bff48e13f3fa28b5dce68faf98ebd6fa7a8360f672007764b0b4b99a80fcb2f9ec57170f39c57668cbe40681647dcf1d62a18b2edc79d9e59a9a07e3b83420e908ab7ce3dfe223998cd5d1bf72a8d8827c657ca025d4afd0c3fe66a30b92182ca9d0fa292e6edf9e3a6c3772fc13832a38af20022f58bcb594c41f2f4fc84c8c05a888d7abeb5cdd2136e5c020c80937465ea1a2f337661a7f5978e62f16be162e2ac30", &(0x7f0000000540), 0x4, 0x0, 0x5}, 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000600)={0x28, 0x2, 0x0, {0x1, 0xf1f, 0xf070}}, 0x28) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000640), 0x1004) execve(&(0x7f0000000680)='./file0\x00', &(0x7f00000008c0)={[&(0x7f00000006c0)='%}}]%\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)=']$%\x00', &(0x7f00000007c0)='#\x00', &(0x7f0000000800)='/}\x00', &(0x7f0000000840)='\\)%\x00', &(0x7f0000000880)='\\\x00']}, &(0x7f0000000a40)={[&(0x7f0000000940)='\x00', &(0x7f0000000980)='}\x00', &(0x7f00000009c0)='##\x00', &(0x7f0000000a00)='\x00']}) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000a80)={0x41, 0x6, 0x9}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x200, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0), 0x2, 0x2) rt_sigqueueinfo(r0, 0x2d, &(0x7f0000000c00)={0x3, 0x1, 0x81d}) ptrace$peeksig(0x4209, r2, &(0x7f0000000c80)={0x0, 0x1, 0x3}, &(0x7f0000000cc0)=[{}, {}, {}]) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000e40)) mkdir(&(0x7f0000000e80)='./file1\x00', 0x8d) migrate_pages(r2, 0x7, &(0x7f0000000ec0)=0x4, &(0x7f0000000f00)=0x9) r4 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000f40)={0x0, 0x4, [{r1, 0x0, 0x10000, 0xfffffffff0000000}, {r1, 0x0, 0x0, 0xfffff000}, {r1, 0x0, 0xfffffffff0000000, 0x1000000}, {r1, 0x0, 0x10000, 0x8000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000fc0)=0x4) sendmsg$nl_netfilter(r1, &(0x7f0000001340)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001040)={0x2b8, 0xa, 0x2, 0x600, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x8}, [@typed={0xa9, 0x73, 0x0, 0x0, @binary="fb19bf41845eba2729fa4f6df48a97df0a32fe8c88b0457a1111d71ba46918a4b22e4592e713a6c6008a20bd57bef192ba8f77e87af05784a75ec7cba7a5e3440ee0fd310b5925c5363836dbc0b055a81485c65a158f47e7ab3fc7224935059a1f68d39e7203e545743a46d4cdac2c2fa9f06e7ee087b2ab221c1ccda745566105150d9fdad3d086134b2e48d1fe8ed92a110bb4ff3f9dd1e3820379ca2b9f27db22bc531d"}, @generic="d61dff6e8da6c03865879465d03b8607a7491fb75ab7b9d11e0d73b4de3ae377b2eea68bdf637c541f17891f3b52a947ad130898cbc8090b3b6266671739c519125c9b83050c96ea5f96c3332fcfef965b15904dcd7440d3b0e13fa4375baa3f737d7018195d", @generic="af1ace9d3122038ffcca6d07cd8613ad6dc07752ab81683e16f7230fc7e16a0484c58de40d954b65ff97de3f862d33441698e450240398ce883d39dcfcd91a50a098d9104a758dfb0130c8eb4e3a81b85e278a11e3d40c07223cf96d4213f73da4bac7ec2222017b0d9029be8458d392784938e6e6649cfa592051da13381327de35d94f9b6c41428ed6802eb28b43f43870ba1b61d328ae8b6429116fae3a72f66fec0a24caedb87abf2fa04657ceaca9d6b4756c75b8e81390f499f0f6ecaf5705240ea2a252939496a69e73b7951066971d15071c157216ce665b83d7f93aef19b10858", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x5}, @generic="57c8c22a0edfcfaa22b2c17f7f9f456b380656e9d46bf570da46f904aca986de570e719248291c8e92b0959b94780f3a6b4624ed3f9b92ae284c99265afd47aa89b73ecd1e2a35e1acb0d1d981ce7a7e7de334f5bb1a9faf5bc0030a9ae282859810d31e4cc70a68a4a29b23baf0b0703be1ab9b88a5de514b81c87742df593aff23e44efc414e83cfcde045ad2f44a03c655fbb106a1e8003fb1087d24802f2e3"]}, 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x50) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001380)={'\x00', 0xfffc, 0x7b3, 0x8, 0x2, 0xd4, r2}) ptrace$getsig(0x4202, r5, 0x33123685, &(0x7f0000001400)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000014c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001540)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001580)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000015c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000016c0)={&(0x7f0000001640)=[r6, r7, r8, r9, r10, r11, 0x0], &(0x7f0000001680)=[0x9036d40, 0x7af6, 0x8000000000000000], 0x7, 0x1}) 10m46.02467866s ago: executing program 3 (id=257): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c0001"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a800)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1ff, 0xfdfdffff, 0x6}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000400)=""/102400, 0x19000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) recvmmsg(r1, &(0x7f000001bc00)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000019780)=""/199, 0xc7}, {&(0x7f000001a840)=""/123, 0x7b}], 0x4, &(0x7f00000005c0)=""/204, 0xcc}, 0x3}, {{&(0x7f00000004c0)=@ax25={{}, [@null, @netrom, @rose, @remote, @remote, @default, @default, @rose]}, 0x80, &(0x7f0000019700)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f000001bd00)=""/4114, 0x1012}, {&(0x7f000001a7c0)=""/6, 0x6}, {&(0x7f0000019880)=""/256, 0x100}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000019600)=""/250, 0xfa}], 0x7}, 0xf}, {{&(0x7f0000002a40)=@rc={0x1f, @none}, 0x80, &(0x7f0000002c80), 0x0, &(0x7f0000019500)=""/230, 0xe6}, 0x667}, {{&(0x7f000001a8c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f000001bac0)=[{&(0x7f000001a940)=""/86, 0x56}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f000001a9c0)=""/4096, 0x1000}, {&(0x7f000001b9c0)=""/177, 0xb1}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f000001ba80)=""/14, 0xe}], 0x6, &(0x7f000001bb40)=""/164, 0xa4}, 0x3}], 0x4, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 10m43.666043586s ago: executing program 3 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100000001) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r6, &(0x7f00000001c0)=""/105, 0x69, 0x1, &(0x7f0000000240)={r7, r8+60000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2}}, 0x0}, 0x94) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$sierra_net(r9, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000380)={0x20, 0x15}, 0x0, &(0x7f0000000800)}) 10m35.325379174s ago: executing program 3 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x143000, 0xb2) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x7, 0x1, r2, 0x0}]) 10m30.263773963s ago: executing program 3 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 10m29.955130409s ago: executing program 3 (id=275): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c0001"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a800)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1ff, 0xfdfdffff, 0x6}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000400)=""/102400, 0x19000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) recvmmsg(r1, &(0x7f000001bc00)=[{{&(0x7f00000004c0)=@ax25={{}, [@null, @netrom, @rose, @remote, @remote, @default, @default, @rose]}, 0x80, &(0x7f0000019700)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f000001bd00)=""/4114, 0x1012}, {&(0x7f000001a7c0)=""/6, 0x6}, {&(0x7f0000019880)=""/256, 0x100}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000019600)=""/250, 0xfa}], 0x7, &(0x7f00000029c0)=""/112, 0x70}, 0xf}, {{&(0x7f0000002a40)=@rc={0x1f, @none}, 0x80, &(0x7f0000002c80), 0x0, &(0x7f0000019500)=""/230, 0xe6}, 0x667}, {{&(0x7f000001a8c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f000001bac0)=[{&(0x7f000001a940)=""/86, 0x56}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f000001a9c0)=""/4096, 0x1000}, {&(0x7f000001b9c0)=""/177, 0xb1}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f000001ba80)=""/14, 0xe}], 0x6, &(0x7f000001bb40)=""/164, 0xa4}, 0x3}], 0x3, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 10m27.768256858s ago: executing program 3 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 10m11.79610143s ago: executing program 33 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m34.108077008s ago: executing program 2 (id=549): r0 = socket(0x2b, 0x1, 0x1) (async) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x80, 0x2, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0xdb4, 0xfffffffd, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfe, r0, 0x1, {0x4, 0x6d4}, 0xf0}, 0x1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m31.712053688s ago: executing program 2 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m31.395337468s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) shutdown(r1, 0x1) bpf$PROG_LOAD(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0xf551}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7m30.953405135s ago: executing program 2 (id=553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0x100000000, 0x9b, 0x8, 0x0, 0x7, 0xc, 0xfffffffffffffff7, 0x3, 0x7, 0x9, 0xbd7b, 0x2, 0x62, 0xc, 0x8, 0x7, 0x5, 0x401, 0x8000000000000000, 0x0, 0xd9, 0x2000000000000004, 0x6, 0x934, 0x8000000000000000, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r2) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) 7m29.644177253s ago: executing program 2 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) shutdown(r1, 0x1) bpf$PROG_LOAD(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0xf551}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7m29.501719915s ago: executing program 2 (id=558): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0xffffff6a}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0x0, 0x0, [0x81, 0x9, 0x400, 0x7f, 0xff], [0x200, 0x4, 0x4, 0x8, 0x72, 0x3, 0x7, 0x8, 0x10001, 0x0, 0x8000, 0x8000000000000000, 0x7, 0x9a, 0x3ff, 0x10000, 0x8000, 0x9, 0x800, 0x1, 0xe, 0x3ff, 0x3, 0x5, 0xd, 0x5, 0xffffffffffffff45, 0x8, 0x9, 0x4, 0x5, 0x9, 0xffff, 0x8, 0x100000000, 0x7, 0x5745, 0x3, 0x4, 0x3, 0x2, 0x8, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x916f, 0x5, 0xfffffffffffffffc, 0x6, 0x6, 0x5, 0x9, 0x5, 0x9, 0x2, 0xd, 0x100, 0x3, 0x7fffffffffffffff, 0x8, 0x0, 0xb, 0x5, 0x2, 0x5, 0x2, 0x7, 0x3, 0x6, 0x2, 0x4395, 0x4, 0x4, 0xc23, 0x18000, 0x3, 0x7fffffffffffffff, 0x5, 0x6, 0x400, 0x2, 0x9, 0x9, 0x4, 0xfffffffffffffffc, 0x535, 0x3, 0xd, 0x3, 0x2, 0x1, 0x1ff, 0x3, 0x7, 0x80000000, 0x7f, 0x3ba, 0x4, 0x3, 0x5, 0x8, 0x5, 0x1, 0xfbb, 0x8000000000000001, 0xfffffffffffffff8, 0xff, 0x2, 0x5, 0x800, 0x1d, 0x100000000, 0x4, 0x8, 0x5, 0x1, 0x7]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x820, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000cc0)={0x3, 0x19, @start={r5, 0x1, "9bc831bd309af531c2c2fa268e14261ce28f14da14e81cb4c8317490cdb0cb67dd6f5695b8991f183ae838c4071e260fee216cf03cc661d69f963fbbd9de0e00f2981c48ccdfb19a32ba38c475b71c44d388b677efe55306aec39d8091973c94d9eaf6b47834a6657f817fe493eef11f48b3eb159d4a6b36b8f49c004711cd108c49c297b9ebe27b6ffb040a9d09684cf723f6230f1be473cb79aa7943a77190cd9ab8e2cd54c9033440c04729e70cbf6a155c802e1d7cd43be34c0d6ae6043228320f92a8c43a833d07a5bf1f46a672bab280c78d4f5dec788a2dc680a69068203d8c9a6ba4627b469c157eb599b1064904178ae859a0451763bdcd3f8ea0d1bf1550fbcc96c1ce09b6abd23f4c18fa6341a222ed051ec559bcd0333c556f7c1947fbf7273a5c3ee162c57a2c5fc5cbb4f9ce90c57fb580fa864f429ecd1743fa27e9168d2c63883b7289e46a27db107b2b8491be74aa6ebeff6b060f8291d72a87aa5e92f205d7512e3ba327453a3bf789d7fe57031f888a4773929a4ac83f5ac3bd7a055f65fbbe5b8f09d1f2dbf8ca0e065265166d76d2e866734157a6d34dc42bb395ed61dbbcb51ffd07eecbb7f310e07e61a76bedc493ff9ad9be89375be9d82bceffec2522429eda5d4a5d2b02eca1eca570f24f9f84a96468e0ac0928991686d63ec5ead85b3c3973d7ef0d460cd7a67a14e1ced3f9edc1336db0352addf0d624c835eefab21b277ba220776899d6c0ce9aa581d6bfc4305ef9471212206fcfb69ec2b079650b1ecac95776633e0756b8922c183e2371be8cff7715a3a87c0c7c1136ab8011742e9f410da9da745a7cc05f2e2e73b69f7ad3404d76d8ace8b42bb3a66d31b826f91b359e73673e61bf46aea6ce08c6be0953f2ac18ab4e1e9097761c5a70c30c7bb0c15ab761c6b4fa4166360591fd1768e7dff2cd90e656d33217b0a0300aaddc2a5d9c795c043c1b98e9f4109f5a36b0944383a4a1e9c559b3080deb6f44779289caddd2eb46ff76763935a51abe43e5eb2a5aea74c5835ad887ec614aa38f466ed02da42d1ebc26a1bbb1906483d47fe1e567bda8ffefa5fb4318160f934116a93f2d1a4b865e1ef4a09d71d146bf860d7fd549a9772b7e85091ee2897c7fe476046c01c493e8fd1f148b3a3aa62c8cc45b3277b3efd972fb1a0d73b454a226573d06c119bb3365651c574e0e3edeb4bc3f12ccbe2b702712812e37e51e88dec6eb3bb1b87bcfd5ba4a79ff2a01ec634f8ab1b8bb623689f9a2ed8830ce41ea6918be601179dfe40f4df717e1c006aa48c80455de4add4126a5ef72781ae2818fc3f06ef815781547dd866f9f9c11bc5ebc34c7010662ce0d9ec1463edbfd5df5cf7e7b2e79e71c5dd3909732e3d612dd520a3796a8c105d6dc34f401a9c814d8c62225f97b18e97045febe49b117d09e14a37b69", "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"}, [0x7, 0x7ff, 0x1200000000000000, 0x9, 0x2, 0x0, 0x1000, 0xff, 0x4, 0xffffffffffffffff, 0xb23, 0xff, 0x100, 0x1, 0x4a82, 0xb, 0xfffffffffffffff8, 0x401, 0xf39, 0x5, 0x100, 0x0, 0xfffffffffffffbff, 0x8, 0xffff, 0x4, 0x4, 0x7, 0x2e60000000000000, 0x8000, 0x0, 0x1ff, 0x3, 0x10000, 0x8, 0xc5d8, 0x6, 0x2, 0xedc, 0x9, 0x3, 0x5, 0x7, 0xb, 0x4, 0x8, 0x8, 0x8000000000000001, 0x3, 0x2, 0xe6f4, 0x7c, 0x0, 0x1, 0x1, 0x6, 0x4, 0xffffffff, 0xa7d, 0x3, 0x9, 0x1000, 0x80, 0xc4]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tran', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESDEC=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r11) 7m14.179885267s ago: executing program 34 (id=558): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0xffffff6a}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0x0, 0x0, [0x81, 0x9, 0x400, 0x7f, 0xff], [0x200, 0x4, 0x4, 0x8, 0x72, 0x3, 0x7, 0x8, 0x10001, 0x0, 0x8000, 0x8000000000000000, 0x7, 0x9a, 0x3ff, 0x10000, 0x8000, 0x9, 0x800, 0x1, 0xe, 0x3ff, 0x3, 0x5, 0xd, 0x5, 0xffffffffffffff45, 0x8, 0x9, 0x4, 0x5, 0x9, 0xffff, 0x8, 0x100000000, 0x7, 0x5745, 0x3, 0x4, 0x3, 0x2, 0x8, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x916f, 0x5, 0xfffffffffffffffc, 0x6, 0x6, 0x5, 0x9, 0x5, 0x9, 0x2, 0xd, 0x100, 0x3, 0x7fffffffffffffff, 0x8, 0x0, 0xb, 0x5, 0x2, 0x5, 0x2, 0x7, 0x3, 0x6, 0x2, 0x4395, 0x4, 0x4, 0xc23, 0x18000, 0x3, 0x7fffffffffffffff, 0x5, 0x6, 0x400, 0x2, 0x9, 0x9, 0x4, 0xfffffffffffffffc, 0x535, 0x3, 0xd, 0x3, 0x2, 0x1, 0x1ff, 0x3, 0x7, 0x80000000, 0x7f, 0x3ba, 0x4, 0x3, 0x5, 0x8, 0x5, 0x1, 0xfbb, 0x8000000000000001, 0xfffffffffffffff8, 0xff, 0x2, 0x5, 0x800, 0x1d, 0x100000000, 0x4, 0x8, 0x5, 0x1, 0x7]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x820, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000cc0)={0x3, 0x19, @start={r5, 0x1, "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", "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"}, [0x7, 0x7ff, 0x1200000000000000, 0x9, 0x2, 0x0, 0x1000, 0xff, 0x4, 0xffffffffffffffff, 0xb23, 0xff, 0x100, 0x1, 0x4a82, 0xb, 0xfffffffffffffff8, 0x401, 0xf39, 0x5, 0x100, 0x0, 0xfffffffffffffbff, 0x8, 0xffff, 0x4, 0x4, 0x7, 0x2e60000000000000, 0x8000, 0x0, 0x1ff, 0x3, 0x10000, 0x8, 0xc5d8, 0x6, 0x2, 0xedc, 0x9, 0x3, 0x5, 0x7, 0xb, 0x4, 0x8, 0x8, 0x8000000000000001, 0x3, 0x2, 0xe6f4, 0x7c, 0x0, 0x1, 0x1, 0x6, 0x4, 0xffffffff, 0xa7d, 0x3, 0x9, 0x1000, 0x80, 0xc4]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tran', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESDEC=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r11) 3m43.562285441s ago: executing program 0 (id=878): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0xefffffff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3m36.76559734s ago: executing program 0 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3d4, &(0x7f0000000580)={@random="61fe71b72b5f", @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x39a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xc, 0x2, 0x0, 0x0, [{0x5, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0020000000e1ee9d5de7b412"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x8, "090000000900000036da018dff16e70b8b1400000000e18e78605aa6be1a02a326a6bce65f81ed039391ca747e6d87c9e18b50606dbce1ae610aadcbf4cdb27eb2"}]}}}}}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0x300}, {0xfffffffd, 0x80000}]}}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x3d4, &(0x7f0000000580)={@random="61fe71b72b5f", @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x39a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xc, 0x2, 0x0, 0x0, [{0x5, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0020000000e1ee9d5de7b412"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x8, "090000000900000036da018dff16e70b8b1400000000e18e78605aa6be1a02a326a6bce65f81ed039391ca747e6d87c9e18b50606dbce1ae610aadcbf4cdb27eb2"}]}}}}}}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0x300}, {0xfffffffd, 0x80000}]}}) (async) 3m36.2471889s ago: executing program 0 (id=897): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) unshare(0x8000400) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3m35.893919672s ago: executing program 0 (id=898): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x400000000b, 0x222600) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r0, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x6, &(0x7f0000000540)=0x7ffeffff) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x42, &(0x7f0000000100)=0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x509802) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="ffdf17c4bf9a63f0a7a4ff3918ae31869493cf5a933b7e172503edd589b08696e539e3dc03e31a6246037dd43b879c40f58f4d1141a22155", 0x38}, {0x0}], 0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) 3m32.924643629s ago: executing program 0 (id=901): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="2f00000018"], 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x8, 0x80200003, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000500)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) accept(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000180)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) io_uring_enter(r1, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 3m17.488447609s ago: executing program 35 (id=901): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="2f00000018"], 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x8, 0x80200003, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000500)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) accept(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000180)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) io_uring_enter(r1, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 15.341020858s ago: executing program 1 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf000000) 13.908171357s ago: executing program 8 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x40000c4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 12.485070108s ago: executing program 1 (id=1633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0x108, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, &(0x7f00000002c0)=[{}, {}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x80400, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESDEC=r1]) mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x2020428, &(0x7f00000001c0)='\xc6\xb3\xd0\x05)\xb4= \x04z\xc0m9\x02\x0e\xecS\x8e\x9e;\xd9\xaa\xa8\xe8\xd3\xe7$\x99\x8a\xbf]W1\x1bTM\xcb\x10\xca\x01m`\xeet\xef\xdc$3\x1eM\xbfG\x04\x89\xbf0\xe8\x1b\xf1\xdc\x1fA\x87\x196\xa3H\x828i\xbc\xf3\xba\xf7s#\xf4\x1dL\x9d\xc5\x96\xef\x96\xe4\x06\xb4\xc2\x8b\x96\xcc\xdb\x8a\xa60\xb7\xc0d\x1e\t(\xf4\xc2\t\xd0\xa5\xaf\xba\xcb\xf1U\xd1\x9f\xbc\xe4\na#\xc9') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(0x0, 0x10) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000400)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.865517131s ago: executing program 8 (id=1638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = gettid() capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioprio_set$pid(0x3, r4, 