last executing test programs: 36m23.166835496s ago: executing program 32 (id=1939): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(r2, &(0x7f0000000180), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r11, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 36m6.637008859s ago: executing program 4 (id=1984): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0xa0, 0xbbba, 0xfffffffe, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x8}, {0x1000001, 0x9, 0x8}, 0x0, 0x3f0, 0x1, 0x100003, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 36m5.888396978s ago: executing program 4 (id=1989): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00'], 0x70}}, 0x4004040) sendto(r1, &(0x7f0000000940)="ee0052ff9cae2309d56d15d776e0597e36e60effd1606b035fd3b2b7c35b899e76bc3ff6b3bbf7b59df0a4a120cc25085c48093e49f4e1f4709e17112ea72bfcb4977d45649d45ce0f3a5e56b5b8574f980eda114c642e648d11d8dc", 0x5c, 0x8000, &(0x7f00000009c0)=@qipcrtr={0x2a, 0x4, 0x9ff2429f6a345f5}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) recvmsg$inet_nvme(r4, &(0x7f0000000140)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000780)=""/241, 0xf1}], 0x5, &(0x7f0000000880)=""/166, 0xa6}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000004c0)="800000800000210ee7decd7a000000008100", 0x12, 0x40054, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 36m4.857737558s ago: executing program 4 (id=1993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) syz_usb_disconnect(r1) 36m1.713654433s ago: executing program 4 (id=1999): ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000001d000095000000000000002f711cfc88262b5bc6d822d4d305013c1164c8da7e985a0b2f0b4b75f62bd0fc11fb4174251164a72066c5994c0f0749cc74e0c0bf5a2f09000000be030f785dc7eb44e7f8bfb20a64408abbecb005a866e2fbcaea8dc0f46ed6203ef4aa29be2c89f9d4086ea3577da150fa8a9f8acaee6843b22e0dac14ad59ea9cf65872a4fce7b58898816c4387739ea910732a"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000922bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000580), &(0x7f0000000080)=@udp6=r5}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x183140, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0x541b, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r11, 0x4080aea2, &(0x7f0000000100)={[0xe000, 0x26000, 0x8000000, 0x6000], 0x5, 0x774e030780f5766a}) 36m0.738711291s ago: executing program 4 (id=2001): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000040), &(0x7f0000000000), 0x2}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)="eb626a18160b555ff54681385af0dc7d8ea5f131c7673981db27b511080bba02bd88700cdf1be2d9ec6819ea3ffb787f415f6f48c9e2970973e0291580768d11448217e27fdeb7bd341425a4465a45c2b7fa28760a92849a55f6a671eb36103a90d8507de5996a7a916b4127e4ba009b52ca8bc0e68f150dcc2161b9b051defa317341d1f88c0cd0cb63ebe69427433078689398151ab0fdbcea999148ffce", 0x9f, 0x20008000, 0x1}) io_uring_enter(r3, 0x68be, 0x5002, 0x4, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000002c0)=0x14) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) userfaultfd(0x80001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 36m0.25839203s ago: executing program 4 (id=2002): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x6, 0x37d5, {r0}, {0xffffffffffffffff}, 0x9, 0x3}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@noextend}, {@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@flag='async'}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc32b67c", 0xdb}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 35m59.917545026s ago: executing program 33 (id=2002): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x6, 0x37d5, {r0}, {0xffffffffffffffff}, 0x9, 0x3}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@noextend}, {@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@flag='async'}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc32b67c", 0xdb}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 35m35.06716558s ago: executing program 5 (id=2084): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r0, 0x1000008, 0x7d7b465c1d30afba, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r3, 0xa51bd000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 35m34.980033613s ago: executing program 5 (id=2085): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1000}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x13) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006d00)=@newtaction={0x2dac, 0x30, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{0x694, 0x1, [@m_sample={0xa4, 0x11, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x2, 0x92}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd2, 0x2, 0xffffffffffffffff, 0x401, 0x93a6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x25, 0x6, "13218c5ec51f0fd8289395debd698f64ec9b745d5d4e2079b528c270697e8ba5a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x434, 0x11, 0x0, 0x0, {{0x7}, {0x314, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x1d4, 0x6, {0x5, 'nat\x00', 0x7f, 0x7f, "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"}}, @TCA_IPT_TARG={0xf1, 0x6, {0x5, 'security\x00', 0x0, 0x1, "d5bd3d723c5ef515d4ed39fe3cb49c6cbc5455a709b58d41069110b814179670c3ab44387b1ec5d991ab89e1c8eb794b1173e885f680ab5835b5ec24f9dedc014aca8c41769626be6a0d23beb66f258a6ab0531ffdda5025681c8b73c35b2db6291c4795df382f2759d5f58fe4195b18fc38b15a3ab9f8c09a8d242e1a6b8f4a3426e30f2c3167cbff2a5ca241f3821088a45c0ca2aacb90194bdb4fd710b16df0578fc4b6110f9b7d6d36d40b837f24a131fb26bf9facf26e77da83707b202444cebd2a23e332"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xfb, 0x6, "fd981a97ed20e9ea0510db1618b50a5282532956f1853b58ddb4a953d7b88ba4e69ac7a425be813e2a333a9b2a618e029e1e6575067cc37515cb8f5428b315f67f17a644eaf5015b8b9b79bc7c947ce93de773f7d16b7eab2c7174e5913c606dfaec884365374e3a9645c6190a6fef183c884755a7974e585bdd9a83de9d27942b8d89a0f742abc213966df4baffa4386ee3fdab795ef69d5a1bef4e6a3b1a8c886effd92057a5512c9ee46b9c8cccb67432291fec302beabbe66ca5e60ed7b79d016f89f21016c79523f5e40592a92534d9448f5d02e4b68a040d938bad6894fd19deb504938254d1194e38d1a178644245e58fa2c8da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x1b8, 0x1b, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x61, 0x6, {0x9, 'filter\x00', 0x5, 0xb47, "c54c739adb6470b38f51a8961e813a2a86c83b6058999b7840dfeab34ca470411c1064f321a35e8e3040e877af02294810a7aeedfb2504"}}]}, {0xb6, 0x6, "faaf7396ab4d489185a9386e3ca5eaf6de8411c3371f8a5ed4d85424c897e8b76f73504e4ec3bfd99616cfcd36baad5f9459b2a70084feadabe976a811b8bb37afd34348cc2d40388bfa23666e2d324b7183fbb21e3a067f1cc7f6f407722f0dae73dd0c5a5c3ec2f867e7c7bfddcf4e27314db18bb5bc04bf3ff60dccbdbd6898be4275c90806d7a73e003c321013f6381b75598af544ba105f9ddaab5a88de8652cd55be7bac88967325e9f938fd682996"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x1f8, 0x1, [@m_connmark={0x1f4, 0x9, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x5, 0x5, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x1, 0x0, 0x0, 0xfffffff7}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff01, 0x7, 0x8, 0x3, 0x1e}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xfffffff4, 0x10000000, 0x70, 0x4}, 0x8c4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd6c, 0x6, 0x10000000, 0x55c, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x20000000, 0x800, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x4, 0x8, 0x23, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbb7c, 0x5, 0x20000000, 0x9, 0x1b3}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x20000000, 0x7ff, 0x7ff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xfffffeff, 0x20000000, 0x80000000, 0x8}, 0xd69d}}]}, {0xaa, 0x6, "d45ce466fbfb9c7f36f2e75b29519266cdf77906e77f1cb0026e0122ab3bc151b400d5e7600b19ff5d8c0bc79e88f5ef487653e90170906fa72ecb046d7a4ac42c87896cd5793ecea27b48a2dc64379814562f92785705897df0027e4c0738cd11001c5949206dcfe048068e91010088ccb96893639ef2a4efa1ad79df03f2ee91928b8973d61e0744421fb5e3fe5e780ce403f6e90265f032a5b5511d8fb0de0a4a4383ba96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x198, 0x1, [@m_csum={0x194, 0x20, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x2, 0x10, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xd74, 0x8, 0x8, 0x1}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x14, 0x4ed52ff0c7ba83de, 0x101, 0x3}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0x3, 0x6}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x98, 0x7, 0xffffffffffffffff, 0xd3e, 0x80}, 0x134a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x50000000, 0x0, 0x5e0d, 0xfec0}, 0x2c}}]}, {0xc0, 0x6, "d1b4ed991b15a4116a73c49354404f65137543e6348e5912c045d974b026468d101d279c023e7d00f33613cd156bde1276ced5f631a737d775c723c69d71262194cddc340f27b36102bbea8797aa2b9433dd047460795634c3176fbc10ddc89f2f7b3da552df2aa89fcae3efe940db6b8487caa060dc4ceedd3209f314745fe2b116b1c16fe81a8c843188966c19e77217a5d6de7b7a7740cfb457a403ab3ec51161bd40c96b2b883e004a003c3717dad3869c0fab8df91293b78e7a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x2374, 0x1, [@m_sample={0x1078, 0xd, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x559, 0xe, 0x1, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x140, 0xe, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2d, 0x100, 0x3, 0xfffff8c5, 0xfffffff9}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x16d, 0x2, 0x0, 0x2, 0x6}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x247, 0xb87, 0x5, 0x2, 0x6}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x80, 0xffffffffffffffff, 0xf, 0x6}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0x1, 0x4}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x5, 0x3, 0x2d3}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1d, 0x3, 0x10000000, 0x7, 0x1}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x42, 0x7, 0x2, 0xfffffffd, 0x7f}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7a, 0x5, 0x0, 0x8, 0x80}, 0xa}}]}, {0x16, 0x6, "af1b5021109b5d9bfd4f090517aa71405287"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x1030, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x14c, 0x1f, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x6, 0x39, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x7f, 0x4, 0x9, 0x20002}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa1c, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x7fff, 0x0, 0x40}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x237d, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf07, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x0, 0xb, 0x7fffffff}}]}, {0x9c, 0x6, "bd6fe97716cd53b54e1f80e038f3440e3d8f2f3c7a4700877c812d5abaafd587df53286d2c26f2fdf198934423d41e441036ed9de85e068e8d9c2bfce70f9b80b8b318bcb561b4eba2d8535f992cb43afeab193f86ab105d6624fad708d4d0f545293fb0d52010845ce9fcc8454b712883bc75abcfc67b4715b394aeee398068c04914827c9c209a0d77fee3509563acb2af5642629955ed"}, {0xc}, {0xc}}}, @m_mpls={0x3c, 0x1c, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x6, 0x6, "09bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2dac}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xffff, 0x4}, {0x0, 0x7}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = socket$unix(0x1, 0x1, 0x0) io_setup(0x6, &(0x7f0000001000)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='lp', 0x2) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(0x3) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000300)={0x5}) 35m33.817482067s ago: executing program 5 (id=2087): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000500)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c"], 0x40}, 0x20000024) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) readv(r5, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4) 35m31.667290938s ago: executing program 5 (id=2098): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x204) 35m31.567760763s ago: executing program 5 (id=2099): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x6, 0x2e, 0x1000, 0x4}, 0x98) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f0000000040)={[0x80]}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 35m30.234223999s ago: executing program 5 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 35m29.662164579s ago: executing program 34 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 24m5.69319641s ago: executing program 6 (id=4014): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100007e9eb4104c053800f5160102030109021200ac550000100904826c784bd5e378212a0c54f3c16f36bbeff96d8e4932fe8d7dd0ea8d62b8189ea955d1583a853afe3658dfedaf4299d883bc735eca2014897f50b53c7fc51a22986371c32ac3e388e37fbe32f270d10b928f6b0b5a80816c59d8f6a51d6a977a0365372b836be3e0a470fd7bd71da86b9d8a11272395962009bcbc7c2cef59135aca4e7a21c644a6a3fe22350496a7529a12086b3f6884e2f56ddd6a58e9a6c5a27ba9596b57c77cc58c7f03211164d27da4edc88f68c00151f510a23641aec028cac9"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x0, 0x2, 0x3}) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x80001) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000070000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaab0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m59.20258302s ago: executing program 6 (id=4031): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x668, 0x21, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@generic="6e3c16cb77f25034e763b9c97073e075bee897c43094cd164a0360c97f4e494640dedf33b5b9e7df3c4037d431dacce392f43291b4eb9fba039e6869c218a9d369b852a6db199d5d6a6919628201255eddb2853e778d43421e28c15a4b469eda6ff91ea166c27b645d1a280071d7103a6d8607cfa231f635c72956296084875285a54c6063ab9caf531ec5cac03f67839cecbcd0e780918dc56540", @typed={0xa, 0x46, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x1}, @nested={0x590, 0x132, 0x0, 0x1, [@nested={0x589, 0xb0, 0x0, 0x1, [@nested={0x59, 0x151, 0x0, 0x1, [@typed={0x19, 0xa2, 0x0, 0x0, @binary="37f6779274a4d87e9e8c7237dc3da2b113bc521c50"}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x3}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@broadcast}, @generic="9acb5455e9125f64bb564577f59c605eba85155511240efcea5a4b0519cfc718de", @nested={0x4, 0x8f}]}, @nested={0xf9, 0xab, 0x0, 0x1, [@generic="94ee644b9159afc8a4af0388e604e645c8b0a4b95e55450dffd7935d418c98534b13f94964b17289d26a138f50c3fd277ba0210d92071886afb681bc65111cb5767e2e84baa83545e1592afe586bf05f79ef683d512033119b2b71219e1970806afae7be38ef4f4a6b77828109ea86bd82acb893ada8ae", @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x117, 0x0, 0x0, @fd}, @generic="8a0bb62000f15e0c04ff7fda9589408e163ecec6dcbb51268ff040c2ad39b7892aca8f220b3856d17431917f266962d21603fbd4b35b68a1d1cf0f1c12c7607945fb86df55fafc13a1d1d7f31a5fa9c9bcbe9ee4a1e3e1fb0e84069c541d84c0c8f6ef9ea6411dd6a4fd4e925173"]}, @generic="8492c7c904f9fa689a5e91e390d68f32d53a55bc0285b3ec796a7af06dff5b44b016be35972f277e9f46f7101a3bb79e7b72c8e95c028f2a2d4bf4cc44e512d11686ae32f4f998e29b72fdc0f69bb679af350bcc75c2f44b404ec3289a9c4e7aefca3ef8c940570f2aabb78ba56fa87f7935ceb10a60524f264fa195efbbf1b7a23070b383acdb42a47d864a2e", @nested={0x16d, 0x54, 0x0, 0x1, [@generic="e7e5e866fae0a8708c6ac7ccc6eb5cd17e361b39cd61946a5978420b2d116c1b7a579ebc548dca47cd982f8ace760e21d7c7cc6bcb935f186444b4f59165eceb7dd7c482060eb966be228a58443ee3acf093b382d0647c8ccfc2be8e1b67636cbe5a254123e4872405cb2815cfa77e578078c2f1c763b6eb9ec54fbe8370f0474c2cd4aacad7b51bbc0ac8418a8e88ec575aa649cae5864d763a5c0edcaddbf1c122e9fd84373543557b7a9e78f389d22e5ca6bf7ad2408ca3c23d929ffae4c5dce07e2a53ee6921bbcff423d4ac", @generic="f0998ee814a2a93cc9297a3d3b084fa29724209b4361b922e70205a70b06a70c706835d1b42a5cb9f1bc9bce7cdeb61e6a67a9", @typed={0x6, 0x3c, 0x0, 0x0, @str='$\x00'}, @nested={0x4, 0xaf}, @generic="b8c8f1600e3c18b7b2c0bbba05db2f2fa24251f284f3d2dade39488cf8021951c1ae91a2f26c71da744b75fff0f8a19dd7b5e01312b9e599b71499", @generic="7bb66f6fd4f7f46dcc926ff745a4922dfce1665d98f559b8b585f29178a2be8153"]}, @nested={0x4, 0x101}, @nested={0x4, 0x12b}, @nested={0x225, 0x7b, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @uid}, @nested={0x4, 0x10a}, @generic="7d00f5a5d35896ef3cd068614de60f9d9d08b2c00c849a9dbaeb623c2651e510c00886c4954820c1f7b1b8819acaafb0687c0ae933c392ae88dd604537a97d096966ce003bdb3ebeccefa752c3cd12a0aae1f708342d06a0ec0fa17fe2feb9fd9c968e1553", @generic="a89c3e2f74fed5cae00c15cbd7e829b98190352cadf99de8d3ed26b1715eb7c06c95d36c220d2ec9461d4d401666f03e97ce1dc8f5dec3eb8d4083467f49609d01c124904ce7322f2d2a7d544e5aebc26d8b1e3b5271ff6cdd5f6e590b5cfe473f2ec3f0bf23184a3fbcfe298ffc13f75132f85b8d56916d850d68f7b631341ca388de612e238bb04dd89e49d96d577e86c6199f6a729c925fce4a880c3f2e6c528baf214476faec", @typed={0x8, 0x9c, 0x0, 0x0, @pid}, @generic="e70ace5299a325f2743efa26686c038ad19b488f9cf01a2ad06192a23cbcf07bf24bae93c3e3141f553c0ae64e73240415936339e1685a3567f04b753e540f68a8e4380711d2c32a30d6ece8ddc30199036af9606009bc1f5e1ec5d327386e3cad5942eb3289dec0349ca85ce2931f", @typed={0x15, 0xa8, 0x0, 0x0, @binary="14787be38eb15a2bd4c500f584084d35e2"}, @generic="5ad60ffb90f421a12523808bdeec06047ab21eb009da064d5bde58cf76993644e115d56dde18208f3ed735df9297e18f4912e2887efc2431fa2ef3d913980e7fa99fb24e4e9c1e8fab1b77b053fc03ea588869dceac0926c8edae03e68f3c7f7c42cb2f3d6c0a540669c67882ca22774497b6c263193854cab"]}]}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x24841}, 0x24060050) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 23m58.406322282s ago: executing program 6 (id=4034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"}) 23m51.730059492s ago: executing program 6 (id=4045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x3, 0xc8}, [@IFA_CACHEINFO={0x14, 0x6, {0xc8, 0x3, 0xc, 0x1}}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() pipe(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000040)='vcan0\x00') close(r5) socket(0x10, 0x803, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) 23m49.087020385s ago: executing program 6 (id=4053): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000048398b10b810141e23850102030109021200010d000000090448000091500a"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m43.655426727s ago: executing program 6 (id=4064): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) ppoll(&(0x7f0000000040)=[{r3, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23m27.043462443s ago: executing program 35 (id=4064): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) ppoll(&(0x7f0000000040)=[{r3, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17m52.522828943s ago: executing program 1 (id=4872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) syz_clone3(&(0x7f0000000180)={0x41288a80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @private1}]}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', 0x0, 0x1008000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x0) 17m50.957534928s ago: executing program 1 (id=4875): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r8) read$FUSE(r2, &(0x7f0000006280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') 17m48.566481215s ago: executing program 1 (id=4884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x34c}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000000c0)={r7}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES8=r7, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) socket$netlink(0x10, 0x3, 0x0) 17m46.162684582s ago: executing program 1 (id=4892): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x28, 0x5, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b5cad4f686656700000000323a0020010000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002b00ff010000000000000000000000000001fe8000000000000010000000000000bb6be2"], 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3fd, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2e, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x2004, 0x8000000, 0x5]}) connect$vsock_stream(r7, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) 17m44.933489444s ago: executing program 1 (id=4894): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69eb0b00", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)) r9 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001540)=""/4107, 0x100b}], 0x1) 17m40.785182382s ago: executing program 1 (id=4906): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x80010, r0, 0x5000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000080)="99", 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r2, 0x1, 0x80000}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f3a, 0x10, 0x200000, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) dup3(r4, r3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1044c200dc0168f3ebccc42366a154dece78b00b31811ee37dc395e44f8604226b0f293745"], 0x0) 17m23.817214463s ago: executing program 36 (id=4906): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x80010, r0, 0x5000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000080)="99", 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r2, 0x1, 0x80000}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f3a, 0x10, 0x200000, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) dup3(r4, r3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1044c200dc0168f3ebccc42366a154dece78b00b31811ee37dc395e44f8604226b0f293745"], 0x0) 1m39.21883379s ago: executing program 3 (id=7220): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) brk(0x55d55ede6004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) getdents64(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000000c0100000000002e612e"], 0x0, 0x2b, 0x0, 0x1}, 0x28) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000100)={0x0, 0xe734, 0x400, 0x3, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave:7-0:N']) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m37.927529297s ago: executing program 3 (id=7222): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="2401000028d56e5471f25bb11e77b69a0a4eb1ebba1a1a3320db60edb49a912563c0453bf3b71eab8402e1ef123584f30a3ccc35a3f4d3c3bbf745f2f9bc3bffee24279dbd010400ea78eeb6316e568c9ed84f67490a9ee062e9f624085014ac9b7b523d18da72de7bac412c78a08ea61bcc795a029d9f63782c4b14650d0bfa285ecdd880a7f72b9ce9c0276e384566f54fe54d", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES8=r0], 0x104}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="2401000028d56e5471f25bb11e77b69a0a4eb1ebba1a1a3320db60edb49a912563c0453bf3b71eab8402e1ef123584f30a3ccc35a3f4d3c3bbf745f2f9bc3bffee24279dbd010400ea78eeb6316e568c9ed84f67490a9ee062e9f624085014ac9b7b523d18da72de7bac412c78a08ea61bcc795a029d9f63782c4b14650d0bfa285ecdd880a7f72b9ce9c0276e384566f54fe54d", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES8=r0], 0x104}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x8c, 0x0, 0x1000000, 0x0, 0xc5c4, 0x5}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x8c, 0x0, 0x1000000, 0x0, 0xc5c4, 0x5}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x240, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0xb50, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x4, 0x4}, 0x1, 0x100, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x16e3, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) (async) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async) bind$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) 1m37.402041973s ago: executing program 3 (id=7224): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp(0x2, 0x2, 0x1) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 1m34.745625656s ago: executing program 3 (id=7231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ftruncate(r2, 0x8008976) writev(r2, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="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", 0x128}, {&(0x7f0000000340)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f00000000c0)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f6", 0x43}, {&(0x7f0000000900)="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", 0x28a}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) 1m32.778251947s ago: executing program 3 (id=7235): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r3, 0x0) setpgid(0x0, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40240, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r6], 0x1, r4, r5, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m32.105439376s ago: executing program 3 (id=7239): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='i2c_read\x00', r1, 0x0, 0xfffffffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000088efa09089da345391f3e8430bae75f7e5dedc47aedc69c447bccd1c44b4dd56d48024e79edfe036e047d0ceb4e3446ed636d9d2ee1ef82d18a8dd45394d9a8c187ea437079c7450878394fdcffb11d6a72c96f26e242b6518571b0235a3c8d04f1fcc0990dea2ef6eb2856cdce44cc119185c94166d7903e70734b645321f49652b8d917b222212013c5ac65b61e044a9cb2f282b755d06e1f404223fe7c7ba406ac7ae449ed70a71be4c801d3c610b0940b4bd431a2ebd239b5abbf3d06934e0c51a384fe0d4d181f0aec482a28444531bf8ed99de698843417dd5afe181a6940198e085c82352d1b1562c82b8f2c8ebe3e1", @ANYRES16, @ANYBLOB="01713bbd7000000000000100000005000600af7b0000050005000000000008000300"], 0x2c}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x348f69facbfbfa74, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) sendmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r10, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1m15.827482311s ago: executing program 37 (id=7239): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='i2c_read\x00', r1, 0x0, 0xfffffffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000088efa09089da345391f3e8430bae75f7e5dedc47aedc69c447bccd1c44b4dd56d48024e79edfe036e047d0ceb4e3446ed636d9d2ee1ef82d18a8dd45394d9a8c187ea437079c7450878394fdcffb11d6a72c96f26e242b6518571b0235a3c8d04f1fcc0990dea2ef6eb2856cdce44cc119185c94166d7903e70734b645321f49652b8d917b222212013c5ac65b61e044a9cb2f282b755d06e1f404223fe7c7ba406ac7ae449ed70a71be4c801d3c610b0940b4bd431a2ebd239b5abbf3d06934e0c51a384fe0d4d181f0aec482a28444531bf8ed99de698843417dd5afe181a6940198e085c82352d1b1562c82b8f2c8ebe3e1", @ANYRES16, @ANYBLOB="01713bbd7000000000000100000005000600af7b0000050005000000000008000300"], 0x2c}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x348f69facbfbfa74, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) sendmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r10, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 21.554125238s ago: executing program 7 (id=7396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x202000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4c085) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='fsi_master_acf_copro_response\x00', r6, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000001c40)=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xe}, {}, {0x3, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) 19.864550714s ago: executing program 8 (id=7400): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 17.474952439s ago: executing program 7 (id=7407): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 16.390450334s ago: executing program 7 (id=7410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109021b0001000010000904b8070196d1ca000905820110"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320", @ANYRES64=r1], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000300)) 15.162090124s ago: executing program 8 (id=7412): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f00000001c0)) 11.645641955s ago: executing program 8 (id=7417): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendto$packet(r2, &(0x7f00000002c0)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e435a6f8eb0f7b695afcc5e16f37fe87757df0f46b5ab2926d122e05eee88f4badd00e49cc1f6b3fb3c3c7ff63b6da6552f26f61026d4cec389cccacdcd17c73e2a1f4750d588b8d4f6d1fff5377994198284ed8ba48a8cbc8b49cf02e24b10a6fa0e3ee22158e3ddf1bc2061c8a2ec47a8dfb686bee7625f1abaac5fd5692dbbc070b89ff129056fde324273f15f118075208762e9cff4b2fd86d0f75526a8aa2d9dfe3a535f2058f89973e1543a", 0xea, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe8, 0x6, @remote}, 0x14) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mmap(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x8c4b815a5465c2b2, r3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.151570325s ago: executing program 9 (id=7419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x34c}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000000c0)={r8}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042abd", @ANYRES32=0x0, @ANYBLOB="998080dc38450000280012800b00010065727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 9.906457167s ago: executing program 7 (id=7420): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 9.109269809s ago: executing program 9 (id=7421): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x3c, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x3, [0x100, 0xfffffff9]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b8008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 9.082341956s ago: executing program 0 (id=7422): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 8.355476455s ago: executing program 7 (id=7423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x2000, 0x0) r5 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r12, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18, 0x48d5}, 0x8050) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800), 0x10) sendmmsg$unix(r3, &(0x7f0000000940)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xfffffffffffffd8b, &(0x7f00000000c0)=[{&(0x7f0000000040)="46861fb1d9c795264ce14e5969772e0bd398bf90", 0x14}, {&(0x7f0000000380)="3ce0c68f5fa6f521349492b78baf446423503a1230adb957b1b72aed7e425184f15dbb8293f5ad98d31fbb91cc4f8e115b56f89818e16588a16f22d1b318db4325a80236756414b96332960145e1cd59c5485bb9b21a1a563ac17cf3852f3046a22be6d39b4eed32772c4644c580b65fa5132c8df9fcaae9549eb6b16a1d4f30984f73881e63249f987ff66af92ef059e29622c13d5b4eb3b3126e0cd5ad64f4fb92fa568d4c22c8a8e8a1d00a37baf576e115a77d23f5cab7ca998fb5077dfe3b1cf551d216740f541632b1604b35e160af7a273c18c41173381388bf2f27c1cbc877850d22d47341fd48da83e8ce874493839a057afddffed68a83c832", 0xfe}], 0x2, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r2, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r0, r4, r3]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x10, 0x1, 0x1, [r8]}}, @rights={{0x20, 0x1, 0x1, [r12, r13, r3, r1]}}], 0xc8}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 8.093334567s ago: executing program 9 (id=7424): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='i2c_read\x00', r1, 0x0, 0xfffffffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000088efa09089da345391f3e8430bae75f7e5dedc47aedc69c447bccd1c44b4dd56d48024e79edfe036e047d0ceb4e3446ed636d9d2ee1ef82d18a8dd45394d9a8c187ea437079c7450878394fdcffb11d6a72c96f26e242b6518571b0235a3c8d04f1fcc0990dea2ef6eb2856cdce44cc119185c94166d7903e70734b645321f49652b8d917b222212013c5ac65b61e044a9cb2f282b755d06e1f404223fe7c7ba406ac7ae449ed70a71be4c801d3c610b0940b4bd431a2ebd239b5abbf3d06934e0c51a384fe0d4d181f0aec482a28444531bf8ed99de698843417dd5afe181a6940198e085c82352d1b1562c82b8f2c8ebe3e1", @ANYRES16, @ANYBLOB="01713bbd7000000000000100000005000600af7b0000050005000000000008000300"], 0x2c}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x348f69facbfbfa74, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) sendmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r10, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 7.841184247s ago: executing program 2 (id=7425): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x0, @vifc_lcl_addr=@loopback, @local}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x20, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 6.962353964s ago: executing program 2 (id=7426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x58}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}]}, &(0x7f0000002280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xffffffffffffff8c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.814081622s ago: executing program 9 (id=7427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040200020000000095000000000000", @ANYRES64=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x23, &(0x7f0000000880)=ANY=[@ANYBLOB="18230000", @ANYRES32=r1, @ANYBLOB="000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32, @ANYBLOB="0000000005000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r6, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) r7 = semget(0x0, 0x4, 0x39c) semop(r7, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r7, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000040601ffffffff000000700a7fe7000000000000f2000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) 6.579841541s ago: executing program 2 (id=7428): socket$can_raw(0x1d, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0xc1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0800018008000100", @ANYRES32, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) 6.425315975s ago: executing program 8 (id=7429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x34c}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000000c0)={r8}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042abd7000000000", @ANYRES32=0x0, @ANYBLOB="998080dc38450000280012800b00010065727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 5.42295196s ago: executing program 0 (id=7430): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x20008040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 5.159322237s ago: executing program 8 (id=7431): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffd, 0x183003) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x1a1) write$nci(0xffffffffffffffff, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 5.119719148s ago: executing program 9 (id=7432): mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0xc0ed0000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000000000009500000000000000212fdb5882b4ebb032fa4058af185fec4f32e3a345077d1a4c8c0a2950e19810cbcd3312a006a0117470ffa5a16009d70acff3c5dd26276f68495fa0d658d471be647540"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) fanotify_init(0xf00, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000180)={0x80}) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="2e000000fb6e8188040f80ec59acbc040e0027001000000002800000121f0000000000000000000000000000878e5b53a453b0a1536a17bcb4379d9f00000006fc7a4938fb", 0x45}], 0x1}, 0x800) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) 4.5853725s ago: executing program 2 (id=7433): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 4.318880758s ago: executing program 0 (id=7434): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x400, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r2 = getpid() readahead(r1, 0x3, 0x6d73a403) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000061102c0000000000d400000010000000b6eb078e64950000a78f1db7ef86b0a66588a4d8096b342956c7b0b132c40b8b72dd3c0c8be30c7002e562b8be881163d6faffffff44d30303570ab44c8727251f40d9fe9900fb5220940ec4b2628735154fc80665b06602000000000000f4b4058d83169d4f436b78b9f5353f89f4ec3674b82aed17d65c5487b23b9e42ca02ba7fb1af9f0de4bef5e6f026ee6493c04a82780f290ee4e07bbe4a5db16d06bc280926092517becb4bf0c1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.665080276s ago: executing program 7 (id=7435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x49, 0x1, 0x70bd26, 0xfffffffc, {0xa, 0x0, 0x6e1c}, [@typed={0x8, 0x300, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x400) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_PORT_SELF={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES8=r1], 0x48) syz_emit_ethernet(0x1d9, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x1a3, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x22, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x2, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df2"}]}}}}}}, 0x0) getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$key(0xf, 0x3, 0x2) 3.438014155s ago: executing program 2 (id=7436): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x49, 0x1, 0x70bd26, 0xfffffffc, {0xa, 0x0, 0x6e1c}, [@typed={0x8, 0x300, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x400) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_PORT_SELF={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES8=r1], 0x48) syz_emit_ethernet(0x1d9, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x1a3, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x22, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x2, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df2"}]}}}}}}, 0x0) getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$key(0xf, 0x3, 0x2) 2.629870264s ago: executing program 0 (id=7437): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x40400c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(0x0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f64655f816172646c696d69743d372c00"]) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x4040, 0x11c) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd000]}, 0x8) 2.426296966s ago: executing program 9 (id=7438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x40000, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x8040) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002d090c6205608e7bb76860000000109021f0001022440020904c500018d825e000905820340ffffff7f07c46fa05f39832cd0e67c7d775a5e1ee360284d8663fc876b8c04029e2699c62d4c022cc8d242849873fd57d9e23e1cacb01c1641657060b899db000000"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) io_uring_enter(0xffffffffffffffff, 0x6cf6, 0x4772, 0x21, &(0x7f0000000580)={[0x1]}, 0x8) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000240)={&(0x7f00000002c0)=[{0x3f, 0x1000, 0x1, &(0x7f00000000c0)="ac"}, {0x5, 0x2001, 0x0, 0x0}, {0x8, 0x4800, 0x0, 0x0}], 0x3}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x40, 0xa, 0x2e, "ef1d913a420deae55063f7a4e30bb5004f5eda533be52e64c623a065f6c2aa2eba3b2431275a8725bb5678ad5b19"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f00000005c0)={0x20, 0x82, 0x1, "b1"}, &(0x7f0000000680)={0x20, 0x83, 0x1, "fe"}, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r11, &(0x7f00000001c0)='1\x00', 0x1) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9, 0x0, 0x0, 0x6, 0x8, 0x48, 0xf, 0x7e}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x400c881}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x6, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.536270086s ago: executing program 0 (id=7439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000240)=""/56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000061c0000001c00000004000000020000000000000e02000000000000000000"], 0x0, 0x38}, 0x28) prlimit64(0x0, 0x1c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd29, 0xfffffffe}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x5, 0x3, 0xf5ff52ca946691ec}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 522.672423ms ago: executing program 8 (id=7440): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) munlockall() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000300)=[{}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x0, 0x0, r2}) 400.767081ms ago: executing program 0 (id=7441): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="f14889c2ad2b4ad6f0a4eeee332f6bc149453a02006fc36d89b822a9496552f570deaa19e3d8158c69b925dd4e851018f27f000000000000001033c096", 0x3d}], 0x1}, 0x20000004) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=7442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000080)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) r8 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r8, 0x400, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r8, 0x0, &(0x7f0000000180)='./file0\x00', 0x44, 0xeefd4a571d11441c, 0x23456, {0x0, r9}}) listen(r4, 0x5) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): L syzkaller #0 PREEMPT(full) [ 2868.572216][ T1837] Tainted: [L]=SOFTLOCKUP [ 2868.572224][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2868.572237][ T1837] Call Trace: [ 2868.572245][ T1837] [ 2868.572253][ T1837] dump_stack_lvl+0x16c/0x1f0 [ 2868.572286][ T1837] should_fail_ex+0x512/0x640 [ 2868.572316][ T1837] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2868.572342][ T1837] should_failslab+0xc2/0x120 [ 2868.572371][ T1837] kmem_cache_alloc_noprof+0x83/0x770 [ 2868.572393][ T1837] ? getname_flags.part.0+0x4c/0x550 [ 2868.572419][ T1837] ? getname_flags.part.0+0x4c/0x550 [ 2868.572446][ T1837] getname_flags.part.0+0x4c/0x550 [ 2868.572473][ T1837] getname_flags+0x93/0xf0 [ 2868.572492][ T1837] path_setxattrat+0x27a/0x2a0 [ 2868.572509][ T1837] ? __pfx_path_setxattrat+0x10/0x10 [ 2868.572528][ T1837] ? ksys_write+0x190/0x250 [ 2868.572554][ T1837] ? fput+0x70/0xf0 [ 2868.572563][ T1837] ? ksys_write+0x1ac/0x250 [ 2868.572577][ T1837] ? __pfx_ksys_write+0x10/0x10 [ 2868.572593][ T1837] __x64_sys_lsetxattr+0xc9/0x140 [ 2868.572616][ T1837] ? do_syscall_64+0x91/0xf80 [ 2868.572639][ T1837] ? lockdep_hardirqs_on+0x7c/0x110 [ 2868.572666][ T1837] do_syscall_64+0xcd/0xf80 [ 2868.572692][ T1837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2868.572714][ T1837] RIP: 0033:0x7f199f78f749 [ 2868.572732][ T1837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2868.572752][ T1837] RSP: 002b:00007f199d9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2868.572773][ T1837] RAX: ffffffffffffffda RBX: 00007f199f9e6090 RCX: 00007f199f78f749 [ 2868.572788][ T1837] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 2868.572801][ T1837] RBP: 00007f199d9d5090 R08: 0000000000000001 R09: 0000000000000000 [ 2868.572815][ T1837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.572828][ T1837] R13: 00007f199f9e6128 R14: 00007f199f9e6090 R15: 00007fff01898ca8 [ 2868.572859][ T1837] [ 2868.797925][ T1839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7039'. [ 2868.831108][ T1840] FAULT_INJECTION: forcing a failure. [ 2868.831108][ T1840] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.844390][ T1840] CPU: 0 UID: 0 PID: 1840 Comm: syz.7.7040 Tainted: G L syzkaller #0 PREEMPT(full) [ 2868.844423][ T1840] Tainted: [L]=SOFTLOCKUP [ 2868.844431][ T1840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2868.844445][ T1840] Call Trace: [ 2868.844453][ T1840] [ 2868.844461][ T1840] dump_stack_lvl+0x16c/0x1f0 [ 2868.844491][ T1840] should_fail_ex+0x512/0x640 [ 2868.844522][ T1840] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2868.844550][ T1840] should_failslab+0xc2/0x120 [ 2868.844579][ T1840] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2868.844603][ T1840] ? __alloc_skb+0x156/0x410 [ 2868.844640][ T1840] ? __alloc_skb+0x156/0x410 [ 2868.844668][ T1840] __alloc_skb+0x156/0x410 [ 2868.844695][ T1840] ? __alloc_skb+0x35d/0x410 [ 2868.844721][ T1840] ? __pfx___alloc_skb+0x10/0x10 [ 2868.844748][ T1840] ? netlink_autobind.isra.0+0x158/0x370 [ 2868.844767][ T1840] netlink_alloc_large_skb+0x69/0x140 [ 2868.844782][ T1840] netlink_sendmsg+0x698/0xdd0 [ 2868.844799][ T1840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2868.844819][ T1840] ____sys_sendmsg+0xa5d/0xc30 [ 2868.844835][ T1840] ? copy_msghdr_from_user+0x10a/0x160 [ 2868.844847][ T1840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2868.844864][ T1840] ? __pfx__kstrtoull+0x10/0x10 [ 2868.844880][ T1840] ___sys_sendmsg+0x134/0x1d0 [ 2868.844893][ T1840] ? __pfx____sys_sendmsg+0x10/0x10 [ 2868.844912][ T1840] ? find_held_lock+0x2b/0x80 [ 2868.844938][ T1840] __sys_sendmmsg+0x200/0x420 [ 2868.844952][ T1840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2868.844969][ T1840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2868.844991][ T1840] ? fput+0x70/0xf0 [ 2868.845002][ T1840] ? ksys_write+0x1ac/0x250 [ 2868.845016][ T1840] ? __pfx_ksys_write+0x10/0x10 [ 2868.845033][ T1840] __x64_sys_sendmmsg+0x9c/0x100 [ 2868.845044][ T1840] ? lockdep_hardirqs_on+0x7c/0x110 [ 2868.845059][ T1840] do_syscall_64+0xcd/0xf80 [ 2868.845082][ T1840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2868.845094][ T1840] RIP: 0033:0x7fca6678f749 [ 2868.845105][ T1840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2868.845116][ T1840] RSP: 002b:00007fca676aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2868.845129][ T1840] RAX: ffffffffffffffda RBX: 00007fca669e5fa0 RCX: 00007fca6678f749 [ 2868.845137][ T1840] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 2868.845144][ T1840] RBP: 00007fca676aa090 R08: 0000000000000000 R09: 0000000000000000 [ 2868.845151][ T1840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.845158][ T1840] R13: 00007fca669e6038 R14: 00007fca669e5fa0 R15: 00007ffeb1b0ece8 [ 2868.845173][ T1840] [ 2869.374630][ T1844] ubi31: detaching mtd0 [ 2869.380177][ T1844] ubi31: mtd0 is detached [ 2871.020132][T31243] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 2871.180606][T31243] usb 10-1: Using ep0 maxpacket: 32 [ 2871.195782][T31243] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2871.218873][T31243] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 2871.236387][T31243] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2871.265976][T31243] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2871.275108][T31243] usb 10-1: config 128 has no interface number 0 [ 2871.292355][T31243] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2871.332817][T31243] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2871.354550][T31243] usb 10-1: config 128 interface 127 has no altsetting 0 [ 2871.436415][T31243] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2871.466931][T31243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.487736][T31243] usb 10-1: Product: syz [ 2871.495119][T31243] usb 10-1: Manufacturer: syz [ 2871.521408][T31243] usb 10-1: SerialNumber: syz [ 2872.009690][T31243] usb 10-1: USB disconnect, device number 79 [ 2872.035673][T16347] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2872.088403][ T1155] udevd[1155]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2872.371708][T16347] usb 4-1: Using ep0 maxpacket: 32 [ 2872.390671][T16347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2872.433111][T16347] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2872.447053][T16347] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2872.467571][T16347] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2872.494275][T16347] usb 4-1: config 128 has no interface number 0 [ 2872.517639][T16347] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2872.534172][T16347] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2872.569354][T16347] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2872.581285][T16347] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2872.590457][T16347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2872.598872][T16347] usb 4-1: Product: syz [ 2872.604733][T16347] usb 4-1: Manufacturer: syz [ 2872.609388][T16347] usb 4-1: SerialNumber: syz [ 2873.567338][T16347] usb 4-1: USB disconnect, device number 33 [ 2873.631167][ T1155] udevd[1155]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2873.988204][T19680] Bluetooth: Error in BCSP hdr checksum [ 2874.283805][ T30] audit: type=1400 audit(1766489482.032:2707): avc: denied { execute } for pid=1899 comm="syz.8.7059" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 2874.338061][T23819] Bluetooth: Error in BCSP hdr checksum [ 2874.461345][ T1905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7058'. [ 2874.580051][T27385] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2874.625230][T19681] Bluetooth: Error in BCSP hdr checksum [ 2874.763141][T27385] usb 1-1: Using ep0 maxpacket: 16 [ 2874.781044][T27385] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2874.801755][T27385] usb 1-1: config 0 has no interface number 0 [ 2874.815472][T27385] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 2874.839643][T27385] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2874.868322][T27385] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2874.884791][T27385] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2874.893439][T27385] usb 1-1: Product: syz [ 2874.897768][T27385] usb 1-1: SerialNumber: syz [ 2874.995406][T27385] usb 1-1: config 0 descriptor?? [ 2875.008907][T27385] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 2875.035115][T27385] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input234 [ 2875.461669][ T1912] overlayfs: failed lookup in lower (newroot/593, name='bus', err=-40): overlapping layers [ 2875.472922][ T1912] overlayfs: failed to resolve './bus': -40 [ 2875.574675][ T1913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7061'. [ 2875.599726][ T30] audit: type=1400 audit(1766489483.043:2708): avc: denied { create } for pid=1906 comm="syz.8.7062" name="#9c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2875.771575][ T30] audit: type=1400 audit(1766489483.043:2709): avc: denied { link } for pid=1906 comm="syz.8.7062" name="#9c" dev="tmpfs" ino=3166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2876.046525][ T30] audit: type=1400 audit(1766489483.052:2710): avc: denied { rename } for pid=1906 comm="syz.8.7062" name="#9d" dev="tmpfs" ino=3166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2876.134573][T32182] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2876.158111][T25562] Bluetooth: hci2: command 0x1003 tx timeout [ 2877.209691][ T30] audit: type=1326 audit(1766489484.773:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2877.290904][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7063'. [ 2877.324528][ T30] audit: type=1326 audit(1766489484.783:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2877.417507][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.427434][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.434606][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.441958][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.449111][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.456256][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.463321][T31243] usb 1-1: USB disconnect, device number 4 [ 2877.463388][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2877.463414][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2877.490637][T31243] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2877.530124][ T30] audit: type=1326 audit(1766489484.848:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2877.559542][ T30] audit: type=1326 audit(1766489484.848:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2877.943913][ T1941] loop8: detected capacity change from 0 to 1 [ 2877.955382][ T1941] Dev loop8: unable to read RDB block 1 [ 2877.968014][ T1941] loop8: unable to read partition table [ 2878.000217][ T1941] loop8: partition table beyond EOD, truncated [ 2878.025456][ T30] audit: type=1326 audit(1766489484.848:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2878.115311][ T1941] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2878.166420][ T30] audit: type=1326 audit(1766489484.857:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cb698f749 code=0x7ffc0000 [ 2878.998557][ T1954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7071'. [ 2879.524135][ T1958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7073'. [ 2881.433273][ T1981] netlink: 'syz.8.7080': attribute type 10 has an invalid length. [ 2882.279911][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7081'. [ 2882.858309][ T1990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7082'. [ 2883.250626][ T2004] netlink: 'syz.0.7085': attribute type 3 has an invalid length. [ 2884.401769][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7086'. [ 2884.779321][ T2020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7086'. [ 2885.069432][T25562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2885.084225][T25562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2885.088413][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2885.099108][T25562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2885.110786][T25562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2885.118675][T25562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2885.225308][ T2018] lo speed is unknown, defaulting to 1000 [ 2885.342259][ T2027] netlink: 'syz.7.7091': attribute type 10 has an invalid length. [ 2885.465840][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2885.535559][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2885.591502][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2885.783164][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2885.834525][ T5893] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2885.928470][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2886.327538][ T5893] usb 1-1: config 0 descriptor?? [ 2886.484143][ T2018] chnl_net:caif_netlink_parms(): no params data found [ 2886.802115][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2886.824137][ T5893] plantronics 0003:047F:FFFF.003E: ignoring exceeding usage max [ 2886.848731][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 2886.870105][ T5893] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2886.888438][ T2018] bridge_slave_0: entered allmulticast mode [ 2886.897246][ T2018] bridge_slave_0: entered promiscuous mode [ 2886.911628][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2886.923473][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2886.937928][ T2018] bridge_slave_1: entered allmulticast mode [ 2886.957865][ T2018] bridge_slave_1: entered promiscuous mode [ 2887.061492][ T2038] netlink: 'syz.9.7093': attribute type 10 has an invalid length. [ 2887.109429][ T2018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2887.131299][ T2018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2887.258828][ T2018] team0: Port device team_slave_0 added [ 2887.267101][ T2018] team0: Port device team_slave_1 added [ 2887.306855][ T2018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2887.314085][ T2018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2887.348704][ T2018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2887.348885][T25562] Bluetooth: hci2: command tx timeout [ 2887.361438][ T2018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2887.376429][ T2018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2887.403940][ T2018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2887.448127][ T2018] hsr_slave_0: entered promiscuous mode [ 2887.457837][ T2018] hsr_slave_1: entered promiscuous mode [ 2887.464858][ T2018] debugfs: 'hsr0' already exists in 'hsr' [ 2887.470619][ T2018] Cannot create hsr debugfs directory [ 2887.577247][ T2046] misc userio: Invalid payload size [ 2887.787078][ T2018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.328856][ T2018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.419182][T21160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2888.533017][T21160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2888.823259][ T2018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.861913][ T1188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2888.946107][ T2059] FAULT_INJECTION: forcing a failure. [ 2888.946107][ T2059] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.960751][ T2059] CPU: 0 UID: 0 PID: 2059 Comm: syz.9.7100 Tainted: G L syzkaller #0 PREEMPT(full) [ 2888.960781][ T2059] Tainted: [L]=SOFTLOCKUP [ 2888.960787][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2888.960798][ T2059] Call Trace: [ 2888.960805][ T2059] [ 2888.960812][ T2059] dump_stack_lvl+0x16c/0x1f0 [ 2888.960844][ T2059] should_fail_ex+0x512/0x640 [ 2888.960874][ T2059] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2888.960899][ T2059] should_failslab+0xc2/0x120 [ 2888.960928][ T2059] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2888.960951][ T2059] ? __alloc_skb+0x156/0x410 [ 2888.960987][ T2059] ? __alloc_skb+0x156/0x410 [ 2888.961016][ T2059] __alloc_skb+0x156/0x410 [ 2888.961045][ T2059] ? __alloc_skb+0x35d/0x410 [ 2888.961075][ T2059] ? __pfx___alloc_skb+0x10/0x10 [ 2888.961113][ T2059] alloc_skb_with_frags+0xe0/0x860 [ 2888.961140][ T2059] ? check_path.constprop.0+0x24/0x50 [ 2888.961164][ T2059] sock_alloc_send_pskb+0x7f9/0x980 [ 2888.961190][ T2059] ? add_lock_to_list+0x9d/0x130 [ 2888.961218][ T2059] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2888.961246][ T2059] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2888.961272][ T2059] ? reacquire_held_locks+0xcd/0x1f0 [ 2888.961297][ T2059] bt_skb_sendmsg.constprop.0+0xbd/0x600 [ 2888.961324][ T2059] ? __pfx_bt_skb_sendmsg.constprop.0+0x10/0x10 [ 2888.961355][ T2059] ? __local_bh_enable_ip+0xa4/0x120 [ 2888.961389][ T2059] rfcomm_sock_sendmsg+0x286/0x500 [ 2888.961419][ T2059] sock_write_iter+0x566/0x610 [ 2888.961448][ T2059] ? __pfx_sock_write_iter+0x10/0x10 [ 2888.961475][ T2059] ? io_cache_alloc_new+0x45/0xf0 [ 2888.961512][ T2059] ? bpf_lsm_file_permission+0x9/0x10 [ 2888.961534][ T2059] ? security_file_permission+0x71/0x210 [ 2888.961565][ T2059] ? rw_verify_area+0xcf/0x6c0 [ 2888.961591][ T2059] ? __pfx_sock_write_iter+0x10/0x10 [ 2888.961615][ T2059] io_write+0x6bb/0x1630 [ 2888.961638][ T2059] ? __fget_files+0x20e/0x3c0 [ 2888.961670][ T2059] __io_issue_sqe+0xe8/0x7c0 [ 2888.961703][ T2059] io_issue_sqe+0x85/0x1410 [ 2888.961730][ T2059] io_submit_sqes+0xb24/0x28e0 [ 2888.961777][ T2059] __do_sys_io_uring_enter+0xd6b/0x1630 [ 2888.961805][ T2059] ? __fget_files+0x20e/0x3c0 [ 2888.961833][ T2059] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2888.961860][ T2059] ? fput+0x70/0xf0 [ 2888.961879][ T2059] ? ksys_write+0x1ac/0x250 [ 2888.961905][ T2059] ? __pfx_ksys_write+0x10/0x10 [ 2888.961940][ T2059] do_syscall_64+0xcd/0xf80 [ 2888.961965][ T2059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2888.961983][ T2059] RIP: 0033:0x7f199f78f749 [ 2888.962000][ T2059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2888.962016][ T2059] RSP: 002b:00007f199d9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2888.962033][ T2059] RAX: ffffffffffffffda RBX: 00007f199f9e5fa0 RCX: 00007f199f78f749 [ 2888.962045][ T2059] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 2888.962055][ T2059] RBP: 00007f199d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2888.962065][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2888.962076][ T2059] R13: 00007f199f9e6038 R14: 00007f199f9e5fa0 R15: 00007fff01898ca8 [ 2888.962101][ T2059] [ 2889.285866][ T2018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.364560][ T1188] usb 4-1: Using ep0 maxpacket: 32 [ 2889.376720][ T1188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2889.426650][T27385] usb 1-1: USB disconnect, device number 5 [ 2889.493094][ T1188] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2889.517102][ T1188] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2889.556817][T25562] Bluetooth: hci2: command tx timeout [ 2889.691637][ T1188] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2889.700968][ T1188] usb 4-1: config 128 has no interface number 0 [ 2889.707311][ T1188] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2889.723524][ T1188] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2889.742017][ T1188] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2889.754319][ T1188] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2889.767745][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.778627][ T1188] usb 4-1: Product: syz [ 2890.767105][ T2071] netlink: 'syz.0.7102': attribute type 3 has an invalid length. [ 2890.808338][ T1188] usb 4-1: Manufacturer: syz [ 2890.816810][ T1188] usb 4-1: SerialNumber: syz [ 2890.889626][ T5893] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2891.028765][ T2070] /dev/nullb0: Can't open blockdev [ 2891.268979][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2891.292464][ T5893] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2891.352971][ T2018] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2891.362446][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.393130][ T5893] usb 8-1: config 0 descriptor?? [ 2891.402676][ T2018] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2891.493032][ T2018] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2891.531025][ T2018] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2891.700386][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2891.717777][ T1188] usb 4-1: USB disconnect, device number 34 [ 2891.788565][ T1155] udevd[1155]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2891.791252][T25562] Bluetooth: hci2: command tx timeout [ 2891.842419][ T2018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2891.870845][ T5893] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 2891.873531][ T2018] 8021q: adding VLAN 0 to HW filter on device team0 [ 2891.892762][T21160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2891.899912][T21160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2891.925456][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.003F/input/input235 [ 2891.963482][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.970650][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2892.579492][ T5893] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 2892.869158][ T2097] bridge0: entered allmulticast mode [ 2893.022287][ T5893] usb 8-1: USB disconnect, device number 97 [ 2893.180761][ T2107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2893.424686][T25562] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2893.855304][ T2116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7109'. [ 2894.004086][T25562] Bluetooth: hci2: command tx timeout [ 2894.114159][ T2018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2894.353695][ T2125] misc userio: Invalid payload size [ 2896.317153][ T2143] /dev/nullb0: Can't open blockdev [ 2896.408369][ T2018] veth0_vlan: entered promiscuous mode [ 2896.417782][ T2131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7113'. [ 2896.441937][ T2144] ubi31: attaching mtd0 [ 2896.447283][ T2144] ubi31: scanning is finished [ 2896.483138][ T2018] veth1_vlan: entered promiscuous mode [ 2896.578239][ T2144] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2896.585973][ T2144] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2896.593345][ T2144] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2896.600661][ T2144] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2896.608175][ T2144] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2896.615232][ T2144] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2896.623358][ T2144] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 721468757 [ 2896.633664][ T2144] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2896.648870][ T2152] ubi31: background thread "ubi_bgt31d" started, PID 2152 [ 2896.722364][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2896.722382][ T30] audit: type=1400 audit(1766489503.033:2727): avc: denied { append } for pid=2153 comm="syz.9.7116" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2896.841027][ T2018] veth0_macvtap: entered promiscuous mode [ 2896.884245][ T2018] veth1_macvtap: entered promiscuous mode [ 2896.902046][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7117'. [ 2897.021433][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7117'. [ 2897.273259][ T2018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2897.296389][T23042] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2897.325825][ T2018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2897.366938][T19681] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.377373][T19681] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.414117][T19681] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.450585][T19681] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.478248][T23042] usb 10-1: Using ep0 maxpacket: 16 [ 2897.485660][T23042] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2897.524168][T23042] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2897.550913][T23042] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2897.569722][ T2161] ubi: mtd0 is already attached to ubi31 [ 2897.571287][T23042] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2897.620609][T23042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2897.647399][T23042] usb 10-1: SerialNumber: syz [ 2897.678349][T19677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2897.687542][T19677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2897.699234][ T2154] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2897.762102][T23622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2897.775153][T23622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2897.931536][T23042] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 2897.968484][T23042] usb 10-1: USB disconnect, device number 80 [ 2900.264786][ T30] audit: type=1326 audit(1766489506.307:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2900.828446][ T30] audit: type=1326 audit(1766489506.307:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2900.995229][T31243] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2901.053384][ T30] audit: type=1326 audit(1766489506.307:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.113207][ T30] audit: type=1326 audit(1766489506.307:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.145960][ T30] audit: type=1326 audit(1766489506.307:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.170573][ T30] audit: type=1326 audit(1766489506.307:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.198318][T31243] usb 9-1: Using ep0 maxpacket: 16 [ 2901.209925][ T30] audit: type=1326 audit(1766489506.307:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.234651][T31243] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2901.246941][T31243] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2901.257053][ T30] audit: type=1326 audit(1766489506.307:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.281664][T31243] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2901.296228][T31243] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2901.306269][T31243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2901.314301][T31243] usb 9-1: SerialNumber: syz [ 2901.319562][ T30] audit: type=1326 audit(1766489506.307:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.0.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2901.346663][ T2200] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2901.724787][T31243] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2901.742970][T31243] usb 9-1: USB disconnect, device number 82 [ 2901.830983][ T2207] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2902.826400][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7135'. [ 2903.015718][ T24] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2903.194319][ T2217] netlink: 'syz.7.7136': attribute type 10 has an invalid length. [ 2903.202261][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 2903.222660][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2903.297168][ T2224] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7137'. [ 2903.315981][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2903.393493][ T24] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2903.458303][T27385] IPVS: starting estimator thread 0... [ 2903.567718][ T2226] IPVS: using max 36 ests per chain, 86400 per kthread [ 2903.771662][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2903.785642][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2903.793865][ T24] usb 10-1: SerialNumber: syz [ 2903.825428][ T2212] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2904.847744][ T24] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 2904.860423][ T24] usb 10-1: USB disconnect, device number 81 [ 2905.400358][T23042] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2905.634956][T23042] usb 8-1: Using ep0 maxpacket: 32 [ 2905.646231][T23042] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2905.656161][T23042] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 2905.664518][T23042] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2905.742471][T23042] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2905.752379][T31104] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2905.754275][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7144'. [ 2905.773970][T23042] usb 8-1: config 128 has no interface number 0 [ 2905.880950][T23042] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2905.892772][T23042] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2905.956844][T31104] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2905.964929][T31104] usb 9-1: config 0 has no interface number 0 [ 2905.976401][T23042] usb 8-1: config 128 interface 127 has no altsetting 0 [ 2905.990282][T31104] usb 9-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 2906.005911][T31104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.026865][T23042] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2906.037931][T31104] usb 9-1: Product: syz [ 2906.045444][T23042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.053732][T31104] usb 9-1: Manufacturer: syz [ 2906.060006][T31104] usb 9-1: SerialNumber: syz [ 2906.075240][T23042] usb 8-1: Product: syz [ 2906.091586][T31104] usb 9-1: config 0 descriptor?? [ 2906.097834][T23042] usb 8-1: Manufacturer: syz [ 2906.104635][T23042] usb 8-1: SerialNumber: syz [ 2906.113146][T31104] xsens_mt 9-1:0.1: xsens_mt converter detected [ 2906.142360][T31104] usb 9-1: xsens_mt converter now attached to ttyUSB0 [ 2906.331892][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.418100][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2906.473139][T27385] usb 9-1: USB disconnect, device number 83 [ 2906.510415][T27385] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 2906.545319][T23042] usb 8-1: USB disconnect, device number 98 [ 2906.551599][T27385] xsens_mt 9-1:0.1: device disconnected [ 2906.642311][ T1155] udevd[1155]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2906.774458][ T2258] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7147'. [ 2907.409304][T23042] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2908.402836][T23042] usb 1-1: Using ep0 maxpacket: 32 [ 2908.416126][T23042] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2908.435213][T23042] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 2908.451717][T23042] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2908.471627][T23042] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2908.484857][T23042] usb 1-1: config 128 has no interface number 0 [ 2908.495160][T23042] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2908.496305][ T2273] misc userio: Invalid payload size [ 2908.526280][T23042] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2908.540602][T23042] usb 1-1: config 128 interface 127 has no altsetting 0 [ 2908.561643][T23042] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2908.571723][T23042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.580100][T23042] usb 1-1: Product: syz [ 2908.584837][T23042] usb 1-1: Manufacturer: syz [ 2908.753820][T23042] usb 1-1: SerialNumber: syz [ 2909.054676][T23042] usb 1-1: USB disconnect, device number 6 [ 2909.126858][ T2282] netlink: 'syz.7.7153': attribute type 1 has an invalid length. [ 2909.137528][ T1155] udevd[1155]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2909.626574][ T2290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2910.050011][ T2293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7155'. [ 2910.493414][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2910.493432][ T30] audit: type=1400 audit(1766489515.914:2748): avc: denied { setopt } for pid=2291 comm="syz.8.7156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2912.322590][ T2310] FAULT_INJECTION: forcing a failure. [ 2912.322590][ T2310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2912.476611][ T2310] CPU: 1 UID: 0 PID: 2310 Comm: syz.0.7161 Tainted: G L syzkaller #0 PREEMPT(full) [ 2912.476643][ T2310] Tainted: [L]=SOFTLOCKUP [ 2912.476651][ T2310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2912.476663][ T2310] Call Trace: [ 2912.476671][ T2310] [ 2912.476680][ T2310] dump_stack_lvl+0x16c/0x1f0 [ 2912.476712][ T2310] should_fail_ex+0x512/0x640 [ 2912.476748][ T2310] _copy_to_user+0x32/0xd0 [ 2912.476783][ T2310] simple_read_from_buffer+0xcb/0x170 [ 2912.476815][ T2310] proc_fail_nth_read+0x197/0x240 [ 2912.476841][ T2310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2912.476866][ T2310] ? rw_verify_area+0xcf/0x6c0 [ 2912.476890][ T2310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2912.476914][ T2310] vfs_read+0x1e4/0xcf0 [ 2912.476944][ T2310] ? irqentry_exit+0x1dd/0x8c0 [ 2912.476971][ T2310] ? lockdep_hardirqs_on+0x7c/0x110 [ 2912.476998][ T2310] ? __pfx_vfs_read+0x10/0x10 [ 2912.477022][ T2310] ? rcu_is_watching+0x12/0xc0 [ 2912.477064][ T2310] ksys_read+0x12a/0x250 [ 2912.477099][ T2310] ? __pfx_ksys_read+0x10/0x10 [ 2912.477127][ T2310] ? fput+0x70/0xf0 [ 2912.477150][ T2310] do_syscall_64+0xcd/0xf80 [ 2912.477181][ T2310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.477203][ T2310] RIP: 0033:0x7ffbda18e15c [ 2912.477222][ T2310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2912.477242][ T2310] RSP: 002b:00007ffbdb053030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2912.477263][ T2310] RAX: ffffffffffffffda RBX: 00007ffbda3e6090 RCX: 00007ffbda18e15c [ 2912.477279][ T2310] RDX: 000000000000000f RSI: 00007ffbdb0530a0 RDI: 0000000000000006 [ 2912.477293][ T2310] RBP: 00007ffbdb053090 R08: 0000000000000000 R09: 0000000000000000 [ 2912.477307][ T2310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2912.477320][ T2310] R13: 00007ffbda3e6128 R14: 00007ffbda3e6090 R15: 00007fffb7fd0e78 [ 2912.477351][ T2310] [ 2913.803351][ T2325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7165'. [ 2913.888720][ T2327] ubi31: detaching mtd0 [ 2914.776113][ T2327] ubi31: mtd0 is detached [ 2915.132943][T31243] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 2915.182181][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7165'. [ 2915.747574][T31243] usb 4-1: Invalid ep0 maxpacket: 64 [ 2915.908633][T31243] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 2916.164546][T31243] usb 4-1: Invalid ep0 maxpacket: 64 [ 2916.176664][T31243] usb usb4-port1: attempt power cycle [ 2916.455208][T25562] Bluetooth: hci5: unexpected event for opcode 0x0405 [ 2917.548276][T31243] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 2917.811625][T31243] usb 4-1: device not accepting address 37, error -71 [ 2918.008387][T20524] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2918.174372][T20524] usb 1-1: device descriptor read/64, error -71 [ 2918.352152][ T2371] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7176'. [ 2918.469511][T20524] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2918.564883][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7176'. [ 2918.740784][T20524] usb 1-1: device descriptor read/64, error -71 [ 2918.858610][T20524] usb usb1-port1: attempt power cycle [ 2919.288498][ T2378] ufs: You didn't specify the type of your ufs filesystem [ 2919.288498][ T2378] [ 2919.288498][ T2378] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2919.288498][ T2378] [ 2919.288498][ T2378] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2919.319641][ T2378] ufs: ufstype=old is supported read-only [ 2919.328774][ T2378] ufs: ufs_fill_super(): bad magic number [ 2919.446412][T20524] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2919.554091][T20524] usb 1-1: device descriptor read/8, error -71 [ 2919.820604][ T1188] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 2919.820618][T20524] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2919.908097][T20524] usb 1-1: device descriptor read/8, error -71 [ 2919.952001][T31243] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2920.063463][T20524] usb usb1-port1: unable to enumerate USB device [ 2920.073366][ T1188] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2920.089021][ T1188] usb 8-1: config 0 has no interface number 0 [ 2920.098744][ T2384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7179'. [ 2920.118909][ T1188] usb 8-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 2920.130262][ T1188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.139444][ T1188] usb 8-1: Product: syz [ 2920.144367][ T1188] usb 8-1: Manufacturer: syz [ 2920.149251][ T1188] usb 8-1: SerialNumber: syz [ 2920.163110][ T1188] usb 8-1: config 0 descriptor?? [ 2920.170734][ T1188] xsens_mt 8-1:0.1: xsens_mt converter detected [ 2920.193483][ T1188] usb 8-1: xsens_mt converter now attached to ttyUSB0 [ 2920.253063][T31243] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2920.266580][T31243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2920.278268][T31243] usb 4-1: config 0 descriptor?? [ 2920.286962][T31243] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2920.390153][ T2380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2920.399444][ T2380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2920.408430][T20524] usb 8-1: USB disconnect, device number 99 [ 2920.417734][T20524] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 2920.427605][T20524] xsens_mt 8-1:0.1: device disconnected [ 2920.515764][T13181] Bluetooth: Error in BCSP hdr checksum [ 2920.644000][ T2400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7182'. [ 2920.864368][T23622] Bluetooth: Error in BCSP hdr checksum [ 2920.929537][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7182'. [ 2921.374049][ T2413] netlink: 'syz.0.7183': attribute type 3 has an invalid length. [ 2922.118879][T31243] usb 4-1: USB disconnect, device number 39 [ 2922.420589][T25562] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2922.497329][ T2425] netlink: 'syz.9.7186': attribute type 3 has an invalid length. [ 2925.843812][ T2463] netlink: 'syz.3.7191': attribute type 1 has an invalid length. [ 2926.330829][T20524] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2926.494686][T20524] usb 9-1: config 5 has an invalid interface number: 57 but max is 3 [ 2926.505297][T20524] usb 9-1: config 5 has an invalid interface number: 180 but max is 3 [ 2926.517036][T20524] usb 9-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2926.518423][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7197'. [ 2926.529014][T20524] usb 9-1: config 5 has an invalid interface number: 185 but max is 3 [ 2926.544616][T20524] usb 9-1: config 5 has an invalid interface number: 42 but max is 3 [ 2926.561190][T20524] usb 9-1: config 5 has no interface number 0 [ 2926.567896][T20524] usb 9-1: config 5 has no interface number 1 [ 2926.588809][T20524] usb 9-1: config 5 has no interface number 2 [ 2926.784954][T20524] usb 9-1: config 5 has no interface number 3 [ 2926.914889][T20524] usb 9-1: config 5 interface 180 altsetting 8 has an endpoint descriptor with address 0x72, changing to 0x2 [ 2926.929694][T20524] usb 9-1: config 5 interface 180 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 2926.943772][T20524] usb 9-1: config 5 interface 180 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2927.022378][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7197'. [ 2927.068818][ T1188] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2927.076532][T20524] usb 9-1: config 5 interface 180 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 2927.192383][T20524] usb 9-1: config 5 interface 185 altsetting 84 has a duplicate endpoint with address 0xE, skipping [ 2927.333446][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 2927.347013][T20524] usb 9-1: config 5 interface 42 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2927.361981][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2927.372958][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 2927.393674][ T1188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2927.409309][ T1188] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 2927.419793][ T1188] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2927.453392][T20524] usb 9-1: config 5 interface 42 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2927.455532][ T1188] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2927.471012][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 2927.490015][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 2927.499279][ T1188] usb 1-1: config 128 has no interface number 0 [ 2927.503087][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 2927.517709][ T1188] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2927.518170][T20524] usb 9-1: config 5 interface 42 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 1023 [ 2927.539773][ T1188] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2927.541220][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 2927.561866][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 2927.677930][ T1188] usb 1-1: config 128 interface 127 has no altsetting 0 [ 2927.812262][ T2483] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2928.400583][ T1188] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2928.410540][T20524] usb 9-1: config 5 interface 42 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 2928.421540][T20524] usb 9-1: config 5 interface 180 has no altsetting 0 [ 2928.423878][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.429329][T20524] usb 9-1: config 5 interface 185 has no altsetting 0 [ 2928.443962][ T1188] usb 1-1: Product: syz [ 2928.447819][T20524] usb 9-1: config 5 interface 42 has no altsetting 0 [ 2928.448689][ T1188] usb 1-1: Manufacturer: syz [ 2928.460214][ T1188] usb 1-1: SerialNumber: syz [ 2928.462247][T20524] usb 9-1: Dual-Role OTG device on HNP port [ 2928.471408][T20524] usb 9-1: New USB device found, idVendor=0458, idProduct=7045, bcdDevice=72.38 [ 2928.482133][T20524] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.632240][T20524] usb 9-1: Product: syz [ 2928.636573][T20524] usb 9-1: Manufacturer: syz [ 2928.641752][T20524] usb 9-1: SerialNumber: syz [ 2928.778785][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2928.941344][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2928.965321][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2929.002824][ T5893] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2929.020575][T20524] uvcvideo 9-1:5.185: probe with driver uvcvideo failed with error -22 [ 2929.142237][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2929.173085][T20524] usb 9-1: USB disconnect, device number 84 [ 2929.821002][ T2503] tmpfs: Bad value for 'mpol' [ 2930.134042][ T2511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.425458][ T1188] usb 1-1: USB disconnect, device number 11 [ 2930.486098][ T5893] usb 4-1: config 0 descriptor?? [ 2930.546167][ T2419] udevd[2419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2930.931554][ T2486] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2930.942914][ T2486] overlayfs: failed to set xattr on upper [ 2930.969444][ T2486] overlayfs: ...falling back to redirect_dir=nofollow. [ 2930.976628][ T30] audit: type=1400 audit(1766489535.035:2749): avc: denied { mounton } for pid=2485 comm="syz.3.7200" path="/bus" dev="ramfs" ino=142707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2931.002596][ T2486] overlayfs: ...falling back to metacopy=off. [ 2931.008797][ T2486] overlayfs: ...falling back to index=off. [ 2931.014725][ T2486] overlayfs: ...falling back to uuid=null. [ 2931.069948][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 2931.076011][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2931.131658][ T5893] usb 4-1: USB disconnect, device number 40 [ 2932.020755][ T2531] netlink: 'syz.7.7207': attribute type 1 has an invalid length. [ 2935.598163][ T2576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2935.693707][T13191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2935.729763][T13191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2935.762478][ T2580] misc userio: Invalid payload size [ 2935.770323][ T2578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7217'. [ 2936.048097][T16347] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2936.208411][T16347] usb 9-1: Using ep0 maxpacket: 16 [ 2936.227742][T16347] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2936.263840][T16347] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2936.281718][T16347] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2936.386655][T16347] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2936.396512][T16347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2936.407333][T16347] usb 9-1: SerialNumber: syz [ 2936.638110][ T2585] tmpfs: Bad value for 'mpol' [ 2937.438405][ T2567] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2937.553531][ T2591] FAULT_INJECTION: forcing a failure. [ 2937.553531][ T2591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.605348][ T2591] CPU: 0 UID: 60928 PID: 2591 Comm: syz.9.7221 Tainted: G L syzkaller #0 PREEMPT(full) [ 2937.605385][ T2591] Tainted: [L]=SOFTLOCKUP [ 2937.605393][ T2591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2937.605406][ T2591] Call Trace: [ 2937.605412][ T2591] [ 2937.605418][ T2591] dump_stack_lvl+0x16c/0x1f0 [ 2937.605442][ T2591] should_fail_ex+0x512/0x640 [ 2937.605479][ T2591] _copy_to_iter+0x29f/0x1710 [ 2937.605511][ T2591] ? selinux_sb_show_options+0x189/0x610 [ 2937.605534][ T2591] ? __pfx__copy_to_iter+0x10/0x10 [ 2937.605550][ T2591] ? __up_read+0x2d1/0x700 [ 2937.605565][ T2591] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 2937.605582][ T2591] ? __pfx___up_read+0x10/0x10 [ 2937.605610][ T2591] ? seq_read_iter+0xc8a/0x12d0 [ 2937.605645][ T2591] seq_read_iter+0xd02/0x12d0 [ 2937.605674][ T2591] vfs_read+0x8bf/0xcf0 [ 2937.605691][ T2591] ? __pfx_vfs_read+0x10/0x10 [ 2937.605715][ T2591] ksys_read+0x12a/0x250 [ 2937.605736][ T2591] ? __pfx_ksys_read+0x10/0x10 [ 2937.605772][ T2591] do_syscall_64+0xcd/0xf80 [ 2937.605801][ T2591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2937.605814][ T2591] RIP: 0033:0x7f199f78f749 [ 2937.605824][ T2591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2937.605835][ T2591] RSP: 002b:00007f199d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2937.605847][ T2591] RAX: ffffffffffffffda RBX: 00007f199f9e5fa0 RCX: 00007f199f78f749 [ 2937.605855][ T2591] RDX: 0000000000002020 RSI: 00002000000061c0 RDI: 0000000000000003 [ 2937.605862][ T2591] RBP: 00007f199d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2937.605873][ T2591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.605886][ T2591] R13: 00007f199f9e6038 R14: 00007f199f9e5fa0 R15: 00007fff01898ca8 [ 2937.605918][ T2591] [ 2937.888206][T16347] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2937.890803][T16347] usb 9-1: USB disconnect, device number 85 [ 2940.832192][ T2632] netlink: 'syz.0.7230': attribute type 3 has an invalid length. [ 2941.724537][ T5893] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2942.023815][ T5893] usb 10-1: Using ep0 maxpacket: 32 [ 2942.112381][ T5893] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2942.126288][ T5893] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2942.136971][ T5893] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2942.146636][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2942.159029][ T5893] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2942.226183][ T2649] netlink: 'syz.7.7234': attribute type 1 has an invalid length. [ 2942.681179][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2942.694504][ T5893] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2942.705005][ T5893] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2942.719147][ T5893] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2942.728359][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.739814][ T5893] usb 10-1: config 0 descriptor?? [ 2943.244481][ T5893] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2943.277942][ T2660] FAULT_INJECTION: forcing a failure. [ 2943.277942][ T2660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2943.368233][ T2660] CPU: 1 UID: 0 PID: 2660 Comm: syz.0.7237 Tainted: G L syzkaller #0 PREEMPT(full) [ 2943.368270][ T2660] Tainted: [L]=SOFTLOCKUP [ 2943.368278][ T2660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2943.368291][ T2660] Call Trace: [ 2943.368298][ T2660] [ 2943.368307][ T2660] dump_stack_lvl+0x16c/0x1f0 [ 2943.368336][ T2660] should_fail_ex+0x512/0x640 [ 2943.368369][ T2660] strncpy_from_user+0x3b/0x2e0 [ 2943.368399][ T2660] getname_flags.part.0+0x8f/0x550 [ 2943.368424][ T2660] getname_flags+0x93/0xf0 [ 2943.368446][ T2660] do_sys_openat2+0xb9/0x290 [ 2943.368466][ T2660] ? __pfx_do_sys_openat2+0x10/0x10 [ 2943.368498][ T2660] __do_sys_openat2+0x1c0/0x2d0 [ 2943.368517][ T2660] ? __pfx___do_sys_openat2+0x10/0x10 [ 2943.368535][ T2660] ? ksys_write+0x1ac/0x250 [ 2943.368570][ T2660] do_syscall_64+0xcd/0xf80 [ 2943.368598][ T2660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2943.368619][ T2660] RIP: 0033:0x7ffbda18f749 [ 2943.368635][ T2660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2943.368654][ T2660] RSP: 002b:00007ffbdb074038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 2943.368673][ T2660] RAX: ffffffffffffffda RBX: 00007ffbda3e5fa0 RCX: 00007ffbda18f749 [ 2943.368688][ T2660] RDX: 0000200000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2943.368702][ T2660] RBP: 00007ffbdb074090 R08: 0000000000000000 R09: 0000000000000000 [ 2943.368715][ T2660] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 2943.368728][ T2660] R13: 00007ffbda3e6038 R14: 00007ffbda3e5fa0 R15: 00007fffb7fd0e78 [ 2943.368758][ T2660] [ 2943.615697][ T5893] usb 10-1: USB disconnect, device number 82 [ 2943.635083][T25562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2943.650676][T25562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2943.659067][T25562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2943.659951][ T5893] usblp0: removed [ 2943.671702][T25562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2943.682637][T25562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2943.718159][ T2665] lo speed is unknown, defaulting to 1000 [ 2944.357593][ T30] audit: type=1400 audit(1766489547.598:2750): avc: denied { setopt } for pid=2675 comm="syz.9.7241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2944.392860][ T2676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7241'. [ 2944.554820][ T2665] chnl_net:caif_netlink_parms(): no params data found [ 2944.829258][ T2681] FAULT_INJECTION: forcing a failure. [ 2944.829258][ T2681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2944.842718][ T2681] CPU: 0 UID: 0 PID: 2681 Comm: syz.9.7242 Tainted: G L syzkaller #0 PREEMPT(full) [ 2944.842750][ T2681] Tainted: [L]=SOFTLOCKUP [ 2944.842757][ T2681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2944.842769][ T2681] Call Trace: [ 2944.842776][ T2681] [ 2944.842783][ T2681] dump_stack_lvl+0x16c/0x1f0 [ 2944.842812][ T2681] should_fail_ex+0x512/0x640 [ 2944.842843][ T2681] _copy_to_user+0x32/0xd0 [ 2944.842869][ T2681] simple_read_from_buffer+0xcb/0x170 [ 2944.842894][ T2681] proc_fail_nth_read+0x197/0x240 [ 2944.842913][ T2681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2944.842934][ T2681] ? rw_verify_area+0xcf/0x6c0 [ 2944.842954][ T2681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2944.842974][ T2681] vfs_read+0x1e4/0xcf0 [ 2944.842998][ T2681] ? __pfx___mutex_lock+0x10/0x10 [ 2944.843026][ T2681] ? __pfx_vfs_read+0x10/0x10 [ 2944.843064][ T2681] ? __fget_files+0x20e/0x3c0 [ 2944.843092][ T2681] ksys_read+0x12a/0x250 [ 2944.843111][ T2681] ? __pfx_ksys_read+0x10/0x10 [ 2944.843137][ T2681] do_syscall_64+0xcd/0xf80 [ 2944.843160][ T2681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2944.843177][ T2681] RIP: 0033:0x7f199f78e15c [ 2944.843192][ T2681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2944.843207][ T2681] RSP: 002b:00007f199d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2944.843223][ T2681] RAX: ffffffffffffffda RBX: 00007f199f9e6090 RCX: 00007f199f78e15c [ 2944.843234][ T2681] RDX: 000000000000000f RSI: 00007f199d9d50a0 RDI: 0000000000000008 [ 2944.843244][ T2681] RBP: 00007f199d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2944.843255][ T2681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2944.843266][ T2681] R13: 00007f199f9e6128 R14: 00007f199f9e6090 R15: 00007fff01898ca8 [ 2944.843292][ T2681] [ 2945.116353][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.124512][ T2665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.131693][ T2665] bridge_slave_0: entered allmulticast mode [ 2945.138715][ T2665] bridge_slave_0: entered promiscuous mode [ 2945.147676][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.154775][ T2665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.162111][ T2665] bridge_slave_1: entered allmulticast mode [ 2945.169067][ T2665] bridge_slave_1: entered promiscuous mode [ 2945.202366][ T2665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2945.213425][ T2665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2945.317571][T32129] Bluetooth: Error in BCSP hdr checksum [ 2945.366742][ T2665] team0: Port device team_slave_0 added [ 2945.377649][ T2665] team0: Port device team_slave_1 added [ 2945.446895][ T2665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2945.454063][ T2665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2945.480062][ T2665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2945.492456][ T2665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2945.508951][ T2665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2945.551534][ T2665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2945.605582][T23606] Bluetooth: Error in BCSP hdr checksum [ 2945.662746][ T2665] hsr_slave_0: entered promiscuous mode [ 2945.716548][ T2665] hsr_slave_1: entered promiscuous mode [ 2945.723296][ T2665] debugfs: 'hsr0' already exists in 'hsr' [ 2945.729153][ T2665] Cannot create hsr debugfs directory [ 2945.824775][ T2701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7245'. [ 2945.845378][T13190] bridge_slave_1: left allmulticast mode [ 2945.851551][T13190] bridge_slave_1: left promiscuous mode [ 2945.857896][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.869113][T13190] bridge_slave_0: left allmulticast mode [ 2945.874987][T13190] bridge_slave_0: left promiscuous mode [ 2945.880830][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.888845][T23606] Bluetooth: Error in BCSP hdr checksum [ 2945.931554][T25562] Bluetooth: hci4: command tx timeout [ 2946.053180][T13190] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2946.740252][T13190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2946.750277][T13190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2946.774047][T13190] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2946.791504][T13190] bond0 (unregistering): Released all slaves [ 2946.802790][T13190] bond1 (unregistering): Released all slaves [ 2946.821524][ T2701] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2947.064300][T13190] tipc: Left network mode [ 2947.486242][T32182] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2947.726004][ T2718] netlink: 'syz.0.7248': attribute type 3 has an invalid length. [ 2948.026441][ T2729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7251'. [ 2948.138729][T32182] Bluetooth: hci4: command tx timeout [ 2948.342259][ T2729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7251'. [ 2948.920319][ T2741] netlink: 'syz.9.7253': attribute type 3 has an invalid length. [ 2948.935594][T13190] hsr_slave_0: left promiscuous mode [ 2948.943936][T13190] hsr_slave_1: left promiscuous mode [ 2948.957687][T13190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2948.971457][T13190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2949.152979][ T30] audit: type=1326 audit(1766489551.976:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.653355][ T30] audit: type=1326 audit(1766489551.976:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.679009][ T30] audit: type=1326 audit(1766489551.976:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.716000][ T30] audit: type=1326 audit(1766489551.976:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.747756][ T30] audit: type=1326 audit(1766489551.985:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.784306][ T30] audit: type=1326 audit(1766489551.985:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.898966][ T30] audit: type=1326 audit(1766489551.985:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.923063][ T30] audit: type=1326 audit(1766489551.985:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.953294][ T30] audit: type=1326 audit(1766489551.985:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2949.979455][ T30] audit: type=1326 audit(1766489551.985:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2950.010563][ T30] audit: type=1326 audit(1766489551.985:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2950.042875][ T30] audit: type=1326 audit(1766489551.985:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2950.066911][ T30] audit: type=1326 audit(1766489551.985:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.8.