0x6000) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000001100000000000002b99421a720b780c103e366c842f78e6a129efdd9e380add76c884e10170901395639818562cce8c1ccb83ff6cd76f0f590eb50e75f62818047707755cd859559abbe1c9077b49f5e5b03b23cb93d077d246e4f40f76911b41a0116a01863f01a4abe40177851def11db50d4f527b7d4be8d5095975ab0055539f6177021585ec3382bfd9fc60ba58aeb8e45a8e6f7270058262722537eb3beb27595cbc94b94a26f1ae0e1591418fdc15730df4438636c3cc6d82"], 0x0, 0x26, 0x0, 0x0, 0x40000000}, 0x28) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 9.587649666s ago: executing program 1 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x100}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="aa9b02c317aaaaaaaaaaaaaa4305b5de64"], 0x0) clock_gettime(0x0, &(0x7f0000003f00)) recvmmsg(r3, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/111, 0x6f}], 0x1, &(0x7f00000005c0)=""/77, 0x4d}, 0x100}], 0x2, 0x40, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffb}}]}]}]}, 0x48}}, 0x800) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2902, 0x0) r6 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendto$inet6(r6, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}, 0xfffffffc}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x1, 0x81}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 8.65669139s ago: executing program 8 (id=1643): socket(0x2000000000000021, 0x2, 0x10000000000002) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8.229406434s ago: executing program 5 (id=1647): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$binfmt_script(r0, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) 8.016990225s ago: executing program 5 (id=1649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = gettid() ioprio_set$pid(0x3, r4, 0x6000) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x140) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@window={0x3, 0x3, 0xfc}]}}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000001100000000000002b99421a720b780c103e366c842f78e6a129efdd9e380add76c884e10170901395639818562cce8c1ccb83ff6cd76f0f590eb50e75f62818047707755cd859559abbe1c9077b49f5e5b03b23cb93d077d246e4f40f76911b41a0116a01863f01a4abe40177851def11db50d4f527b7d4be8d5095975ab0055539f6177021585ec3382bfd9fc60ba58aeb8e45a8e6f7270058262722537eb3beb27595cbc94b94a26f1ae0e1591418fdc15730df4438636c3cc6d82"], 0x0, 0x26, 0x0, 0x0, 0x40000000}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 6.741985215s ago: executing program 5 (id=1655): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 6.524762559s ago: executing program 5 (id=1657): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0xffffffff, 0xfffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0xd8, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 6.51058473s ago: executing program 6 (id=1659): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$binfmt_script(r0, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) 6.44045942s ago: executing program 5 (id=1661): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) 6.258286413s ago: executing program 6 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd6", 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0x3, 0x0, 0xb, 0x100, 0xffffffffffffffff}, @ldst={0x6, 0x2, 0x2, 0x1, 0x3, 0x2, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @exit, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfbff611a}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) close(r2) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf0", 0xe}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x2000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x101, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x40000000000001d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x4, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4010}, 0x844) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x40) 4.865463705s ago: executing program 6 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r3, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.288324892s ago: executing program 8 (id=1667): setreuid(0xffffffffffffffff, 0xee00) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(r0, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.286672845s ago: executing program 6 (id=1669): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x14, r5, 0x10}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0xa, 0x7, 0x9, 0x80, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0x3, 0x6, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0x3, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x72b, 0xb2, &(0x7f0000000380)=""/178, 0x0, 0x2, '\x00', r6, 0x1b, r2, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000480)=[{0x3, 0x3, 0x4, 0x5}], 0x10, 0x8}, 0x94) close(r2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r9, 0x4, 0x2) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.175962571s ago: executing program 6 (id=1675): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x44, 0x2}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xb14, 0x0, 0x0, {[@eol, @eol]}}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404"], 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) 2.106191173s ago: executing program 1 (id=1676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd6", 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0x3, 0x0, 0xb, 0x100, 0xffffffffffffffff}, @ldst={0x6, 0x2, 0x2, 0x1, 0x3, 0x2, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @exit, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfbff611a}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) close(r2) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf0", 0xe}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x2000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x101, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x40000000000001d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x4, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4010}, 0x844) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x3c}}, 0x40) 981.404957ms ago: executing program 5 (id=1678): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0x3, 0xfefffff4}, 0x10) mkdir(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x198) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 803.961807ms ago: executing program 7 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000de980e339f200541344d683810b16b617fb03a1304c7f5d89f6a1fc7f8c2e2a22ed95e22e2a1e81a46ce36997fb2decf5e07819ee48a42cdfbab7ab9d398a7f90d83c6"], 0x50) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r0, 0x0, 0x20000000}, 0x38) r1 = socket(0x10, 0x3, 0x0) accept4$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @rose, @netrom, @null, @default, @rose, @null]}, &(0x7f0000000080)=0x48, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0xa, 0x43, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x40, 0x5, 0x5, {0x5, 0x3, "942dc7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x16, 0xbc, 0x83, 0x40, 0x91e, 0x3, 0x5a81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x41, [{{0x9, 0x4, 0xe9, 0x8, 0x0, 0x93, 0x32, 0x9a, 0x6}}]}}]}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000180), 0x5, 0x292200) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="b875a1431a05b9319c404acaed8a33c44dff045b5c6af0363e2255c1cabf7d8d271b5d7e35673142d523215281b08537f0e605a87c33205b057cceac179e5c287be40f8063bf6ba78ebe467ba7bf0262a3af1797e4fcfdb91a2851c18143aab760f7499f34b72cc45a652f87a050d7bc601596392afff23132d72c8e2a5b926028d0ecd7dd8ca65d84d499e87c4766accbf387125c1e973a9e07819b14c47877c5bff85802fc58ed824e08718e19b8e97bf64bf7eb050203eda382dc624dd1e1640c625f5e3bbf04f0b0e645f3eb40a25e57162a1d71f7c1780fcfa85aa75cee361a240de502", 0xe6}], 0x1}}], 0x1, 0x20000000) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000040)=""/48, 0x30}], 0x2}, 0x7}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003280)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01004d2234681ecdb777080000000c00018008000100", @ANYRES32=r9, @ANYBLOB="94000280040001008c00038034"], 0xb4}, 0x1, 0x0, 0x0, 0x802}, 0x8080) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x169a82, 0x109) write$yama_ptrace_scope(r10, &(0x7f00000003c0)='2\x00', 0x2) 802.781163ms ago: executing program 1 (id=1680): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4080) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0x8000]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 585.620373ms ago: executing program 1 (id=1681): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r0, &(0x7f0000000040)=')N', 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace(0x10, r4) r5 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r5, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c8", 0x14, 0x800, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000202000000000000000040"], 0x10}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000000)={0xc, @multicast1, 0x4e23, 0x1, 'sh\x00', 0x8, 0x7f, 0x4d}, 0x2c) fstat(r0, &(0x7f0000000600)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884809"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) recvmsg(r7, &(0x7f00000005c0)={&(0x7f0000000100)=@pppol2tpv3, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/187, 0xbb}], 0x7, &(0x7f0000000580)=""/36, 0x24}, 0x0) r8 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 584.38729ms ago: executing program 7 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004851}, 0xc040) 364.050604ms ago: executing program 7 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 355.218822ms ago: executing program 8 (id=1684): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$binfmt_script(r0, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) 291.486224ms ago: executing program 7 (id=1685): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff000009"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000005080)={&(0x7f0000005040)=[0x0], 0x1}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @broadcast, @local}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x20) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20048080}, 0xa3134a4ad97c62eb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000007c0)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x0, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000, 0x401}]}) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c0000000000019078ac1e0f00907800070001000000000000"], 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r12) sendmmsg$alg(r11, &(0x7f0000004e40)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="70956a2b0d6d941ca0ccd69ee572d52c7e5e8f6a0cf6a019e08c0681264fed65dc6219356b9c887f4756ff6c5c9dfc8af50e0272ba583aff9a26ee587281c4263cb3cb2c4a1052c076ba8578650293fca5d2f8ed30c43c50d1924e295934279970ace68567e1cc60d212487b2c3099cc2593f5327096fd310f3732441f1cbc0b6a830677b618edf9", 0x88}, {&(0x7f0000000740)="6fe86de91f012170fed9d60468bf49c037d31f9e2727b61373d134f9acdf69fc64abe94fdf367a946381d60ad4e2e51d54e70927f0f03272b14e8cfc63ccb7532c0f9c05470bd624f5", 0x49}, {&(0x7f00000000c0)="1a466abf8455b244f43c2c238c4d62985bca091e6bd4d11fc5", 0x19}, {&(0x7f0000000240)="7640024abff406dd1f1622f05810fec0583d88e8d24154b079cc3ed6baa23440c90ce302b13ed3ba78aa22b22fb5ac14c4ea1305333b22e8ad50b0ed", 0x3c}, {&(0x7f0000000900)="3bd4c7365ba8c845c34ef86d1021f94c00a35a3a8ee5171819447a23cd4578d2eaab527e04558184791cfa048fcd4f5bbd8906382ad820a1d934b014c73f4c684c6721dfcba5f67ccdf202d1c044efc1c47849e75e82b7b6f8ec4e28e2503fccd462da8051de30c97b626ae91b65b225e513f7a5286921b9507e31cbb8a3", 0x7e}, {&(0x7f0000000980)="92d6b08c9bc5fd58ca0a662e3a84b8afbaff043e2f7f1ecef755a4f77112ccdc35bb3f2a6e805f06369d5249b75923d18ba24279c1c65bc504935808c861de14af486de71b58d681e2c67b7fa596477081584f3139c861c494693031ecfec616ee3ad50d41985b2c73", 0x69}], 0x6, &(0x7f0000000a80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x88, 0x117, 0x2, 0x73, "6be028b3abe515d4c2c7a263195606a98924c90f32faf9ab3af28c5a2154576d9202f88bf66686935fdf629b04e83d0ad629ab3edbe2fef818e69aa42258235e8fd0300d2cdfc6c97fa7520a652722ff839d79a3a1659eb703a95e12fcf6e82990fe5bb653f2347fd183e7f9a9a50e6b6d134e"}, @iv={0x20, 0x117, 0x2, 0xb, "f91e732d41c898b642e064"}, @op={0x18}, @op={0x18}], 0x108, 0x40}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000bc0)="ae0d7984faa33254cd7aea2051fc354e67b262ee1312af61f51843924ea8382db4caceeea486714bd9ca22ab61a7aa390a87939824317f307e7451e5e3411ac784553b2dcc165bb6202baaf2576323131fe6b5ac9e9020221e7078657b36", 0x5e}, {&(0x7f0000000c40)="eb873c0f0150c71a84e12003e3210338639b7d26b0d464dfce7263365a226c6c37c1da7aa9e998356e703aae84b28061fe736e8f835a0889b6bfc41c48b2a4f0b4620948ace44e721bab0adb1b97d878dcd0cd8141ffe5ba41a4b0dc85da8d2d4dd472af70ac7a22dc3a65ee5e512758bf44e196a01f550254958eba5f69fe11c2ea898e3b59c6f1eeb64b9c7782c34d11d23ce5f3cb351df533194e020c169bd5a393be7a98b0919c2971b0404808da7b007b55bbe8211592f33307b07eed045f9fb116f563ef2ec97b1e129f8768f6302c38d8c0ec2370bedd19508a10ccf35b06c463dcd55bfbe80728966fdddfc5dc1f4593fb50df6f", 0xf8}, {&(0x7f0000000d40)="f69592a232eddd0b50960232eefaa533a4a5a4b839ff21248e58b9aaebec1084627da4e85efd682ed62f783643f37dbad11e767b43ed1a8856fa4f7fe0a5f0c989e0bd7ae12593dd9fc16f58cfa0a5f999298a4aff1d285f1204f144391958751198e93cf09f503cada9f4aacbcf1566777fe8f3e434f65e977980de751c8874587ab9737bb02cd7e48e2b16bb89e7f56d1dfb6de74fccc0b2397934a9efe7cf31371ba41b7070620d", 0xa9}, {&(0x7f0000000e00)="15e3bfb3c0a10d713dbdd52630371d391630542d1b0f5344fec3a49079b1713b134912c4b7eea9289313ca0cc4641468fb27e8ee4b5368201e38119036be8124cd84d5b54d46830b3bd705b91dc705251d4bb97ccba7cd8bed3e611ae8c64f1e595af037a62ce4fa5594dbf01e00f7f74b328cf3dcdcd2598208edc5abffa492740e98722b0db6af70f1968c60555ff7aa95d960fbece5fbd07e1be79eb1b16faa8b98472cacf4dc6097d1316ec0e48ec947062030d20483358659386163cc0bc91b395b58329b21a08b1d77ec820ed4793d334cc09aec542ba50e71078012b54de55637f90afb1a71ef1fbc5b3e97b5cd7a4d043e1fc1eb", 0xf8}], 0x4, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x44055}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f00)="6d37ab0443a43b319907748fa9d8cc2320ecbaea7d9c58471d2b0557b1728465ce17b532f175f68401f49e1a019d24b8595d1fe0df6ac334b57896c147bc69bc14b0a807edb9b7d5d0e764b14d8df7e72519e859f445f2e682f026c1c6519f936345c98aae40c585972314515228e8fc3bd9aa0a76b6f96835b15be0b1bd6fcfd8cbaad7f0c3aee2ef91203f", 0x8c}, {&(0x7f0000000fc0)="ddbf4f26ca3ea322c770f3d2896e7baac5d58b3d8257abe7911a0db8f8d99f9cd8fd1bf91f08baf3a665b851c7f6f7056b36152f42462d656b5700f25b3dafe017b684dd3f04ccbe7ecb9766567274e72dc869c1084ba96b195edbc204a9ca0c5ad3050033d129ea9c98b7c68b4f200c1b208f126fb671c8fe17bc275c9fc5eebd45e0b35b311b88ca5db0c2fd77", 0x8e}], 0x2, &(0x7f00000010c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa}], 0x60, 0x1}, {0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001140)="3368470cfbaec31145e6904dacfc23010a57fbeaeb4da9b49cf3fc8464029c3f768307bcf1992608752f804615811030d3c16d5acea6992e89179d64b8e8390bac75320eeb7a30c8dbbbc1b9a5bba62ec222bf683e0516625786982f0e45701d56e735ac82c6904ccaa98fad8bebb5941a49065c63e6a157f3f15031e6ae", 0x7e}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="afa21d3d610207331a0034f28dd937cdbc04f7bbb24b6cc3f445034ecedc3948db70d32e104a78b211dee4a47cde6a23dec6decf910e13116127a7b794dc303921dd478c4db1a9a285488ff2498a4f98e619b1a9d5eb0c3638e9e20f19a9f19e38fe9cd289e289a3bc13a149ab7b3852f42b9dd96c36bdc98aa92ca776e1ccb76f22c01d39fae81a783de38ea6c2b5fa153e299b756004422d2df7613a6b434fcb307d1e759d88d274d4d24a7ca2778a6051f7bfe8f5abafe25d346c8e0cabb4e75416c86b78a7ca3c832138fd06cbac5905f3b87796e22f153c55b5ab2cf31966c7518590f9aba0a9fc207cea33bbbe3bda1795", 0xf4}, {&(0x7f00000022c0)="f86eeaa5ce4daef420605214a871eb116c7e70e406591f32c29886d4dbf622280b4d5d29c40fc45906f9d939d086901c609edbd474b28ae82fc3c641f26ae934fcb8cf59954491683a2640cafabe", 0x4e}, {&(0x7f0000002340)="e917665fe330cb48373af98b0380f9635b01de6ba7c35c7bdfac2067887a310bd29a430b749420e8a231c2d4340006d7b914c2095fc261b0b64801c8", 0x3c}], 0x5, &(0x7f0000002400)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x80, 0x117, 0x2, 0x6b, "fde1d7b3adc8f8d21ec670ca11234b3ae7d19edede371fa5bdd7ce004a28facacb76b8c86305c6cd170d9857c2c3d7466ce6d8905806ebebe7f9bc0897702f8a5e40a205aeb8d29be28b57d16171ed110fa1351d20770602a1364e11d66e7bc8b02fddb0dde4b5a659fab2"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x140, 0x4008000}, {0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002540)="52fef69de4f0aeff439b7c604543b2f8384194640b8cec90d83327aa4852073dbbaab3c2cd110e726ae2c9566c20c4247beb55785b8d0ab4136490f36c", 0x3d}, {&(0x7f0000002580)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000035c0)="56e7201e567a726f890a6005f9f01d2f24d0a7d81dbe652c2b53f38992212362fb5e93a7bb67bbf43d2bb44e4d719c02b4c74f3b6493405bef8bee1d010d567173df4f6269348c407646a8dc408a64d6849292642b9d01337dc49ce86d7431fc124b27537b3a478c0c1e7eb6967c71af35da15c46c10b6d115d5f524c96da249c4652fa8610f47feaac6fb1278302fc4041ee45a4ba5cf80bc3f7bb8c9c92db28c6188b41e8cc56d68d1008136ec52f35270f9e768739d40c49fa035afa7cdcc9cd2b5063343ce2701cfc1c18f803f544924", 0xd2}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f00000046c0)="d18fb3b4d497d6d718d8e39b4d90cbf18f3e2cbc0736b8f575e005e987ed361f1512346a321e37599089a89d59a8c2d4c83bd327", 0x34}, {&(0x7f0000004700)="04319f56277beb51f59156a4dd09f4dd75e46773060e26e585fc071a5162c291860abae27508f03157c636e2f26dc05fc3b6aa82566fd56c6feeca1b454785246022648fae9c785d73573d8ee2055dbd7fde498745b5d1a014484e2bba50b72a704f5845496845995e3aaf81de25d9dbc3b43d5c00ce2618cf3e48139ae2fbf9ccbe99483b3b310f173eaec82d10d88db4da708fdbc424f5e0e31d365a89db110b0ab4f54d9d2ecb0f10f665fcda47eae7a65cf1c693d76a94d298de5b5e383d6f999c7b38648384eb7b66ecdd33ce401d6cac5c03de8efaa106db06e828ecbf0a", 0xe1}, {&(0x7f0000004800)="93ff7556222f081474b564d205c2fb477764af11fd939c3cb2ecc812cbd275c193fabdeb8e86c2c74263f7e61fc33c9f853ce1653f2200a7625196b01a830d26c233b36b3894140318a245f0e086fa8585b1bcfed5e9ddf8e689912bba73a045e07a9dcfe3660f6df143801f4d59948c9c813ae9354adfbed2b7cb5221bad6aef1f1281ff3f3e69e63d25bbba05ef096d7b3bcc83fbc1a581f63b96f74625502ca73f6e5ddef04e34a50", 0xaa}], 0x5, &(0x7f0000004940)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x55, "08b15e6b340109e74d6c3ab22355f0e77f4d24153cac1160b9e536998023b213a2dd4058fbb56c950082a86b5660f18c06e8bed332fc0b490f6c2b3e5cd54299aa4ede82c27ba3448fc6d81562fa77e87ecfecad51"}], 0xa0, 0x2c00209d}, {0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004a00)="4723757dc62f1536ced5b47cf9276dc8f266a97452fea4fa77c1d10a4e5b3b65c08ce40c73e8dc14e71d482a04c0eabb441b3d9e893c71981f3936ff8c258550ecb0bb0887d22f7b8ceebcc7c6944037892edcbd18d7ad1cfb0e38002663e1c55a40669fc7e4148f759f0dc6e0c37c251ee5ab71a0df65d4a70b4a2acf748c98c7c16c9de7801ecbdc55afcc519646beeaa32c55acf51cfaac97ee52c011bdbb92f86dbd3680de87d3971ad2ea3c7d9973f681f2d82b721c886c9697688fcc4041b3929b239b1d276c9b600de3d7c3", 0xcf}, {&(0x7f0000004b00)="3899678f8a31fbb91c047f559ad08d0aaf98a6b38ee0e3124ec5b59084dbc14a0740bc4e86a6966e816dbc39b02a474a621aa2f047d108740af431e745177ba326540cc1d11c12d4bedd68b832191c9cfaa9e9a820d4028c35866e2060fd61070349bc85e56fb124d035f3178bbc3105ae385c75caf85ae77c9af67344498d8c35f8e9ed12517b33500d5e76aec445b0f00f70830f4230fe26db46174368bfdfc6185bc6bafd6d6e8596570b7defc664c6250f6fc2cce315fc8dabefc1e62d545dedd8d1b668aa9b286697a4b701", 0xce}, {&(0x7f0000004c00)="1e7dcbe910e14bfac0ae7bb11cac29cf207affbf9ba22bb67e8b5ab0e0ef75c0f4e8be0861216bb6e6c4def1fefe4222b546973be4f4339038d3c278df2e3ba88da218edf666fdc20451eb904df4e2fb9717f3d7a31c8f24af7f9bc71e5ce5fd1ae39a8fdfa24cda176d3fe21c81a73cee208baf1b04057f54039d12847351e6c0fe5a9f54df8d78026c2e91477b1614e227b895ce", 0x95}], 0x3, &(0x7f0000004d00)=[@op={0x18}, @iv={0x58, 0x117, 0x2, 0x3d, "0fece83b90847596c0a8cc7684c25ae6e7241a94b31753261b4923c2a1428b6c030afc27ff23e02730af4a35cc3fa02bee24430d157d87030108743681"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x24}, @iv={0x18, 0x117, 0x2, 0x4, "03506280"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x48}], 0x118, 0x20008880}], 0x7, 0x4040001) 192.84621ms ago: executing program 7 (id=1686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}], 0x28}}], 0x2, 0x4000845) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x7fffffff, 0x4) 190.487028ms ago: executing program 8 (id=1687): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0xc1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x5, 0x104, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x5, 0x8d], 0x26000, 0x2008c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.618554ms ago: executing program 7 (id=1688): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffff}, {}, {0x4, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffff7fff}, {0x80000000, 0xfffffffa}, {0x0, 0x1}, {0x4, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x5dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x40, 0x1, 0x5}}]}]}]}, 0x54}}, 0x0) 0s ago: executing program 6 (id=1689): socket(0x2000000000000021, 0x2, 0x10000000000002) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ] Cannot create hsr debugfs directory [ 594.646987][ T5978] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 594.655392][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.815475][ T5978] usb 7-1: Using ep0 maxpacket: 16 [ 594.828983][ T5978] usb 7-1: unable to get BOS descriptor or descriptor too short [ 594.842126][ T5978] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 594.842166][ T5978] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.842198][ T5978] usb 7-1: config 1 interface 0 has no altsetting 0 [ 594.877390][ T5978] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 594.877423][ T5978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.877445][ T5978] usb 7-1: Product: syz [ 594.877682][ T5978] usb 7-1: Manufacturer: syz [ 594.877700][ T5978] usb 7-1: SerialNumber: syz [ 594.902488][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.072018][ T5940] usb 1-1: string descriptor 0 read error: -71 [ 595.117018][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.118166][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.118431][ T8674] bridge_slave_0: entered allmulticast mode [ 595.153036][ T8674] bridge_slave_0: entered promiscuous mode [ 595.303718][ T5940] usb 1-1: USB disconnect, device number 36 [ 595.325519][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.325650][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.325991][ T8674] bridge_slave_1: entered allmulticast mode [ 595.329364][ T8674] bridge_slave_1: entered promiscuous mode [ 595.380387][ T8790] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 595.463951][ T5978] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input13 [ 595.491508][ T5153] bcm5974 7-1:1.0: could not read from device [ 595.552397][ T5978] usb 7-1: USB disconnect, device number 15 [ 595.607753][ T8793] FAULT_INJECTION: forcing a failure. [ 595.607753][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.607796][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.1.755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.607829][ T8793] Tainted: [L]=SOFTLOCKUP [ 595.607837][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.607853][ T8793] Call Trace: [ 595.607862][ T8793] [ 595.607872][ T8793] dump_stack_lvl+0x189/0x250 [ 595.607908][ T8793] ? __pfx____ratelimit+0x10/0x10 [ 595.607945][ T8793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.607977][ T8793] ? __pfx__printk+0x10/0x10 [ 595.608001][ T8793] ? __might_fault+0xb0/0x130 [ 595.608048][ T8793] should_fail_ex+0x46c/0x600 [ 595.608086][ T8793] _copy_from_user+0x2d/0xb0 [ 595.608109][ T8793] kstrtouint_from_user+0xc4/0x170 [ 595.608164][ T8793] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 595.608200][ T8793] ? __f2fs_ioctl+0xbc0/0xb840 [ 595.608242][ T8793] proc_fail_nth_write+0x88/0x200 [ 595.608277][ T8793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 595.608319][ T8793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 595.608357][ T8793] vfs_write+0x287/0xb40 [ 595.608401][ T8793] ? __pfx_vfs_write+0x10/0x10 [ 595.608431][ T8793] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 595.608472][ T8793] ? mutex_lock_nested+0x154/0x1d0 [ 595.608501][ T8793] ? fdget_pos+0x253/0x320 [ 595.608541][ T8793] ksys_write+0x14b/0x260 [ 595.608573][ T8793] ? __pfx_filldir+0x10/0x10 [ 595.608614][ T8793] ? __pfx_ksys_write+0x10/0x10 [ 595.608653][ T8793] ? do_syscall_64+0xbe/0xf80 [ 595.608682][ T8793] do_syscall_64+0xfa/0xf80 [ 595.608706][ T8793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.608730][ T8793] ? clear_bhb_loop+0x60/0xb0 [ 595.608759][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.608782][ T8793] RIP: 0033:0x7f744805e1ff [ 595.608803][ T8793] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 595.608824][ T8793] RSP: 002b:00007f74462be030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 595.608849][ T8793] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f744805e1ff [ 595.608866][ T8793] RDX: 0000000000000001 RSI: 00007f74462be0a0 RDI: 0000000000000006 [ 595.608881][ T8793] RBP: 00007f74462be090 R08: 0000000000000000 R09: 0000000000000000 [ 595.608896][ T8793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 595.608910][ T8793] R13: 00007f74482b6038 R14: 00007f74482b5fa0 R15: 00007ffcf852e5d8 [ 595.608948][ T8793] [ 595.695684][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.061307][ T8797] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.073635][ T6379] IPVS: starting estimator thread 0... [ 596.126931][ T8802] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 596.196085][ T8800] IPVS: using max 7 ests per chain, 16800 per kthread [ 596.448051][ T5978] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 596.476921][ T8810] uprobe: syz.0.759:8810 failed to unregister, leaking uprobe [ 596.537399][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.594709][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 596.596525][ T5978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.596551][ T5978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.599308][ T5978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.599338][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.599361][ T5978] usb 2-1: Product: syz [ 596.599378][ T5978] usb 2-1: Manufacturer: syz [ 596.599390][ T5978] usb 2-1: SerialNumber: syz [ 596.738384][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.778514][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.178984][ T8674] team0: Port device team_slave_0 added [ 597.199518][ T8674] team0: Port device team_slave_1 added [ 597.776339][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.953505][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.126251][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.126271][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.126305][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.141305][ T5909] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 598.292472][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.292491][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.292523][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.336943][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.478422][ T5909] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 598.711343][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 598.815428][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.099982][ T5978] usb 2-1: 0:2 : does not exist [ 599.176558][ T8674] hsr_slave_0: entered promiscuous mode [ 599.178183][ T8674] hsr_slave_1: entered promiscuous mode [ 599.182175][ T8674] debugfs: 'hsr0' already exists in 'hsr' [ 599.182203][ T8674] Cannot create hsr debugfs directory [ 599.213623][ T5978] usb 2-1: USB disconnect, device number 22 [ 599.304697][ T5977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 599.406806][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.419711][ T8786] udevd[8786]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.454589][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 599.458196][ T5977] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 599.458244][ T5977] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 599.458271][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.340223][ T68] bridge_slave_1: left allmulticast mode [ 600.340255][ T68] bridge_slave_1: left promiscuous mode [ 600.340542][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.510641][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.554692][ T5940] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 600.586192][ T68] bridge_slave_0: left allmulticast mode [ 600.586225][ T68] bridge_slave_0: left promiscuous mode [ 600.586505][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.704677][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 600.715486][ T5940] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 600.715520][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.715543][ T5940] usb 7-1: Product: syz [ 600.715559][ T5940] usb 7-1: Manufacturer: syz [ 600.715576][ T5940] usb 7-1: SerialNumber: syz [ 600.767795][ T5940] usb 7-1: config 0 descriptor?? [ 600.794809][ T5940] uvcvideo 7-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 600.794859][ T5940] uvcvideo 7-1:0.0: No valid video chain found. [ 601.018933][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.485234][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.825655][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.948417][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.058447][ T68] bond0 (unregistering): Released all slaves [ 603.554692][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.877428][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 604.101816][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.460455][ T5909] usb 7-1: USB disconnect, device number 16 [ 604.641655][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.758093][ T5977] usb 1-1: string descriptor 0 read error: -32 [ 604.925322][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.773'. [ 604.927409][ T5977] usb 1-1: USB disconnect, device number 37 [ 605.527679][ T68] hsr_slave_0: left promiscuous mode [ 605.565462][ T68] hsr_slave_1: left promiscuous mode [ 605.566800][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.811818][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.836473][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.317260][ T8882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.825021][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.134983][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.303559][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 607.940997][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.051143][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.874714][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.880205][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.946424][ T68] team0 (unregistering): Port device team_slave_1 removed [ 610.137146][ T68] team0 (unregistering): Port device team_slave_0 removed [ 610.185922][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.737579][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.137888][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 612.144136][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 614.762215][ T8938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.285735][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 616.299770][ T8674] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.362829][ T8674] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.398465][ T8674] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.434685][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 616.460411][ T10] usb 7-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 616.460447][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.460471][ T10] usb 7-1: Product: syz [ 616.460488][ T10] usb 7-1: Manufacturer: syz [ 616.460505][ T10] usb 7-1: SerialNumber: syz [ 616.471477][ T10] usb 7-1: config 0 descriptor?? [ 616.496771][ T10] usb 7-1: bad CDC descriptors [ 616.565218][ T8674] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.645940][ T8954] netem: change failed [ 616.718560][ T8957] erspan0: entered promiscuous mode [ 616.812086][ T8960] input: syz1 as /devices/virtual/input/input14 [ 616.834637][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.835069][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.862883][ T8953] erspan0: left promiscuous mode [ 616.920940][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.794'. [ 617.049120][ T8660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.057715][ T5940] usb 7-1: USB disconnect, device number 17 [ 617.230937][ T8660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.302148][ T8660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.354265][ T8660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.556460][ T5940] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 617.660257][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.714643][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 617.723860][ T5940] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 617.723891][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.723906][ T5940] usb 1-1: Product: syz [ 617.723916][ T5940] usb 1-1: Manufacturer: syz [ 617.723927][ T5940] usb 1-1: SerialNumber: syz [ 617.726253][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.737157][ T5940] usb 1-1: config 0 descriptor?? [ 617.826276][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.826532][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.873126][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.873335][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.018156][ T5940] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 618.026519][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.156941][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.209867][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.210082][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.274413][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.275554][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.561669][ T5940] usb 1-1: reset high-speed USB device number 38 using dummy_hcd [ 619.015932][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.142842][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.799'. [ 619.145743][ T5940] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 619.145773][ T5940] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 619.392076][ T5927] usb 1-1: USB disconnect, device number 38 [ 619.517879][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.174474][ T8674] veth0_vlan: entered promiscuous mode [ 620.216235][ T8674] veth1_vlan: entered promiscuous mode [ 622.661284][ T8674] veth0_macvtap: entered promiscuous mode [ 622.744824][ T8674] veth1_macvtap: entered promiscuous mode [ 622.865978][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.963950][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.037140][ T44] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.042552][ T44] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.080951][ T44] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.097032][ T8660] veth0_vlan: entered promiscuous mode [ 623.130982][ T44] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.244246][ T8660] veth1_vlan: entered promiscuous mode [ 623.976395][ T8660] veth0_macvtap: entered promiscuous mode [ 623.988426][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.988451][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.014275][ T8660] veth1_macvtap: entered promiscuous mode [ 624.227816][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.227841][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.262978][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.348006][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.596666][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.598709][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.602618][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.609075][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.375480][ T9033] autofs: Unknown parameter 'û³#Iéx«›e´±G—UûkGº¤E¬Z'µÿ c'ï½]ÈBý®‡¤È!