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ae38f749 code=0x7ffc0000 [ 2950.261235][T13190] team0 (unregistering): Port device team_slave_1 removed [ 2950.310249][T13190] team0 (unregistering): Port device team_slave_0 removed [ 2950.365987][T32182] Bluetooth: hci4: command tx timeout [ 2950.799205][ T2755] netlink: 'syz.9.7256': attribute type 1 has an invalid length. [ 2952.021907][ T2665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2952.079017][ T2665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2952.123229][T13190] IPVS: stop unused estimator thread 0... [ 2952.130095][ T2665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2952.165704][ T2665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2952.493596][ T2665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2952.539544][ T2665] 8021q: adding VLAN 0 to HW filter on device team0 [ 2952.571534][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2952.578653][T13190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2952.585815][T25562] Bluetooth: hci4: command tx timeout [ 2952.618896][T13181] Bluetooth: Error in BCSP hdr checksum [ 2952.618926][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 2952.631539][T13190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2952.667400][ T2665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2952.678677][ T2665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2953.051864][T13195] Bluetooth: Error in BCSP hdr checksum [ 2953.227773][ T2665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2953.743321][ T2665] veth0_vlan: entered promiscuous mode [ 2953.760434][ T2665] veth1_vlan: entered promiscuous mode [ 2953.816550][ T2665] veth0_macvtap: entered promiscuous mode [ 2953.827845][ T2665] veth1_macvtap: entered promiscuous mode [ 2953.854055][ T2665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2953.884281][ T2665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2953.997338][T13191] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.010144][T13191] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.101500][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7262'. [ 2954.513984][T13191] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.534223][T13191] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.554197][T32182] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2954.683224][T19677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2954.691087][T19677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2954.749799][T19677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2954.758633][T19677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2954.898714][ T2805] /dev/nullb0: Can't open blockdev [ 2955.600384][T31104] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2955.919671][T31104] usb 9-1: Using ep0 maxpacket: 8 [ 2955.975038][T31104] usb 9-1: no configurations [ 2955.984069][T31104] usb 9-1: can't read configurations, error -22 [ 2956.135509][T31104] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2956.192400][ T2827] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2956.765498][T31104] usb 9-1: Using ep0 maxpacket: 8 [ 2956.771285][T31104] usb 9-1: no configurations [ 2956.782531][T31104] usb 9-1: can't read configurations, error -22 [ 2956.795727][T31104] usb usb9-port1: attempt power cycle [ 2957.021000][ T2831] misc userio: Invalid payload size [ 2957.203857][T31104] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2957.238849][T31104] usb 9-1: Using ep0 maxpacket: 8 [ 2957.441254][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2957.708930][T31104] usb 9-1: no configurations [ 2957.758497][T31104] usb 9-1: can't read configurations, error -22 [ 2957.911427][T31104] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2958.006290][T31104] usb 9-1: Using ep0 maxpacket: 8 [ 2958.052426][T31104] usb 9-1: no configurations [ 2958.057023][T31104] usb 9-1: can't read configurations, error -22 [ 2958.084839][T31104] usb usb9-port1: unable to enumerate USB device [ 2958.655238][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2958.655256][ T30] audit: type=1326 audit(1766489560.516:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2958.935712][ T30] audit: type=1326 audit(1766489560.516:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2958.959957][ T30] audit: type=1326 audit(1766489560.525:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2959.579881][ T30] audit: type=1326 audit(1766489560.525:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2959.822903][ T30] audit: type=1326 audit(1766489560.525:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2959.866531][ T2861] ubi31: attaching mtd0 [ 2959.906981][ T2861] ubi31: scanning is finished [ 2960.062246][ T30] audit: type=1326 audit(1766489560.525:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2960.694536][ T30] audit: type=1326 audit(1766489560.525:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2960.718840][ T30] audit: type=1326 audit(1766489560.525:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2960.893758][ T30] audit: type=1326 audit(1766489560.535:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2961.005482][ T30] audit: type=1326 audit(1766489560.535:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2844 comm="syz.0.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbda18f749 code=0x7ffc0000 [ 2961.171336][T32182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2961.237830][T32182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2961.246455][T32182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2961.255132][T32182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2961.263202][T32182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2961.807158][ T2861] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2961.831904][ T2873] lo speed is unknown, defaulting to 1000 [ 2961.849472][ T2861] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2961.921635][ T2861] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2961.972372][ T2861] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2962.015901][ T2861] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2962.148103][ T2861] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2962.168461][ T2861] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 721468757 [ 2962.260629][ T2861] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2962.340319][ T2877] ubi31: background thread "ubi_bgt31d" started, PID 2877 [ 2962.721526][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7276'. [ 2962.760575][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7277'. [ 2962.895899][ T2873] chnl_net:caif_netlink_parms(): no params data found [ 2962.973227][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7277'. [ 2963.167593][ T2895] FAULT_INJECTION: forcing a failure. [ 2963.167593][ T2895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2963.181655][ T2895] CPU: 0 UID: 0 PID: 2895 Comm: syz.0.7280 Tainted: G L syzkaller #0 PREEMPT(full) [ 2963.181689][ T2895] Tainted: [L]=SOFTLOCKUP [ 2963.181697][ T2895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2963.181710][ T2895] Call Trace: [ 2963.181718][ T2895] [ 2963.181727][ T2895] dump_stack_lvl+0x16c/0x1f0 [ 2963.181765][ T2895] should_fail_ex+0x512/0x640 [ 2963.181801][ T2895] _copy_from_user+0x2e/0xd0 [ 2963.181833][ T2895] copy_msghdr_from_user+0x98/0x160 [ 2963.181857][ T2895] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2963.181895][ T2895] ___sys_sendmsg+0xfe/0x1d0 [ 2963.181919][ T2895] ? __pfx____sys_sendmsg+0x10/0x10 [ 2963.181977][ T2895] __sys_sendmsg+0x16d/0x220 [ 2963.182000][ T2895] ? __pfx___sys_sendmsg+0x10/0x10 [ 2963.182041][ T2895] do_syscall_64+0xcd/0xf80 [ 2963.182071][ T2895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2963.182093][ T2895] RIP: 0033:0x7ffbda18f749 [ 2963.182112][ T2895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2963.182133][ T2895] RSP: 002b:00007ffbdb074038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2963.182153][ T2895] RAX: ffffffffffffffda RBX: 00007ffbda3e5fa0 RCX: 00007ffbda18f749 [ 2963.182169][ T2895] RDX: 0000000000000000 RSI: 0000200000001d40 RDI: 0000000000000003 [ 2963.182182][ T2895] RBP: 00007ffbdb074090 R08: 0000000000000000 R09: 0000000000000000 [ 2963.182196][ T2895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2963.182209][ T2895] R13: 00007ffbda3e6038 R14: 00007ffbda3e5fa0 R15: 00007fffb7fd0e78 [ 2963.182239][ T2895] [ 2963.988352][T32182] Bluetooth: hci1: command tx timeout [ 2964.107377][T13195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2964.797727][T16347] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2965.157681][T16347] usb 1-1: Using ep0 maxpacket: 8 [ 2965.179126][T16347] usb 1-1: no configurations [ 2965.191922][T16347] usb 1-1: can't read configurations, error -22 [ 2965.277743][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7283'. [ 2965.351770][T13195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2965.360413][T16347] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2965.474065][ T2873] bridge0: port 1(bridge_slave_0) entered blocking state [ 2965.497722][ T2873] bridge0: port 1(bridge_slave_0) entered disabled state [ 2965.521926][ T2873] bridge_slave_0: entered allmulticast mode [ 2965.528865][ T2873] bridge_slave_0: entered promiscuous mode [ 2965.563605][T16347] usb 1-1: Using ep0 maxpacket: 8 [ 2965.571359][T16347] usb 1-1: no configurations [ 2965.580898][T16347] usb 1-1: can't read configurations, error -22 [ 2965.592917][ T2873] bridge0: port 2(bridge_slave_1) entered blocking state [ 2965.603350][T16347] usb usb1-port1: attempt power cycle [ 2965.612347][ T2873] bridge0: port 2(bridge_slave_1) entered disabled state [ 2965.636437][ T2873] bridge_slave_1: entered allmulticast mode [ 2965.651933][ T2873] bridge_slave_1: entered promiscuous mode [ 2965.687512][T13195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2965.769768][T13195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2965.802308][ T2873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2965.830952][ T2873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2965.949796][ T2873] team0: Port device team_slave_0 added [ 2965.976280][ T2873] team0: Port device team_slave_1 added [ 2965.984250][T16347] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2966.035438][T16347] usb 1-1: Using ep0 maxpacket: 8 [ 2966.054496][T16347] usb 1-1: no configurations [ 2966.061238][T16347] usb 1-1: can't read configurations, error -22 [ 2966.126824][ T2873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2966.149389][ T2873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2966.189032][T32182] Bluetooth: hci1: command tx timeout [ 2966.210436][T16347] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2966.221771][ T2873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2966.390633][T16347] usb 1-1: Using ep0 maxpacket: 8 [ 2966.396541][T16347] usb 1-1: no configurations [ 2966.405799][T16347] usb 1-1: can't read configurations, error -22 [ 2966.422084][T16347] usb usb1-port1: unable to enumerate USB device [ 2966.784284][ T2873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2966.850454][ T2873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2966.886126][ T2873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2967.081813][T13195] bridge_slave_1: left allmulticast mode [ 2967.094175][T13195] bridge_slave_1: left promiscuous mode [ 2968.139469][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 2968.159965][T13195] bridge_slave_0: left allmulticast mode [ 2968.166296][T13195] bridge_slave_0: left promiscuous mode [ 2968.172417][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2968.473426][T32182] Bluetooth: hci1: command tx timeout [ 2970.606353][ T2955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.631043][T32182] Bluetooth: hci1: command tx timeout [ 2970.663213][T13195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2970.678187][T13195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2970.689967][T13195] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2970.698758][T13195] bond0 (unregistering): Released all slaves [ 2970.717257][ T2935] netlink: 'syz.0.7288': attribute type 3 has an invalid length. [ 2971.118086][ T2873] hsr_slave_0: entered promiscuous mode [ 2971.133900][ T2873] hsr_slave_1: entered promiscuous mode [ 2971.144704][ T2873] debugfs: 'hsr0' already exists in 'hsr' [ 2971.154371][ T2873] Cannot create hsr debugfs directory [ 2971.288962][T13195] hsr_slave_0: left promiscuous mode [ 2971.296884][T13195] hsr_slave_1: left promiscuous mode [ 2971.302945][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2971.313556][T13195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2971.324402][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2971.332265][T13195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2971.357712][T31434] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2971.359933][ T2962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7296'. [ 2971.370169][T13195] veth1_macvtap: left promiscuous mode [ 2971.394299][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2971.394314][ T30] audit: type=1400 audit(1766489572.883:2809): avc: denied { append } for pid=2961 comm="syz.0.7296" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2971.430610][T13195] veth0_macvtap: left promiscuous mode [ 2971.436617][T13195] veth1_vlan: left promiscuous mode [ 2971.442465][T13195] veth0_vlan: left promiscuous mode [ 2971.656906][T31434] usb 10-1: Using ep0 maxpacket: 8 [ 2971.669176][T31434] usb 10-1: no configurations [ 2971.683199][T31434] usb 10-1: can't read configurations, error -22 [ 2971.767251][ T2962] block device autoloading is deprecated and will be removed. [ 2972.070712][ T2973] misc userio: Invalid payload size [ 2972.159638][T31434] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2972.373539][T31434] usb 10-1: Using ep0 maxpacket: 8 [ 2972.403549][T31434] usb 10-1: no configurations [ 2972.408887][T31434] usb 10-1: can't read configurations, error -22 [ 2972.435951][T31434] usb usb10-port1: attempt power cycle [ 2973.111407][ T2980] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7300'. [ 2973.420746][T31434] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2973.566250][T31434] usb 10-1: Using ep0 maxpacket: 8 [ 2973.605380][T31434] usb 10-1: no configurations [ 2973.625357][T31434] usb 10-1: can't read configurations, error -22 [ 2973.640646][ T2987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7302'. [ 2973.653700][ T2987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7302'. [ 2973.838101][T31434] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2974.038172][T31434] usb 10-1: Using ep0 maxpacket: 8 [ 2974.047094][T31434] usb 10-1: no configurations [ 2974.058877][T31434] usb 10-1: can't read configurations, error -22 [ 2974.080553][T31434] usb usb10-port1: unable to enumerate USB device [ 2974.389577][T13195] team0 (unregistering): Port device team_slave_1 removed [ 2974.445387][T13195] team0 (unregistering): Port device team_slave_0 removed [ 2975.163642][T31434] usb 9-1: new full-speed USB device number 90 using dummy_hcd [ 2975.324919][T31434] usb 9-1: config 0 has an invalid interface number: 3 but max is 2 [ 2975.339366][T31434] usb 9-1: config 0 has an invalid interface number: 176 but max is 2 [ 2975.359358][T31434] usb 9-1: config 0 has no interface number 1 [ 2975.365488][T31434] usb 9-1: config 0 has no interface number 2 [ 2975.385589][T31434] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2975.399944][T31434] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.422452][T31434] usb 9-1: config 0 descriptor?? [ 2975.685716][T31434] usb 9-1: Could not set interface, error -71 [ 2975.722651][T31434] usb 9-1: USB disconnect, device number 90 [ 2976.759064][ T3007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2977.124035][T13195] IPVS: stop unused estimator thread 0... [ 2977.139129][ T3014] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7309'. [ 2977.532219][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7309'. [ 2977.593648][ T3016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7310'. [ 2977.812860][ T2873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2977.832393][ T2873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2977.929314][ T2873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2977.961065][ T2873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2978.199229][T31243] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2978.207383][ T2873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.304814][ T2873] 8021q: adding VLAN 0 to HW filter on device team0 [ 2979.109436][T31243] usb 1-1: Using ep0 maxpacket: 8 [ 2979.128645][T31243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2979.156132][T23819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2979.163292][T23819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2979.172934][T31243] usb 1-1: config 0 has no interfaces? [ 2979.178589][T31243] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2979.198723][T31243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2979.207546][T23819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2979.214697][T23819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2979.495146][T31243] usb 1-1: config 0 descriptor?? [ 2979.629365][ T3024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7311'. [ 2979.830978][ T3046] tmpfs: Bad value for 'mpol' [ 2980.992937][ T3061] /dev/nullb0: Can't open blockdev [ 2981.699929][ T5894] usb 1-1: USB disconnect, device number 16 [ 2982.167510][ T3079] /dev/nullb0: Can't open blockdev [ 2982.643239][ T2873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2982.739315][ T2873] veth0_vlan: entered promiscuous mode [ 2983.025394][ T2873] veth1_vlan: entered promiscuous mode [ 2983.139757][ T2873] veth0_macvtap: entered promiscuous mode [ 2983.147772][ T2873] veth1_macvtap: entered promiscuous mode [ 2983.164755][ T2873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2983.175929][ T2873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2983.216393][T13195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2983.313136][T13195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2983.339263][T13195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2983.381993][T13195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2983.492481][T29831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.520953][T29831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.859138][T13195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.915157][T13195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2985.482222][ T3101] mmap: syz.8.7323 (3101): VmData 37597184 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 2987.120315][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7327'. [ 2987.130319][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7327'. [ 2987.154737][ T3119] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 2987.162909][ T3119] macvtap1: entered promiscuous mode [ 2987.172922][ T3119] macvtap1: entered allmulticast mode [ 2987.178445][ T3119] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 2988.167631][T24364] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 2988.365546][T24364] usb 10-1: Using ep0 maxpacket: 8 [ 2988.386987][T24364] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2988.571262][T24364] usb 10-1: config 0 has no interfaces? [ 2988.591426][T24364] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2988.611442][T24364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.681340][ T3132] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7331'. [ 2988.732784][ T3132] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7331'. [ 2988.751009][ T3132] netlink: 'syz.7.7331': attribute type 6 has an invalid length. [ 2988.763804][ T3132] netlink: 'syz.7.7331': attribute type 6 has an invalid length. [ 2988.765596][T24364] usb 10-1: config 0 descriptor?? [ 2989.053429][ T3138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7332'. [ 2990.161789][ T24] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 2991.159710][ T3154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2991.168669][ T3154] netlink: 'syz.7.7336': attribute type 3 has an invalid length. [ 2991.177069][ T3154] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2991.569772][ T3155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7335'. [ 2991.635354][ T3157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7337'. [ 2992.063181][T16347] usb 10-1: USB disconnect, device number 87 [ 2992.677457][ T3168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.876838][T16347] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 2993.122602][T16347] usb 10-1: Using ep0 maxpacket: 32 [ 2993.152678][ T3172] misc userio: Invalid payload size [ 2993.171451][T16347] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2993.201448][T16347] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 2993.240041][T16347] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2993.307424][T16347] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2993.328167][T16347] usb 10-1: config 128 has no interface number 0 [ 2993.334638][T16347] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2993.354074][T16347] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2993.367227][T16347] usb 10-1: config 128 interface 127 has no altsetting 0 [ 2993.389511][ T30] audit: type=1400 audit(1766489593.453:2810): avc: denied { getopt } for pid=3173 comm="syz.8.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2993.452200][T16347] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2993.454526][ T30] audit: type=1400 audit(1766489593.519:2811): avc: denied { read write } for pid=3175 comm="syz.2.7343" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2993.625592][T16347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.661751][ T30] audit: type=1400 audit(1766489593.519:2812): avc: denied { open } for pid=3175 comm="syz.2.7343" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2993.667642][T16347] usb 10-1: Product: syz [ 2993.772454][T16347] usb 10-1: Manufacturer: syz [ 2993.786978][T16347] usb 10-1: SerialNumber: syz [ 2994.018917][ T3190] netlink: 'syz.0.7345': attribute type 1 has an invalid length. [ 2994.861562][ T3193] ubi31: detaching mtd0 [ 2995.034741][ T3193] ubi31: mtd0 is detached [ 2995.053737][T16347] usb 10-1: USB disconnect, device number 88 [ 2995.130431][ T2419] udevd[2419]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2996.357346][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7349'. [ 2996.704670][ T3214] netlink: 120 bytes leftover after parsing attributes in process `syz.9.7350'. [ 2997.568816][T31434] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2998.331261][T31434] usb 1-1: Using ep0 maxpacket: 32 [ 2998.341039][T31434] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2998.350033][T31434] usb 1-1: config 0 has no interface number 0 [ 2998.356184][T31434] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2998.368450][T31434] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2998.379700][T31434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.387870][T31434] usb 1-1: Product: syz [ 2998.392352][T31434] usb 1-1: Manufacturer: syz [ 2998.403568][T31434] usb 1-1: SerialNumber: syz [ 2998.410922][T31434] usb 1-1: config 0 descriptor?? [ 2998.425093][ T6529] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 2998.606708][ T6529] usb 8-1: Using ep0 maxpacket: 16 [ 2998.618700][ T6529] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2998.666157][ T6529] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2998.691980][ T6529] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2998.702875][ T6529] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.713310][ T6529] usb 8-1: config 0 descriptor?? [ 2998.719113][T16347] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 2998.733242][ T6529] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2998.907109][T16347] usb 10-1: Using ep0 maxpacket: 16 [ 2998.925285][T16347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2998.944829][T16347] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2998.961325][T16347] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2998.961758][ T3231] FAULT_INJECTION: forcing a failure. [ 2998.961758][ T3231] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.972101][T16347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.984338][ T3231] CPU: 0 UID: 0 PID: 3231 Comm: syz.7.7356 Tainted: G L syzkaller #0 PREEMPT(full) [ 2998.984372][ T3231] Tainted: [L]=SOFTLOCKUP [ 2998.984382][ T3231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2998.984395][ T3231] Call Trace: [ 2998.984402][ T3231] [ 2998.984410][ T3231] dump_stack_lvl+0x16c/0x1f0 [ 2998.984442][ T3231] should_fail_ex+0x512/0x640 [ 2998.984473][ T3231] ? fs_reclaim_acquire+0xae/0x150 [ 2998.984503][ T3231] should_failslab+0xc2/0x120 [ 2998.984531][ T3231] __kmalloc_noprof+0xeb/0x910 [ 2998.984563][ T3231] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2998.984598][ T3231] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2998.984626][ T3231] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2998.984656][ T3231] ? tomoyo_profile+0x47/0x60 [ 2998.984690][ T3231] tomoyo_path_number_perm+0x245/0x580 [ 2998.984714][ T3231] ? tomoyo_path_number_perm+0x237/0x580 [ 2998.984739][ T3231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2998.984765][ T3231] ? find_held_lock+0x2b/0x80 [ 2998.984820][ T3231] ? find_held_lock+0x2b/0x80 [ 2998.984850][ T3231] ? hook_file_ioctl_common+0x144/0x410 [ 2998.984887][ T3231] ? __fget_files+0x20e/0x3c0 [ 2998.984921][ T3231] security_file_ioctl+0x9b/0x240 [ 2998.984949][ T3231] __x64_sys_ioctl+0xb7/0x210 [ 2998.984975][ T3231] do_syscall_64+0xcd/0xf80 [ 2998.985003][ T3231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2998.985025][ T3231] RIP: 0033:0x7f1e3e38f34b [ 2998.985044][ T3231] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2998.985062][ T3231] RSP: 002b:00007f1e3f24af70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2998.985083][ T3231] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e3e38f34b [ 2998.985097][ T3231] RDX: 00007f1e3f24aff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 2998.985111][ T3231] RBP: 0000000000000003 R08: 00007f1e3e710320 R09: 0000000000000000 [ 2998.985124][ T3231] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2998.985136][ T3231] R13: 0000000000000000 R14: 00007f1e3e5e5fa0 R15: 00007ffdbb96cb28 [ 2998.985165][ T3231] [ 2998.985196][ T3231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2999.001069][T16347] usb 10-1: config 0 descriptor?? [ 2999.013878][ T757] usb 8-1: USB disconnect, device number 101 [ 2999.018038][T23042] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2999.232738][T16347] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2999.387020][T23042] usb 9-1: Using ep0 maxpacket: 16 [ 2999.393568][T23042] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2999.403779][T23042] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2999.414797][T23042] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2999.424891][T23042] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2999.438912][T23042] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2999.448047][T23042] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2999.457206][T23042] usb 9-1: Manufacturer: syz [ 2999.459588][ T757] usb 10-1: USB disconnect, device number 89 [ 2999.469304][T23042] usb 9-1: config 0 descriptor?? [ 2999.708363][ T3242] ubi31: attaching mtd0 [ 2999.739734][ T3242] ubi31: scanning is finished [ 2999.788788][ T3236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7358'. [ 3000.103039][ T3242] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3000.121513][ T3242] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3000.129094][ T3242] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3000.136294][ T3242] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 3000.150758][ T3242] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3000.158341][ T3242] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3000.172635][ T3242] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 721468757 [ 3000.192820][ T3242] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3000.202881][ T3247] ubi31: background thread "ubi_bgt31d" started, PID 3247 [ 3000.609400][ T30] audit: type=1400 audit(1766489600.216:2813): avc: denied { relabelfrom } for pid=3218 comm="syz.0.7354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3000.645825][ T30] audit: type=1400 audit(1766489600.235:2814): avc: denied { relabelto } for pid=3218 comm="syz.0.7354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3000.780175][T31434] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 3000.789016][T31434] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 3000.797897][T31434] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3000.811166][T31434] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 3000.847368][T31434] usb 1-1: USB disconnect, device number 17 [ 3001.321914][ T3257] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3002.186344][ T30] audit: type=1804 audit(1766489601.563:2815): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7364" name="/newroot/8/file0" dev="tmpfs" ino=60 res=1 errno=0 [ 3004.307561][T16347] usb 9-1: USB disconnect, device number 91 [ 3005.567157][ T3292] futex_wake_op: syz.8.7369 tries to shift op by -1; fix this program [ 3006.331831][ T3300] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3006.570741][T31434] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 3006.784862][T31434] usb 10-1: Using ep0 maxpacket: 32 [ 3006.796632][T31434] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3006.807580][T31434] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 3006.818797][T31434] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 3006.836794][T31434] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 3006.849101][T31434] usb 10-1: config 128 has no interface number 0 [ 3006.857282][T31434] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 3006.889773][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7376'. [ 3006.910432][T31434] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3006.931835][T31434] usb 10-1: config 128 interface 127 has no altsetting 0 [ 3006.956113][T31434] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 3006.985539][T31434] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.995186][T31434] usb 10-1: Product: syz [ 3007.003533][T31434] usb 10-1: Manufacturer: syz [ 3007.008735][T31434] usb 10-1: SerialNumber: syz [ 3007.287113][T20524] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 3007.357959][T31434] usb 10-1: USB disconnect, device number 90 [ 3007.441872][ T2419] udevd[2419]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3007.469676][T20524] usb 9-1: Using ep0 maxpacket: 16 [ 3007.480697][T20524] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 3007.513742][T20524] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 3007.550746][T20524] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 3007.672249][ T3320] ubi31: detaching mtd0 [ 3007.700325][ T3320] ubi31: mtd0 is detached [ 3007.728833][ T3321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3007.940202][T20524] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3007.955989][T20524] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3007.977033][T20524] usb 9-1: SerialNumber: syz [ 3007.996604][ T3314] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3008.247302][T20524] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 3008.308460][ T3324] input: syz1 as /devices/virtual/input/input238 [ 3008.338602][T20524] usb 9-1: USB disconnect, device number 92 [ 3009.863653][ T3340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7385'. [ 3010.311975][ T3345] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3011.288062][ T3350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7387'. [ 3011.526371][ T3352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3012.568093][ T3361] FAULT_INJECTION: forcing a failure. [ 3012.568093][ T3361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3012.602171][ T3361] CPU: 1 UID: 0 PID: 3361 Comm: syz.7.7392 Tainted: G L syzkaller #0 PREEMPT(full) [ 3012.602207][ T3361] Tainted: [L]=SOFTLOCKUP [ 3012.602215][ T3361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3012.602226][ T3361] Call Trace: [ 3012.602233][ T3361] [ 3012.602243][ T3361] dump_stack_lvl+0x16c/0x1f0 [ 3012.602281][ T3361] should_fail_ex+0x512/0x640 [ 3012.602316][ T3361] _copy_from_user+0x2e/0xd0 [ 3012.602349][ T3361] memdup_user+0x6b/0xe0 [ 3012.602373][ T3361] strndup_user+0x78/0xe0 [ 3012.602396][ T3361] __x64_sys_fsopen+0x9c/0x240 [ 3012.602424][ T3361] do_syscall_64+0xcd/0xf80 [ 3012.602453][ T3361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3012.602474][ T3361] RIP: 0033:0x7f1e3e38f749 [ 3012.602492][ T3361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3012.602513][ T3361] RSP: 002b:00007f1e3f24c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 3012.602534][ T3361] RAX: ffffffffffffffda RBX: 00007f1e3e5e5fa0 RCX: 00007f1e3e38f749 [ 3012.602548][ T3361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 3012.602562][ T3361] RBP: 00007f1e3f24c090 R08: 0000000000000000 R09: 0000000000000000 [ 3012.602575][ T3361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3012.602588][ T3361] R13: 00007f1e3e5e6038 R14: 00007f1e3e5e5fa0 R15: 00007ffdbb96cb28 [ 3012.602618][ T3361] [ 3014.784860][ T3379] netlink: 'syz.2.7395': attribute type 1 has an invalid length. [ 3016.002827][ T3401] FAULT_INJECTION: forcing a failure. [ 3016.002827][ T3401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3016.084267][ T3402] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3016.172726][ T3401] CPU: 0 UID: 0 PID: 3401 Comm: syz.9.7402 Tainted: G L syzkaller #0 PREEMPT(full) [ 3016.172764][ T3401] Tainted: [L]=SOFTLOCKUP [ 3016.172777][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3016.172791][ T3401] Call Trace: [ 3016.172798][ T3401] [ 3016.172807][ T3401] dump_stack_lvl+0x16c/0x1f0 [ 3016.172840][ T3401] should_fail_ex+0x512/0x640 [ 3016.172876][ T3401] _copy_to_user+0x32/0xd0 [ 3016.172910][ T3401] simple_read_from_buffer+0xcb/0x170 [ 3016.172943][ T3401] proc_fail_nth_read+0x197/0x240 [ 3016.172968][ T3401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3016.172994][ T3401] ? rw_verify_area+0xcf/0x6c0 [ 3016.173018][ T3401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3016.173041][ T3401] vfs_read+0x1e4/0xcf0 [ 3016.173068][ T3401] ? __pfx___mutex_lock+0x10/0x10 [ 3016.173100][ T3401] ? __pfx_vfs_read+0x10/0x10 [ 3016.173135][ T3401] ? __fget_files+0x20e/0x3c0 [ 3016.173175][ T3401] ksys_read+0x12a/0x250 [ 3016.173201][ T3401] ? __pfx_ksys_read+0x10/0x10 [ 3016.173237][ T3401] do_syscall_64+0xcd/0xf80 [ 3016.173267][ T3401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3016.173289][ T3401] RIP: 0033:0x7f199f78e15c [ 3016.173307][ T3401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3016.173329][ T3401] RSP: 002b:00007f199d9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3016.173350][ T3401] RAX: ffffffffffffffda RBX: 00007f199f9e5fa0 RCX: 00007f199f78e15c [ 3016.173365][ T3401] RDX: 000000000000000f RSI: 00007f199d9f60a0 RDI: 