à-v $]×ØžÀ—' [ 627.665003][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.665029][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.797394][ T9052] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.970598][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.970623][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.502470][ T9075] EXT4-fs (nbd7): unable to read superblock [ 632.610942][ T9075] trusted_key: syz.7.818 sent an empty control message without MSG_MORE. [ 633.118544][ T9082] FAULT_INJECTION: forcing a failure. [ 633.118544][ T9082] name failslab, interval 1, probability 0, space 0, times 0 [ 633.118587][ T9082] CPU: 0 UID: 0 PID: 9082 Comm: syz.6.813 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 633.118621][ T9082] Tainted: [L]=SOFTLOCKUP [ 633.118634][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.118648][ T9082] Call Trace: [ 633.118657][ T9082] [ 633.118667][ T9082] dump_stack_lvl+0x189/0x250 [ 633.118703][ T9082] ? __pfx____ratelimit+0x10/0x10 [ 633.118741][ T9082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.118772][ T9082] ? __pfx__printk+0x10/0x10 [ 633.118803][ T9082] ? __pfx___might_resched+0x10/0x10 [ 633.118828][ T9082] ? fs_reclaim_acquire+0x7d/0x100 [ 633.118855][ T9082] should_fail_ex+0x46c/0x600 [ 633.118893][ T9082] should_failslab+0xa8/0x100 [ 633.118918][ T9082] __kmalloc_noprof+0xe0/0x7e0 [ 633.118952][ T9082] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 633.118979][ T9082] ? sock_kmalloc+0xd6/0x160 [ 633.119017][ T9082] sock_kmalloc+0xd6/0x160 [ 633.119051][ T9082] af_alg_alloc_areq+0x99/0x200 [ 633.119079][ T9082] skcipher_recvmsg+0x359/0x11d0 [ 633.119128][ T9082] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 633.119154][ T9082] ? __lock_acquire+0x6b6/0x2cf0 [ 633.119189][ T9082] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 633.119220][ T9082] ? security_socket_recvmsg+0x7e/0x2e0 [ 633.119250][ T9082] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 633.119279][ T9082] sock_recvmsg+0x22c/0x270 [ 633.119321][ T9082] ____sys_recvmsg+0x1ce/0x470 [ 633.119362][ T9082] ? __pfx_____sys_recvmsg+0x10/0x10 [ 633.119412][ T9082] ? import_iovec+0x74/0xa0 [ 633.119439][ T9082] ___sys_recvmsg+0x1b5/0x510 [ 633.119478][ T9082] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.119545][ T9082] ? __fget_files+0x3a6/0x420 [ 633.119584][ T9082] do_recvmmsg+0x30d/0x770 [ 633.119626][ T9082] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.119654][ T9082] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 633.119680][ T9082] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 633.119717][ T9082] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 633.119767][ T9082] __x64_sys_recvmmsg+0x190/0x240 [ 633.119803][ T9082] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.119840][ T9082] ? do_syscall_64+0xbe/0xf80 [ 633.119868][ T9082] do_syscall_64+0xfa/0xf80 [ 633.119893][ T9082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.119917][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 633.119946][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.119970][ T9082] RIP: 0033:0x7f82e2b3f749 [ 633.119990][ T9082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.120010][ T9082] RSP: 002b:00007f82e0da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.120034][ T9082] RAX: ffffffffffffffda RBX: 00007f82e2d95fa0 RCX: 00007f82e2b3f749 [ 633.120052][ T9082] RDX: 0000000000000001 RSI: 0000200000003fc0 RDI: 0000000000000004 [ 633.120067][ T9082] RBP: 00007f82e0da6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.120082][ T9082] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000001 [ 633.120096][ T9082] R13: 00007f82e2d96038 R14: 00007f82e2d95fa0 R15: 00007ffe1cbddc28 [ 633.120133][ T9082] [ 635.514362][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.822'. [ 637.393514][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.826'. [ 638.501294][ T9107] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.554685][ T5978] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 638.706924][ T5978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 638.707420][ T5978] usb 6-1: not running at top speed; connect to a high speed hub [ 638.709629][ T5978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.709648][ T5978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.750905][ T5978] usb 6-1: string descriptor 0 read error: -22 [ 638.751029][ T5978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.751047][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.850457][ T5978] usb 6-1: 0:2 : does not exist [ 639.824966][ T9117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.133369][ T9102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.613565][ T9099] bond1: option updelay: invalid value (18446744073709510910) [ 640.613648][ T9099] bond1: option updelay: allowed values 0 - 2147483647 [ 640.679138][ T9099] bond1 (unregistering): Released all slaves [ 640.989407][ T9122] pim6reg: entered allmulticast mode [ 641.046927][ T5978] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 641.052585][ T9125] pim6reg: left allmulticast mode [ 641.181707][ T9132] fuse: Bad value for 'fd' [ 641.315983][ T5978] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.337566][ T5978] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 641.591070][ T5978] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.613365][ T5978] usb 6-1: USB disconnect, device number 2 [ 642.129995][ T9142] FAULT_INJECTION: forcing a failure. [ 642.129995][ T9142] name failslab, interval 1, probability 0, space 0, times 0 [ 642.130027][ T9142] CPU: 1 UID: 0 PID: 9142 Comm: syz.5.836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 642.130049][ T9142] Tainted: [L]=SOFTLOCKUP [ 642.130055][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.130065][ T9142] Call Trace: [ 642.130071][ T9142] [ 642.130078][ T9142] dump_stack_lvl+0x189/0x250 [ 642.130110][ T9142] ? __pfx____ratelimit+0x10/0x10 [ 642.130137][ T9142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.130159][ T9142] ? __pfx__printk+0x10/0x10 [ 642.130180][ T9142] ? __pfx___might_resched+0x10/0x10 [ 642.130201][ T9142] should_fail_ex+0x46c/0x600 [ 642.130227][ T9142] should_failslab+0xa8/0x100 [ 642.130244][ T9142] __kmalloc_cache_noprof+0x84/0x6d0 [ 642.130270][ T9142] ? __nla_parse+0x40/0x60 [ 642.130292][ T9142] ? tcf_action_init_1+0x19f/0x6d0 [ 642.130312][ T9142] tcf_action_init_1+0x19f/0x6d0 [ 642.130333][ T9142] ? __pfx_tcf_action_init_1+0x10/0x10 [ 642.130350][ T9142] ? tc_action_load_ops+0x214/0x4e0 [ 642.130377][ T9142] ? kernel_text_address+0xa5/0xe0 [ 642.130395][ T9142] ? __nla_parse+0x40/0x60 [ 642.130422][ T9142] tcf_action_init+0x2cf/0xab0 [ 642.130446][ T9142] ? __pfx_tcf_action_init+0x10/0x10 [ 642.130483][ T9142] ? __pfx___nla_validate_parse+0x10/0x10 [ 642.130508][ T9142] ? __lock_acquire+0x6b6/0x2cf0 [ 642.130555][ T9142] tc_ctl_action+0x430/0xbd0 [ 642.130579][ T9142] ? __pfx_tc_ctl_action+0x10/0x10 [ 642.130635][ T9142] ? __pfx_tc_ctl_action+0x10/0x10 [ 642.130651][ T9142] rtnetlink_rcv_msg+0x77c/0xb70 [ 642.130673][ T9142] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 642.130696][ T9142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.130713][ T9142] ? ref_tracker_free+0x61e/0x7c0 [ 642.130736][ T9142] ? __asan_memcpy+0x40/0x70 [ 642.130757][ T9142] ? __pfx_ref_tracker_free+0x10/0x10 [ 642.130778][ T9142] ? __skb_clone+0x63/0x7a0 [ 642.130807][ T9142] netlink_rcv_skb+0x208/0x470 [ 642.130830][ T9142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.130849][ T9142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.130880][ T9142] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.130908][ T9142] netlink_unicast+0x846/0xa10 [ 642.130934][ T9142] ? __pfx_netlink_unicast+0x10/0x10 [ 642.130954][ T9142] ? netlink_sendmsg+0x642/0xb30 [ 642.130975][ T9142] ? skb_put+0x11b/0x210 [ 642.130996][ T9142] netlink_sendmsg+0x805/0xb30 [ 642.131026][ T9142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.131054][ T9142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.131077][ T9142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.131100][ T9142] __sock_sendmsg+0x21c/0x270 [ 642.131128][ T9142] ____sys_sendmsg+0x508/0x810 [ 642.131153][ T9142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.131181][ T9142] ? import_iovec+0x74/0xa0 [ 642.131199][ T9142] ___sys_sendmsg+0x21f/0x2a0 [ 642.131222][ T9142] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.131270][ T9142] ? __fget_files+0x2a/0x420 [ 642.131287][ T9142] ? __fget_files+0x3a6/0x420 [ 642.131312][ T9142] __x64_sys_sendmsg+0x1a1/0x260 [ 642.131336][ T9142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.131364][ T9142] ? __pfx_ksys_write+0x10/0x10 [ 642.131391][ T9142] ? do_syscall_64+0xbe/0xf80 [ 642.131411][ T9142] do_syscall_64+0xfa/0xf80 [ 642.131427][ T9142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.131444][ T9142] ? clear_bhb_loop+0x60/0xb0 [ 642.131464][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.131480][ T9142] RIP: 0033:0x7f1b3ae9f749 [ 642.131494][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.131509][ T9142] RSP: 002b:00007f1b39106038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.131526][ T9142] RAX: ffffffffffffffda RBX: 00007f1b3b0f5fa0 RCX: 00007f1b3ae9f749 [ 642.131539][ T9142] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 642.131550][ T9142] RBP: 00007f1b39106090 R08: 0000000000000000 R09: 0000000000000000 [ 642.131560][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.131570][ T9142] R13: 00007f1b3b0f6038 R14: 00007f1b3b0f5fa0 R15: 00007ffe74b19488 [ 642.131596][ T9142] [ 645.275001][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 645.275055][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.478937][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 647.478975][ T9165] block nbd0: Unsupported socket: should be TCP or UNIX. [ 648.780599][ T5874] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 649.003835][ T5874] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 649.003872][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.003896][ T5874] usb 2-1: Product: syz [ 649.003912][ T5874] usb 2-1: Manufacturer: syz [ 649.003929][ T5874] usb 2-1: SerialNumber: syz [ 649.316828][ T5874] usb 2-1: config 0 descriptor?? [ 649.323889][ T5874] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 649.655331][ T5874] gspca_sunplus: reg_r err -71 [ 649.656085][ T5874] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 649.694960][ T5874] usb 2-1: USB disconnect, device number 23 [ 651.051368][ T9198] FAULT_INJECTION: forcing a failure. [ 651.051368][ T9198] name failslab, interval 1, probability 0, space 0, times 0 [ 651.051449][ T9198] CPU: 1 UID: 0 PID: 9198 Comm: syz.0.852 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.051483][ T9198] Tainted: [L]=SOFTLOCKUP [ 651.051491][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.051506][ T9198] Call Trace: [ 651.051516][ T9198] [ 651.051528][ T9198] dump_stack_lvl+0x189/0x250 [ 651.051564][ T9198] ? __pfx____ratelimit+0x10/0x10 [ 651.051603][ T9198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.051635][ T9198] ? __pfx__printk+0x10/0x10 [ 651.051666][ T9198] ? __pfx___might_resched+0x10/0x10 [ 651.051691][ T9198] ? fs_reclaim_acquire+0x7d/0x100 [ 651.051726][ T9198] should_fail_ex+0x46c/0x600 [ 651.051765][ T9198] should_failslab+0xa8/0x100 [ 651.051790][ T9198] __kmalloc_cache_noprof+0x84/0x6d0 [ 651.051825][ T9198] ? irqentry_exit+0x5dd/0x660 [ 651.051847][ T9198] ? rcu_is_watching+0x15/0xb0 [ 651.051868][ T9198] ? shrinker_alloc+0x59/0xa80 [ 651.051902][ T9198] shrinker_alloc+0x59/0xa80 [ 651.051952][ T9198] alloc_super+0x791/0xab0 [ 651.051984][ T9198] ? rt_spin_unlock+0x161/0x200 [ 651.052016][ T9198] ? __pfx_test_meta_super+0x10/0x10 [ 651.052052][ T9198] sget_fc+0x329/0xa40 [ 651.052085][ T9198] ? __pfx_set_meta_super+0x10/0x10 [ 651.052123][ T9198] gfs2_meta_get_tree+0x1a7/0x390 [ 651.052162][ T9198] ? __pfx_gfs2_meta_get_tree+0x10/0x10 [ 651.052212][ T9198] vfs_get_tree+0x92/0x2a0 [ 651.052250][ T9198] vfs_cmd_create+0xa2/0x200 [ 651.052289][ T9198] __se_sys_fsconfig+0x794/0x8e0 [ 651.052331][ T9198] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 651.052381][ T9198] ? __x64_sys_fsconfig+0x20/0xc0 [ 651.052419][ T9198] do_syscall_64+0xfa/0xf80 [ 651.052443][ T9198] ? rcu_is_watching+0x15/0xb0 [ 651.052463][ T9198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.052487][ T9198] ? clear_bhb_loop+0x60/0xb0 [ 651.052517][ T9198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.052541][ T9198] RIP: 0033:0x7fe4d9d3f749 [ 651.052563][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.052584][ T9198] RSP: 002b:00007fe4d7f5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 651.052608][ T9198] RAX: ffffffffffffffda RBX: 00007fe4d9f96180 RCX: 00007fe4d9d3f749 [ 651.052626][ T9198] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 651.052640][ T9198] RBP: 00007fe4d7f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 651.052655][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.052669][ T9198] R13: 00007fe4d9f96218 R14: 00007fe4d9f96180 R15: 00007ffcc676cdd8 [ 651.052708][ T9198] [ 651.057629][ T9198] gfs2: gfs2 mount does not exist [ 652.254875][ T9207] futex_wake_op: syz.0.857 tries to shift op by 36; fix this program [ 653.187629][ T9206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 653.188016][ T9206] block device autoloading is deprecated and will be removed. [ 654.954525][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.865'. [ 657.671143][ T9240] IPv6: Can't replace route, no match found [ 658.064633][ T5909] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 658.228692][ T5909] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 658.228718][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.228733][ T5909] usb 2-1: Product: syz [ 658.228744][ T5909] usb 2-1: Manufacturer: syz [ 658.228755][ T5909] usb 2-1: SerialNumber: syz [ 658.232922][ T5909] usb 2-1: config 0 descriptor?? [ 658.492039][ T9241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.492854][ T9241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.864945][ T5909] usb 2-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 659.864969][ T5909] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 659.864999][ T5909] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 659.903740][ T5909] usb 2-1: USB disconnect, device number 24 [ 665.335002][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.5.882'. [ 666.033304][ T9316] futex_wake_op: syz.7.883 tries to shift op by 36; fix this program [ 669.064823][ T805] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 669.255302][ T805] usb 7-1: Using ep0 maxpacket: 16 [ 669.296860][ T805] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 669.296886][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.296902][ T805] usb 7-1: Product: syz [ 669.296913][ T805] usb 7-1: Manufacturer: syz [ 669.296924][ T805] usb 7-1: SerialNumber: syz [ 669.308035][ T805] usb 7-1: config 0 descriptor?? [ 669.374402][ T805] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 669.406910][ T805] usb 7-1: Detected FT-X [ 669.561372][ T805] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 669.563959][ T805] ftdi_sio 7-1:0.0: GPIO initialisation failed: -32 [ 669.596838][ T805] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 669.711552][ T10] usb 7-1: USB disconnect, device number 18 [ 669.736464][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 669.737256][ T10] ftdi_sio 7-1:0.0: device disconnected [ 670.876883][ T1358] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.902140][ T1358] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.932191][ T1358] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.932450][ T1358] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.932684][ T1358] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.933039][ T6760] Bluetooth: hci0: Frame reassembly failed (-84) [ 673.593626][ T5802] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 677.198964][ T9391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 677.387443][ T9392] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.397598][ T805] IPVS: starting estimator thread 0... [ 677.534716][ T9396] IPVS: using max 7 ests per chain, 16800 per kthread [ 678.071574][ T9400] FAULT_INJECTION: forcing a failure. [ 678.071574][ T9400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.071619][ T9400] CPU: 1 UID: 0 PID: 9400 Comm: syz.1.907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.071651][ T9400] Tainted: [L]=SOFTLOCKUP [ 678.071660][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.071674][ T9400] Call Trace: [ 678.071684][ T9400] [ 678.071694][ T9400] dump_stack_lvl+0x189/0x250 [ 678.071732][ T9400] ? __pfx____ratelimit+0x10/0x10 [ 678.071770][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.071803][ T9400] ? __pfx__printk+0x10/0x10 [ 678.071827][ T9400] ? __might_fault+0xb0/0x130 [ 678.071876][ T9400] should_fail_ex+0x46c/0x600 [ 678.071914][ T9400] _copy_from_user+0x2d/0xb0 [ 678.071939][ T9400] kstrtouint_from_user+0xc4/0x170 [ 678.071974][ T9400] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 678.072008][ T9400] ? __f2fs_ioctl+0xbc0/0xb840 [ 678.072051][ T9400] proc_fail_nth_write+0x88/0x200 [ 678.072087][ T9400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.072128][ T9400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.072166][ T9400] vfs_write+0x287/0xb40 [ 678.072210][ T9400] ? __pfx_vfs_write+0x10/0x10 [ 678.072240][ T9400] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 678.072282][ T9400] ? mutex_lock_nested+0x154/0x1d0 [ 678.072311][ T9400] ? fdget_pos+0x253/0x320 [ 678.072347][ T9400] ksys_write+0x14b/0x260 [ 678.072383][ T9400] ? __pfx_ksys_write+0x10/0x10 [ 678.072422][ T9400] ? do_syscall_64+0xbe/0xf80 [ 678.072450][ T9400] do_syscall_64+0xfa/0xf80 [ 678.072475][ T9400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.072499][ T9400] ? clear_bhb_loop+0x60/0xb0 [ 678.072536][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.072559][ T9400] RIP: 0033:0x7f744805e1ff [ 678.072580][ T9400] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 678.072601][ T9400] RSP: 002b:00007f744627c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 678.072625][ T9400] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f744805e1ff [ 678.072642][ T9400] RDX: 0000000000000001 RSI: 00007f744627c0a0 RDI: 0000000000000009 [ 678.072657][ T9400] RBP: 00007f744627c090 R08: 0000000000000000 R09: 0000000000000000 [ 678.072673][ T9400] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 678.072687][ T9400] R13: 00007f74482b6218 R14: 00007f74482b6180 R15: 00007ffcf852e5d8 [ 678.072725][ T9400] [ 680.849423][ T6379] IPVS: starting estimator thread 0... [ 680.855113][ T9417] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.938922][ T9421] IPVS: using max 7 ests per chain, 16800 per kthread [ 681.019452][ T9422] uprobe: syz.6.916:9422 failed to unregister, leaking uprobe [ 681.152245][ T9428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 681.204086][ T9429] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.884596][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 684.058206][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.058245][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.058272][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.058319][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.058345][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.085805][ T9] usb 6-1: config 0 descriptor?? [ 684.513659][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513701][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513733][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513763][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513792][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513822][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513851][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513880][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513909][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.513945][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 684.556808][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 684.805582][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 684.867687][ T5978] usb 6-1: USB disconnect, device number 3 [ 685.607587][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.927'. [ 688.162713][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.935'. [ 690.977427][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.020597][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.030317][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.044407][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.051296][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 691.127881][ T9494] uprobe: syz.6.939:9494 failed to unregister, leaking uprobe [ 692.290864][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 693.874385][ T5802] Bluetooth: hci0: command tx timeout [ 694.377488][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.377700][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.377927][ T9496] bridge_slave_0: entered allmulticast mode [ 694.381243][ T9496] bridge_slave_0: entered promiscuous mode [ 694.388637][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.389927][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.390220][ T9496] bridge_slave_1: entered allmulticast mode [ 694.397430][ T9496] bridge_slave_1: entered promiscuous mode [ 695.479188][ T9532] netlink: 'syz.6.947': attribute type 4 has an invalid length. [ 695.905440][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.950710][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.954629][ T5802] Bluetooth: hci0: command tx timeout [ 697.080164][ T9547] netlink: 40 bytes leftover after parsing attributes in process `syz.5.952'. [ 697.091736][ T9547] binder_alloc: 9546: binder_alloc_buf size 64768 failed, no address space [ 697.091878][ T9547] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 698.626116][ T5802] Bluetooth: hci0: command tx timeout [ 699.400953][ T9565] trusted_key: encrypted_key: insufficient parameters specified [ 699.581190][ T9496] team0: Port device team_slave_0 added [ 699.821424][ T9496] team0: Port device team_slave_1 added [ 700.135821][ T9575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.961'. [ 700.659512][ T5802] Bluetooth: hci0: command tx timeout [ 701.329583][ T1004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.635208][ T9575] bond0: entered promiscuous mode [ 701.635233][ T9575] bond_slave_0: entered promiscuous mode [ 701.635439][ T9575] bond_slave_1: entered promiscuous mode [ 701.692582][ T9575] bond0: left promiscuous mode [ 701.692608][ T9575] bond_slave_0: left promiscuous mode [ 701.692970][ T9575] bond_slave_1: left promiscuous mode [ 701.971188][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.971207][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.971232][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.126305][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.126325][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.126357][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.787984][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.970'. [ 703.406070][ T1004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.622118][ T9] IPVS: starting estimator thread 0... [ 703.630272][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 704.414763][ T9619] IPVS: using max 8 ests per chain, 19200 per kthread [ 709.191360][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.191439][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.670222][ T1004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.759961][ T9496] hsr_slave_0: entered promiscuous mode [ 710.761600][ T9496] hsr_slave_1: entered promiscuous mode [ 710.852602][ T9649] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 711.156296][ T1004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.196941][ T6192] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.214660][ T5814] Bluetooth: hci6: command 0x0406 tx timeout [ 711.234750][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 711.286050][ T6192] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.286564][ T6192] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.286614][ T6192] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.394854][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 711.409816][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.409847][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.424066][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.424102][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.424124][ T9] usb 2-1: Product: syz [ 711.424140][ T9] usb 2-1: Manufacturer: syz [ 711.424156][ T9] usb 2-1: SerialNumber: syz [ 713.101159][ T1004] bridge_slave_1: left allmulticast mode [ 713.101195][ T1004] bridge_slave_1: left promiscuous mode [ 713.101470][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.187420][ T1004] bridge_slave_0: left allmulticast mode [ 713.187454][ T1004] bridge_slave_0: left promiscuous mode [ 713.187730][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.138239][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.6.991'. [ 714.833269][ T9] usb 2-1: 0:2 : does not exist [ 714.917872][ T9] usb 2-1: USB disconnect, device number 25 [ 718.715330][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.755508][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.778313][ T1004] bond0 (unregistering): Released all slaves [ 720.537560][ T9721] FAULT_INJECTION: forcing a failure. [ 720.537560][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 720.537604][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.6.999 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 720.537637][ T9721] Tainted: [L]=SOFTLOCKUP [ 720.537645][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.537660][ T9721] Call Trace: [ 720.537669][ T9721] [ 720.537679][ T9721] dump_stack_lvl+0x189/0x250 [ 720.537714][ T9721] ? __pfx____ratelimit+0x10/0x10 [ 720.537755][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.537801][ T9721] ? __pfx__printk+0x10/0x10 [ 720.537830][ T9721] ? __pfx___might_resched+0x10/0x10 [ 720.537856][ T9721] ? fs_reclaim_acquire+0x7d/0x100 [ 720.537883][ T9721] should_fail_ex+0x46c/0x600 [ 720.537917][ T9721] ? sock_alloc_inode+0x28/0xc0 [ 720.537952][ T9721] should_failslab+0xa8/0x100 [ 720.537976][ T9721] ? sock_alloc_inode+0x28/0xc0 [ 720.538009][ T9721] kmem_cache_alloc_lru_noprof+0x88/0x6c0 [ 720.538041][ T9721] ? rt_spin_lock+0x1c1/0x3e0 [ 720.538074][ T9721] ? do_raw_spin_lock+0x121/0x290 [ 720.538103][ T9721] ? __pfx_sock_alloc_inode+0x10/0x10 [ 720.538138][ T9721] sock_alloc_inode+0x28/0xc0 [ 720.538173][ T9721] alloc_inode+0x6a/0x1b0 [ 720.538197][ T9721] do_accept+0x117/0x680 [ 720.538229][ T9721] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 720.538265][ T9721] ? __pfx_do_accept+0x10/0x10 [ 720.538313][ T9721] __sys_accept4+0x127/0x210 [ 720.538342][ T9721] ? __pfx___sys_accept4+0x10/0x10 [ 720.538365][ T9721] ? ksys_write+0x230/0x260 [ 720.538401][ T9721] ? __pfx_ksys_write+0x10/0x10 [ 720.538440][ T9721] __x64_sys_accept4+0x9a/0xb0 [ 720.538467][ T9721] do_syscall_64+0xfa/0xf80 [ 720.538492][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.538516][ T9721] ? clear_bhb_loop+0x60/0xb0 [ 720.538544][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.538567][ T9721] RIP: 0033:0x7f82e2b3f749 [ 720.538588][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.538609][ T9721] RSP: 002b:00007f82e0d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 720.538633][ T9721] RAX: ffffffffffffffda RBX: 00007f82e2d96180 RCX: 00007f82e2b3f749 [ 720.538651][ T9721] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000004 [ 720.538667][ T9721] RBP: 00007f82e0d64090 R08: 0000000000000000 R09: 0000000000000000 [ 720.538681][ T9721] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 720.538695][ T9721] R13: 00007f82e2d96218 R14: 00007f82e2d96180 R15: 00007ffe1cbddc28 [ 720.538731][ T9721] [ 722.058098][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1002'. [ 723.270929][ T9496] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 724.579162][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'. [ 725.720093][ T9776] fuse: Unknown parameter 'TÉ9•×®9rìš²îzŸ‹þaÑ8O(' [ 726.096931][ T9496] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 726.184730][ T5978] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 726.207921][ T9496] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 726.353528][ T5978] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 726.353564][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.377860][ T5978] usb 2-1: config 0 descriptor?? [ 726.383513][ T5978] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 726.548065][ T1004] hsr_slave_0: left promiscuous mode [ 726.566775][ T1004] hsr_slave_1: left promiscuous mode [ 726.567794][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.567821][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.698259][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.698291][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.977773][ T5978] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 727.433165][ T5978] gspca_cpia1: usb_control_msg 02, error -71 [ 727.433190][ T5978] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 727.440734][ T5978] usb 2-1: USB disconnect, device number 26 [ 727.486855][ T1004] veth1_macvtap: left promiscuous mode [ 727.486931][ T1004] veth0_macvtap: left promiscuous mode [ 727.487171][ T1004] veth1_vlan: left promiscuous mode [ 727.487291][ T1004] veth0_vlan: left promiscuous mode [ 728.556640][ T805] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 728.735119][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.735152][ T805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.736460][ T805] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 728.736498][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 728.736521][ T805] usb 2-1: SerialNumber: syz [ 731.023757][ T9761] syz.6.1004 (9761) used greatest stack depth: 16000 bytes left [ 731.664677][ T5909] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 731.815022][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 731.819502][ T5909] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.819530][ T5909] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.823472][ T5909] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.823504][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.823632][ T5909] usb 7-1: Product: syz [ 731.823650][ T5909] usb 7-1: Manufacturer: syz [ 731.823667][ T5909] usb 7-1: SerialNumber: syz [ 732.566651][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 732.677712][ T5909] usb 7-1: cannot find UAC_HEADER [ 732.745631][ T5909] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 732.748736][ T5909] usb 7-1: USB disconnect, device number 19 [ 732.845368][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 733.110558][ T5940] hid-generic 0005:0006:5508.0006: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 734.178485][ T805] usb 2-1: 0:2 : does not exist [ 734.228844][ T805] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 736.635459][ T9496] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 736.824080][ T5909] usb 2-1: USB disconnect, device number 27 [ 737.956081][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 738.004622][ T5940] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 738.109335][ T9824] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 738.109360][ T9824] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 738.112095][ T9824] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 738.141421][ T9849] vxlan0: entered promiscuous mode [ 738.141457][ T9849] vxlan0: entered allmulticast mode [ 738.173522][ T1360] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.189483][ T989] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.189549][ T989] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.189597][ T989] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.225998][ T5940] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.226029][ T5940] usb 7-1: config 0 has no interface number 0 [ 738.229034][ T5940] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 738.229398][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.229425][ T5940] usb 7-1: Product: syz [ 738.229451][ T5940] usb 7-1: Manufacturer: syz [ 738.229467][ T5940] usb 7-1: SerialNumber: syz [ 738.290683][ T5940] usb 7-1: config 0 descriptor?? [ 739.438366][ T5940] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 739.642030][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.730378][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.741448][ T1360] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.741676][ T1360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.783721][ T1360] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.783833][ T1360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.904658][ T5977] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 740.054656][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 740.076794][ T5977] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.076832][ T5977] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.080685][ T5977] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 740.080719][ T5977] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 740.080742][ T5977] usb 2-1: Product: syz [ 740.080757][ T5977] usb 2-1: Manufacturer: syz [ 740.148089][ T5977] hub 2-1:4.0: USB hub found [ 740.366666][ T1004] IPVS: stop unused estimator thread 0... [ 740.382383][ T5977] hub 2-1:4.0: 2 ports detected [ 740.574008][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.583687][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.605788][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.606515][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.625264][ T5977] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 740.625299][ T5977] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 740.695542][ T5977] usb 2-1: USB disconnect, device number 28 [ 740.735523][ T805] usb 7-1: USB disconnect, device number 20 [ 741.023366][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.328020][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'. [ 742.883988][ T37] audit: type=1326 audit(1766048390.338:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884049][ T37] audit: type=1326 audit(1766048390.348:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884108][ T37] audit: type=1326 audit(1766048390.348:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884158][ T37] audit: type=1326 audit(1766048390.348:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884209][ T37] audit: type=1326 audit(1766048390.348:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884257][ T37] audit: type=1326 audit(1766048390.348:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884307][ T37] audit: type=1326 audit(1766048390.348:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884358][ T37] audit: type=1326 audit(1766048390.348:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884408][ T37] audit: type=1326 audit(1766048390.348:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 742.884672][ T37] audit: type=1326 audit(1766048390.348:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e2b3f749 code=0x7ffc0000 [ 744.141870][ T9924] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1049'. [ 744.142030][ T9924] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1049'. [ 744.142050][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1049'. [ 746.521507][ T9496] veth0_vlan: entered promiscuous mode [ 747.495114][ T9496] veth1_vlan: entered promiscuous mode [ 748.553120][ T9496] veth0_macvtap: entered promiscuous mode [ 749.277694][ T9496] veth1_macvtap: entered promiscuous mode [ 749.291071][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'. [ 749.562840][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.599467][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.659808][ T989] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.660891][ T989] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.661791][ T989] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.662650][ T1360] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.774636][ T805] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 750.941581][ T805] usb 7-1: Using ep0 maxpacket: 16 [ 750.969570][ T805] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 750.969608][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.969631][ T805] usb 7-1: Product: syz [ 750.969646][ T805] usb 7-1: Manufacturer: syz [ 750.969663][ T805] usb 7-1: SerialNumber: syz [ 751.099478][ T805] usb 7-1: config 0 descriptor?? [ 751.121692][ T805] uvcvideo 7-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 751.121731][ T805] uvcvideo 7-1:0.0: No valid video chain found. [ 751.143508][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.159017][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.161480][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.169467][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.176450][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.217047][ T9971] ip6erspan0: entered promiscuous mode [ 752.801770][ T9985] sctp: [Deprecated]: syz.1.1068 (pid 9985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.801770][ T9985] Use struct sctp_sack_info instead [ 752.926197][ T9994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 753.215931][ T5802] Bluetooth: hci1: command tx timeout [ 753.394851][ T5978] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 753.554761][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 753.573805][ T5978] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 753.573838][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.573858][ T5978] usb 2-1: Product: syz [ 753.573869][ T5978] usb 2-1: Manufacturer: syz [ 753.573880][ T5978] usb 2-1: SerialNumber: syz [ 753.580136][ T5978] usb 2-1: config 0 descriptor?? [ 753.602509][ T9989] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 753.645398][ T5978] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 753.645437][ T5978] uvcvideo 2-1:0.0: No valid video chain found. [ 753.953007][ T5977] usb 7-1: USB disconnect, device number 21 [ 754.521236][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1082'. [ 755.298822][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 756.350730][ T6192] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.519916][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 757.125807][ T5977] usb 2-1: USB disconnect, device number 29 [ 757.163600][ T6192] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.177731][T10063] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.301481][T10058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 757.376399][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 757.384288][T10053] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 758.028122][T10083] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 758.028160][T10083] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 758.028172][T10083] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 758.028218][T10083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 758.155160][T10088] FAULT_INJECTION: forcing a failure. [ 758.155160][T10088] name failslab, interval 1, probability 0, space 0, times 0 [ 758.155200][T10088] CPU: 1 UID: 0 PID: 10088 Comm: syz.7.1104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.155231][T10088] Tainted: [L]=SOFTLOCKUP [ 758.155240][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.155254][T10088] Call Trace: [ 758.155264][T10088] [ 758.155273][T10088] dump_stack_lvl+0x189/0x250 [ 758.155310][T10088] ? __pfx____ratelimit+0x10/0x10 [ 758.155347][T10088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.155379][T10088] ? __pfx__printk+0x10/0x10 [ 758.155410][T10088] ? __pfx___might_resched+0x10/0x10 [ 758.155440][T10088] should_fail_ex+0x46c/0x600 [ 758.155477][T10088] should_failslab+0xa8/0x100 [ 758.155503][T10088] __kmalloc_noprof+0xe0/0x7e0 [ 758.155537][T10088] ? kfree+0x4d/0x900 [ 758.155563][T10088] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 758.155595][T10088] tomoyo_realpath_from_path+0xe3/0x5d0 [ 758.155621][T10088] ? tomoyo_domain+0xd9/0x130 [ 758.155651][T10088] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 758.155685][T10088] tomoyo_path_number_perm+0x1e8/0x5a0 [ 758.155722][T10088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 758.155759][T10088] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 758.155784][T10088] ? lockdep_hardirqs_on+0x98/0x140 [ 758.155840][T10088] ? __fget_files+0x2a/0x420 [ 758.155871][T10088] ? __fget_files+0x3a6/0x420 [ 758.155894][T10088] ? __fget_files+0x2a/0x420 [ 758.155924][T10088] security_file_ioctl+0xcb/0x2d0 [ 758.155960][T10088] __se_sys_ioctl+0x47/0x170 [ 758.155996][T10088] do_syscall_64+0xfa/0xf80 [ 758.156020][T10088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.156044][T10088] ? clear_bhb_loop+0x60/0xb0 [ 758.156072][T10088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.156102][T10088] RIP: 0033:0x7f7431c9f749 [ 758.156122][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.156142][T10088] RSP: 002b:00007f742ff06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.156166][T10088] RAX: ffffffffffffffda RBX: 00007f7431ef5fa0 RCX: 00007f7431c9f749 [ 758.156184][T10088] RDX: 0000200000000080 RSI: 0000000040087543 RDI: 0000000000000003 [ 758.156199][T10088] RBP: 00007f742ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 758.156214][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.156228][T10088] R13: 00007f7431ef6038 R14: 00007f7431ef5fa0 R15: 00007ffc66e64e28 [ 758.156266][T10088] [ 758.156277][T10088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 758.504626][ T6192] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.071185][ T6192] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.929546][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 761.081318][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 761.198311][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.203120][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.203325][ T9972] bridge_slave_0: entered allmulticast mode [ 761.210048][ T9972] bridge_slave_0: entered promiscuous mode [ 761.220109][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.256683][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 761.257052][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.257699][ T9972] bridge_slave_1: entered allmulticast mode [ 761.259906][ T9972] bridge_slave_1: entered promiscuous mode [ 761.292841][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 761.292878][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.292900][ T9] usb 2-1: Product: syz [ 761.292916][ T9] usb 2-1: Manufacturer: syz [ 761.292932][ T9] usb 2-1: SerialNumber: syz [ 761.339732][ T9] usb 2-1: config 0 descriptor?? [ 761.348269][ T9] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 761.348312][ T9] uvcvideo 2-1:0.0: No valid video chain found. [ 762.866706][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.985047][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 763.034126][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.703803][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 763.703824][ T37] audit: type=1326 audit(1766048411.168:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10149 comm="syz.5.1117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b3ae9f749 code=0x0 [ 763.757586][ T37] audit: type=1326 audit(1766048411.228:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10149 comm="syz.5.1117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b3ae9f749 code=0x0 [ 763.847688][ T9972] team0: Port device team_slave_0 added [ 763.876911][ T9972] team0: Port device team_slave_1 added [ 764.140146][ T6013] usb 2-1: USB disconnect, device number 30 [ 765.648889][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 765.893011][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.893032][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.893062][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.900793][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.900815][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.900851][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.927633][T10183] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1137' sets config #0 [ 765.928016][T10183] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1137' sets config #1 [ 766.105693][ T6192] bridge_slave_1: left allmulticast mode [ 766.105725][ T6192] bridge_slave_1: left promiscuous mode [ 766.105979][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.226149][ T6192] bridge_slave_0: left allmulticast mode [ 766.226190][ T6192] bridge_slave_0: left promiscuous mode [ 766.226429][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.745217][T10207] netlink: 'syz.7.1146': attribute type 11 has an invalid length. [ 767.745245][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1146'. [ 768.637364][T10234] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1151'. [ 768.654215][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1151'. [ 773.723621][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.723697][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.076306][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.135375][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.162378][ T6192] bond0 (unregistering): Released all slaves [ 774.703087][T10330] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1200'. [ 774.719740][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1200'. [ 775.337050][ T988] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 775.402900][ T9972] hsr_slave_0: entered promiscuous mode [ 775.415104][ T9972] hsr_slave_1: entered promiscuous mode [ 775.421183][ T9972] debugfs: 'hsr0' already exists in 'hsr' [ 775.421223][ T9972] Cannot create hsr debugfs directory [ 775.494685][ T988] usb 6-1: Using ep0 maxpacket: 16 [ 775.514925][ T988] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 775.514965][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.514992][ T988] usb 6-1: Product: syz [ 775.515011][ T988] usb 6-1: Manufacturer: syz [ 775.515030][ T988] usb 6-1: SerialNumber: syz [ 775.727191][ T988] r8152-cfgselector 6-1: Unknown version 0x0000 [ 775.727220][ T988] r8152-cfgselector 6-1: config 0 descriptor?? [ 776.929414][ T988] r8152-cfgselector 6-1: Needed 1 retries to read version [ 777.035288][ T6192] hsr_slave_0: left promiscuous mode [ 777.072990][ T5977] IPVS: starting estimator thread 0... [ 777.086052][ T6192] hsr_slave_1: left promiscuous mode [ 777.087141][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.087168][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.125945][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.125976][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.132837][ T988] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 777.154963][T10366] IPVS: using max 7 ests per chain, 16800 per kthread [ 777.306874][ T6192] veth1_macvtap: left promiscuous mode [ 777.308066][ T6192] veth0_macvtap: left promiscuous mode [ 777.308254][ T6192] veth1_vlan: left promiscuous mode [ 777.308427][ T6192] veth0_vlan: left promiscuous mode [ 778.200292][T10400] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1225'. [ 778.202205][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1225'. [ 778.943061][T10372] uprobe: syz.6.1220:10372 failed to unregister, leaking uprobe [ 779.284576][ T6013] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 779.434552][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 779.440438][ T6013] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 779.440463][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.440479][ T6013] usb 6-1: Product: syz [ 779.440490][ T6013] usb 6-1: Manufacturer: syz [ 779.440501][ T6013] usb 6-1: SerialNumber: syz [ 779.515385][ T6013] r8152-cfgselector 6-1: Unknown version 0x0000 [ 779.515409][ T6013] r8152-cfgselector 6-1: config 0 descriptor?? [ 779.928403][ T6013] r8152-cfgselector 6-1: Needed 1 retries to read version [ 780.135663][ T6013] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 781.376297][T10436] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1244'. [ 781.388319][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1244'. [ 782.425262][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 783.815488][ T6192] team0 (unregistering): Port device team_slave_0 removed [ 784.750071][T10448] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.173043][T10466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1254'. [ 788.175001][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1254'. [ 788.507946][ T988] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 788.645687][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 788.954545][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 788.954723][ T988] usb 7-1: Using ep0 maxpacket: 16 [ 789.098804][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 789.098962][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.098986][ T10] usb 6-1: Product: syz [ 789.099002][ T10] usb 6-1: Manufacturer: syz [ 789.099019][ T10] usb 6-1: SerialNumber: syz [ 789.103462][ T988] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.103494][ T988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.103517][ T988] usb 7-1: Product: syz [ 789.103532][ T988] usb 7-1: Manufacturer: syz [ 789.103555][ T988] usb 7-1: SerialNumber: syz [ 789.182345][ T10] usb 6-1: config 0 descriptor?? [ 789.197086][ T988] r8152-cfgselector 7-1: Unknown version 0x0000 [ 789.197116][ T988] r8152-cfgselector 7-1: config 0 descriptor?? [ 789.240540][ T10] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 789.240634][ T10] uvcvideo 6-1:0.0: No valid video chain found. [ 789.424594][ T10] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 789.591344][ T10] usb 2-1: config 4 has an invalid interface number: 126 but max is 2 [ 789.591378][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 789.591401][ T10] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 789.591426][ T10] usb 2-1: config 4 has no interface number 0 [ 789.591724][ T10] usb 2-1: config 4 interface 126 has no altsetting 0 [ 789.641411][ T10] usb 2-1: string descriptor 0 read error: -22 [ 789.641646][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=e3.ea [ 789.641736][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.739666][ T988] r8152-cfgselector 7-1: Needed 1 retries to read version [ 790.697563][ T988] usb 2-1: USB disconnect, device number 31 [ 790.765664][ T805] r8152-cfgselector 7-1: USB disconnect, device number 22 [ 791.490207][T10495] FAULT_INJECTION: forcing a failure. [ 791.490207][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 791.490252][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.7.1267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 791.490295][T10495] Tainted: [L]=SOFTLOCKUP [ 791.490304][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 791.490318][T10495] Call Trace: [ 791.490328][T10495] [ 791.490338][T10495] dump_stack_lvl+0x189/0x250 [ 791.490375][T10495] ? __pfx____ratelimit+0x10/0x10 [ 791.490414][T10495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.490447][T10495] ? __pfx__printk+0x10/0x10 [ 791.490472][T10495] ? rcu_is_watching+0x15/0xb0 [ 791.490497][T10495] ? trace_fib_table_lookup+0x85/0x1e0 [ 791.490529][T10495] should_fail_ex+0x46c/0x600 [ 791.490568][T10495] ? dst_alloc+0x105/0x170 [ 791.490601][T10495] should_failslab+0xa8/0x100 [ 791.490630][T10495] ? dst_alloc+0x105/0x170 [ 791.490661][T10495] kmem_cache_alloc_noprof+0x84/0x6c0 [ 791.490705][T10495] dst_alloc+0x105/0x170 [ 791.490746][T10495] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 791.490774][T10495] ? ip_route_output_key_hash_rcu+0x13a1/0x23e0 [ 791.490807][T10495] ? ip_route_output_key_hash+0xc1/0x280 [ 791.490835][T10495] ip_route_output_key_hash+0x174/0x280 [ 791.490864][T10495] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 791.490897][T10495] ? l3mdev_fib_table+0x18/0x160 [ 791.490922][T10495] ? l3mdev_fib_table+0x18/0x160 [ 791.490950][T10495] ? l3mdev_fib_table+0x14e/0x160 [ 791.490983][T10495] icmp_route_lookup+0x4b5/0x890 [ 791.491025][T10495] ? __pfx_icmp_route_lookup+0x10/0x10 [ 791.491072][T10495] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 791.491102][T10495] ? __pfx___ip_options_echo+0x10/0x10 [ 791.491146][T10495] ? __icmp_send+0x1b9/0x13c0 [ 791.491178][T10495] __icmp_send+0xd4a/0x13c0 [ 791.491227][T10495] ? __icmp_send+0x1b9/0x13c0 [ 791.491274][T10495] ? __pfx___icmp_send+0x10/0x10 [ 791.491336][T10495] ? ip_route_input_noref+0x98/0x250 [ 791.491371][T10495] ? __pfx_ip_route_input_noref+0x10/0x10 [ 791.491412][T10495] ip_options_compile+0x80/0xb0 [ 791.491452][T10495] ip_rcv_finish_core+0xaa2/0x1c00 [ 791.491502][T10495] ip_rcv_finish+0x14c/0x2f0 [ 791.491537][T10495] NF_HOOK+0x30c/0x3a0 [ 791.491572][T10495] ? __pfx_ip_rcv_finish+0x10/0x10 [ 791.491602][T10495] ? NF_HOOK+0x9a/0x3a0 [ 791.491632][T10495] ? __pfx_NF_HOOK+0x10/0x10 [ 791.491660][T10495] ? ip_rcv_core+0x7f7/0xd00 [ 791.491695][T10495] ? __pfx_ip_rcv_finish+0x10/0x10 [ 791.491740][T10495] ? __pfx_ip_rcv+0x10/0x10 [ 791.491769][T10495] __netif_receive_skb+0x143/0x380 [ 791.491792][T10495] ? insn_get_length+0xa8/0x100 [ 791.491811][T10495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.491841][T10495] ? netif_receive_skb+0x105/0x750 [ 791.491902][T10495] netif_receive_skb+0x1bb/0x750 [ 791.491944][T10495] ? __pfx_netif_receive_skb+0x10/0x10 [ 791.491985][T10495] ? __lock_acquire+0x6b6/0x2cf0 [ 791.492018][T10495] ? tun_rx_batched+0x166/0x730 [ 791.492051][T10495] tun_rx_batched+0x1bf/0x730 [ 791.492090][T10495] ? __pfx_tun_rx_batched+0x10/0x10 [ 791.492119][T10495] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 791.492147][T10495] ? lockdep_hardirqs_on+0x98/0x140 [ 791.492184][T10495] ? tun_get_user+0x266d/0x3de0 [ 791.492229][T10495] ? tun_get_user+0x266d/0x3de0 [ 791.492259][T10495] tun_get_user+0x2abd/0x3de0 [ 791.492301][T10495] ? tun_get_user+0x6fc/0x3de0 [ 791.492352][T10495] ? __pfx_tun_get_user+0x10/0x10 [ 791.492386][T10495] ? __lock_acquire+0x6b6/0x2cf0 [ 791.492422][T10495] ? kstrtoull+0x12f/0x1d0 [ 791.492464][T10495] ? ref_tracker_alloc+0x2fe/0x450 [ 791.492502][T10495] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 791.492544][T10495] ? tun_get+0x1c/0x2f0 [ 791.492582][T10495] ? tun_get+0x1c/0x2f0 [ 791.492610][T10495] ? tun_get+0x1c/0x2f0 [ 791.492647][T10495] tun_chr_write_iter+0x119/0x200 [ 791.492682][T10495] vfs_write+0x5d5/0xb40 [ 791.492723][T10495] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 791.492755][T10495] ? __pfx_vfs_write+0x10/0x10 [ 791.492804][T10495] ? __fget_files+0x2a/0x420 [ 791.492843][T10495] ksys_write+0x14b/0x260 [ 791.492882][T10495] ? __pfx_ksys_write+0x10/0x10 [ 791.492922][T10495] ? do_syscall_64+0xbe/0xf80 [ 791.492951][T10495] do_syscall_64+0xfa/0xf80 [ 791.492976][T10495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.493000][T10495] ? clear_bhb_loop+0x60/0xb0 [ 791.493031][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.493054][T10495] RIP: 0033:0x7f7431c9e1ff [ 791.493077][T10495] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 791.493098][T10495] RSP: 002b:00007f742ff06000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 791.493123][T10495] RAX: ffffffffffffffda RBX: 00007f7431ef5fa0 RCX: 00007f7431c9e1ff [ 791.493141][T10495] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8 [ 791.493156][T10495] RBP: 00007f742ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 791.493171][T10495] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 791.493186][T10495] R13: 00007f7431ef6038 R14: 00007f7431ef5fa0 R15: 00007ffc66e64e28 [ 791.493228][T10495] [ 792.893614][ T805] usb 6-1: USB disconnect, device number 6 [ 793.319060][T10511] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 793.514132][T10520] 9p: Bad value for 'wfdno' [ 793.878869][ T9972] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 793.983428][ T9972] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 794.017973][T10509] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 794.100822][ T805] libceph: connect (1)[c::]:6789 error -101 [ 794.101647][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 794.149023][ T9972] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 794.182925][ T805] libceph: connect (1)[c::]:6789 error -101 [ 794.183081][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 794.436141][ T805] libceph: connect (1)[c::]:6789 error -101 [ 794.436365][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 794.696880][T10532] ceph: No mds server is up or the cluster is laggy [ 794.944752][ T9972] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 794.969956][ T805] libceph: connect (1)[c::]:6789 error -101 [ 794.970176][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 795.130515][T10550] netlink: 'syz.5.1284': attribute type 3 has an invalid length. [ 795.174117][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 795.834122][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 796.250844][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.339028][ T9972] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.359779][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.360012][ T6694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.395016][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.395238][ T6694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.451596][T10578] FAULT_INJECTION: forcing a failure. [ 796.451596][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 796.451638][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.7.1293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 796.451670][T10578] Tainted: [L]=SOFTLOCKUP [ 796.451679][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.451693][T10578] Call Trace: [ 796.451702][T10578] [ 796.451712][T10578] dump_stack_lvl+0x189/0x250 [ 796.451748][T10578] ? __pfx____ratelimit+0x10/0x10 [ 796.451785][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.451816][T10578] ? __pfx__printk+0x10/0x10 [ 796.451845][T10578] ? __pfx___might_resched+0x10/0x10 [ 796.451869][T10578] ? fs_reclaim_acquire+0x7d/0x100 [ 796.451896][T10578] should_fail_ex+0x46c/0x600 [ 796.451933][T10578] should_failslab+0xa8/0x100 [ 796.451958][T10578] __kmalloc_noprof+0xe0/0x7e0 [ 796.451991][T10578] ? tomoyo_encode+0x28b/0x550 [ 796.452020][T10578] tomoyo_encode+0x28b/0x550 [ 796.452049][T10578] tomoyo_mount_permission+0x44d/0x970 [ 796.452090][T10578] ? tomoyo_mount_permission+0x27a/0x970 [ 796.452128][T10578] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 796.452228][T10578] security_sb_mount+0xec/0x350 [ 796.452258][T10578] path_mount+0xbc/0xff0 [ 796.452282][T10578] ? user_path_at+0x44/0x60 [ 796.452322][T10578] __se_sys_mount+0x313/0x410 [ 796.452354][T10578] ? __pfx___se_sys_mount+0x10/0x10 [ 796.452384][T10578] ? do_syscall_64+0xbe/0xf80 [ 796.452406][T10578] ? __x64_sys_mount+0x20/0xc0 [ 796.452433][T10578] do_syscall_64+0xfa/0xf80 [ 796.452457][T10578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.452480][T10578] ? clear_bhb_loop+0x60/0xb0 [ 796.452509][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.452532][T10578] RIP: 0033:0x7f7431c9f749 [ 796.452552][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.452573][T10578] RSP: 002b:00007f742ff06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 796.452602][T10578] RAX: ffffffffffffffda RBX: 00007f7431ef5fa0 RCX: 00007f7431c9f749 [ 796.452620][T10578] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 796.452635][T10578] RBP: 00007f742ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 796.452650][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.452663][T10578] R13: 00007f7431ef6038 R14: 00007f7431ef5fa0 R15: 00007ffc66e64e28 [ 796.452704][T10578] [ 797.064642][ T805] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 797.314736][ T805] usb 7-1: Using ep0 maxpacket: 16 [ 797.737515][ T805] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 797.737551][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.737575][ T805] usb 7-1: Product: syz [ 797.737590][ T805] usb 7-1: Manufacturer: syz [ 797.737606][ T805] usb 7-1: SerialNumber: syz [ 797.794759][ T805] r8152-cfgselector 7-1: Unknown version 0x0000 [ 797.794790][ T805] r8152-cfgselector 7-1: config 0 descriptor?? [ 797.970456][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.235485][ T805] r8152-cfgselector 7-1: Needed 1 retries to read version [ 798.392938][T10617] FAULT_INJECTION: forcing a failure. [ 798.392938][T10617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.392979][T10617] CPU: 0 UID: 0 PID: 10617 Comm: syz.7.1306 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 798.393011][T10617] Tainted: [L]=SOFTLOCKUP [ 798.393019][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.393033][T10617] Call Trace: [ 798.393043][T10617] [ 798.393053][T10617] dump_stack_lvl+0x189/0x250 [ 798.393088][T10617] ? __pfx____ratelimit+0x10/0x10 [ 798.393125][T10617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.393156][T10617] ? __pfx__printk+0x10/0x10 [ 798.393196][T10617] should_fail_ex+0x46c/0x600 [ 798.393233][T10617] _copy_to_user+0x31/0xb0 [ 798.393258][T10617] simple_read_from_buffer+0xe1/0x170 [ 798.393289][T10617] proc_fail_nth_read+0x1b6/0x220 [ 798.393328][T10617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.393367][T10617] ? rw_verify_area+0x2ac/0x4e0 [ 798.393399][T10617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.393436][T10617] vfs_read+0x206/0xa30 [ 798.393478][T10617] ? __pfx_vfs_read+0x10/0x10 [ 798.393507][T10617] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 798.393549][T10617] ? mutex_lock_nested+0x154/0x1d0 [ 798.393578][T10617] ? fdget_pos+0x253/0x320 [ 798.393614][T10617] ksys_read+0x14b/0x260 [ 798.393649][T10617] ? __pfx_ksys_read+0x10/0x10 [ 798.393687][T10617] ? do_syscall_64+0xbe/0xf80 [ 798.393723][T10617] do_syscall_64+0xfa/0xf80 [ 798.393747][T10617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.393778][T10617] ? clear_bhb_loop+0x60/0xb0 [ 798.393807][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.393829][T10617] RIP: 0033:0x7f7431c9e15c [ 798.393850][T10617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 798.393871][T10617] RSP: 002b:00007f742ff06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.393895][T10617] RAX: ffffffffffffffda RBX: 00007f7431ef5fa0 RCX: 00007f7431c9e15c [ 798.393911][T10617] RDX: 000000000000000f RSI: 00007f742ff060a0 RDI: 0000000000000004 [ 798.393926][T10617] RBP: 00007f742ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 798.393940][T10617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.393953][T10617] R13: 00007f7431ef6038 R14: 00007f7431ef5fa0 R15: 00007ffc66e64e28 [ 798.393990][T10617] [ 798.440099][ T10] r8152-cfgselector 7-1: USB disconnect, device number 23 [ 798.576408][ T988] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 798.604724][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 798.724325][ T9972] veth0_vlan: entered promiscuous mode [ 798.724753][ T988] usb 6-1: Using ep0 maxpacket: 16 [ 798.732553][ T988] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.732586][ T988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.760342][ T988] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.760767][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.760792][ T988] usb 6-1: Product: syz [ 798.760808][ T988] usb 6-1: Manufacturer: syz [ 798.760824][ T988] usb 6-1: SerialNumber: syz [ 798.763148][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.763178][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.763195][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.763227][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.763244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.774104][ T9] usb 2-1: config 0 descriptor?? [ 798.875059][ T9972] veth1_vlan: entered promiscuous mode [ 799.000149][ T9972] veth0_macvtap: entered promiscuous mode [ 799.037944][ T9972] veth1_macvtap: entered promiscuous mode [ 799.066213][ T988] usb 6-1: 0:2 : does not exist [ 799.070616][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.180882][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.202919][ T6831] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.204240][ T6831] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.223416][ T6831] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.238346][ T6831] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.244940][ T988] usb 6-1: USB disconnect, device number 7 [ 799.285993][ T9] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe [ 799.286044][ T9] hid_parser_main: 2 callbacks suppressed [ 799.286063][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 799.336707][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 799.676602][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.678094][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.750626][ T6013] usb 2-1: USB disconnect, device number 32 [ 799.833995][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.834019][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.911727][T10628] netlink: 'syz.6.1310': attribute type 3 has an invalid length. [ 800.399532][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.937'. [ 804.134546][ T6013] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 805.121851][ T5977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 805.244610][ T6013] usb 7-1: Using ep0 maxpacket: 16 [ 805.246983][ T6013] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.247010][ T6013] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 805.250164][ T6013] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.250194][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.250218][ T6013] usb 7-1: Product: syz [ 805.250234][ T6013] usb 7-1: Manufacturer: syz [ 805.250250][ T6013] usb 7-1: SerialNumber: syz [ 805.501639][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 805.555247][ T6013] usb 7-1: 0:2 : does not exist [ 805.568536][ T5977] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 805.568576][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.568602][ T5977] usb 6-1: Product: syz [ 805.568621][ T5977] usb 6-1: Manufacturer: syz [ 805.568639][ T5977] usb 6-1: SerialNumber: syz [ 805.604924][ T5977] usb 6-1: config 0 descriptor?? [ 805.611122][ T5977] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 805.611185][ T5977] uvcvideo 6-1:0.0: No valid video chain found. [ 805.653324][ T6013] usb 7-1: USB disconnect, device number 24 [ 805.986181][T10705] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1337'. [ 806.728122][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 807.367482][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805ab50400: rx timeout, send abort [ 807.392258][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805ab50400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 808.926892][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1343'. [ 809.301282][ T5875] usb 6-1: USB disconnect, device number 8 [ 810.194541][ T5875] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 811.114775][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 811.117143][ T5875] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.117171][ T5875] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.120264][ T5875] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.120295][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.120318][ T5875] usb 7-1: Product: syz [ 811.120334][ T5875] usb 7-1: Manufacturer: syz [ 811.120351][ T5875] usb 7-1: SerialNumber: syz [ 811.934252][ T5875] usb 7-1: 0:2 : does not exist [ 811.993431][ T5875] usb 7-1: USB disconnect, device number 25 [ 812.392386][T10783] binder: 10779:10783 ioctl 4018620d 0 returned -22 [ 814.785402][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1365'. [ 816.676933][T10824] openvswitch: netlink: IP tunnel dst address not specified [ 816.874591][T10814] netlink: 'syz.8.1376': attribute type 3 has an invalid length. [ 818.574703][ T10] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 818.725472][ T10] usb 7-1: too many configurations: 119, using maximum allowed: 8 [ 818.727467][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 818.727509][ T10] usb 7-1: can't read configurations, error -61 [ 818.832774][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 819.249641][ T10] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 819.395677][ T10] usb 7-1: too many configurations: 119, using maximum allowed: 8 [ 819.398022][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 819.398061][ T10] usb 7-1: can't read configurations, error -61 [ 819.398448][ T10] usb usb7-port1: attempt power cycle [ 819.414588][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 819.455992][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.456024][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.462984][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.463021][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.463045][ T9] usb 6-1: Product: syz [ 819.463062][ T9] usb 6-1: Manufacturer: syz [ 819.463078][ T9] usb 6-1: SerialNumber: syz [ 819.545337][T10862] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 819.601046][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 819.601133][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 819.675481][T10862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.737837][T10865] uprobe: syz.8.1394:10865 failed to unregister, leaking uprobe [ 819.749376][ T9] usb 6-1: 0:2 : does not exist [ 819.784634][ T10] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 819.790401][ T9] usb 6-1: USB disconnect, device number 9 [ 819.809749][ T10] usb 7-1: too many configurations: 119, using maximum allowed: 8 [ 819.823466][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 819.823509][ T10] usb 7-1: can't read configurations, error -61 [ 819.966255][ T10] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 819.986181][ T10] usb 7-1: too many configurations: 119, using maximum allowed: 8 [ 819.988544][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 819.988593][ T10] usb 7-1: can't read configurations, error -61 [ 819.988990][ T10] usb usb7-port1: unable to enumerate USB device [ 820.314690][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1399'. [ 821.262427][T10895] FAULT_INJECTION: forcing a failure. [ 821.262427][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 821.262609][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.5.1406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.262645][T10895] Tainted: [L]=SOFTLOCKUP [ 821.262653][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.262668][T10895] Call Trace: [ 821.262676][T10895] [ 821.262686][T10895] dump_stack_lvl+0x189/0x250 [ 821.262723][T10895] ? __pfx____ratelimit+0x10/0x10 [ 821.262759][T10895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.262790][T10895] ? __pfx__printk+0x10/0x10 [ 821.262821][T10895] ? __pfx___might_resched+0x10/0x10 [ 821.262847][T10895] ? fs_reclaim_acquire+0x7d/0x100 [ 821.262875][T10895] should_fail_ex+0x46c/0x600 [ 821.262910][T10895] ? security_inode_alloc+0x39/0x330 [ 821.262935][T10895] should_failslab+0xa8/0x100 [ 821.262960][T10895] ? security_inode_alloc+0x39/0x330 [ 821.262983][T10895] kmem_cache_alloc_noprof+0x84/0x6c0 [ 821.263026][T10895] security_inode_alloc+0x39/0x330 [ 821.263055][T10895] inode_init_always_gfp+0x9bf/0xd70 [ 821.263086][T10895] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 821.263117][T10895] alloc_inode+0x82/0x1b0 [ 821.263142][T10895] new_inode+0x22/0x170 [ 821.263165][T10895] ? resv_map_alloc+0x200/0x2e0 [ 821.263200][T10895] hugetlbfs_get_inode+0x80/0x640 [ 821.263247][T10895] hugetlb_file_setup+0x21d/0x640 [ 821.263279][T10895] ksys_mmap_pgoff+0x22f/0x720 [ 821.263322][T10895] do_syscall_64+0xfa/0xf80 [ 821.263346][T10895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.263370][T10895] ? clear_bhb_loop+0x60/0xb0 [ 821.263400][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.263423][T10895] RIP: 0033:0x7f1b3ae9f749 [ 821.263443][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.263463][T10895] RSP: 002b:00007f1b390e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 821.263489][T10895] RAX: ffffffffffffffda RBX: 00007f1b3b0f6090 RCX: 00007f1b3ae9f749 [ 821.263506][T10895] RDX: 0000000002000002 RSI: 000000000000d000 RDI: 0000200000969000 [ 821.263522][T10895] RBP: 00007f1b390e5090 R08: ffffffffffffffff R09: 00000000beefd000 [ 821.263542][T10895] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 821.263558][T10895] R13: 00007f1b3b0f6128 R14: 00007f1b3b0f6090 R15: 00007ffe74b19488 [ 821.263595][T10895] [ 821.685615][T10903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1408'. [ 821.697014][T10906] FAULT_INJECTION: forcing a failure. [ 821.697014][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 821.697064][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.8.1409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.697102][T10906] Tainted: [L]=SOFTLOCKUP [ 821.697111][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.697128][T10906] Call Trace: [ 821.697138][T10906] [ 821.697148][T10906] dump_stack_lvl+0x189/0x250 [ 821.697194][T10906] ? __pfx____ratelimit+0x10/0x10 [ 821.697236][T10906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.697272][T10906] ? __pfx__printk+0x10/0x10 [ 821.697312][T10906] ? __pfx___might_resched+0x10/0x10 [ 821.697347][T10906] should_fail_ex+0x46c/0x600 [ 821.697387][T10906] ? __alloc_skb+0x255/0x430 [ 821.697416][T10906] should_failslab+0xa8/0x100 [ 821.697450][T10906] ? __alloc_skb+0x255/0x430 [ 821.697476][T10906] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 821.697533][T10906] __alloc_skb+0x255/0x430 [ 821.697566][T10906] ? __pfx___alloc_skb+0x10/0x10 [ 821.697603][T10906] ? netlink_ack_tlv_len+0x6c/0x210 [ 821.697642][T10906] netlink_ack+0x146/0xa50 [ 821.697673][T10906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.697720][T10906] netlink_rcv_skb+0x28c/0x470 [ 821.697756][T10906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.697782][T10906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.697835][T10906] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.697870][T10906] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.697909][T10906] genl_rcv+0x28/0x40 [ 821.697931][T10906] netlink_unicast+0x846/0xa10 [ 821.697974][T10906] ? __pfx_netlink_unicast+0x10/0x10 [ 821.698003][T10906] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 821.698047][T10906] ? netlink_sendmsg+0x642/0xb30 [ 821.698081][T10906] ? skb_put+0x11b/0x210 [ 821.698114][T10906] netlink_sendmsg+0x805/0xb30 [ 821.698162][T10906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.698207][T10906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.698242][T10906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.698279][T10906] __sock_sendmsg+0x21c/0x270 [ 821.698323][T10906] ____sys_sendmsg+0x508/0x810 [ 821.698364][T10906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.698411][T10906] ? import_iovec+0x74/0xa0 [ 821.698441][T10906] ___sys_sendmsg+0x21f/0x2a0 [ 821.698479][T10906] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.698564][T10906] ? __fget_files+0x2a/0x420 [ 821.698592][T10906] ? __fget_files+0x3a6/0x420 [ 821.698634][T10906] __x64_sys_sendmsg+0x1a1/0x260 [ 821.698671][T10906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.698717][T10906] ? __pfx_ksys_write+0x10/0x10 [ 821.698760][T10906] ? do_syscall_64+0xbe/0xf80 [ 821.698792][T10906] do_syscall_64+0xfa/0xf80 [ 821.698828][T10906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.698854][T10906] ? clear_bhb_loop+0x60/0xb0 [ 821.698886][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.698912][T10906] RIP: 0033:0x7f0ded6df749 [ 821.698942][T10906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.698963][T10906] RSP: 002b:00007f0deb93e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.698991][T10906] RAX: ffffffffffffffda RBX: 00007f0ded935fa0 RCX: 00007f0ded6df749 [ 821.699011][T10906] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000004 [ 821.699028][T10906] RBP: 00007f0deb93e090 R08: 0000000000000000 R09: 0000000000000000 [ 821.699044][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.699060][T10906] R13: 00007f0ded936038 R14: 00007f0ded935fa0 R15: 00007ffec04b7298 [ 821.699101][T10906] [ 821.842165][ T37] audit: type=1326 audit(1766048469.308:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.312010][T10916] uprobe: syz.6.1416:10916 failed to unregister, leaking uprobe [ 822.582113][ T37] audit: type=1326 audit(1766048470.048:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.582394][ T37] audit: type=1326 audit(1766048470.048:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.582656][ T37] audit: type=1326 audit(1766048470.048:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.583032][ T37] audit: type=1326 audit(1766048470.048:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.583312][ T37] audit: type=1326 audit(1766048470.048:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.583580][ T37] audit: type=1326 audit(1766048470.048:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.583850][ T37] audit: type=1326 audit(1766048470.048:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.584762][ T37] audit: type=1326 audit(1766048470.048:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.585469][ T37] audit: type=1326 audit(1766048470.058:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10902 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744805f749 code=0x7fc00000 [ 822.722175][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1418'. [ 823.637089][T10930] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.652526][T10931] ªªªªªª: renamed from wg2 (while UP) [ 823.993513][T10945] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1428'. [ 824.576702][T10953] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1430'. [ 825.210431][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1433'. [ 826.146904][T10966] uprobe: syz.6.1436:10966 failed to unregister, leaking uprobe [ 826.340170][T10954] netlink: 'syz.8.1431': attribute type 3 has an invalid length. [ 826.531677][T10979] FAULT_INJECTION: forcing a failure. [ 826.531677][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 826.531719][T10979] CPU: 0 UID: 0 PID: 10979 Comm: syz.7.1441 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 826.531752][T10979] Tainted: [L]=SOFTLOCKUP [ 826.531760][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.531774][T10979] Call Trace: [ 826.531783][T10979] [ 826.531793][T10979] dump_stack_lvl+0x189/0x250 [ 826.531829][T10979] ? __pfx____ratelimit+0x10/0x10 [ 826.531867][T10979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.531899][T10979] ? __pfx__printk+0x10/0x10 [ 826.531927][T10979] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 826.531956][T10979] ? lockdep_hardirqs_on+0x98/0x140 [ 826.531985][T10979] should_fail_ex+0x46c/0x600 [ 826.532021][T10979] ? __alloc_skb+0x255/0x430 [ 826.532047][T10979] should_failslab+0xa8/0x100 [ 826.532072][T10979] ? __alloc_skb+0x255/0x430 [ 826.532094][T10979] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 826.532139][T10979] __alloc_skb+0x255/0x430 [ 826.532177][T10979] ? __pfx___alloc_skb+0x10/0x10 [ 826.532201][T10979] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 826.532226][T10979] ? lockdep_hardirqs_on+0x98/0x140 [ 826.532250][T10979] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 826.532279][T10979] hci_mgmt_cmd+0x1c5/0xfa0 [ 826.532324][T10979] ? mutex_lock_nested+0x154/0x1d0 [ 826.532361][T10979] hci_sock_sendmsg+0x6d7/0xf30 [ 826.532396][T10979] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 826.532424][T10979] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 