0000000000000004 [ 3016.173379][ T3401] RBP: 00007f199d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3016.173393][ T3401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.173406][ T3401] R13: 00007f199f9e6038 R14: 00007f199f9e5fa0 R15: 00007fff01898ca8 [ 3016.173440][ T3401] [ 3017.481095][ T3418] netlink: 'syz.2.7406': attribute type 1 has an invalid length. [ 3018.575786][ T3428] netlink: 'syz.7.7407': attribute type 1 has an invalid length. [ 3019.890725][T32182] Bluetooth: hci2: command 0x0406 tx timeout [ 3019.934786][ T30] audit: type=1400 audit(1766489618.298:2816): avc: denied { read write } for pid=3422 comm="syz.0.7399" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 3019.960715][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7399'. [ 3020.056820][ T30] audit: type=1400 audit(1766489618.298:2817): avc: denied { ioctl open } for pid=3422 comm="syz.0.7399" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 3020.104707][ T3423] fuse: Unknown parameter 'QvNAkF!WtnˮEJy| t' [ 3020.275565][T23042] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 3022.210401][T23042] usb 8-1: Using ep0 maxpacket: 32 [ 3022.307356][T23042] usb 8-1: config 0 has no interfaces? [ 3022.328727][T23042] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3022.359840][T23042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.398166][T23042] usb 8-1: config 0 descriptor?? [ 3022.542136][ T6529] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 3022.645851][ T3434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3022.676814][ T30] audit: type=1804 audit(1766489620.852:2818): pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.7414" name="/newroot/488/file0" dev="tmpfs" ino=2613 res=1 errno=0 [ 3022.704323][ T3449] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 3022.716293][ T3434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3022.723553][ T6529] usb 9-1: Using ep0 maxpacket: 16 [ 3022.732684][T31434] usb 8-1: USB disconnect, device number 102 [ 3022.735491][ T6529] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 3022.771708][ T6529] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 3022.775905][ T3449] ref_ctr increment failed for inode: 0xa35 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803546a4c0 [ 3022.787642][ T6529] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 3022.837037][ T6529] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3022.859414][ T6529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3022.877246][ T3454] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 3022.894564][ T3454] ref_ctr decrement failed for inode: 0xa35 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803546a4c0 [ 3022.894637][ T6529] usb 9-1: SerialNumber: syz [ 3022.936829][ T3446] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3022.998406][ T3454] uprobe: syz.9.7414:3454 failed to unregister, leaking uprobe [ 3023.065947][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 3023.180943][ T6529] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 3023.216943][T20524] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 3023.223491][ T6529] usb 9-1: USB disconnect, device number 93 [ 3023.388919][T20524] usb 8-1: Using ep0 maxpacket: 32 [ 3023.402721][T20524] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 3023.422365][T20524] usb 8-1: config 0 has no interface number 0 [ 3023.473743][T20524] usb 8-1: config 0 interface 184 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3023.485448][T20524] usb 8-1: config 0 interface 184 has no altsetting 0 [ 3023.526111][T20524] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3023.632224][T20524] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3023.641994][T20524] usb 8-1: Product: syz [ 3023.646571][T20524] usb 8-1: Manufacturer: syz [ 3023.651244][T20524] usb 8-1: SerialNumber: syz [ 3023.692492][T20524] usb 8-1: config 0 descriptor?? [ 3023.709270][T20524] smsc75xx v1.0.0 [ 3023.734965][T20524] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3023.762465][ T3461] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 3023.771096][ T30] audit: type=1804 audit(1766489621.872:2819): pid=3461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7415" name="/newroot/21/file0" dev="tmpfs" ino=128 res=1 errno=0 [ 3023.819311][T20524] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 3023.869134][ T3461] ref_ctr increment failed for inode: 0x80 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa1880 [ 3024.091250][ T3462] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 3024.922811][ T3462] ref_ctr decrement failed for inode: 0x80 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa1880 [ 3024.934329][ T3462] uprobe: syz.2.7415:3462 failed to unregister, leaking uprobe [ 3025.047592][ T3470] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7418'. [ 3025.086095][ T5894] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 3025.413152][T16347] usb 8-1: USB disconnect, device number 103 [ 3025.738438][ T5894] usb 9-1: Using ep0 maxpacket: 8 [ 3025.937988][ T3478] netlink: 'syz.7.7420': attribute type 1 has an invalid length. [ 3025.948658][ T3476] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7419'. [ 3025.985762][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3025.998469][ T5894] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3026.008011][ T5894] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3026.017842][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.227520][ T5894] usb 9-1: config 0 descriptor?? [ 3027.066383][ T30] audit: type=1326 audit(1766489624.529:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.153546][ T30] audit: type=1326 audit(1766489624.529:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.239934][ T30] audit: type=1326 audit(1766489624.538:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.307387][ T30] audit: type=1326 audit(1766489624.538:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.450295][ T30] audit: type=1326 audit(1766489624.538:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.637802][ T30] audit: type=1326 audit(1766489624.538:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.681956][ T30] audit: type=1326 audit(1766489624.538:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.850458][ T3494] syz_tun: entered allmulticast mode [ 3027.857237][ T3494] lo: entered allmulticast mode [ 3027.867222][ T3493] syz_tun: left allmulticast mode [ 3027.872288][ T3493] lo: left allmulticast mode [ 3027.886851][ T30] audit: type=1326 audit(1766489624.538:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3027.990395][ T5894] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 3028.562734][ T30] audit: type=1326 audit(1766489624.538:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3028.770201][ T3500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7426'. [ 3028.839187][T12752] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3028.853311][ T30] audit: type=1326 audit(1766489624.547:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199f78f749 code=0x7ffc0000 [ 3028.878679][ T5894] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3028.897347][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3028.899653][T12752] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3028.938472][T12752] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3028.940073][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3028.949506][T12752] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3028.974399][ T5894] usb 8-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 3029.153663][ T24] usb 9-1: USB disconnect, device number 94 [ 3029.263055][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.391615][ T3508] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 3029.401198][ T3508] ref_ctr increment failed for inode: 0x90 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa0c40 [ 3029.417663][ T3504] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 3029.448209][ T5894] usb 8-1: config 0 descriptor?? [ 3029.525705][ T3512] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7429'. [ 3030.062645][ T3504] ref_ctr decrement failed for inode: 0x90 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa0c40 [ 3030.084557][ T3504] uprobe: syz.2.7428:3504 failed to unregister, leaking uprobe [ 3030.111955][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7427'. [ 3030.677696][ T5894] wacom 0003:056A:0010.0040: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 3030.718515][ T5894] wacom 0003:056A:0010.0040: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.7-1/input0 [ 3030.756016][ T5894] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0010.0040/input/input239 [ 3030.893611][ T5894] usb 8-1: USB disconnect, device number 104 [ 3031.173593][ T3528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28411 sclass=netlink_route_socket pid=3528 comm=syz.9.7432 [ 3031.266670][ T3530] netlink: 'syz.2.7433': attribute type 1 has an invalid length. [ 3032.579002][ T3539] ubi31: attaching mtd0 [ 3032.643217][ T3539] ubi31: scanning is finished [ 3033.450994][ T3548] tmpfs: Unknown parameter 'usrquota_inode_ardlimit' [ 3033.752305][ T3539] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3033.801146][ T3539] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3033.839526][ T3539] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3033.982884][ T3539] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 3033.990411][ T3539] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3034.000211][ T757] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 3034.248195][ T3539] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3034.256314][ T3539] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 721468757 [ 3034.395219][ T3554] netlink: 'syz.0.7439': attribute type 3 has an invalid length. [ 3034.796170][ T757] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3034.824334][ T757] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3034.852133][ T3539] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3034.871046][ T757] usb 10-1: Product: syz [ 3034.892107][ T757] usb 10-1: Manufacturer: syz [ 3034.916542][ T757] usb 10-1: SerialNumber: syz [ 3034.944900][ T757] usb 10-1: config 0 descriptor?? [ 3034.980180][ T757] hub 10-1:0.0: bad descriptor, ignoring hub [ 3035.082397][ T757] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3035.124271][ T3550] ubi31: background thread "ubi_bgt31d" started, PID 3550 [ 3035.162278][ T3543] ubi: mtd0 is already attached to ubi31 [ 3035.220459][ T3549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3035.269421][ T3549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.367360][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3035.399141][ T3549] batadv_slave_0: entered promiscuous mode [ 3035.435961][ T757] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 3035.475264][ T757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3035.503100][ T757] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 3035.543733][ T757] usb 10-1: media controller created [ 3035.581270][ T757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3035.654883][ T3549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3035.675353][ T3549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.687865][ T757] DVB: Unable to find symbol dib7000p_attach() [ 3035.694918][ T757] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 3035.738352][ T3549] ------------[ cut here ]------------ [ 3035.743927][ T3549] usb 10-1: BOGUS control dir, pipe 80005b80 doesn't match bRequestType c0 [ 3035.752567][ T3549] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x153e/0x1970, CPU#0: syz.9.7438/3549 [ 3035.763082][ T3549] Modules linked in: [ 3035.767979][ T3549] CPU: 0 UID: 0 PID: 3549 Comm: syz.9.7438 Tainted: G L syzkaller #0 PREEMPT(full) [ 3035.778935][ T3549] Tainted: [L]=SOFTLOCKUP [ 3035.783251][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3035.793313][ T3549] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 3035.799069][ T3549] Code: 30 48 89 7c 24 38 e8 c6 b5 a8 fa 48 8b 7c 24 38 e8 7c 79 d0 fe 48 89 c6 48 8d 3d 32 41 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 93 b5 a8 fa 48 8b [ 3035.818695][ T3549] RSP: 0018:ffffc90003c37970 EFLAGS: 00010287 [ 3035.824777][ T3549] RAX: ffffffff8c5455c0 RBX: ffff88806ac88e00 RCX: 0000000080005b80 [ 3035.832818][ T3549] RDX: ffff8880567b9f40 RSI: ffffffff8c5455c0 RDI: ffffffff909471f0 [ 3035.841761][ T3549] RBP: ffff88802f994058 R08: 00000000000000c0 R09: 0000000000000000 [ 3035.849809][ T3549] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802336eaa0 [ 3035.858289][ T3549] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080005b80 [ 3035.866901][ T3549] FS: 00007f199d9f66c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 3035.876388][ T3549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3035.883570][ T3549] CR2: 0000000000000000 CR3: 00000000b08ae000 CR4: 00000000003526f0 [ 3035.891541][ T3549] Call Trace: [ 3035.895455][ T3549] [ 3035.898407][ T3549] ? __init_swait_queue_head+0xca/0x150 [ 3035.904022][ T3549] usb_start_wait_urb+0x104/0x4e0 [ 3035.909097][ T3549] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3035.914646][ T3549] ? __asan_memset+0x23/0x50 [ 3035.919264][ T3549] usb_control_msg+0x326/0x4a0 [ 3035.924055][ T3549] ? __pfx_usb_control_msg+0x10/0x10 [ 3035.929462][ T3549] ? register_lock_class+0x41/0x4b0 [ 3035.934691][ T3549] dib0700_ctrl_rd+0x1b2/0x350 [ 3035.939477][ T3549] dib0700_i2c_xfer+0xa9a/0xe40 [ 3035.944322][ T3549] __i2c_transfer+0x6b6/0x2100 [ 3035.949997][ T3549] ? lockdep_hardirqs_on+0x7c/0x110 [ 3035.955956][ T3549] ? __pfx___i2c_transfer+0x10/0x10 [ 3035.961267][ T3549] ? rt_mutex_slowtrylock+0xc9/0x100 [ 3035.966558][ T3549] i2c_transfer+0x1da/0x380 [ 3035.971099][ T3549] i2cdev_ioctl_rdwr+0x373/0x710 [ 3035.976031][ T3549] i2cdev_ioctl+0x628/0x840 [ 3035.980901][ T3549] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3035.985944][ T3549] ? selinux_file_ioctl+0x180/0x270 [ 3035.991527][ T3549] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3035.996695][ T3549] __x64_sys_ioctl+0x18e/0x210 [ 3036.001625][ T3549] do_syscall_64+0xcd/0xf80 [ 3036.006193][ T3549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3036.012136][ T3549] RIP: 0033:0x7f199f78f749 [ 3036.016532][ T3549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3036.036158][ T3549] RSP: 002b:00007f199d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3036.044636][ T3549] RAX: ffffffffffffffda RBX: 00007f199f9e5fa0 RCX: 00007f199f78f749 [ 3036.052622][ T3549] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 000000000000000d [ 3036.061346][ T3549] RBP: 00007f199f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 3036.069600][ T3549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.077578][ T3549] R13: 00007f199f9e6038 R14: 00007f199f9e5fa0 R15: 00007fff01898ca8 [ 3036.085568][ T3549] [ 3036.088766][ T3549] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3036.096116][ T3549] CPU: 0 UID: 0 PID: 3549 Comm: syz.9.7438 Tainted: G L syzkaller #0 PREEMPT(full) [ 3036.106948][ T3549] Tainted: [L]=SOFTLOCKUP [ 3036.111247][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3036.121718][ T3549] Call Trace: [ 3036.125514][ T3549] [ 3036.128421][ T3549] dump_stack_lvl+0x3d/0x1f0 [ 3036.133550][ T3549] vpanic+0x640/0x6f0 [ 3036.137516][ T3549] ? usb_submit_urb+0x153e/0x1970 [ 3036.142520][ T3549] panic+0xca/0xd0 [ 3036.146220][ T3549] ? __pfx_panic+0x10/0x10 [ 3036.150620][ T3549] check_panic_on_warn+0xab/0xb0 [ 3036.155536][ T3549] __warn+0x108/0x3c0 [ 3036.159495][ T3549] __report_bug+0x2a0/0x520 [ 3036.163972][ T3549] ? usb_submit_urb+0x153e/0x1970 [ 3036.168990][ T3549] ? __pfx___report_bug+0x10/0x10 [ 3036.173992][ T3549] ? stack_trace_save+0x8e/0xc0 [ 3036.178824][ T3549] ? kasan_save_stack+0x42/0x60 [ 3036.183651][ T3549] ? kasan_save_stack+0x33/0x60 [ 3036.188482][ T3549] report_bug_entry+0xe1/0x290 [ 3036.193223][ T3549] ? usb_submit_urb+0x1549/0x1970 [ 3036.198226][ T3549] handle_bug+0x18a/0x260 [ 3036.202536][ T3549] exc_invalid_op+0x17/0x50 [ 3036.207019][ T3549] asm_exc_invalid_op+0x1a/0x20 [ 3036.211845][ T3549] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 3036.217458][ T3549] Code: 30 48 89 7c 24 38 e8 c6 b5 a8 fa 48 8b 7c 24 38 e8 7c 79 d0 fe 48 89 c6 48 8d 3d 32 41 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 93 b5 a8 fa 48 8b [ 3036.237058][ T3549] RSP: 0018:ffffc90003c37970 EFLAGS: 00010287 [ 3036.243098][ T3549] RAX: ffffffff8c5455c0 RBX: ffff88806ac88e00 RCX: 0000000080005b80 [ 3036.251066][ T3549] RDX: ffff8880567b9f40 RSI: ffffffff8c5455c0 RDI: ffffffff909471f0 [ 3036.259011][ T3549] RBP: ffff88802f994058 R08: 00000000000000c0 R09: 0000000000000000 [ 3036.266956][ T3549] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802336eaa0 [ 3036.274899][ T3549] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080005b80 [ 3036.282946][ T3549] ? __init_swait_queue_head+0xca/0x150 [ 3036.288480][ T3549] usb_start_wait_urb+0x104/0x4e0 [ 3036.293498][ T3549] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3036.299028][ T3549] ? __asan_memset+0x23/0x50 [ 3036.303594][ T3549] usb_control_msg+0x326/0x4a0 [ 3036.308344][ T3549] ? __pfx_usb_control_msg+0x10/0x10 [ 3036.313669][ T3549] ? register_lock_class+0x41/0x4b0 [ 3036.318852][ T3549] dib0700_ctrl_rd+0x1b2/0x350 [ 3036.323600][ T3549] dib0700_i2c_xfer+0xa9a/0xe40 [ 3036.328434][ T3549] __i2c_transfer+0x6b6/0x2100 [ 3036.333184][ T3549] ? lockdep_hardirqs_on+0x7c/0x110 [ 3036.338366][ T3549] ? __pfx___i2c_transfer+0x10/0x10 [ 3036.343538][ T3549] ? rt_mutex_slowtrylock+0xc9/0x100 [ 3036.348806][ T3549] i2c_transfer+0x1da/0x380 [ 3036.353292][ T3549] i2cdev_ioctl_rdwr+0x373/0x710 [ 3036.358239][ T3549] i2cdev_ioctl+0x628/0x840 [ 3036.362719][ T3549] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3036.367740][ T3549] ? selinux_file_ioctl+0x180/0x270 [ 3036.372935][ T3549] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3036.377938][ T3549] __x64_sys_ioctl+0x18e/0x210 [ 3036.382700][ T3549] do_syscall_64+0xcd/0xf80 [ 3036.387208][ T3549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3036.393076][ T3549] RIP: 0033:0x7f199f78f749 [ 3036.397465][ T3549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3036.417080][ T3549] RSP: 002b:00007f199d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3036.425477][ T3549] RAX: ffffffffffffffda RBX: 00007f199f9e5fa0 RCX: 00007f199f78f749 [ 3036.433428][ T3549] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 000000000000000d [ 3036.441377][ T3549] RBP: 00007f199f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 3036.449324][ T3549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.457366][ T3549] R13: 00007f199f9e6038 R14: 00007f199f9e5fa0 R15: 00007fff01898ca8 [ 3036.465329][ T3549] [ 3036.468636][ T3549] Kernel Offset: disabled [ 3036.473034][ T3549] Rebooting in 86400 seconds..