826.532462][T10979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.532494][T10979] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 826.532527][T10979] __sock_sendmsg+0x21c/0x270 [ 826.532567][T10979] sock_write_iter+0x27f/0x370 [ 826.532603][T10979] ? __pfx_sock_write_iter+0x10/0x10 [ 826.532665][T10979] vfs_write+0x5d5/0xb40 [ 826.532704][T10979] ? __pfx_sock_write_iter+0x10/0x10 [ 826.532739][T10979] ? __pfx_vfs_write+0x10/0x10 [ 826.532785][T10979] ? __fget_files+0x2a/0x420 [ 826.532821][T10979] ksys_write+0x14b/0x260 [ 826.532857][T10979] ? __pfx_ksys_write+0x10/0x10 [ 826.532896][T10979] ? do_syscall_64+0xbe/0xf80 [ 826.532924][T10979] do_syscall_64+0xfa/0xf80 [ 826.532948][T10979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.532971][T10979] ? clear_bhb_loop+0x60/0xb0 [ 826.533000][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.533024][T10979] RIP: 0033:0x7f7431c9f749 [ 826.533045][T10979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.533065][T10979] RSP: 002b:00007f742ff06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.533088][T10979] RAX: ffffffffffffffda RBX: 00007f7431ef5fa0 RCX: 00007f7431c9f749 [ 826.533104][T10979] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 826.533119][T10979] RBP: 00007f742ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 826.533132][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.533145][T10979] R13: 00007f7431ef6038 R14: 00007f7431ef5fa0 R15: 00007ffc66e64e28 [ 826.533190][T10979] [ 827.682956][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1446'. [ 830.480055][T11019] uprobe: syz.6.1455:11019 failed to unregister, leaking uprobe [ 830.888008][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 831.670855][T11033] overlay: filesystem on ./file0 is read-only [ 831.883824][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1465'. [ 833.624623][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1472'. [ 834.445560][T11047] netlink: 'syz.8.1466': attribute type 3 has an invalid length. [ 834.502667][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.502766][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.894889][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 836.208365][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805c46f800: rx timeout, send abort [ 836.208665][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c46f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 836.966059][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 836.996492][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.996560][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 836.996591][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 836.996637][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 836.996664][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.014995][ T10] usb 7-1: config 0 descriptor?? [ 837.510658][ T10] usb 7-1: USB disconnect, device number 30 [ 838.435918][T11107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 840.605190][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 840.626780][T11103] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 840.917250][T11101] netlink: 'syz.8.1490': attribute type 3 has an invalid length. [ 843.405190][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1498'. [ 843.982633][T11140] netlink: 'syz.5.1486': attribute type 3 has an invalid length. [ 845.778693][T11169] vlan3: entered promiscuous mode [ 845.778716][T11169] bridge0: entered promiscuous mode [ 845.945895][ T805] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 846.287097][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.287152][ T805] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 846.287179][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.298640][ T805] usb 2-1: config 0 descriptor?? [ 846.998288][T11188] netlink: 'syz.5.1521': attribute type 3 has an invalid length. [ 847.238888][ T805] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 847.238930][ T805] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 847.238960][ T805] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 847.238990][ T805] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 847.239019][ T805] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 847.295887][ T805] hkems 0003:2006:0118.0008: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 847.295932][ T805] hkems 0003:2006:0118.0008: no inputs found [ 847.295947][ T805] hkems 0003:2006:0118.0008: force feedback init failed [ 847.438020][T11209] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 848.223189][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'. [ 850.756305][ T5874] usb 2-1: USB disconnect, device number 33 [ 850.969670][T11243] Non-string source [ 851.677828][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 852.047236][T11252] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 852.302548][T11273] FAULT_INJECTION: forcing a failure. [ 852.302548][T11273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.302590][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.6.1556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 852.302621][T11273] Tainted: [L]=SOFTLOCKUP [ 852.302629][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.302643][T11273] Call Trace: [ 852.302651][T11273] [ 852.302661][T11273] dump_stack_lvl+0x189/0x250 [ 852.302697][T11273] ? __pfx____ratelimit+0x10/0x10 [ 852.302734][T11273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.302766][T11273] ? __pfx__printk+0x10/0x10 [ 852.302806][T11273] should_fail_ex+0x46c/0x600 [ 852.302843][T11273] _copy_to_user+0x31/0xb0 [ 852.302869][T11273] simple_read_from_buffer+0xe1/0x170 [ 852.302900][T11273] proc_fail_nth_read+0x1b6/0x220 [ 852.302938][T11273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.302977][T11273] ? rw_verify_area+0x2ac/0x4e0 [ 852.303016][T11273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.303053][T11273] vfs_read+0x206/0xa30 [ 852.303096][T11273] ? __pfx_vfs_read+0x10/0x10 [ 852.303123][T11273] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 852.303165][T11273] ? mutex_lock_nested+0x154/0x1d0 [ 852.303194][T11273] ? fdget_pos+0x253/0x320 [ 852.303230][T11273] ksys_read+0x14b/0x260 [ 852.303262][T11273] ? __fget_files+0x2a/0x420 [ 852.303289][T11273] ? __pfx_ksys_read+0x10/0x10 [ 852.303326][T11273] ? do_syscall_64+0xbe/0xf80 [ 852.303354][T11273] do_syscall_64+0xfa/0xf80 [ 852.303378][T11273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.303401][T11273] ? clear_bhb_loop+0x60/0xb0 [ 852.303429][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.303452][T11273] RIP: 0033:0x7f82e2b3e15c [ 852.303472][T11273] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 852.303493][T11273] RSP: 002b:00007f82e0da6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.303517][T11273] RAX: ffffffffffffffda RBX: 00007f82e2d95fa0 RCX: 00007f82e2b3e15c [ 852.303534][T11273] RDX: 000000000000000f RSI: 00007f82e0da60a0 RDI: 0000000000000004 [ 852.303549][T11273] RBP: 00007f82e0da6090 R08: 0000000000000000 R09: 0000000000000000 [ 852.303564][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.303579][T11273] R13: 00007f82e2d96038 R14: 00007f82e2d95fa0 R15: 00007ffe1cbddc28 [ 852.303616][T11273] [ 854.139125][ T5802] Bluetooth: hci1: command 0x041b tx timeout [ 857.551243][T11316] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 862.424607][ T6013] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 862.574512][ T6013] usb 7-1: Using ep0 maxpacket: 32 [ 862.583836][ T6013] usb 7-1: no configurations [ 862.583859][ T6013] usb 7-1: can't read configurations, error -22 [ 862.754560][ T6013] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 862.842131][T11377] netlink: 'syz.5.1595': attribute type 3 has an invalid length. [ 862.914530][ T6013] usb 7-1: Using ep0 maxpacket: 32 [ 862.915807][ T6013] usb 7-1: no configurations [ 862.915827][ T6013] usb 7-1: can't read configurations, error -22 [ 862.916184][ T6013] usb usb7-port1: attempt power cycle [ 864.464546][ T6013] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 864.485269][ T6013] usb 7-1: Using ep0 maxpacket: 32 [ 864.492920][ T6013] usb 7-1: no configurations [ 864.492940][ T6013] usb 7-1: can't read configurations, error -22 [ 864.665091][ T6013] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 864.689486][ T6013] usb 7-1: Using ep0 maxpacket: 32 [ 864.690420][ T6013] usb 7-1: no configurations [ 864.690438][ T6013] usb 7-1: can't read configurations, error -22 [ 864.690802][ T6013] usb usb7-port1: unable to enumerate USB device [ 865.203423][T11400] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1599'. [ 865.206269][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'. [ 866.447087][T11411] uprobe: syz.5.1606:11411 failed to unregister, leaking uprobe [ 869.534710][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 871.424517][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 871.425457][ T10] usb 6-1: no configurations [ 871.425475][ T10] usb 6-1: can't read configurations, error -22 [ 871.554604][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 871.704548][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 871.709375][ T10] usb 6-1: no configurations [ 871.709395][ T10] usb 6-1: can't read configurations, error -22 [ 871.710027][ T10] usb usb6-port1: attempt power cycle [ 872.066292][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 872.085355][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 872.086213][ T10] usb 6-1: no configurations [ 872.086232][ T10] usb 6-1: can't read configurations, error -22 [ 872.254750][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 872.276656][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 872.277517][ T10] usb 6-1: no configurations [ 872.277534][ T10] usb 6-1: can't read configurations, error -22 [ 872.472005][ T10] usb usb6-port1: unable to enumerate USB device [ 876.744885][T11502] batadv_slave_0: entered promiscuous mode [ 876.747281][T11502] batman_adv: batadv0: Adding interface: macsec1 [ 876.747300][T11502] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.747334][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.747353][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.747370][T11502] batman_adv: batadv0: Interface activated: macsec1 [ 876.809443][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 876.809469][ T37] audit: type=1326 audit(1766048524.278:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809541][ T37] audit: type=1326 audit(1766048524.278:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809596][ T37] audit: type=1326 audit(1766048524.278:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809653][ T37] audit: type=1326 audit(1766048524.278:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809707][ T37] audit: type=1326 audit(1766048524.278:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809761][ T37] audit: type=1326 audit(1766048524.278:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809816][ T37] audit: type=1326 audit(1766048524.278:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809873][ T37] audit: type=1326 audit(1766048524.278:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809929][ T37] audit: type=1326 audit(1766048524.278:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 876.809984][ T37] audit: type=1326 audit(1766048524.278:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ae9f749 code=0x7ffc0000 [ 878.376872][T11501] netlink: 'syz.6.1616': attribute type 3 has an invalid length. [ 878.694103][T11516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 878.712710][T11525] binder: BINDER_SET_CONTEXT_MGR already set [ 878.712728][T11525] binder: 11522:11525 ioctl 4018620d 200000000100 returned -16 [ 879.583092][T11545] TCP: tcp_parse_options: Illegal window scaling value 252 > 14 received [ 880.363454][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.385494][T11554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.486772][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1666'. [ 885.446438][ T5874] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 886.094572][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 886.097310][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.097344][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.100537][ T5874] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.100569][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.100593][ T5874] usb 7-1: Product: syz [ 886.100610][ T5874] usb 7-1: Manufacturer: syz [ 886.100626][ T5874] usb 7-1: SerialNumber: syz [ 886.541860][ T5874] usb 7-1: 0:2 : does not exist [ 886.573329][ T5874] usb 7-1: USB disconnect, device number 35 [ 887.203496][T11640] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 887.269862][ T5909] ------------[ cut here ]------------ [ 887.269884][ T5909] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#0: kworker/0:5/5909 [ 887.269934][ T5909] Modules linked in: [ 887.269959][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.269992][ T5909] Tainted: [L]=SOFTLOCKUP [ 887.270002][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.270018][ T5909] Workqueue: usb_hub_wq hub_event [ 887.270050][ T5909] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 887.270078][ T5909] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 887.270099][ T5909] RSP: 0018:ffffc900058d7728 EFLAGS: 00010202 [ 887.270119][ T5909] RAX: 0000000000000002 RBX: ffff8880304c8000 RCX: 0000000000000000 [ 887.270135][ T5909] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 887.270153][ T5909] RBP: ffffc900058d7a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 887.270172][ T5909] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888027c39000 [ 887.270191][ T5909] R13: dffffc0000000000 R14: 0100000000000007 R15: ffff888027c0e000 [ 887.270210][ T5909] FS: 0000000000000000(0000) GS:ffff888126d01000(0000) knlGS:0000000000000000 [ 887.270230][ T5909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.270247][ T5909] CR2: 00007f7431cfe470 CR3: 000000008535e000 CR4: 00000000003526f0 [ 887.270268][ T5909] Call Trace: [ 887.270277][ T5909] [ 887.270293][ T5909] hub_event+0x158/0x4f30 [ 887.270334][ T5909] ? __lock_acquire+0x6b6/0x2cf0 [ 887.270373][ T5909] ? look_up_lock_class+0x74/0x150 [ 887.270413][ T5909] ? __lock_acquire+0x6b6/0x2cf0 [ 887.270454][ T5909] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 887.270514][ T5909] ? __pfx_hub_event+0x10/0x10 [ 887.270547][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.270583][ T5909] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.270607][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.270654][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.270685][ T5909] process_scheduled_works+0xad1/0x1770 [ 887.270750][ T5909] ? __pfx_process_scheduled_works+0x10/0x10 [ 887.270799][ T5909] worker_thread+0x8a0/0xda0 [ 887.270861][ T5909] kthread+0x711/0x8a0 [ 887.270900][ T5909] ? __pfx_worker_thread+0x10/0x10 [ 887.270929][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.270959][ T5909] ? rt_spin_unlock+0x150/0x200 [ 887.270998][ T5909] ? rt_spin_unlock+0x161/0x200 [ 887.271028][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.271065][ T5909] ret_from_fork+0x599/0xb30 [ 887.271095][ T5909] ? __pfx_ret_from_fork+0x10/0x10 [ 887.271135][ T5909] ? __switch_to_asm+0x39/0x70 [ 887.271170][ T5909] ? __switch_to_asm+0x33/0x70 [ 887.271205][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.271242][ T5909] ret_from_fork_asm+0x1a/0x30 [ 887.271300][ T5909] [ 887.271328][ T5909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 887.271347][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.271380][ T5909] Tainted: [L]=SOFTLOCKUP [ 887.271389][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.271405][ T5909] Workqueue: usb_hub_wq hub_event [ 887.271434][ T5909] Call Trace: [ 887.271443][ T5909] [ 887.271453][ T5909] dump_stack_lvl+0x99/0x250 [ 887.271485][ T5909] ? __asan_memcpy+0x40/0x70 [ 887.271518][ T5909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.271551][ T5909] ? __pfx__printk+0x10/0x10 [ 887.271592][ T5909] vpanic+0x237/0x6d0 [ 887.271626][ T5909] ? __pfx_vpanic+0x10/0x10 [ 887.271657][ T5909] ? is_bpf_text_address+0x292/0x2b0 [ 887.271689][ T5909] ? is_bpf_text_address+0x26/0x2b0 [ 887.271730][ T5909] panic+0xb9/0xc0 [ 887.271763][ T5909] ? __pfx_panic+0x10/0x10 [ 887.271808][ T5909] ? ret_from_fork_asm+0x1a/0x30 [ 887.271851][ T5909] __warn+0x317/0x4b0 [ 887.271882][ T5909] ? kcov_remote_start+0x5d9/0x710 [ 887.271913][ T5909] ? kcov_remote_start+0x5d9/0x710 [ 887.271939][ T5909] __report_bug+0x288/0x500 [ 887.271977][ T5909] ? unwind_next_frame+0xa5/0x23d0 [ 887.272007][ T5909] ? unwind_next_frame+0x1ab6/0x23d0 [ 887.272037][ T5909] ? kcov_remote_start+0x5d9/0x710 [ 887.272070][ T5909] ? __pfx___report_bug+0x10/0x10 [ 887.272123][ T5909] ? rt_spin_lock+0x1c1/0x3e0 [ 887.272160][ T5909] ? kcov_remote_start+0x5d9/0x710 [ 887.272186][ T5909] report_bug+0x16a/0x220 [ 887.272224][ T5909] ? kcov_remote_start+0x5d9/0x710 [ 887.272249][ T5909] ? kcov_remote_start+0x5db/0x710 [ 887.272274][ T5909] handle_bug+0x98/0x200 [ 887.272303][ T5909] exc_invalid_op+0x1a/0x50 [ 887.272338][ T5909] asm_exc_invalid_op+0x1a/0x20 [ 887.272361][ T5909] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 887.272387][ T5909] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 887.272408][ T5909] RSP: 0018:ffffc900058d7728 EFLAGS: 00010202 [ 887.272428][ T5909] RAX: 0000000000000002 RBX: ffff8880304c8000 RCX: 0000000000000000 [ 887.272444][ T5909] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 887.272461][ T5909] RBP: ffffc900058d7a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 887.272480][ T5909] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888027c39000 [ 887.272498][ T5909] R13: dffffc0000000000 R14: 0100000000000007 R15: ffff888027c0e000 [ 887.272525][ T5909] ? rt_spin_lock+0x1c1/0x3e0 [ 887.272566][ T5909] ? kcov_remote_start+0xe1/0x710 [ 887.272596][ T5909] hub_event+0x158/0x4f30 [ 887.272629][ T5909] ? __lock_acquire+0x6b6/0x2cf0 [ 887.272666][ T5909] ? look_up_lock_class+0x74/0x150 [ 887.272704][ T5909] ? __lock_acquire+0x6b6/0x2cf0 [ 887.272743][ T5909] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 887.272792][ T5909] ? __pfx_hub_event+0x10/0x10 [ 887.272822][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.272857][ T5909] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.272880][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.272906][ T5909] ? process_scheduled_works+0x9ef/0x1770 [ 887.272937][ T5909] process_scheduled_works+0xad1/0x1770 [ 887.273000][ T5909] ? __pfx_process_scheduled_works+0x10/0x10 [ 887.273048][ T5909] worker_thread+0x8a0/0xda0 [ 887.273098][ T5909] kthread+0x711/0x8a0 [ 887.273138][ T5909] ? __pfx_worker_thread+0x10/0x10 [ 887.273167][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.273198][ T5909] ? rt_spin_unlock+0x150/0x200 [ 887.273236][ T5909] ? rt_spin_unlock+0x161/0x200 [ 887.273267][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.273303][ T5909] ret_from_fork+0x599/0xb30 [ 887.273339][ T5909] ? __pfx_ret_from_fork+0x10/0x10 [ 887.273379][ T5909] ? __switch_to_asm+0x39/0x70 [ 887.273413][ T5909] ? __switch_to_asm+0x33/0x70 [ 887.273447][ T5909] ? __pfx_kthread+0x10/0x10 [ 887.273482][ T5909] ret_from_fork_asm+0x1a/0x30 [ 887.273540][ T5909] [ 887.273816][ T5909] Kernel Offset: disabled